last executing test programs: 4m29.557240303s ago: executing program 3 (id=79): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x308, 0x70bd25, 0x25dfdbfb, 0xfffffffe, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x20, r6, 0x111, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPVS_CMD_DEL_DEST(r4, 0x0, 0x4000000) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m27.581869452s ago: executing program 3 (id=83): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x482142, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x18, 0x5, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="0008000005a81876394235be"]) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1, 0x1, 0x200081, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 4m26.178028727s ago: executing program 3 (id=86): syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0) 4m26.061078572s ago: executing program 3 (id=87): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 4m21.246641334s ago: executing program 3 (id=100): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 4m21.029803592s ago: executing program 3 (id=103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 4m5.385864565s ago: executing program 32 (id=103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 9.734558492s ago: executing program 4 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000900)=[{&(0x7f0000000000)="cc", 0x1}], 0x1, 0x18, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000680)={[{@utf8}, {@fat=@nfs}, {@numtail}, {@rodir}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@numtail}, {@utf8}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@fat=@check_strict}]}, 0x1, 0x360, &(0x7f0000000900)="$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") r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000000c0)={0x20000000}) memfd_create(&(0x7f0000000000)='rodir', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100}) 8.586549868s ago: executing program 4 (id=704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') 7.479146012s ago: executing program 4 (id=708): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) 6.459945292s ago: executing program 4 (id=711): pipe2(&(0x7f0000000040), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000003, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r4, 0x2}}, 0x18) 5.105720856s ago: executing program 2 (id=718): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000000300)=ANY=[], 0x51, 0x5fbc, &(0x7f0000003100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1) sendfile(r0, r0, 0x0, 0x80000000) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000140)='./file1\x00') ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000200)=0x3) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0xc, {"f045408a2bd3a0077ee225a32356ebaa"}, 0x8727, 0x8, 0x37}, @ib={0x1b, 0x1, 0x0, {}, 0x0, 0xffff, 0x6}}}, 0x118) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x5432, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.797916778s ago: executing program 4 (id=721): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 3.435787783s ago: executing program 0 (id=722): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023892) 3.25617316s ago: executing program 1 (id=723): getdents(0xffffffffffffffff, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_group_source_req(r1, 0x88, 0x32, 0x0, 0x0) 3.161963404s ago: executing program 0 (id=724): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.010283269s ago: executing program 0 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000900)=[{&(0x7f0000000000)="cc", 0x1}], 0x1, 0x18, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000680)={[{@utf8}, {@fat=@nfs}, {@numtail}, {@rodir}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@numtail}, {@utf8}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@fat=@check_strict}]}, 0x1, 0x360, &(0x7f0000000900)="$eJzs3U9oHFUYAPBvO/lbaJODUBSE0ZugoX/woKeUkkJxLypL1YO42FQlGwtZXEwP3caLeBQ86smLeNCDh55FUMSbB69WkKp40N4KFp/s7mx2NrtJU2Fbg7/fYfnyvffNe28zyU4m2ZdXlmPtwnRcvHnzRszNVWJq+cxy3KrEYmTRdzVGzYzJAQAHw62U4s/Us8+SyoSnBABMWPf1/7Ujpcw7X+/VP3n1B4ADr/j5f36vPnO7NVyayJQAgAkbuf//6FDzzPCv+qdKfxUAABxUz7/40jOnqxHP5flcxPq7rVqrFk8P2k9fjDeiEatxPBbidkTvQqHzUOk+nj1XXTme53k7flmMWqeiVYtYb7dqvSuF01m3fjZOxEIsFvXF1UZKKTv7RXXlRN4VEVfb3fFjvdKqTcfhYvwfD8dqnIw8HhipjzhXXTmZFweorffr2xFbg/sWnfkvxUJ8/2pcikZcmD8fKfUva6orV07k+ZlUHapv1WbjwvazsOsdEAAAAAAAAAAAAAAAAAAAAAAA+FeW8m2L2/vfpMH+PUtLY9q7++P06ov9gbZ6+wOl2RQp/fH2E7X3shjaH2jn/jyt2lQcur9LBwAAAAAAAAAAAAAAAAAAgP+M5uZM1BuN1Y3m5uW1ctDeaG4eiohO5s1vP/tqPkb73CGYKsYoNeVF6vJaPWX9zikb6lMEWWfwfubTa9szLveZ3V7F2GnM7t7UaBx55OcPB5mHs/6R/x70yWL8ArMd0ygH60d7U7qbJ+ryqSI4eYfO11NKux3nysujVVGJmLr7T9zeQeoE39x4/cFTzWNPdjNfpp7HHl84f/2Dj39bqzc6I3c0PpnZaN5Oa/Xi4/En2+5BVjp/KtELKuUzYWqv8q3hTD374fcXHnr/u/2NnsqZt8b0yXrL+XyjuVkpvlK6TTO9oJPbUTXfOJdF7DjO9JiTfwLBsY+W69eu/PTrfqtK3yRs1AEAAAAAAAAAAAAAAAAAAPdE6b3iheLNvtN7VT317ORnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zuD//5eCrZHMfoK/2jHaNLu60Yw4er+XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9w/AQAA///ftWu9") r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000000c0)={0x20000000}) memfd_create(&(0x7f0000000000)='rodir', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100}) 2.710024722s ago: executing program 1 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4bfb, &(0x7f0000000440)=""/252) 2.48775102s ago: executing program 1 (id=727): syz_open_dev$MSR(0x0, 0x0, 0x0) getegid() syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x1000000, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nobarrier}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x24a, &(0x7f0000001cc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x414843, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001fc0)=@getchain={0x34, 0x66, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xb, 0x1}, {0x6, 0x1}}, [{0x8, 0xb, 0xb2}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c5}, 0x24000000) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x15, 0x2, 'ovf\x00', 0x1, 0x10, 0x4}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x183, @remote, 0x4e21, 0x3, 'lc\x00', 0x8, 0x323b, 0x2001055}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e23, 0x4, 0x3, 0x12d5c, 0x6}}, 0x44) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000380)) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x10c00, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0], 0x3, 0x150f, &(0x7f0000000780)="$eJzs3AnYTlX3MPC19t6Hhwx3knmvvQ53MmySJEOSDEmSJMmckCRJEpIpUxKSkDnJHJIpJPM8ZUqSvJIkCQlJ9nept9f7fvW/6r16/5/v/3/W77rOde917bP22fus57nPuc8zfN1hcOW6VSrUZmb4S/CXl+4AkAIA/QAgMwBEAFAiS4ksl/rTaez+1w4i/rMemHalZyCuJKl/6ib1T92k/qmb1D91k/qnblL/1E3qn7pJ/YVIzbZNz3m1bKl3++vP/1N+eZHn//8DyfU/dZP6/29zOt2/s7fU/3+TiyGEfy9D6p+6Sf1TN6l/6ib1T92k/qmb1F+I1OxKP3+W7a9t9RtOyfBX8q/0158QQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiNThXLjMAMCv7Ss9LyGEEEIIIYQQQvznhLRXegZCCCGEEEIIIYT474egQIOBCNJAWkiBdJAeroIMkBEyQWZIwNWQBa6BrHAtZIPskANyQi7IDXnAAoEDhhjyQj5IwnWQH66HAlAQCkFh8FAEisINUAxuhOJwE5SAm6Ek3AKloDSUgbJwK5SD26A83A4V4A6oCJWgMlSBO6Eq3AXV4G6oDvdADbgXasJ9UAvuh9rwANSBB6EuPAT1oD40gIbQCBpDk3/KT/nT+c9BF3geukI36A49oCe8AL2gN/SBvtAPXoT+8BIMgJdhIAyCwfAKDIFXYSi8BsNgOIyA12EkjILRMAbGwjgYD2/ABHgTJsJbMAkmwxSYCtNgOsyAt2EmzILZ8A7MgXdhLsyD+bAAFsJ7sAgWwxJ4H5bCB7AMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA0+hO2wA3bCLtgNH8Ee+Bj2wiewDz6F/fDZv5l/9l/zL4YQEFChQoMG02AaTMEUTI/pMQNmwEyYCROYwCyYBbNiVsyG2TAH5sBcmAvzYB4kJGRkzIt5MYlJzI/5sQAWwEJYCD16LIpFsRjeiMWxOJbAElgSS2IpLI2AZbEslkOA8lgeK2AFrIgVsTJWxjvxTrwLq2E1rI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT1sgA2wETbCJtgEm2JTbIbNsIUBbIktsRW2wtbYGttgG2yLbbEdtsP22B47YAfsiJ2wEz6Hz+Hz+Dx2w4qqB/bEntgLe2Ef7It98UXsjy/hS/gyDsRBOBhfwVfwVRyKZ3AYDscROALLqVE4Gscgq3E4HsfjBJyAE3EiTsLJOBmn4jScjjNwBs7EWTgL38E5+C6+i/NwHi7AhbgQF+FiXIJLcCmexWW4HFfgSlyFq3EVrsV1uBY34EbcgJtxM27Frfghfog7cAfuwl34EX6EH+PH+Al+ggNxP+7HA3gAD+JBPISH8DAexiN4BI/iUTyGx/A4HscTeBJP4Uk8jafxDJ7Fc3gOz+N5vIAX8CJevPTNry4xyqg0Ko1KUSkqvUqvMqgMKpPKpBIqobKoLCqryqqyqWwqh8qhcqlcKo/Ko0iRYhWrvCqvSqqkyq/yqwKqgCqkCimvvCqqiqpiqpgqroqrEupmVVLdokqp0qq5L6vKqnKqhS+vblcVVAVVUVVSlVUVVUVVVVVVNVVNVVfVVQ1VQ9VU96laqgf2wQfUpcrUVYOwnhqMDVRD1Ug1Vq/iw6qpGorNVHPVQj2qhuMwbKWa+tbqCdVGjca26ik1Bp9W7dU47KCeVR1VJ9VZPae6qGa+q+qmJmEP1VNNxV6qt+qj+qqZWEldqlhl9bIaqAapweoVtQBfVUPVa2qYGq5GqNfVSDVKjVZj1Fg1To1Xb6gJ6k01Ub2lJqnJaoqaqqap6WqGelvNVLPUbPWOmqPeVXPVPDVfLVAL1XtqkVqslqj31VL1gVqmlqsVaqVapVarNWqtWqfWqw1qo9qkNqstaqvapj5U29UOtVPtUruV+vVNW+1Tn6r96jN1QP1NHVSfq0PqC3VYfamOqK/UUfW1Oqa+UcfVt+qEOqlOqe/UafW9OqPOqnPqB3Ve/aguqJ/URRUU9AAArbXRkU6j0+oUnU6n11fpDDqjzqQz64S+WmfR1+is+lqdTWfXOXROnUvn1nm01aSdZh3rvDqfTurrdH59vS6gC+pCurD2uoguqm/QxfSNuri+SZfQN+uS+hZdSpfWZXRZfasup2/T5fXtuoK+Q1fUlXRlXUXfqavqu3Q1fbeuru/RNfS9uqa+T9fS9+va+gFdRz+o6+qHdD1dXzfQDXUj3Vg30Q/rpvoR3Uw31y30o7qlfky30o/r1voJ3UY/qdvqp3Q7/bRur5/RHfSzuqPupDvrn/RFHXRX3U131z10T/2C7qV76z66r+6nX9T99Ut6gH5ZD9SD9GD9ih6iX9VD9Wt6mB6uR+jX9Ug9So/WY/RYPU6P12/oCfpNPVG/pSfpyXqKnqqn6em6z99Hmv0n8t/8nfwBPx99q96mP9Tb9Q69U+/Su/VHeo/eo/fqvXqf3qf36/36gD6gD+qD+pA+pA/rw/qIPqKP6qP6mD6mj+vj+oQ+qX/Q3+nT+nt9Rp/VZ/UP+rw+ry/8/RyAQaOMNsZEJo1Ja1JMOpPeXGUymIwmk8lsEuZqk8VcY7Kaa002k93kMDlNLpPb5DHWkHGGTWzymnwmaa4z+c31poApaAqZwsabIqaoueEv5//R/JqYJqapaWqamWamhWlhWpqWppVpZVqb1qaNaWPamramnWln2pv2poPpYDqajqaz6Wy6mC4mAEB30930NC+YXqa36WP6mn7mRdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJLzBKz1Cw1y8xys9ysNCvNarParDVrzXqz3mw0G81ms9ksM7/+guZOs9PsNrvNHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL932RSpSkYlMlCZKE6VEKVH6KH2UIcoQZYoyRYkoEWWJskRZo2ujbFH2KEeUM8oV5Y7yRDaiyEUcxVHeKF+UjK6L8kfXRwWiglGhqHDkoyJR0eiGqFh0Y1Q8uikqEd0clYxuiUpFpaMyUdno1qhcdFtUPro9qhDdEVWMKkWVoyrRnVHV6K6oWnR3VD26J6oR3RvVjO6LakX3R7WjB6I60YNR3eihqF5UP2oQNYwaRY2jJv/R8UM4k/0R39V2s91tD9vTvmB72d62j+1r+9kXbX/7kh1gX7YD7SA72L5ih9hX7VD7mh1mh9sR9nU70o6yo+0YO9aOs+PtG3aCfdNOtG/ZSXaynWKn2ml2up1h37Yz7Sw7275j59h37Vw7z863C+xC+55dZBfbJfZ9u9R+YJfZ5XaFXWlX2dV2jV1r19n1doPdaDfZzXaL3Wq32Q/tdrvD7rS77G77kd1jP7Z77Sd2n/3U7ref2QP2b/ag/dwesl/Yw/ZLe8R+ZY/ar+0x+409br+1J+xJe8p+Z0/b7+0Ze9aesz/Y8/ZHe8H+ZC/acOnm/tLlnQwZSkNpKIVSKD2lpwyUgTJRJkpQgrJQFspKWSkbZaMclINyUS7KQ3noEiamvJSXkpSk/JSfClABKkSFyJOnolSUilExKk7FqQSVoJJUkkpRKSpDly5tt9JtdBvdTrfTHXQHVaJKVIWqUFWqStWoGlWn6lSDalBNqkm1qBbVptpUh+pQXapL9ageNaAG1IgaURNqQk2pKTWjZtSCWlBLakmtqBW1ptbUhtpQW2pL7agdtaf21IE6UEfqSJ2pM3WhLtSVulJ36k49qSf1ol7Uh/pQP+pH/ak/DaABNJAG0mAaTENoCA2loTSMhtMIep1G0igaTWNoLI2j8TSeJtAEmkgTaRJNoik0habRNJpBM2gmzaTZNJvm0ByaS3NpPs2nhbSQFtEiWkJLaCktpWW0jFbQClpFq2gNraF1tI420AbaRJtoC22htLCNttN22kk7aTftpj20h/bSXtpH+2g/7acDdIAO0kE6RIfoMB2mI3SEjtJROkbH6DgdpxN0Ak/RKTpNp+kMnaFzdI7O0490gX6iixQoxaVz6d1VLoPL6DK5zC7FpesGAP+Ic7icLpfL7fI467K57P8Sk3OugCvoCrnCzrsirqi74TdxKVfalXFl3a2unLvNlf9NXNXd5aq5u111d4+r4u78l7iGu9fVdA+5Wq6+q+0aujqusavrHnL1XH3XwDV0jVxj19I95lq5x11r94Rr4578TbzILXbr3Hq3wW10e90n7pz7wR11X7vz7kfX1XVz/dyLrr97yQ1wL7uBbtBv4hHudTfSjXKj3Rg31o37TTzFTXXT3HQ3w73tZrpZv4kXuvfcHLfEzXXz3Hy34Of40pyWuPfdUveBW+aWuxVupVvlVrs1bu0/5rrSbXZb3Fa3x33strsdbqfb5Xa7j36OL61jn/vU7XefuSPuK3fQfe4OuWPusPvy5/jS+o65b9xx96074U66U+47d9p97864sz+v/9Lav3M/uYsuOGBkxZoNR5yG03IKp+P0fBVn4IyciTNzgq/mLHwNZ+VrORtn5xyck3Nxbs7DlokdM8ecl/NxMl9Gzs/XcwEuyIW4MHsuwkX5Bi7GN3JxvolL8M1ckm/hUlyay3BZvpXL8W1cnm/nCnwHV+RKXJmr8J1cle/ianw3V+d7uAbfyzX5Pq7F93NtfoDr8INclx/ielyfG3BDbsSNuQk/zE35EW7GzbkFP8ot+TFuxY9za36C2/CT3Jaf4nb8NLfnZ7gDP8sduRN35ue4Cz/PXbkbd+ce3JNf4F7cm/twX+7HL3J/fokH8Ms8kAfxYH6Fh/CrPJRf42E8nEfw6zySR/FoHsNjeRyP5zd4Ar/JE/ktnsSTeQpP5Wk8nWfw2zyTZ/Fsfofn8Ls8l+fxfF7AC/k9XsSLeQm/z0v5A17Gy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW3sYf8nbewTt5F+/mj3gPf8x7+RPex5/yfv6MD/Df+CB/zof4Cz7MX/IR/oqP8td8jL/h4/wtn+CTfIq/49P8PZ/hs3yOf+Dz/CNf4J/4IgeGGGMV69jEUZwmThunxOni9PFVcYY4Y5wpzhwn4qvjLPE1cdb42jhbnD3OEeeMc8W54zyxjSl2McdxnDfOFyfj6+L88fVxgbhgXCguHPu4SFw0viEuFt8YF49vikvEN8cl41viUnHpuExcNr41LhffFpePb48rxHfEFeNKceW4SnxnXDW+K64W3x1Xj++Ji8f3xjXj++Ja8f1x7fiBuE78YFw3fiiuF9ePG8QN40Zx47hJ/HDcNH4kbhY3j1vEj8Yt48fiVvHjcev4ibhN/OQf9nePe8Q94xfiF+IQ7tbzkwuSC5PvJRclFyeXJN9PLk1+kFyWXJ5ckVyZXJVcnVyTXJtcl1yf3JDcmNyU3JzcktyaDKFKWvDoldfe+Min8Wl9ik/n0/urfAaf0WfymX3CX+2z+Gt8Vn+tz+az+xw+p8/lc/s83nryzrOPfV6fzyf9dT6/v94X8AV9IV/Ye1/EF/WNfRPfxDf1j/hmvrlv4R/1j/rH/GP+cf+4f8K38U/6tv4p384/7dv7Z/wz/lnf0Xfynf1zvot/3nf13Xx339339D19L9/L9/F9fD/fz/f3/f0AP8AP9AP9YD/YD/FD/FA/1A/zw/wIP8KP9CP9aD/aj/Vj/Xg/3k/wE/xEP9FP8pP8FD/FT/PT/Aw/w8/0M/1sP9vP8XP8XD/Xz/fz/UK/0C/yi/wSv8Qv9Uv9Mr/Mr/Ar/Cq/yq/xa/w6v85v8Bv8Jr/Jb/Fb/Da/zW/32/1Ov9Pv9rv9Hr/H71V7/T6/z+/3+/0Bf8Af9Af9If+FP+y/9Ef8V/6o/9of89/44/5bf8Kf9Kf8d/60/96f8Wf9Of+DP+9/9Bf8T/6iD3584o3EhMSbiYmJtxKTEpMTUxJTE9MS0xMzEm8nZiZmJWYn3knMSbybmJuYl5ifWJBYmHgvsSixOLEk8X5iaeKDxLLE8sSKxMrEqsTqRAi50wBAyBeS4bqQP1wfCoSCoVAoHHwoEoqGG0KxcGMoHm4KJcLNoWS4JZQKpUOZUD80CA1Do9A4NAkPh6bhkdAsNA8twqOhZXgstAqPh9bhidAmPBnahqdCu/B0aB+eCR3Cs6Fj6BQ6h+dCl/B86Bq6he6hR+gZXgi9Qu/QJ/QN/cKLoX94KQwIL4eBYVAYHF4JQ8KrYWh4LQwLw8OI8HoYGUaF0WFMGBvGhfHhjTAhvBkmhrfCpDA5TAlTw7QwPcwIb4eZYVaYHd4Jc8K7YW6YF+aHBWFheC8sCovDkvB+WBo+CMvC8rAirAyrwuqwJqwN68L6sCFsDJvC5rAlbA3bwodhe9gRdoZdYXf4KOwJH4e94ZOwL3wa9ofPwoHwt3AwfB4OhS/C4fBlOBK+CkfD1+FY+CYcD9+GE+FkOBW+C6fD9+FMOBvOhR/C+fBjuBB+Chflb9aEEEIIIf4U/Qf9Pf6LnF9/EtUTADLuyHn4/+7flO2Xdu+0uVomAOCJbh0e+HWrWLF79+5/33eZhijfPABIXM6/dBv9a7wcWsBj0BqaQ7F/9Kf807F6q07n+Q/GT94MkP6fclLU5fbl8W/83fX3VqPm/P74+OsuUXIeQIF8l3PSweX48vjF/4vxszf9g/mn+3w8QLN/yskAl+PL4xeFR+BJaP0vewohhBBCCCGEEL/orcq0gz/x+TyXuZyTFi7Hv/f5XAghhBBCCCGEEP9/ebpT58cfbt26ebv/eQ1zRY6OAD8/G0lEv5zAP84KmX/Z88qfMWlI4083ruS7khBCCCGEEOK/w+Wb/t/2DbkSExJCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIVKh/xf/TuyXI+GVXqoQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxxfyfAAAA//+wXi8u") 2.340067686s ago: executing program 2 (id=728): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 1.622404855s ago: executing program 0 (id=729): pipe2(&(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000003, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r2, 0x2}}, 0x18) 1.311005767s ago: executing program 2 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/71, 0x47}], 0x2, 0x8000, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = epoll_create1(0x0) epoll_create1(0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa0000013}) 1.169638943s ago: executing program 2 (id=731): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f00000002c0)={0x0, 0x800000, 0x13090, 0x0, 0x72}, &(0x7f0000000100), &(0x7f0000000080)) inotify_init() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x3, 0x2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@rose, @rose, @rose, @default, @remote, @netrom, @rose, @default]}, &(0x7f0000000440)=0x48) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="60000000030801010000000000000000030000000600024088e700003c00048008000a400000000908000a40000000010800034000000008080008400000000008000140000000070c000b4000007fff08000240000000000500030006"], 0x60}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x808040, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1210080, &(0x7f0000000000)=ANY=[@ANYBLOB="80"], 0x7, 0x317, &(0x7f00000004c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000000000008500000023000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1188e19b95d02ff4284860186dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7e2, r1, 0x0}]) read$dsp(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000010000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) 1.093465946s ago: executing program 1 (id=732): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023892) 889.993384ms ago: executing program 1 (id=733): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 872.604074ms ago: executing program 2 (id=734): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x11dc, &(0x7f0000001280)="$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") unlink(0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000140), &(0x7f00000037c0)='>', 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 816.322987ms ago: executing program 1 (id=735): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x308, 0x70bd25, 0x25dfdbfb, 0xfffffffe, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 362.283055ms ago: executing program 2 (id=736): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000000300)=ANY=[], 0x51, 0x5fbc, &(0x7f0000003100)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4Alm1UkCIVq+hy7ptzjHseeru45v580rvr6dE1/5f/UdPdUVVcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPG97/74ZC8iLv463XAw4jMxiOhHrNb1kahnzuf7DyPiUGwNx3MRMViOqJff+ueZiDMR8dGBiDt3b6zXN5/aZR9nT1y/+sn3v/OP3/3p1qGfvvmTD9rjP/rs6Q9/fzPi4A9f+/CTm09m3QEAAKAUVVVVvfQ2/3B6f9/vuikAYCby83+V5NvVarVa/UTrP/bnq5/d1ysxX/2oH6tuqia72SwiYrO5TP2awe54AFgwm/Fx1y3QIfkXbRgRT3XdBDDXel03wJ64c/fGei/l22s+HxwZj+e/U27Lf7N37/yOnabTtI8xmdXP160YxLM79LM6ox7mSc6/387/4nh8lO631/nPyk75j8anPhUn5z9o59+yLf8/R8TC5t+fmH+pcv7DR8l/c7DA27/8AQAAAADY//Lf/w92vP93+fFXZVcetv/3yIx6AAAAAAAAAIAn7XGv/3eP6/8BAADA3Krfq9f+cuD+bc1j/dvzF3oRT7fuDxQmnSyz1nUfAAAAAAAAAAAAAFCS4fgY3gu9iKWIeHptraqq+qupXT+qx11+0ZW+/lCyrn/JAwDA2EcHWufy9yJWIuJC+qy/pbW1tapaWV2r1qrV5fx6drS8Uq023tfmaX3b8mgXL4iHo6r+ZiuN5ZqmvV+eNt7+fvVjjarBLhqbjQ4DB4CIGD8b3fGMtM9U1TPR9ascFoPtf/+x/bMbXf+cAgAAAHuvqqqqlz7O+3Da59/vuikAYBZW8vN/e7+AWq1Wq9Xq/Vc3VZPdbBYRsdlcpn7N4HL8ALBgNuPjrlugQ/Iv2jAiDnXdBDDXel03wJ64c/fGei/l22s+H6Tru+djQbblv9nbWi4vP2k6TfsYk1n9fN2KQTy7Qz/PzaiHeZLz77fzvzgeH6X77XX+s7JT/vV6Huygn67l/Aft/Fv2T/79ifmXKuc/fKT8B/IHAAAAAIA5lv/+f9D+37zKAAAAAAAAALBw7ty9sZ7Pe837/z8/4X695pzzP/eNnH9v1/k7/3c/yfn32/m3DsgZNOZvv3E//3/fvbH+wfV/fS5P5z7/pcGofuylXn8wTMf8VEtvxeW4Ehtx4oH7D7eNn3xgfGnb+Kkp46cfGB/V46t5/Fisxy/iSrx5b3x5yoFRK1PGqynjOf+B7b9IOf9h46vOfy2N91rT2u33+w9s983ppMc5/7f/vvjg1jV7t2Jwb92a6vU72kE/W/8nT43iV9c2rh77zaXr16+ejDTZduupSJMnLOe/lL5y/i+9MB7Pv/eb2+vt90ePnP+8uBXDHfN/oTFfr+/LM+6tCzn/UfrK+ednoMnb/yLnv/P2/0oH/QAAAAAAAAAAAAAAAMDDVFW1dYro+Yg4l87/6ercTABgpv7wgzRTJaEe172Yr37UarVarX4CdVM12evNIla2L3MuIn476ZsBAPPsfxHxz66boDPyL1j+vL96+oWumwFm6tq77/3s0pUrG1evdd0JAAAAAAAAAPBp5et/Hmlc/3nrOKDWdaO3Xf/1jTiysNf/7I8GW9c6Tyv0fDz8+t9H4+HX/x5OebylKeOjKePLU8ZXpoxPPNGjIef/fMo45384rVhJ1399qYN+upbzP5qu9Zzz/1Lrfs38q78ucv79bfkfv/7OL49fe/e9Vy+/c+ntjbc3fn7yxLkzp8+eOX327PG3Ll/ZODH+t8OO91bOP1/72nGgZcn558zlX5ac/xdTLf+y5PxfTLX8y5Lzz6/35F+WnH9+7yP/suT8X061/MuS8/9yquVflpz/K6mWf1ly/l9JtfzLkvN/NdXyL0vO/1iq5V+WnP/xVMu/LDn/vIdL/mXJ+ecjG+Rflpz/qVTLvyw5/9Opln9Zcv5nUi3/suT8z6Za/mXJ+Z9LtfzLkvP/aqrlX5ac/9dSLf+y5PxfS7X8y5Lz/3qq5V+WnP83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+b+eavmX5f7n/5uZ8cx//h4xB22YMTNppuvfTAAAAAAAAAAAAABA2ywOJ+56HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1djFxnfT/ws69eO4H4T0IIwZC14wRDNt5dvyUmGMzrPw0tTQOhpYU6xl6/gN/qXUOCULM0aRtEpEZtL9KLUkAUIbVVIoRUKqUoUpHau+YKlBvUSpFqqUllIqhES7LVmfM8z87Mzs7s2t74zDmfTxT/vDtnZp45c2Z2vmt9ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLb5AzN/PJBlWf5/44+NWXZ1/vf12f78y/k9V3qFAAAAwKV6pfHn316TvrF/BWdq2uaf3/av31tYWFjIPvPy+Vf/bGEhnTCeZUPrsqxxWvQvv/j5QvM2wSPZ2MBg09eDPa5+qMfpwz1OH+lx+miP09f1OH2sx+lLdsAS64vfxzQubGvjrxuLXZpdl400Ttva4VyPDKwbHIy/y2kYaJxnYeRIdjw7kc1kU0vOM9D4L8ue2Zxf191ZvK7BpuvalGXZhZ9+6VBcw0DYx1uzlitraL7vXnpfNv7yT7906NtzL7650+y5G5asNMu2bcnX+WiWLf66KhvI1qV9Etc52LTOTR3WOdSyzoHG+fK/t6/zwgrXGW/3WFjnc13WuSl878Gbsyybz5bdpt0j2WC2oe1a0/4eK46I/DLyu/IN2fCqjpPNKzhO8vO8cHPrcdJ+TMb9vznsk+Fl1tB8d7z05dEl+/1ij5P8VpfhWM0v+978SsfGmn+12nKs5tt86Zblj4GO912HYyAdy03HwJZex8Dg6FDjGBhcXPOWlmNgesl5BrOBxnWdv6X7MTA5d/LM5OxDX7z9+MmDR2eOzpyantqza+fuXTt37548cvzEzFTx5+p2aR/ZkA2mY3BLeK6Jx+Db27ZtPiQXvnH5HgdjJXkc5Lf947fmC7p6MFvmGM+3eXTbpT8O0s/9psfBcNPjoONzaofHwfAKHgf5Nhe2rexn5nDT/53WsFbPhRubjoEr+fMwv85PvWP558JNYV2PvXO1Pw+HlhwD8WYNhMde/p30em/szrBflh4XN+YnXDXaeG23/cGDc3Nnp7MwXhPXNt1X7cfLhqbblC05XgZXfbzs/5tf3npjh+9vDPtq7Lbu91W+za6J7vdV49n9qtHs3OzM2bA/R7Nif7Z8d0cWxmX2Wu/PTj/N8v2ZskSX/Zlv8+jtl/5aMOWSpue/kV7Pf0Mjw8Xz31DaGyMtz39L75qhxsqy7MLtK3v+Gwn/v9bPf9eV5Pkv31ef2t79GMi3eWxytcfAcNfnv5vDHAjreUdIDGNNuf/VxunzxWHadF/2PG6Gh0fCcTMcr7H1uNm55Dz5peXXvW3q4o6bbTe33lctr1tWftz0+vVBaY6bfF/9+VT34ybf5tnpS3/uWB//2vTcMdrrGBgZGs3XO5IOguL5bmF9PAa2Z4ey09mJ7HA6T34v59c1sWNlx8Bo+P+1fu64oSTHQL6vntzR/RjIt/nhzsv72mlb+E7apum1U/vvF5bL/DcOL15e+2673Jk/X+cHf/TR9L1OGSLf5sVdq80Z3ffTbeE7V3XYT+2Pn+WO6cPZa7OfbgjrPLG7+++m8m2u27PC42l/lmXPTz/f+H1X+P3ud8/96Hstv/ft9Dvl56efv2fyvh+vZv0AAFy8Vxt/zo8WrzWb/sV6Jf/+DwAAAPSFmPsHw0zkfwAAAKiMmPuHwkzkfwAAAKiMmPuHw0xqkv+P3bn3qVceztK7AS4E8fS4G+59T7Fd7HjPh6/HFxbl33//t0ae+srDK7vuwSzLfnnPWzpuf+w9cV2FM3Gd72r9/hI33LSi63/g/sXtmt8/4cLe4vLj7VnpYRC7ys9M7mhc7vhD04357D1ZY943/9gjxeUXX8ftz+8stv/L8KYl+48MtJx/W1jP1jDHw3vK3Lt/cT/kM57vqU1v+6drP7F4ffF8A1te37iZT/5+cbnxPaKeuLbYPt7u5db/j1/9zlP59g/e0nn9Dw92Xv/5cLkvhPmLfcX2zfv8K03r/8Ow/nh98Xzbv/mDjut/+k3F9k+H4+LrYbav/31/8tZXOt1f8Xr231WcL17/1H/vapwvXl68/Pb1jz083bI/2i//2ZeLy9n3+Z8NNW8fvx+vJ3rgrtbjeyDcvy098izLvvNHWct+zt5dnO8f2tYfL+/MXZ3Xf1vbOs8M3NQ4/+Lt2dhyu7721zs63t64nv1/t7Hl9jzxobD/Xp78YX655+8Lx2M4/X+eKy6v/c1Inv5Q6/NN3P7rG4vHbby8ybb1P9G2/vmb8n3Xe/13v1ys/+n3rmtZ//4Ph+Pp7mL2Wv/Rv7qm5fzf+HZxf5z9wsSp07Pnjh9u2qvNj+N1Y+s3XHX1615/TXgubf/6wOm5YzNnx6fGp7JsvA/fMnCt1//NMP+rGPOX/xoKP/5Zcdw9/pHi59bbf158/UT4/gPh/ow/H7/2FyMtx2v7/T7/3mJe6vrfGdaxUm/66r/ftKINz3/6mXN//wcvtr8uiLfnzBvHGrfvyc3XN04beLY4vf35qpd/e2Pr4/onw1ON+f2wXxfCOzNvub64vvbLj+9N8vjHisdvfCUXz5+1vZ/IxqHW23Gp6/9JeB3zgxtan//i8fH9h9vezXljNpAvYT48P2Tzxelxq7i/H79wfcfri+/Dk82/eTXLXNbsQ7OTJ46fOvfg5NzM7Nzk7ENfPHDy9LlTcwca71164LO9zr/4+N7QeHwfntmzK2s82k8XY41d6fWfuf/Q4Tumbj08c+TguSNz95+ZOXv00OzsoZnDs7cePHJk5gu9zn/88L7pHXt33rFj4ujxw/vu3Lt3596J46dO58soFtXDnqnPTZw6e6Bxltl9u/ZO7969a2ri5OnDM/vumJqaONfr/I2fTRP5uT8/cXbmxMG54ydnJmaPf3Fm3/TePXt29Hz3x5NnjsyOT549d2ry3OzM2cnitozPNb6d/+zrdX7qYfZ0eL5rMxBenX/ytj3p/XFz3/ryshdVbNL68jR7KbwXVPz51uvrmPtHwkxqkv8BAACgDmLuD2/8v3iC/A8AAACVEXP/ujAT+R8AAAAqI+b+IvmPpY9/r0v+v1z9/y/r/zfo/+v/Z/r/if6//n+m/6//34P+fyn6/8f0//X/9f9ZK2Xr/4fcn63PMv/+DwAAABUVc/+GMBP5HwAAACoj5v6rwkzkfwAAAKiMmPuvDjOpSf73+f/6//r/3fr/cVv9/0z/vwz9/63/qf+/hP6//n+m/3/RrnR/vt/XX8L+/3r9f8qmbP3/mPtfF2ZSk/wPAAAAdRBz/+vDTOR/AAAAKLV1q9g25v5rwkzkfwAAAKiMmPs3hpnUJP9fuf7/qP6//n9Dufv/Pv+/mf7/Fe//+/z/DvT/9f+z2vT/ixcL+v/lWf/a9///tOv5ff4//aBs/f+Y+/9fmElN8j8AAADUQcz9bwgzkf8BAACgMmLuvzbMRP4HAACAyoi5/7owk5rk/3p+/v8LWZbp/2f6//r/bevU/9f/Xwv6//r/3VzZ/n/+2qef+v8+/79s6y/h5//r/1M6Zev/x9z/xjCTmuR/AAAAqIOY+68PM5H/AQAAoDJi7n9TmIn8DwAAAJURc/8NYSY1yf/17P/7/H/9/8Ia9P8HhvX/E/1//f9M/1//vwef/6//38/r1//X/6e3svX/Y+5/c5hJTfI/AAAA1EHM/TeGmcj/AAAAUBkx978lzET+BwAAgMqIuX9TmElN8r/+v/6//r/P/9f/1/9fS/3V/x9c9hT9/4L+f6vL1/+fX1yA/n/frF//X/+f3srW/4+5/61hJjXJ/wAAAFAHMfe/LcxE/gcAAIDKiLn/pjAT+R8AAAAqI+b+8TCTmuR//X/9f/1//X/9f/3/tdRf/f/l6f8X9P9b+fx//X/9f/1/uitb/z/m/s1hJjXJ/wAAAFAHMfdvCTOR/wEAAKAyYu6/OcxE/gcAAIDKiLl/a5hJTfK//r/+v/6//r/+v/7/WtL/1//vRv9f/7+f16//r/9Pb2Xr/8fcf0uYSU3yPwAAANRBzP23hpnI/wAAAFAZMfe/PcxE/gcAAIDKiLl/W5hJTfK//r/+v/5/H/f/h/T/M/3/0uux/v9t+7Gzavr/+v+Z/v9Fu9L9+X5fv/6//j+9la3/H3P/O8JMapL/AQAAoA5i7n9nmIn8DwAAAJURc/9tYSbyPwAAAFRGzP0TYSY1yf8V7/+/+B/LbKb/X9D/7/P+v8//b1m//n85+fx//f9u9P/1//t5/fr/+v/0Vrb+f8z9t4eZ1CT/AwAAQB3E3L89zET+BwAAgMqIuX8yzET+BwAAgMqIuX8qzKQm+b/i/f9l6f8X9P/1/zP9f/3/Nab/r//fjf6//n8/r1//X/+f3srW/4+5fzrMpCb5HwAAAOog5v4dYSbyPwAAAFRGzP07w0zkfwAAAKiMmPt3hZnUJP/3Sf9/eypA6f/r/+v/6//r//cV/f+K9v/zJxL9f/3/03NpB+v/6//r/zPY4Xtl6//H3L87zKQm+R8AAADqIOb+PWEm8j8AAABURsz9d4SZyP8AAABQGTH33xlmUpP83yf9f5//r/+v/99E/1//v5/o/1e0/+/z/xv0/33+v/6//j/dla3/H3P/3jCTmuR/AAAAqIOY+98VZiL/AwAAQGXE3H9XmIn8DwAAAH2l0+cQRjH3vzvMpCb5X/+/6v3/hXX6//r/+v/d16//v7b0//X/u9H/1//v5/Xr/+v/01vZ+v8x9+8LM6lJ/gcAAIA6iLn/PWEm8j8AAABURsz97w0zkf8BAACgMmLu3x9mUpP8r/9f9f6/z//X/9f/77V+/f+1pf+v/99NJfv/66rf/w8vW/T/S9T/z48h/X/KqGz9/5j73xdmUpP8DwAAAHUQc//7w0zkfwAAAKiMmPs/EGYi/wMAAEBlxNz/wTCTmuR//X/9f/1//X/9f/3/taT/v2b9/8ZTof5/oVT9f5//r//v8//1/0nK1v+Puf9DYSY1yf8AAABQBzH3fzjMRP4HAACAyoi5//+Hmcj/AAAAUBkx998dZlKT/K//r/+v/6//r/+v/7+W9P99/n83+v/6//28fv1//X96K1v/P+b+XwkzqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6PhJnI/wAAANBnRpc9Jeb+Xw0zqUn+77/+/3hf9v8H0+Xr/+v/6//r/+v/X076//r/mf7/RbvS/fl+X7/+v/4/vZWt/x9z/6+FmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+Xw8zkf8BAACgMmLuvzfMpCb5/3L3/9vP343P/9f/z/T/9f/1//X/L5H+v/5/pv9/0a50f77f16//r/9Pb2Xr/8fc/xthJjXJ/wAAAFAHMfffF2Yi/wMAAEBJHVv1OWLu/1iYifwPAAAAlRFz/8fDTGqS//vv8//1//X/9f/1//X/+4n+v/5/N/r/+v/9vH79f/1/eitb/z/m/vvDTGqS/wEAAKAOYu7/RJiJ/A8AAACVEXP/b4aZyP8AAABQGTH3/1aYSU3yv/6//r/+v/6//r/+/1rS/1/a/8+fw/T/C/r/+v/9vH79f/1/eitb/z/m/k+GmdQk/wMAAEAdxNz/22Em8j8AAABURsz9vxNmIv8DAABAZcTc/6kwk5rkf/1//X/9f/1//X/9/7Wk/+/z/7vR/9f/7+f16//r/9Nb2fr/Mfd/OsykJvkfAAAA6iDm/t8NM5H/AQAAoDJi7j8QZiL/AwAAQGXE3P9AmElN8r/+v/6//r/+v/6//v9a0v/X/+9G/1//v5/Xr/+v/09vZev/x9x/MMxkf+vVAAAAAP0r5v7PhJnU5N//AQAAoA5i7j8UZiL/AwAAQGXE3H84zKQm+V//X/9f/1//X/9f/38t6f/r/3ej/6//38/r1//X/6e3svX/Y+6fCTOpSf4HAACAOoi5/0iYifwPAAAAlRFz/9EwE/kfAAAAKiPm/mNhJjXJ//r/+v/6/7Xt/z/33bZ16v/r/68F/X/9/270//X/+3n9+v/6//RWtv5/zP3Hw0xqkv8BAACgDmLu/2yYifwPAAAAlRFz/+fCTOR/AAAAqIyY+0+EmdQk/+v/6//r/9e2/7+yz/9fv3i9+v/6/xdD/1//vxv9f/3/fl6//r/+P72Vrf8fc//JMJOa5H8AAACog5j7T4WZyP8AAABQGTH3nw4zkf8BAACgMmLuPxNmUpP8r/+/uv7/wDLdQP3/zuvX/69A/7+J/r/+/8XQ/9f/70b/X/+/n9ev/6//T29l6//H3P97YSY1yf8AAABQBzH3nw0zkf8BAACgMmLunw0zkf8BAACgMmLun/s/9u47WbOy2uP4e5vbfZu65RyYgiNwCI7BKqdgTmAEs2LOCXPCrJhzzjnnjGKOVVp0r7WgD332Pk2ft8+zn/X5/MGSAxYPgmX9Cr+145Ym+1//7/v/+n/9v/5f/79P+n/9/xL9v/5/y+/X/+v/WTda/5+7/35xS5P9DwAAAB3k7r9/3GL/AwAAwDRy9z8gbrH/AQAAYBq5+x8YtzTZ//p//b/+X/+v/9f/75P+f6P9/26n/z8C/b/+X/+v/2fZaP1/7v4HxS1N9j8AAAB0kLv/wXGL/Q8AAADTyN3/kLjF/gcAAIBp5O5/aNzSZP/r//X/+n/9v/5f/79P+v+N9v++/38k+n/9v/5f/8+y0fr/3P0Pi1ua7H8AAADoIHf/w+MW+x8AAACmkbv/EXGL/Q8AAADTyN1/bdzSZP/r//X/+v8N9v//q//X/2+H/l//v0T/r//f8vv1//p/1o3W/+fuvy5uabL/AQAAoIPc/Y+MW+x/AAAAmEbu/kfFLfY/AAAATCN3/6Pjlib7X/+v/9f/b7D/9/1//f+G6P/1/0v0//r/Lb9f/6//Z91o/X/u/sfELU32PwAAAHSQu/+xcYv9DwAAANPI3f+4uMX+BwAAgGnk7r8+bmmy//X/+n/9v/5f/6//3yf9v/5/if5f/7/l9+v/9f+s23v/f+8bzt2j9v+5+2+IW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6//v6P//8z/6f/2//v+On+v/j4f+X/+/RP+v/9/y+/X/+n/W7b3/X+n9D/567v4nxS1N9j8AAAB0kLv/yXGL/Q8AAADTyN3/lLjF/gcAAIDhnT3i75e7/6kH/11N9r/+X//v+//6f/2//n+f9P/D9v8H/6t3of31/2fu/Cv6f/3/lt+/1P/f6wjv1//TwWj9f+7+p8UtTfY/AAAAdJC7/+lxi/0PAAAA08jdf2PcYv8DAADANHL3PyNuabL/9f/6f/2//v/C/v9Uy/7/9p/p//dD/z9s/7/M9/+PRP+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6/v/V83R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Urnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/8vq/yf5/r/+f3/0//r/JUft/3f6//pzOdn+//QFv6b/1//r/1kzWv+fu/+FcUuT/Q8AAADzuf4uP8nd/6K4xf4HAACAaeTuf3HcYv8DAADANHL3vyRuabL/9f/6f/2//l//r//fJ/2//n+J7/9vrf+/kP5f/6//Z81o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HJw/5+6kq+6ck60/892Q/+v/9f/n6P/j7+u+n/9/yXQ/+v/dxP2/2cP+ePp/8d6v/5f/8+60fr/3P03xS3++T8AAABMI3f/K+MW+x8AAACmkbv/VXGL/Q8AAADTyN3/6rilyf4/rP+/7f/P/3bf/z8a/f/F36//1//r//X/+v/j6/8v9j9v+v/zZuv/ff9/G+/X/+v/WTda/5+7/zVxS5P9DwAAAB3k7n9t3GL/AwAAwDRy978ubrH/AQAAYBq5+18ftzTZ/8f//f9rTqL/vyOu0//r//X/+v/4+WH9/0H6//3S//v+/xL9v/5/y+/X/+v/WTda/5+7/w1xS5P9DwAAAB3k7n9j3GL/AwAAwDRy978pbrH/AQAAYBq5+98ctzTZ/8ff//v+v/7/Evv/U/r/pP+Pv66+/6//vwT6f/3/Tv9/t510P7/19+v/9f+sG63/z91/87mp12//AwAAQAc3n/vl2d1b4hb7HwAAAKaRu/+tcYv9DwAAANPI3f+2uKXJ/tf/6/9PvP/3/f+i/4+/rvp//f8l0P/r/3f6/7vtpPv5rb9f/6//Z91o/X/u/rfHLU32PwAAAHSQu/8dcYv9DwAAANOI3X/+//xu/wMAAMCU3nnul2d374pbmuz/xv3/NZfb/199p3+t/7/4+/X/x9L/33zw7z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Vv/PeEbr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAmEbu/lviFvsfAAAAppG7/71xS5P937j/n+T7//e5NV6g/5+3//f9/7j6f/3/xej/9f87/f/ddtL9/NbfP07/7/v/jGu0/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy//X/W+//ff9f/6//1/+PTf+v/1+i/9f/b/n9+n/9P+tG6/9z938obmmy/wEAAKCD3P0fjlvsfwAAAJhG7v6PxC32PwAAAEwjd/9H45Ym+1//r//fV/9/+x9E/9+k/79O/7/T/x9K/6//X6L/1/9v+f36f/0/60br/3P3fyxuabL/AQAAoIPc/R+PW+x/AAAAmEbu/k/ELfY/AAAATCN3/yfjhnve4+SedLxOH/Lz6M31//p/3//X//v+v/5/n/T/+v8l+n/9/5bfr//X/7NutP4/d/+n4hb//B8AAACmkbv/03GL/Q8AAADTyN3/mbjF/gcAAIBp5O7/bNzSZP/r//X/+v/N9v9X6/8vfL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/c3FLk/0PAAAAHeTu/3zcYv8DAADANHL3fyFusf8BAABgGrn7vxi3NNn/+n/9v/5/s/2/7/8feL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/S3FLk/0PAAAAHeTu/3LcYv8DAADANHL3fyVusf8BAABgGrn7vxq3NNn/+n/9v/5f/6//1//v0xXv/08d/x9jp//X/x9C/6//1//r/1k2Wv+fu/9rcUuT/Q8AAAAd5O7/etxi/wMAAMA0cvd/I26x/wEAAGAaufu/Gbc02f8z9/9Lv5v+/zz9v/5/p/8/2P+fyZ/r/4+H7//r/5fo/yfu/88cyxNP7v36f/0/x2K0/j93/7filib7HwAAADrI3f/tuMX+BwAAgGnk7v9O3GL/AwAAwDRy9383bmmy/2fu/5fo/8/T/+v/d/p/3//fM/2//n+J/n/i/t/3//X/cHL9/+ndIf1/7v7vxS1N9j8AAAB0kLv/+3GL/Q8AAADTyN3/g7jF/gcAAIBp5O7/Ydwyz/6/7y0Lv1H/f+z9/7m/ifT/+v+d/l//r/8/R/+v/1+i/9f/b/n9+n/9P+tG+/5/7v4fxS3z7H8AAABoL3f/j+MW+x8AAACmkbv/J3GL/Q8AAADTyN3/07ilyf7X//v+v/6/Vf9/1e5I/X/+J6z/1/9fPv2//n+J/l//v+X36//1/6wbrf/P3f+zuKXJ/gcAAIAOcvf/PG6x/wEAAGAauft/EbfY/wAAADCN3P2/jFua7H/9v/5f/9+q//f9f/3/Faf/1/8v0f/r/7f8/uz/8+87/b/+n7sarf/P3f+ruKXJ/gcAAIAOcvf/Om6x/wEAAGAauft/E7fY/wAAADCN3P2/jVua7H/9v/5f/6//1//r//dJ/6//X6L/1/9v+f2+/6//Z91o/X/u/lvjlib7HwAAADrI3f+7uMX+BwAAgGnk7v993GL/AwAAwDRy998WtzTZ//p//f+U/f//6f/1//r/Uej/9f9L9P/6/y2/X/+v/2fdaP1/7v4/xC1N9j8AAAB0kLv/j3GL/Q8AAADTyN3/p7jF/gcAAIBp5O7/c9zSZP/r//X/l97/n64/72H7f9//1//r/4cxb/9/Rv+v/7/s/v/Gm87/WP+/zffr//X/rBut/8/d/5e4pcn+BwAAgA5y9/81brH/AQAAYBq5+/8Wt9j/AAAAMI3c/X+PW5rsf/2//n/K7//r//X/+v9hzNv/+/6//t/3//X/+n/9P2tG6/9z9/8jbmmy/wEAAKCD3P3/jFvsfwAAAJhG7v5/xS32PwAAAEwjd/+/45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9/w0AAP//pQEwbw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1) sendfile(r0, r0, 0x0, 0x80000000) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000140)='./file1\x00') ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000200)=0x3) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0xc, {"f045408a2bd3a0077ee225a32356ebaa"}, 0x8727, 0x8, 0x37}, @ib={0x1b, 0x1, 0x0, {}, 0x0, 0xffff, 0x6}}}, 0x118) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x5432, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 349.107266ms ago: executing program 4 (id=737): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x8001}}, {@auto_da_alloc}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @local, 0x7f}, 0x1c) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 150.011173ms ago: executing program 0 (id=738): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x101}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0) 0s ago: executing program 0 (id=739): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 79.799608][ T5776] cgroup: Unknown subsys name 'net' [ 79.934184][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.636930][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.364316][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.377282][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.395446][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.403860][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.416726][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.428595][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.437308][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.445760][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.446407][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.453805][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.463291][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.468133][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.482247][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.482947][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.489662][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.498836][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.504469][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.511958][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.518176][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.530604][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.541954][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.547400][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.552034][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.563713][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.038689][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.233987][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 84.255001][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 84.266080][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.282945][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.290786][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.298282][ T5787] bridge_slave_0: entered allmulticast mode [ 84.306186][ T5787] bridge_slave_0: entered promiscuous mode [ 84.341685][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.349068][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.356498][ T5787] bridge_slave_1: entered allmulticast mode [ 84.363551][ T5787] bridge_slave_1: entered promiscuous mode [ 84.467791][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.480798][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.588578][ T5787] team0: Port device team_slave_0 added [ 84.634116][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.641768][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.649871][ T5786] bridge_slave_0: entered allmulticast mode [ 84.657093][ T5786] bridge_slave_0: entered promiscuous mode [ 84.667011][ T5787] team0: Port device team_slave_1 added [ 84.673104][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.680515][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.687864][ T5790] bridge_slave_0: entered allmulticast mode [ 84.694812][ T5790] bridge_slave_0: entered promiscuous mode [ 84.702371][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.709802][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.717166][ T5788] bridge_slave_0: entered allmulticast mode [ 84.724127][ T5788] bridge_slave_0: entered promiscuous mode [ 84.731855][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.739283][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.746812][ T5786] bridge_slave_1: entered allmulticast mode [ 84.753810][ T5786] bridge_slave_1: entered promiscuous mode [ 84.773079][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.780269][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.787761][ T5790] bridge_slave_1: entered allmulticast mode [ 84.794772][ T5790] bridge_slave_1: entered promiscuous mode [ 84.802252][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.809615][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.816932][ T5788] bridge_slave_1: entered allmulticast mode [ 84.823911][ T5788] bridge_slave_1: entered promiscuous mode [ 84.914680][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.921736][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.948475][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.963386][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.976350][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.988825][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.000349][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.012878][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.030087][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.037236][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.063659][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.101195][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.150307][ T5790] team0: Port device team_slave_0 added [ 85.159328][ T5790] team0: Port device team_slave_1 added [ 85.197013][ T5786] team0: Port device team_slave_0 added [ 85.231350][ T5788] team0: Port device team_slave_0 added [ 85.241183][ T5788] team0: Port device team_slave_1 added [ 85.250443][ T5786] team0: Port device team_slave_1 added [ 85.321634][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.328893][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.355060][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.368683][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.377143][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.403288][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.421965][ T5787] hsr_slave_0: entered promiscuous mode [ 85.428756][ T5787] hsr_slave_1: entered promiscuous mode [ 85.463088][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.470235][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.496674][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.513843][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.520924][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.547346][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.565930][ T5797] Bluetooth: hci0: command tx timeout [ 85.582694][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.589835][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.616446][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.630755][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.637787][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.663845][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.663853][ T5797] Bluetooth: hci3: command tx timeout [ 85.680727][ T5794] Bluetooth: hci1: command tx timeout [ 85.680746][ T5803] Bluetooth: hci2: command tx timeout [ 85.798284][ T5790] hsr_slave_0: entered promiscuous mode [ 85.805986][ T5790] hsr_slave_1: entered promiscuous mode [ 85.812266][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.820239][ T5790] Cannot create hsr debugfs directory [ 85.848793][ T5788] hsr_slave_0: entered promiscuous mode [ 85.855955][ T5788] hsr_slave_1: entered promiscuous mode [ 85.862141][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.869906][ T5788] Cannot create hsr debugfs directory [ 85.880671][ T5786] hsr_slave_0: entered promiscuous mode [ 85.887814][ T5786] hsr_slave_1: entered promiscuous mode [ 85.894189][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.902534][ T5786] Cannot create hsr debugfs directory [ 86.223190][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.254501][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.270150][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.324347][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.428498][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.444663][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.467883][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.479600][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.557902][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.580029][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.591211][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.601228][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.693221][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.716429][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.731624][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.742516][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.770748][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.820173][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.869998][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.877360][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.891555][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.898760][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.008999][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.022195][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.047614][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.117992][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.140365][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.162132][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.169355][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.217206][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.232159][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.239365][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.313751][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.320978][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.336552][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.343764][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.362145][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.441707][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.449050][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.477460][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.484670][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.645539][ T5794] Bluetooth: hci0: command tx timeout [ 87.694671][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.725441][ T5794] Bluetooth: hci2: command tx timeout [ 87.731080][ T5794] Bluetooth: hci1: command tx timeout [ 87.736573][ T5797] Bluetooth: hci3: command tx timeout [ 87.743715][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.989809][ T5787] veth0_vlan: entered promiscuous mode [ 88.031495][ T5787] veth1_vlan: entered promiscuous mode [ 88.121598][ T5787] veth0_macvtap: entered promiscuous mode [ 88.168688][ T5787] veth1_macvtap: entered promiscuous mode [ 88.208337][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.293502][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.331608][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.359685][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.373136][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.382396][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.391329][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.408108][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.420210][ T5786] veth0_vlan: entered promiscuous mode [ 88.446824][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.477423][ T5786] veth1_vlan: entered promiscuous mode [ 88.570505][ T5786] veth0_macvtap: entered promiscuous mode [ 88.596975][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.612764][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.638367][ T5786] veth1_macvtap: entered promiscuous mode [ 88.683511][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.694624][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.699492][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.712741][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.726572][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.741062][ T5790] veth0_vlan: entered promiscuous mode [ 88.762466][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.773145][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.784742][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.799530][ T5790] veth1_vlan: entered promiscuous mode [ 88.833902][ T5788] veth0_vlan: entered promiscuous mode [ 88.847677][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.858519][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.867703][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.876914][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.915894][ T5788] veth1_vlan: entered promiscuous mode [ 89.002308][ T5788] veth0_macvtap: entered promiscuous mode [ 89.030551][ T5790] veth0_macvtap: entered promiscuous mode [ 89.062999][ T5790] veth1_macvtap: entered promiscuous mode [ 89.104466][ T5788] veth1_macvtap: entered promiscuous mode [ 89.158042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.428610][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.549436][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.555841][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.576262][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.665989][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.704392][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.717105][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.736017][ T5794] Bluetooth: hci0: command tx timeout [ 89.756703][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.784464][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.804365][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.822920][ T5794] Bluetooth: hci2: command tx timeout [ 89.828439][ T5794] Bluetooth: hci1: command tx timeout [ 89.833861][ T5794] Bluetooth: hci3: command tx timeout [ 89.861219][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.871714][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.888405][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.903518][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.942837][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.959599][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.972923][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.989081][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.001178][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.023107][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.044091][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.060495][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.071930][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.087751][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.100957][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.119303][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.138252][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.142051][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.155144][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.163092][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.172462][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.181544][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.522708][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.618016][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.700388][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763856][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023627][ T5794] Bluetooth: hci0: command tx timeout [ 92.030360][ T5794] Bluetooth: hci3: command tx timeout [ 92.037181][ T5794] Bluetooth: hci1: command tx timeout [ 92.042630][ T5794] Bluetooth: hci2: command tx timeout [ 92.294934][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.349482][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.402785][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.474417][ T5117] cfg80211: failed to load regulatory.db [ 92.487382][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.690540][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.878878][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.383023][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.391461][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.505387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.513962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.767333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.892945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.175455][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.302374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.365318][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 95.371063][ T5929] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 95.395510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.395732][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.438097][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.448952][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 95.450761][ T5929] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.468190][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 95.482547][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.583679][ T23] usb 3-1: config 0 descriptor?? [ 95.805592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.025219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.115192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.341431][ T5934] Zero length message leads to an empty skb [ 98.085079][ C0] sched: RT throttling activated [ 98.724339][ T5936] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 99.394937][ T5938] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd1": -EINTR [ 99.406175][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 99.424103][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 99.453262][ T23] usb 3-1: USB disconnect, device number 2 [ 99.758260][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 100.665967][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 101.072731][ T5958] netlink: 27 bytes leftover after parsing attributes in process `syz.0.18'. [ 101.341359][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.146153][ T5976] syzkaller0: entered promiscuous mode [ 103.173732][ T5976] syzkaller0: entered allmulticast mode [ 103.258655][ T5976] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 103.291826][ T5979] syz.1.26: attempt to access beyond end of device [ 103.291826][ T5979] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 103.344458][ T5979] XFS (nbd1): SB validate failed with error -5. [ 104.710867][ T5993] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.763913][ T5994] netlink: 19 bytes leftover after parsing attributes in process `syz.3.30'. [ 108.873335][ T6025] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.885894][ T6031] syz.0.41: attempt to access beyond end of device [ 108.885894][ T6031] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 108.932591][ T6031] XFS (nbd0): SB validate failed with error -5. [ 110.135725][ T6051] [U] [ 110.138698][ T6051] [U] [ 110.141432][ T6051] [U] [ 110.144166][ T6051] [U] [ 110.153828][ T6051] [U] [ 110.156609][ T6051] [U] [ 110.159339][ T6051] [U] [ 110.162063][ T6051] [U] [ 110.173365][ T6051] [U] [ 110.176145][ T6051] [U] [ 110.178882][ T6051] [U] [ 110.181616][ T6051] [U] [ 110.193363][ T6051] [U] [ 110.196135][ T6051] [U] [ 110.198873][ T6051] [U] [ 110.201604][ T6051] [U] [ 110.211660][ T6051] [U] [ 110.214435][ T6051] [U] [ 110.217173][ T6051] [U] [ 110.219917][ T6051] [U] [ 110.260856][ T6051] [U] [ 110.263658][ T6051] [U] [ 110.266398][ T6051] [U] [ 110.269125][ T6051] [U] [ 110.272983][ T6051] [U] [ 110.275729][ T6051] [U] [ 110.278454][ T6051] [U] [ 110.281175][ T6051] [U] [ 110.284082][ T6051] [U] [ 110.286844][ T6051] [U] [ 110.289572][ T6051] [U] [ 110.292290][ T6051] [U] [ 110.296702][ T6051] [U] [ 110.299461][ T6051] [U] [ 110.302202][ T6051] [U] [ 110.304943][ T6051] [U] [ 110.311506][ T6051] [U] [ 110.314275][ T6051] [U] [ 110.317009][ T6051] [U] [ 110.319746][ T6051] [U] [ 110.325349][ T6051] [U] [ 110.328097][ T6051] [U] [ 110.330807][ T6051] [U] [ 110.333513][ T6051] [U] [ 110.339848][ T6051] [U] [ 110.342591][ T6051] [U] [ 110.345300][ T6051] [U] [ 110.348019][ T6051] [U] [ 111.205289][ T6051] [U] [ 111.208083][ T6051] [U] [ 111.210829][ T6051] [U] [ 111.213571][ T6051] [U] [ 111.307000][ T6051] [U] [ 111.309785][ T6051] [U] [ 111.312503][ T6051] [U] [ 111.315201][ T6051] [U] [ 111.319358][ T6051] [U] [ 111.322106][ T6051] [U] [ 111.324804][ T6051] [U] [ 111.327516][ T6051] [U] [ 111.360847][ T6051] [U] [ 111.363629][ T6051] [U] [ 111.366375][ T6051] [U] [ 111.369119][ T6051] [U] [ 111.379275][ T6051] [U] [ 111.382147][ T6051] [U] [ 111.384881][ T6051] [U] [ 111.387623][ T6051] [U] [ 111.392700][ T6051] [U] [ 111.395447][ T6051] [U] [ 111.398197][ T6051] [U] [ 111.400912][ T6051] [U] [ 111.415878][ T6051] [U] [ 111.418663][ T6051] [U] [ 111.421387][ T6051] [U] [ 111.424108][ T6051] [U] [ 111.435065][ T6051] [U] [ 111.437839][ T6051] [U] [ 111.440594][ T6051] [U] [ 111.443324][ T6051] [U] [ 111.448452][ T6051] [U] [ 111.451194][ T6051] [U] [ 111.453900][ T6051] [U] [ 111.456613][ T6051] [U] [ 111.471825][ T6051] [U] [ 111.474610][ T6051] [U] [ 111.477347][ T6051] [U] [ 111.480076][ T6051] [U] [ 111.489227][ T6051] [U] [ 111.491983][ T6051] [U] [ 111.494689][ T6051] [U] [ 111.497419][ T6051] [U] [ 111.509814][ T6051] [U] [ 111.512589][ T6051] [U] [ 111.515326][ T6051] [U] [ 111.518060][ T6051] [U] [ 111.533054][ T6051] [U] [ 111.535836][ T6051] [U] [ 111.538576][ T6051] [U] [ 111.541390][ T6051] [U] [ 111.545920][ T6051] [U] [ 111.548654][ T6051] [U] [ 111.551344][ T6051] [U] [ 111.554035][ T6051] [U] [ 111.561701][ T6051] [U] [ 111.564454][ T6051] [U] [ 111.567165][ T6051] [U] [ 111.569874][ T6051] [U] [ 111.575081][ T6051] [U] [ 111.577831][ T6051] [U] [ 111.580548][ T6051] [U] [ 111.583276][ T6051] [U] [ 111.602520][ T6051] [U] [ 111.605276][ T6051] [U] [ 111.607983][ T6051] [U] [ 111.610691][ T6051] [U] [ 111.614810][ T6051] [U] [ 111.617546][ T6051] [U] [ 111.620272][ T6051] [U] [ 111.623007][ T6051] [U] [ 111.681893][ T6051] [U] [ 111.684661][ T6051] [U] [ 111.687372][ T6051] [U] [ 111.690079][ T6051] [U] [ 111.695087][ T6051] [U] [ 111.697845][ T6051] [U] [ 111.700571][ T6051] [U] [ 112.656472][ T6050] [U] [ 114.146654][ T6079] syz.2.53: attempt to access beyond end of device [ 114.146654][ T6079] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 114.173026][ T6079] XFS (nbd2): SB validate failed with error -5. [ 116.360387][ T6110] program syz.1.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.406675][ T6110] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.428740][ T6211] GUP no longer grows the stack in syz.1.92 (6211): 200000004000-20000000a000 (200000002000) [ 126.460251][ T6211] CPU: 0 PID: 6211 Comm: syz.1.92 Not tainted syzkaller #0 [ 126.467555][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.477687][ T6211] Call Trace: [ 126.481006][ T6211] [ 126.483986][ T6211] dump_stack_lvl+0x16c/0x230 [ 126.488760][ T6211] ? show_regs_print_info+0x20/0x20 [ 126.494015][ T6211] ? load_image+0x3b0/0x3b0 [ 126.498562][ T6211] ? find_vma+0x12e/0x1b0 [ 126.502949][ T6211] __get_user_pages+0xfb9/0x1470 [ 126.507955][ T6211] ? populate_vma_page_range+0x370/0x370 [ 126.513648][ T6211] get_user_pages_remote+0x3de/0xc10 [ 126.519000][ T6211] ? get_dump_page+0x200/0x200 [ 126.523825][ T6211] __access_remote_vm+0x1ff/0x570 [ 126.528901][ T6211] ? generic_access_phys+0x650/0x650 [ 126.534229][ T6211] ? alloc_pages+0x4dc/0x740 [ 126.538875][ T6211] ? do_raw_spin_unlock+0x121/0x230 [ 126.544128][ T6211] proc_pid_cmdline_read+0x551/0x830 [ 126.549562][ T6211] ? schedule+0xc7/0x170 [ 126.553871][ T6211] ? comm_show+0x150/0x150 [ 126.558332][ T6211] ? common_file_perm+0x160/0x1f0 [ 126.563414][ T6211] ? fsnotify_perm+0x271/0x5e0 [ 126.568331][ T6211] do_iter_read+0x506/0xc80 [ 126.572980][ T6211] ? comm_show+0x150/0x150 [ 126.577439][ T6211] ? vfs_iter_read+0xa0/0xa0 [ 126.582082][ T6211] ? __import_iovec+0x5f2/0x860 [ 126.586986][ T6211] ? import_iovec+0x73/0xa0 [ 126.591515][ T6211] do_preadv+0x1fa/0x330 [ 126.595816][ T6211] ? do_writev+0x410/0x410 [ 126.600256][ T6211] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 126.606245][ T6211] ? lock_chain_count+0x20/0x20 [ 126.611105][ T6211] ? lockdep_hardirqs_on+0x98/0x150 [ 126.616329][ T6211] do_syscall_64+0x55/0xb0 [ 126.620778][ T6211] ? clear_bhb_loop+0x40/0x90 [ 126.625502][ T6211] ? clear_bhb_loop+0x40/0x90 [ 126.630188][ T6211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.636087][ T6211] RIP: 0033:0x7fa72138f749 [ 126.640529][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.660147][ T6211] RSP: 002b:00007fa722200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 126.668591][ T6211] RAX: ffffffffffffffda RBX: 00007fa7215e6090 RCX: 00007fa72138f749 [ 126.676590][ T6211] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 126.684568][ T6211] RBP: 00007fa721413f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.692546][ T6211] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 126.700526][ T6211] R13: 00007fa7215e6128 R14: 00007fa7215e6090 R15: 00007ffd54de07d8 [ 126.708531][ T6211] [ 129.028700][ T6237] netlink: 7 bytes leftover after parsing attributes in process `syz.2.104'. [ 129.838903][ T5803] Bluetooth: hci2: link tx timeout [ 129.844618][ T5803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.670056][ T6250] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 131.887827][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 133.094341][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.113074][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.728177][ T6280] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 137.694765][ T6283] syz.1.120[6283]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 138.502610][ T6291] Mount JFS Failure: -22 [ 138.507230][ T6291] jfs_mount failed w/return code = -22 [ 141.316261][ T6314] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 143.903249][ T6321] autofs4:pid:6321:autofs_fill_super: called with bogus options [ 145.184902][ T6332] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 145.292530][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.307320][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.317593][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.336226][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.347189][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.362483][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.371702][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.500555][ T5787] syz-executor (5787) used greatest stack depth: 20616 bytes left [ 145.537965][ T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 145.550460][ T8] usb 1-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 145.561090][ T8] usb 1-1: config 220 has no interface number 2 [ 145.568351][ T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 145.582540][ T8] usb 1-1: config 220 interface 0 has no altsetting 0 [ 145.589600][ T8] usb 1-1: config 220 interface 76 has no altsetting 0 [ 145.596605][ T8] usb 1-1: config 220 interface 1 has no altsetting 0 [ 145.608184][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 145.623895][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.634682][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.643046][ T8] usb 1-1: Product: syz [ 145.653463][ T8] usb 1-1: Manufacturer: syz [ 145.658463][ T8] usb 1-1: SerialNumber: syz [ 145.787306][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.877645][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.336735][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.363112][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 147.407838][ T5794] Bluetooth: hci0: command tx timeout [ 147.865713][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.887491][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.901856][ T6333] bridge_slave_0: entered allmulticast mode [ 147.910841][ T6333] bridge_slave_0: entered promiscuous mode [ 147.950198][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.958786][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.966562][ T6333] bridge_slave_1: entered allmulticast mode [ 147.994900][ T6333] bridge_slave_1: entered promiscuous mode [ 148.052779][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.083222][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.302840][ T6333] team0: Port device team_slave_0 added [ 148.436805][ T6333] team0: Port device team_slave_1 added [ 148.747853][ T8] usb 1-1: selecting invalid altsetting 0 [ 148.815914][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.826945][ T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 148.847531][ T8] usb 1-1: No valid video chain found. [ 148.883175][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.968207][ T8] usb 1-1: selecting invalid altsetting 0 [ 148.973998][ T8] usbtest: probe of 1-1:220.1 failed with error -22 [ 149.006938][ T8] usb 1-1: USB disconnect, device number 2 [ 149.013262][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.658819][ T5794] Bluetooth: hci0: command tx timeout [ 150.915616][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.922637][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.011809][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.887916][ T6333] hsr_slave_0: entered promiscuous mode [ 151.911736][ T6333] hsr_slave_1: entered promiscuous mode [ 151.923014][ T6333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.951920][ T6333] Cannot create hsr debugfs directory [ 152.686130][ T5794] Bluetooth: hci0: command tx timeout [ 153.280625][ T37] hsr_slave_0: left promiscuous mode [ 153.289255][ T37] hsr_slave_1: left promiscuous mode [ 153.300392][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.309283][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.344014][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.369487][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.394381][ T37] bridge_slave_1: left allmulticast mode [ 153.412675][ T37] bridge_slave_1: left promiscuous mode [ 153.431655][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.557425][ T37] bridge_slave_0: left allmulticast mode [ 153.566490][ T37] bridge_slave_0: left promiscuous mode [ 153.582088][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.768617][ T37] veth1_macvtap: left promiscuous mode [ 153.778590][ T37] veth0_macvtap: left promiscuous mode [ 153.784349][ T37] veth1_vlan: left promiscuous mode [ 153.822184][ T37] veth0_vlan: left promiscuous mode [ 154.781709][ T5794] Bluetooth: hci0: command tx timeout [ 154.837814][ T6397] cgroup: fork rejected by pids controller in /syz1 [ 155.832949][ T37] team0 (unregistering): Port device team_slave_1 removed [ 155.873634][ T37] team0 (unregistering): Port device team_slave_0 removed [ 155.920617][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.968984][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.429712][ T37] bond0 (unregistering): Released all slaves [ 156.593147][ T6333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.365514][ T5862] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 158.395367][ T6333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.505747][ T6333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.554366][ T6333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.609301][ T5862] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 158.635478][ T5862] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 158.674070][ T5862] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 158.738638][ T5862] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 158.766042][ T5862] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 158.826547][ T5862] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 158.879537][ T5862] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 158.912254][ T5862] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 158.938610][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.956999][ T5862] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 159.036544][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.058253][ T5862] usb 2-1: string descriptor 0 read error: -22 [ 159.064628][ T5862] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 159.109705][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.116935][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.134126][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.167443][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.174658][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.188116][ T5862] adutux 2-1:168.0: interrupt endpoints not found [ 159.422572][ T5841] usb 2-1: USB disconnect, device number 2 [ 160.518209][ T6495] autofs4:pid:6495:autofs_fill_super: called with bogus options [ 161.118566][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.975679][ T6524] tipc: Started in network mode [ 162.980710][ T6524] tipc: Node identity b2a191f91a93, cluster identity 4711 [ 162.997282][ T6524] tipc: Enabled bearer , priority 0 [ 163.093909][ T6524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 164.837755][ T6333] veth0_vlan: entered promiscuous mode [ 164.856723][ T6524] tipc: Resetting bearer [ 164.873594][ T5841] tipc: Node number set to 2821886457 [ 164.970634][ T6523] tipc: Disabling bearer [ 165.005228][ T6333] veth1_vlan: entered promiscuous mode [ 165.134933][ T6333] veth0_macvtap: entered promiscuous mode [ 165.166335][ T6333] veth1_macvtap: entered promiscuous mode [ 165.238648][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.272595][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.297959][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.344533][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.385184][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.443702][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.478247][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.517422][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.703166][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.395082][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.413254][ T6549] block device autoloading is deprecated and will be removed. [ 166.437371][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.467707][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.499903][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.523185][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.649491][ T6333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.701469][ T6333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.711952][ T6333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.726274][ T6333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.011257][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.045269][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.187736][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.220937][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.011041][ T6580] tipc: Started in network mode [ 170.030658][ T6580] tipc: Node identity b6171b45a268, cluster identity 4711 [ 170.065993][ T6580] tipc: Enabled bearer , priority 0 [ 170.145816][ T6580] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 170.223766][ T6579] tipc: Disabling bearer [ 170.438589][ T6589] netlink: 224 bytes leftover after parsing attributes in process `syz.4.171'. [ 171.484310][ T6600] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.444467][ T6607] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 173.445405][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.265129][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 175.274225][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.315040][ T8] usb 3-1: Product: syz [ 175.322934][ T8] usb 3-1: Manufacturer: syz [ 175.345766][ T8] usb 3-1: SerialNumber: syz [ 175.353843][ T8] usb 3-1: config 0 descriptor?? [ 175.566999][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 175.715875][ T8] usb 3-1: USB disconnect, device number 3 [ 175.753420][ T6628] tipc: Started in network mode [ 175.792277][ T6628] tipc: Node identity 8a10e17e1d4d, cluster identity 4711 [ 175.804087][ T6628] tipc: Enabled bearer , priority 0 [ 175.900481][ T6628] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.924350][ T6628] tipc: Resetting bearer [ 176.010890][ T6627] tipc: Disabling bearer [ 179.936839][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 180.674662][ T6692] tipc: Started in network mode [ 180.682786][ T6692] tipc: Node identity 6ab6122b0911, cluster identity 4711 [ 180.701879][ T6692] tipc: Enabled bearer , priority 0 [ 180.779910][ T6692] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.874080][ T6692] tipc: Resetting bearer [ 181.085834][ T6691] tipc: Disabling bearer [ 182.756090][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 185.040551][ T6748] tipc: Enabled bearer , priority 0 [ 185.100114][ T6748] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 185.127045][ T6748] tipc: Resetting bearer [ 185.183428][ T6747] tipc: Disabling bearer [ 185.410678][ T6759] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.836328][ T6790] ======================================================= [ 191.836328][ T6790] WARNING: The mand mount option has been deprecated and [ 191.836328][ T6790] and is ignored by this kernel. Remove the mand [ 191.836328][ T6790] option from the mount to silence this warning. [ 191.836328][ T6790] ======================================================= [ 191.954597][ T6793] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.941044][ T6793] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.971613][ T6790] overlayfs: failed to look up (tracing) for ino (-66) [ 195.490106][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.496571][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.171608][ T6831] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd1": -EINTR [ 200.349343][ T6855] netlink: 59 bytes leftover after parsing attributes in process `syz.0.226'. [ 204.925096][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.960054][ T6870] syz.1.227 (6870): drop_caches: 2 [ 205.133234][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.157927][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.209751][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.252385][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 205.285758][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 205.564720][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.595034][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.603115][ T9] usb 1-1: Product: syz [ 205.607521][ T9] usb 1-1: Manufacturer: syz [ 205.652099][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 205.657488][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 206.587129][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 206.782280][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 206.827727][ T9] usb 1-1: USB disconnect, device number 3 [ 206.848381][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 206.860763][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 209.268933][ T6927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 210.629566][ T6916] input: syz1 as /devices/virtual/input/input6 [ 214.644465][ T6970] netlink: 59 bytes leftover after parsing attributes in process `syz.1.255'. [ 217.195245][ T5803] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.075423][ T5793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 218.114677][ T7011] syz.2.264: attempt to access beyond end of device [ 218.114677][ T7011] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 218.129994][ T7011] (syz.2.264,7011,0):ocfs2_get_sector:1770 ERROR: status = -5 [ 218.137679][ T7011] (syz.2.264,7011,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 218.145034][ T7011] (syz.2.264,7011,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 218.153767][ T7011] (syz.2.264,7011,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 218.405105][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 218.435126][ T5793] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 218.465050][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.473119][ T5793] usb 1-1: Product: syz [ 218.514507][ T5793] usb 1-1: Manufacturer: syz [ 218.521251][ T5793] usb 1-1: SerialNumber: syz [ 218.548764][ T7016] netlink: 59 bytes leftover after parsing attributes in process `syz.1.267'. [ 218.563983][ T5793] usb 1-1: config 0 descriptor?? [ 218.588177][ T5793] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 218.805360][ T5793] ssu100: probe of 1-1:0.0 failed with error -71 [ 218.855100][ T5793] usb 1-1: USB disconnect, device number 4 [ 221.461679][ T7070] netlink: 59 bytes leftover after parsing attributes in process `syz.0.280'. [ 222.912019][ T7079] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd0": -EINTR [ 223.289982][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 223.358205][ T7092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.732859][ T8] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 223.875812][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 223.895140][ T8] usb 5-1: Product: syz [ 223.904790][ T8] usb 5-1: Manufacturer: syz [ 223.920214][ T7092] bond_slave_0: entered promiscuous mode [ 223.925038][ T8] usb 5-1: SerialNumber: syz [ 223.927219][ T7092] bond_slave_1: entered promiscuous mode [ 223.942365][ T8] usb 5-1: config 0 descriptor?? [ 223.972814][ T7092] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.984106][ T8] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 224.009175][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 224.037136][ T7092] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 224.108647][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.159106][ T8] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 224.178087][ T8] usb 5-1: media controller created [ 224.187512][ T7089] cxusb: i2c rd: len=245 is too big! [ 224.187512][ T7089] [ 224.310448][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.397322][ T8] cxusb: set interface failed [ 224.402101][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 224.541344][ T7113] netlink: 59 bytes leftover after parsing attributes in process `syz.0.289'. [ 224.715365][ T8] DVB: Unable to find symbol mt352_attach() [ 225.053923][ T7119] loop2: detected capacity change from 0 to 128 [ 225.055328][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 225.103789][ T8] zl10353_read_register: readreg error (reg=127, ret==-121) [ 225.129900][ T8] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 226.485118][ T8] rc_core: IR keymap rc-dvico-mce not found [ 226.491224][ T8] Registered IR keymap rc-empty [ 226.498268][ T8] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 226.530897][ T8] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 226.765232][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 226.855980][ T7135] syz.2.295: attempt to access beyond end of device [ 226.855980][ T7135] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 226.870106][ T7135] XFS (nbd2): SB validate failed with error -5. [ 227.482919][ T8] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 227.548580][ T8] usb 5-1: USB disconnect, device number 2 [ 227.743356][ T8] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 229.875108][ T5778] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 230.163326][ T5778] usb 2-1: Using ep0 maxpacket: 32 [ 230.207393][ T5778] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 230.215928][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.225214][ T7175] Mount JFS Failure: -22 [ 230.226195][ T5778] usb 2-1: config 0 has no interface number 0 [ 230.230365][ T7175] jfs_mount failed w/return code = -22 [ 230.236614][ T5778] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.349813][ T5778] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 230.384553][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.407565][ T5778] usb 2-1: Product: syz [ 230.411911][ T5778] usb 2-1: Manufacturer: syz [ 230.417118][ T5778] usb 2-1: SerialNumber: syz [ 230.475973][ T5778] usb 2-1: config 0 descriptor?? [ 230.509745][ T5778] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 230.538333][ T5778] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 230.694113][ T5778] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 230.720841][ T5778] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 231.909030][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'. [ 232.112697][ T8] usb 2-1: USB disconnect, device number 3 [ 233.366919][ T7194] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd2": -EINTR [ 235.144243][ T7223] Mount JFS Failure: -22 [ 235.158207][ T7223] jfs_mount failed w/return code = -22 [ 237.908591][ T7234] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd4": -EINTR [ 240.948919][ T7260] Mount JFS Failure: -22 [ 240.962525][ T7260] jfs_mount failed w/return code = -22 [ 241.463396][ T7274] autofs4:pid:7274:autofs_fill_super: called with bogus options [ 242.504789][ T7284] syz.4.331: attempt to access beyond end of device [ 242.504789][ T7284] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 242.518097][ T7284] XFS (nbd4): SB validate failed with error -5. [ 243.359211][ T7298] loop2: detected capacity change from 0 to 128 [ 243.569183][ T7298] syz.2.333: attempt to access beyond end of device [ 243.569183][ T7298] loop2: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 243.675456][ T12] kworker/u4:1: attempt to access beyond end of device [ 243.675456][ T12] loop2: rw=1, sector=145, nr_sectors = 88 limit=128 [ 243.856871][ T12] kworker/u4:1: attempt to access beyond end of device [ 243.856871][ T12] loop2: rw=1, sector=233, nr_sectors = 1 limit=128 [ 244.286117][ T12] Buffer I/O error on dev loop2, logical block 233, lost async page write [ 245.766642][ T7314] Mount JFS Failure: -22 [ 245.770985][ T7314] jfs_mount failed w/return code = -22 [ 245.905101][ T5793] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 245.968730][ T7331] autofs4:pid:7331:autofs_fill_super: called with bogus options [ 246.159580][ T5793] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 246.171043][ T5793] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 246.185848][ T5793] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 246.198134][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.463528][ T7321] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.551586][ T5793] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 247.029603][ T9] usb 3-1: USB disconnect, device number 4 [ 247.882611][ T7360] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 249.396346][ T7369] tipc: Enabled bearer , priority 0 [ 249.530053][ T7369] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 249.613670][ T7369] tipc: Resetting bearer [ 249.665208][ T7368] tipc: Disabling bearer [ 250.158924][ T7392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.356'. [ 252.843811][ T7419] vlan2: entered allmulticast mode [ 253.058937][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 253.915284][ T5793] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 254.217392][ T5793] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 254.227786][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 254.236993][ T5793] usb 2-1: Product: syz [ 254.246205][ T5793] usb 2-1: Manufacturer: syz [ 254.250960][ T5793] usb 2-1: SerialNumber: syz [ 254.295239][ T5793] usb 2-1: config 0 descriptor?? [ 254.410528][ T5793] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 254.418303][ T5793] dvb-usb: bulk message failed: -22 (2/0) [ 254.429993][ T5793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.440989][ T5793] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 254.449614][ T5793] usb 2-1: media controller created [ 254.548349][ T5793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.621506][ T5793] cxusb: set interface failed [ 254.633526][ T5793] dvb-usb: bulk message failed: -22 (1/0) [ 254.926497][ T5793] DVB: Unable to find symbol mt352_attach() [ 254.944369][ T5793] dvb-usb: bulk message failed: -22 (5/0) [ 254.974412][ T5793] zl10353_read_register: readreg error (reg=127, ret==-121) [ 255.002409][ T5793] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 255.145707][ T5793] rc_core: IR keymap rc-dvico-mce not found [ 255.168556][ T5793] Registered IR keymap rc-empty [ 255.187045][ T5793] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 255.231875][ T5793] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 255.297932][ T5793] dvb-usb: schedule remote query interval to 100 msecs. [ 255.324314][ T5793] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 255.344248][ T5793] usb 2-1: USB disconnect, device number 4 [ 255.356471][ T7456] loop1: detected capacity change from 0 to 512 [ 255.572968][ T7456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 255.759465][ T7456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 255.981391][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.987854][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.059788][ T5793] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 256.149039][ T7456] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 256.227293][ T7456] EXT4-fs (loop1): 1 truncate cleaned up [ 256.261536][ T7463] loop4: detected capacity change from 0 to 2048 [ 256.290084][ T7456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.334692][ T7463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.508263][ T28] audit: type=1800 audit(1764663710.332:2): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.379" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 256.554794][ T7456] EXT4-fs (loop1): shut down requested (2) [ 256.700877][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.305105][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 257.530721][ T8] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 257.558751][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 257.571602][ T8] usb 5-1: Product: syz [ 257.576275][ T8] usb 5-1: Manufacturer: syz [ 257.581110][ T8] usb 5-1: SerialNumber: syz [ 257.622919][ T8] usb 5-1: config 0 descriptor?? [ 258.612777][ T8] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 258.630875][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 258.647283][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.712440][ T8] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 258.737332][ T8] usb 5-1: media controller created [ 258.795059][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.889267][ T8] cxusb: set interface failed [ 258.901461][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 258.965781][ T8] DVB: Unable to find symbol mt352_attach() [ 258.971844][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 258.989674][ T8] zl10353_read_register: readreg error (reg=127, ret==-121) [ 258.998763][ T8] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 259.265163][ T8] rc_core: IR keymap rc-dvico-mce not found [ 259.283273][ T8] Registered IR keymap rc-empty [ 259.302719][ T7470] loop2: detected capacity change from 0 to 65536 [ 259.311205][ T8] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 259.343696][ T8] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9 [ 259.379373][ T7470] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 259.396259][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 259.421139][ T8] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 259.437688][ T8] usb 5-1: USB disconnect, device number 3 [ 259.558732][ T8] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 259.598386][ T7496] loop4: detected capacity change from 0 to 512 [ 259.641315][ T7496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.658203][ T7470] XFS (loop2): Ending clean mount [ 259.821679][ T5788] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 260.093605][ T7496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.205910][ T7496] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.263024][ T6333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.560160][ T7506] loop1: detected capacity change from 0 to 32768 [ 263.589645][ T7506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.392 (7506) [ 263.841491][ T5117] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 264.605448][ T7506] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.672159][ T7506] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 264.702514][ T7506] BTRFS info (device loop1): using free space tree [ 264.712171][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 264.724677][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 264.734848][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 264.761001][ T5117] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 264.766427][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 264.781726][ T5117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 264.835593][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 264.836108][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 264.894567][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 264.984185][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 265.066239][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 265.112399][ T5117] usb 1-1: Product: syz [ 265.144435][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 265.166508][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 265.245215][ T7506] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 265.437974][ T7506] BTRFS error (device loop1): open_ctree failed: -12 [ 267.347831][ T5117] usb 1-1: Manufacturer: syz [ 267.352537][ T5117] usb 1-1: SerialNumber: syz [ 267.426353][ T5117] usb 1-1: config 0 descriptor?? [ 267.533416][ T5117] usb 1-1: can't set config #0, error -71 [ 267.576266][ T5117] usb 1-1: USB disconnect, device number 5 [ 269.012134][ T7563] syz.1.401: attempt to access beyond end of device [ 269.012134][ T7563] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 269.025318][ T7563] (syz.1.401,7563,0):ocfs2_get_sector:1770 ERROR: status = -5 [ 269.226301][ T7563] (syz.1.401,7563,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 269.233687][ T7563] (syz.1.401,7563,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 269.242494][ T7563] (syz.1.401,7563,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 270.419007][ T7576] loop4: detected capacity change from 0 to 512 [ 270.512256][ T7576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.615504][ T7576] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.898613][ T7584] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #2: comm syz.4.410: corrupted inode contents [ 271.915350][ T7584] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #2: comm syz.4.410: mark_inode_dirty error [ 272.086393][ T7584] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #2: comm syz.4.410: corrupted inode contents [ 272.152640][ T7584] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.410: mark_inode_dirty error [ 273.637326][ T6333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.402938][ T7603] syz.1.417: attempt to access beyond end of device [ 274.402938][ T7603] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 274.417047][ T7603] (syz.1.417,7603,0):ocfs2_get_sector:1770 ERROR: status = -5 [ 274.424879][ T7603] (syz.1.417,7603,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 274.432594][ T7603] (syz.1.417,7603,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 274.441362][ T7603] (syz.1.417,7603,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 279.566268][ T7651] loop1: detected capacity change from 0 to 512 [ 280.184546][ T7657] syz.2.435: attempt to access beyond end of device [ 280.184546][ T7657] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 280.197989][ T7657] (syz.2.435,7657,0):ocfs2_get_sector:1770 ERROR: status = -5 [ 280.205806][ T7657] (syz.2.435,7657,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 280.213110][ T7657] (syz.2.435,7657,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 280.222270][ T7657] (syz.2.435,7657,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 280.787645][ T7651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.916731][ T7651] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.060148][ T7647] loop0: detected capacity change from 0 to 32768 [ 281.211173][ T7647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.432 (7647) [ 281.287543][ T7647] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.310387][ T7647] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 281.512018][ T7647] BTRFS info (device loop0): using free space tree [ 281.678820][ T7672] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.433: corrupted inode contents [ 281.713614][ T7672] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.433: mark_inode_dirty error [ 281.786370][ T7672] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.433: corrupted inode contents [ 281.803064][ T7672] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.433: mark_inode_dirty error [ 282.310546][ T7647] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 282.378694][ T7647] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 282.513079][ T7647] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 282.546329][ T7647] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 282.598191][ T7647] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 282.623699][ T7647] BTRFS error (device loop0): open_ctree failed: -12 [ 282.918479][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.325377][ T7701] capability: warning: `syz.2.442' uses deprecated v2 capabilities in a way that may be insecure [ 284.671164][ T7705] loop1: detected capacity change from 0 to 4096 [ 284.903069][ T7705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.223025][ T7721] syz.2.446: attempt to access beyond end of device [ 286.223025][ T7721] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 286.236433][ T7721] (syz.2.446,7721,0):ocfs2_get_sector:1770 ERROR: status = -5 [ 286.245037][ T7721] (syz.2.446,7721,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 286.252372][ T7721] (syz.2.446,7721,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 286.261281][ T7721] (syz.2.446,7721,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 288.226373][ T7729] loop0: detected capacity change from 0 to 512 [ 288.287015][ T7729] EXT4-fs (loop0): 1 truncate cleaned up [ 288.298321][ T7729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.536763][ T7733] loop2: detected capacity change from 0 to 16 [ 288.558916][ T7733] erofs: (device loop2): mounted with root inode @ nid 36. [ 288.652438][ T7733] erofs: (device loop2): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 288.687617][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.053344][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.984508][ T7758] loop2: detected capacity change from 0 to 512 [ 292.050440][ T7758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.218762][ T7758] EXT4-fs (loop2): 1 truncate cleaned up [ 292.605601][ T7758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.667365][ T7765] syz.0.459: attempt to access beyond end of device [ 292.667365][ T7765] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 292.726485][ T7765] (syz.0.459,7765,0):ocfs2_get_sector:1770 ERROR: status = -5 [ 292.737827][ T7765] (syz.0.459,7765,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 292.747824][ T7765] (syz.0.459,7765,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 292.764820][ T7765] (syz.0.459,7765,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 292.824219][ T7768] loop4: detected capacity change from 0 to 128 [ 292.850236][ T7768] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.973191][ T7768] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.035050][ T28] audit: type=1800 audit(1764663746.852:3): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.462" name="file2" dev="loop4" ino=1048596 res=0 errno=0 [ 293.108051][ T28] audit: type=1800 audit(1764663746.852:4): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.462" name="file2" dev="loop4" ino=1048596 res=0 errno=0 [ 293.166863][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.384009][ T7754] loop1: detected capacity change from 0 to 32768 [ 293.525260][ T28] audit: type=1800 audit(1764663747.332:5): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.457" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 296.146786][ T7797] tipc: Enabled bearer , priority 0 [ 296.185664][ T7797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.237413][ T7797] tipc: Resetting bearer [ 296.302610][ T7795] loop0: detected capacity change from 0 to 8192 [ 296.310253][ T7796] tipc: Disabling bearer [ 296.464705][ T7795] netlink: 168 bytes leftover after parsing attributes in process `syz.0.472'. [ 297.495071][ T5793] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 297.675270][ T5793] usb 5-1: Using ep0 maxpacket: 32 [ 297.694041][ T5793] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 297.724195][ T5793] usb 5-1: config 2 has no interface number 0 [ 297.745422][ T5793] usb 5-1: config 2 interface 88 has no altsetting 0 [ 297.770769][ T5793] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 297.799737][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.817924][ T5793] usb 5-1: Product: syz [ 297.822775][ T5793] usb 5-1: Manufacturer: syz [ 297.827940][ T5793] usb 5-1: SerialNumber: syz [ 297.995590][ T5117] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 298.051915][ T7805] netlink: 'syz.4.475': attribute type 2 has an invalid length. [ 298.081561][ T5793] asix: probe of 5-1:2.88 failed with error -71 [ 298.107818][ T5793] usb 5-1: USB disconnect, device number 4 [ 298.205469][ T5117] usb 1-1: Using ep0 maxpacket: 8 [ 298.394567][ T5117] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.425987][ T7822] netlink: 51 bytes leftover after parsing attributes in process `syz.2.482'. [ 298.772412][ T5117] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.783992][ T5117] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.794083][ T5117] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.913375][ T5117] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.923242][ T5117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.859666][ T5117] usb 1-1: GET_CAPABILITIES returned 0 [ 299.873843][ T5117] usbtmc 1-1:16.0: can't read capabilities [ 300.935790][ T5117] usb 1-1: USB disconnect, device number 6 [ 301.350595][ T7847] loop4: detected capacity change from 0 to 64 [ 308.443701][ T7904] loop4: detected capacity change from 0 to 40427 [ 308.505757][ T7904] F2FS-fs (loop4): heap/no_heap options were deprecated [ 308.625133][ T7904] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 308.977834][ T7914] 9pnet_fd: Insufficient options for proto=fd [ 312.256357][ T7925] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd0": -EINTR [ 313.848534][ T7947] sg_read: process 428 (syz.1.523) changed security contexts after opening file descriptor, this is not allowed. [ 314.042798][ T7952] 9pnet_fd: Insufficient options for proto=fd [ 315.575345][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 315.797713][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.807175][ T23] usb 5-1: config 0 has no interface number 0 [ 315.884091][ T23] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 315.902853][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.948836][ T23] usb 5-1: Product: syz [ 315.998609][ T23] usb 5-1: Manufacturer: syz [ 316.003344][ T23] usb 5-1: SerialNumber: syz [ 316.015871][ T23] usb 5-1: config 0 descriptor?? [ 316.238231][ T23] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 316.262456][ T23] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.292295][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 316.311615][ T23] usb 5-1: media controller created [ 316.337502][ T7976] loop2: detected capacity change from 0 to 256 [ 316.373131][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.457288][ T7976] FAT-fs (loop2): Directory bread(block 64) failed [ 316.474252][ T7976] FAT-fs (loop2): Directory bread(block 65) failed [ 316.506529][ T23] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 316.516334][ T7976] FAT-fs (loop2): Directory bread(block 66) failed [ 316.535773][ T7976] FAT-fs (loop2): Directory bread(block 67) failed [ 316.550710][ T7976] FAT-fs (loop2): Directory bread(block 68) failed [ 316.572788][ T7976] FAT-fs (loop2): Directory bread(block 69) failed [ 316.582214][ T7976] FAT-fs (loop2): Directory bread(block 70) failed [ 316.600784][ T7976] FAT-fs (loop2): Directory bread(block 71) failed [ 316.611347][ T7976] FAT-fs (loop2): Directory bread(block 72) failed [ 316.620860][ T7976] FAT-fs (loop2): Directory bread(block 73) failed [ 316.922820][ T7979] TCP: TCP_TX_DELAY enabled [ 317.611591][ T23] usb 5-1: USB disconnect, device number 5 [ 317.614011][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.625349][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.060535][ T7988] 9pnet_fd: Insufficient options for proto=fd [ 318.252929][ T7992] syzkaller0: entered promiscuous mode [ 318.264001][ T7992] syzkaller0: entered allmulticast mode [ 318.281743][ T7992] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.382852][ T8009] loop2: detected capacity change from 0 to 512 [ 319.416850][ T8009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.445853][ T8009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.470812][ T8009] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.714732][ T28] audit: type=1800 audit(1764663774.422:6): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.542" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 321.354718][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.772178][ T8023] loop2: detected capacity change from 0 to 256 [ 321.803033][ T8021] loop0: detected capacity change from 0 to 4096 [ 321.834269][ T8023] FAT-fs (loop2): Directory bread(block 64) failed [ 321.858534][ T8023] FAT-fs (loop2): Directory bread(block 65) failed [ 321.859212][ T8021] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.917317][ T8023] FAT-fs (loop2): Directory bread(block 66) failed [ 321.923913][ T8023] FAT-fs (loop2): Directory bread(block 67) failed [ 322.016831][ T8023] FAT-fs (loop2): Directory bread(block 68) failed [ 322.038931][ T8023] FAT-fs (loop2): Directory bread(block 69) failed [ 322.081613][ T8023] FAT-fs (loop2): Directory bread(block 70) failed [ 322.145713][ T8023] FAT-fs (loop2): Directory bread(block 71) failed [ 322.165446][ T8023] FAT-fs (loop2): Directory bread(block 72) failed [ 322.231873][ T8023] FAT-fs (loop2): Directory bread(block 73) failed [ 322.286109][ T8021] EXT4-fs (loop0): Test dummy encryption mode enabled [ 322.340774][ T8021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.112309][ T8021] fs-verity: sha256 using implementation "sha256-avx2" [ 324.469863][ T8040] loop4: detected capacity change from 0 to 2048 [ 324.496139][ T8040] EXT4-fs: Ignoring removed bh option [ 324.530518][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.562032][ T8040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.106970][ T8046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 325.138628][ T8046] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 325.152913][ T8046] EXT4-fs (loop4): This should not happen!! Data will be lost [ 325.152913][ T8046] [ 325.164100][ T8046] EXT4-fs (loop4): Total free blocks count 0 [ 325.170749][ T8046] EXT4-fs (loop4): Free/Dirty block details [ 325.177086][ T8046] EXT4-fs (loop4): free_blocks=2415919104 [ 325.183079][ T8046] EXT4-fs (loop4): dirty_blocks=64 [ 325.188470][ T8046] EXT4-fs (loop4): Block reservation details [ 325.208270][ T8046] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 325.294604][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 325.558178][ T8056] program syz.4.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.916616][ T7290] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 327.028986][ T8064] sctp: [Deprecated]: syz.2.554 (pid 8064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.028986][ T8064] Use struct sctp_sack_info instead [ 329.276457][ T8083] syzkaller0: entered promiscuous mode [ 329.296519][ T8083] syzkaller0: entered allmulticast mode [ 329.331970][ T8083] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 330.499647][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 330.688991][ T8098] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 330.959727][ T8098] random: crng reseeded on system resumption [ 334.620615][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 334.648766][ T8116] loop1: detected capacity change from 0 to 32768 [ 334.773607][ T28] audit: type=1800 audit(1764663788.592:7): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.571" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 338.459886][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 340.209721][ T8174] loop1: detected capacity change from 0 to 1024 [ 340.237425][ T8174] hfsplus: gid requires an argument [ 340.282529][ T8174] hfsplus: unable to parse mount options [ 341.035427][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 341.265851][ T8187] loop1: detected capacity change from 0 to 2048 [ 341.393164][ T8172] loop0: detected capacity change from 0 to 32768 [ 341.426361][ T8188] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.525018][ T28] audit: type=1800 audit(1764663795.342:8): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.588" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 345.503605][ T8188] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 345.557291][ T8188] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 345.618135][ T8188] Remounting filesystem read-only [ 345.639210][ T12] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 345.663457][ T12] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 345.683242][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.727185][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.751486][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.784120][ T12] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 345.813639][ T12] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 345.845626][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.870416][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.896322][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.065279][ T5790] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 346.076717][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 346.084529][ T5790] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 346.105138][ T5790] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 346.179407][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 346.817745][ T5790] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 346.839066][ T5790] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 346.892047][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 346.933165][ T5790] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 346.949223][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.983793][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.994281][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.005115][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 347.018683][ T5790] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 347.032862][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.042410][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.055131][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.085447][ T5790] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 347.101677][ T5790] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 347.115254][ T5790] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 347.125213][ T5117] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 347.133303][ T5790] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 347.153248][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.181385][ T5790] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 347.198429][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.212855][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.222241][ T5790] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 347.229949][ T5790] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.400105][ T8214] 9pnet_fd: Insufficient options for proto=fd [ 347.557591][ T5117] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 347.566594][ T5117] usb 5-1: config 7 has no interface number 0 [ 347.580193][ T5117] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 347.589450][ T5117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.598491][ T5117] usb 5-1: Product: syz [ 347.602796][ T5117] usb 5-1: Manufacturer: syz [ 347.608676][ T5117] usb 5-1: SerialNumber: syz [ 347.725727][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 349.243168][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 349.974456][ T5117] as10x_usb: device has been detected [ 349.980942][ T5117] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 350.002911][ T5117] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 350.080439][ T5117] as10x_usb: error during firmware upload part1 [ 350.095606][ T5117] Registered device Elgato EyeTV DTT Deluxe [ 350.100713][ T5117] usb 5-1: USB disconnect, device number 6 [ 350.359174][ T8248] loop2: detected capacity change from 0 to 2048 [ 350.470432][ T5117] Unregistered device Elgato EyeTV DTT Deluxe [ 350.472066][ T5117] as10x_usb: device has been disconnected [ 350.487645][ T8248] EXT4-fs: Ignoring removed bh option [ 350.639813][ T8248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.045127][ T8265] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 351.065650][ T8265] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 351.080682][ T8265] EXT4-fs (loop2): This should not happen!! Data will be lost [ 351.080682][ T8265] [ 351.090685][ T8265] EXT4-fs (loop2): Total free blocks count 0 [ 351.099263][ T8265] EXT4-fs (loop2): Free/Dirty block details [ 351.105944][ T8265] EXT4-fs (loop2): free_blocks=2415919104 [ 351.111810][ T8265] EXT4-fs (loop2): dirty_blocks=64 [ 351.117676][ T8265] EXT4-fs (loop2): Block reservation details [ 351.125967][ T8265] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 351.854410][ T1101] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 353.039717][ T8274] netlink: 'syz.0.620': attribute type 11 has an invalid length. [ 353.057346][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 353.132486][ T8275] loop0: detected capacity change from 0 to 512 [ 353.207719][ T8274] loop0: detected capacity change from 0 to 64 [ 353.283925][ T8274] hfs: unable to parse mount options [ 353.331062][ T8274] Illegal XDP return value 552705536 on prog (id 80) dev N/A, expect packet loss! [ 353.800711][ T8281] Bluetooth: hci4: Frame reassembly failed (-84) [ 354.940444][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 355.887923][ T5803] Bluetooth: hci4: command 0x1003 tx timeout [ 355.920747][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 356.449368][ T8289] loop1: detected capacity change from 0 to 4096 [ 356.566812][ T8287] process 'syz.2.624' launched '/dev/fd/-1' with NULL argv: empty string added [ 357.550452][ T8301] No source specified [ 359.584768][ T8303] loop2: detected capacity change from 0 to 32768 [ 359.671609][ T8317] loop0: detected capacity change from 0 to 8192 [ 359.682167][ T28] audit: type=1800 audit(1764663813.502:9): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.630" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 360.066573][ T8317] netlink: 168 bytes leftover after parsing attributes in process `syz.0.635'. [ 360.768736][ T5117] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 360.988075][ T5117] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.015048][ T5117] usb 1-1: config 0 has no interface number 0 [ 361.055465][ T5117] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 361.064590][ T5117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.104975][ T5117] usb 1-1: Product: syz [ 361.110057][ T5117] usb 1-1: Manufacturer: syz [ 361.114686][ T5117] usb 1-1: SerialNumber: syz [ 361.386688][ T5117] usb 1-1: config 0 descriptor?? [ 361.655419][ T5117] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 361.684120][ T5117] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 361.705013][ T5117] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 361.713201][ T5117] usb 1-1: media controller created [ 362.003477][ T5117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.405402][ T5117] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 363.031863][ T8346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.319132][ T8349] syzkaller0: entered promiscuous mode [ 363.324725][ T8349] syzkaller0: entered allmulticast mode [ 363.366927][ T8349] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 363.547646][ T8342] loop1: detected capacity change from 0 to 32768 [ 363.565836][ T5117] usb 1-1: USB disconnect, device number 7 [ 363.592749][ T28] audit: type=1800 audit(1764663817.412:10): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 364.195511][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 364.567175][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.575112][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 364.608265][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.637570][ T9] usb 5-1: config 0 descriptor?? [ 365.256645][ T9] video4linux radio48: keene_cmd_set failed (-71) [ 365.285049][ T9] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 365.309025][ T9] usb 5-1: USB disconnect, device number 7 [ 366.095243][ T5793] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 366.238430][ T8382] syz.1.658: attempt to access beyond end of device [ 366.238430][ T8382] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 366.272048][ T8382] XFS (nbd1): SB validate failed with error -5. [ 366.300667][ T5793] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 366.315166][ T5793] usb 1-1: config 7 has no interface number 0 [ 366.327062][ T5793] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 366.350550][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.368736][ T5793] usb 1-1: Product: syz [ 366.384378][ T5793] usb 1-1: Manufacturer: syz [ 366.392445][ T5793] usb 1-1: SerialNumber: syz [ 366.579546][ T8379] loop4: detected capacity change from 0 to 32768 [ 366.723416][ T8389] netlink: 168 bytes leftover after parsing attributes in process `syz.2.659'. [ 366.731428][ T8379] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 367.744251][ T6333] ocfs2: Unmounting device (7,4) on (node local) [ 369.652815][ T5793] as10x_usb: device has been detected [ 369.715402][ T5793] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 369.771182][ T5793] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 369.861434][ T5793] as10x_usb: error during firmware upload part1 [ 369.895493][ T5793] Registered device Elgato EyeTV DTT Deluxe [ 369.930646][ T5793] usb 1-1: USB disconnect, device number 8 [ 370.096582][ T5793] Unregistered device Elgato EyeTV DTT Deluxe [ 370.116245][ T5793] as10x_usb: device has been disconnected [ 370.157877][ T8420] netlink: 168 bytes leftover after parsing attributes in process `syz.2.668'. [ 370.738305][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 373.071288][ T8446] 9pnet_fd: Insufficient options for proto=fd [ 373.152981][ T5117] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 373.377010][ T5117] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 373.406093][ T5117] usb 5-1: config 7 has no interface number 0 [ 373.418137][ T5117] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 373.438479][ T5117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.455063][ T5117] usb 5-1: Product: syz [ 373.464965][ T5117] usb 5-1: Manufacturer: syz [ 373.470144][ T5117] usb 5-1: SerialNumber: syz [ 374.243105][ T8462] loop0: detected capacity change from 0 to 4096 [ 374.255490][ T8462] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.272704][ T8462] EXT4-fs (loop0): Test dummy encryption mode enabled [ 374.294705][ T8462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.157903][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.337989][ T8468] loop0: detected capacity change from 0 to 256 [ 375.435493][ T8468] FAT-fs (loop0): Directory bread(block 64) failed [ 375.458079][ T8468] FAT-fs (loop0): Directory bread(block 65) failed [ 375.483490][ T8468] FAT-fs (loop0): Directory bread(block 66) failed [ 375.510735][ T8468] FAT-fs (loop0): Directory bread(block 67) failed [ 375.528039][ T8468] FAT-fs (loop0): Directory bread(block 68) failed [ 375.548096][ T8468] FAT-fs (loop0): Directory bread(block 69) failed [ 375.554867][ T8468] FAT-fs (loop0): Directory bread(block 70) failed [ 375.573144][ T8468] FAT-fs (loop0): Directory bread(block 71) failed [ 375.580192][ T8468] FAT-fs (loop0): Directory bread(block 72) failed [ 375.591405][ T8468] FAT-fs (loop0): Directory bread(block 73) failed [ 375.866142][ T5117] as10x_usb: device has been detected [ 375.872349][ T5117] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 375.934433][ T5117] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 375.999399][ T5117] as10x_usb: error during firmware upload part1 [ 376.039806][ T5117] Registered device Elgato EyeTV DTT Deluxe [ 376.060936][ T5117] usb 5-1: USB disconnect, device number 8 [ 376.148845][ T5117] Unregistered device Elgato EyeTV DTT Deluxe [ 376.155429][ T5117] as10x_usb: device has been disconnected [ 376.578772][ T8484] syzkaller0: entered promiscuous mode [ 376.589850][ T8484] syzkaller0: entered allmulticast mode [ 376.661305][ T8484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.853609][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.860259][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.389592][ T8512] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 379.914755][ T8519] 9pnet_fd: Insufficient options for proto=fd [ 380.170068][ T8523] loop4: detected capacity change from 0 to 256 [ 380.631347][ T8523] FAT-fs (loop4): Directory bread(block 64) failed [ 380.699184][ T8523] FAT-fs (loop4): Directory bread(block 65) failed [ 380.786383][ T8523] FAT-fs (loop4): Directory bread(block 66) failed [ 380.849730][ T8523] FAT-fs (loop4): Directory bread(block 67) failed [ 380.885222][ T8523] FAT-fs (loop4): Directory bread(block 68) failed [ 380.925620][ T8523] FAT-fs (loop4): Directory bread(block 69) failed [ 380.932392][ T8523] FAT-fs (loop4): Directory bread(block 70) failed [ 380.949419][ T8523] FAT-fs (loop4): Directory bread(block 71) failed [ 380.965490][ T8523] FAT-fs (loop4): Directory bread(block 72) failed [ 380.982473][ T8523] FAT-fs (loop4): Directory bread(block 73) failed [ 381.256528][ T8533] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 382.424819][ T8544] loop0: detected capacity change from 0 to 4096 [ 382.433777][ T8544] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.667296][ T8544] EXT4-fs (loop0): Test dummy encryption mode enabled [ 382.961737][ T8544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.257075][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.296370][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 385.440633][ T8577] netlink: 'syz.1.719': attribute type 11 has an invalid length. [ 385.476373][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 385.544475][ T8578] loop1: detected capacity change from 0 to 512 [ 385.646296][ T6792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 385.671071][ T8577] loop1: detected capacity change from 0 to 64 [ 385.677861][ T6792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.695972][ T8577] hfs: unable to parse mount options [ 385.701905][ T6792] Buffer I/O error on dev loop1, logical block 0, async page read [ 386.444583][ T8585] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 386.672184][ T8587] loop1: detected capacity change from 0 to 1024 [ 387.026363][ T8593] loop0: detected capacity change from 0 to 256 [ 387.064466][ T37] hfsplus: b-tree write err: -5, ino 4 [ 387.192393][ T8593] FAT-fs (loop0): Directory bread(block 64) failed [ 387.211091][ T8593] FAT-fs (loop0): Directory bread(block 65) failed [ 387.241172][ T8593] FAT-fs (loop0): Directory bread(block 66) failed [ 387.272858][ T8593] FAT-fs (loop0): Directory bread(block 67) failed [ 387.293262][ T8593] FAT-fs (loop0): Directory bread(block 68) failed [ 387.304833][ T8593] FAT-fs (loop0): Directory bread(block 69) failed [ 387.328965][ T8593] FAT-fs (loop0): Directory bread(block 70) failed [ 387.338383][ T8599] loop1: detected capacity change from 0 to 128 [ 387.344995][ T8593] FAT-fs (loop0): Directory bread(block 71) failed [ 387.351653][ T8599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.378405][ T8599] EXT4-fs (loop1): Test dummy encryption mode enabled [ 387.388681][ T8593] FAT-fs (loop0): Directory bread(block 72) failed [ 387.401839][ T8599] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32451!=0) [ 387.411828][ T8593] FAT-fs (loop0): Directory bread(block 73) failed [ 387.429970][ T8599] EXT4-fs (loop1): group descriptors corrupted! [ 387.861958][ T8602] IPVS: set_ctl: invalid protocol: 387 172.20.20.187:20001 [ 388.155747][ T8602] loop1: detected capacity change from 0 to 256 [ 388.171588][ T5862] IPVS: starting estimator thread 0... [ 388.178511][ T8602] exfat: Unknown parameter '0x0000200000001400' [ 388.414994][ T6792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 388.489371][ T8604] IPVS: using max 20 ests per chain, 48000 per kthread [ 388.732154][ T8611] netlink: 'syz.2.731': attribute type 11 has an invalid length. [ 388.758113][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 389.246781][ T8617] netlink: 168 bytes leftover after parsing attributes in process `syz.2.734'. [ 389.573116][ T8624] loop4: detected capacity change from 0 to 1024 [ 389.643725][ T8624] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 389.700340][ T8624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.823684][ T8624] ================================================================== [ 389.831835][ T8624] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 389.839718][ T8624] Read of size 18446744073709551588 at addr ffff88807c610840 by task syz.4.737/8624 [ 389.849129][ T8624] [ 389.851492][ T8624] CPU: 0 PID: 8624 Comm: syz.4.737 Not tainted syzkaller #0 [ 389.858811][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.868923][ T8624] Call Trace: [ 389.872241][ T8624] [ 389.875227][ T8624] dump_stack_lvl+0x16c/0x230 [ 389.879963][ T8624] ? read_lock_is_recursive+0x20/0x20 [ 389.885381][ T8624] ? show_regs_print_info+0x20/0x20 [ 389.890640][ T8624] ? load_image+0x3b0/0x3b0 [ 389.895187][ T8624] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 389.900616][ T8624] ? __virt_addr_valid+0x18c/0x540 [ 389.905777][ T8624] ? __virt_addr_valid+0x469/0x540 [ 389.910939][ T8624] print_report+0xac/0x220 [ 389.915401][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 389.920885][ T8624] kasan_report+0x117/0x150 [ 389.925428][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 389.930906][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 389.936400][ T8624] kasan_check_range+0x288/0x290 [ 389.941385][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 389.946909][ T8624] __asan_memmove+0x29/0x70 [ 389.951478][ T8624] ext4_xattr_set_entry+0x94b/0x1e90 [ 389.956831][ T8624] ext4_xattr_block_set+0xae3/0x32a0 [ 389.962186][ T8624] ? ext4_destroy_inode+0x200/0x200 [ 389.967442][ T8624] ? proc_nr_inodes+0x230/0x230 [ 389.972346][ T8624] ? do_raw_spin_unlock+0x121/0x230 [ 389.977606][ T8624] ? _raw_spin_unlock+0x28/0x40 [ 389.982513][ T8624] ? ext4_xattr_block_find+0x350/0x350 [ 389.988033][ T8624] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 389.993470][ T8624] ext4_xattr_set_handle+0xbff/0x1290 [ 389.998903][ T8624] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 390.004942][ T8624] ? __ext4_journal_start_sb+0x259/0x570 [ 390.010637][ T8624] ext4_xattr_set+0x22d/0x320 [ 390.015389][ T8624] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 390.020983][ T8624] ? evm_protected_xattr_common+0x170/0x190 [ 390.026931][ T8624] ? evm_protect_xattr+0x534/0x7a0 [ 390.032086][ T8624] ? ext4_xattr_security_get+0x40/0x40 [ 390.037603][ T8624] __vfs_setxattr+0x431/0x470 [ 390.042331][ T8624] __vfs_setxattr_noperm+0x12d/0x5e0 [ 390.047669][ T8624] vfs_setxattr+0x16c/0x2f0 [ 390.052224][ T8624] ? xattr_permission+0x470/0x470 [ 390.057298][ T8624] ? __mnt_want_write+0x223/0x2a0 [ 390.062376][ T8624] ? path_setxattr+0x314/0x550 [ 390.067196][ T8624] path_setxattr+0x362/0x550 [ 390.071838][ T8624] ? simple_xattrs_free+0x150/0x150 [ 390.077191][ T8624] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 390.083223][ T8624] ? lock_chain_count+0x20/0x20 [ 390.088133][ T8624] __x64_sys_setxattr+0xbb/0xd0 [ 390.093039][ T8624] do_syscall_64+0x55/0xb0 [ 390.097480][ T8624] ? clear_bhb_loop+0x40/0x90 [ 390.102180][ T8624] ? clear_bhb_loop+0x40/0x90 [ 390.106917][ T8624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.112868][ T8624] RIP: 0033:0x7fc26578f749 [ 390.117308][ T8624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.136939][ T8624] RSP: 002b:00007fc2665d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 390.145414][ T8624] RAX: ffffffffffffffda RBX: 00007fc2659e5fa0 RCX: 00007fc26578f749 [ 390.153532][ T8624] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 390.161553][ T8624] RBP: 00007fc265813f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.169576][ T8624] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 390.177591][ T8624] R13: 00007fc2659e6038 R14: 00007fc2659e5fa0 R15: 00007ffe1ccf8eb8 [ 390.185608][ T8624] [ 390.188640][ T8624] [ 390.190998][ T8624] Allocated by task 8624: [ 390.195344][ T8624] kasan_set_track+0x4e/0x70 [ 390.199951][ T8624] __kasan_kmalloc+0x8f/0xa0 [ 390.204557][ T8624] __kmalloc_node_track_caller+0xb2/0x230 [ 390.210299][ T8624] kmemdup+0x2b/0x70 [ 390.214222][ T8624] ext4_xattr_block_set+0x9e5/0x32a0 [ 390.219538][ T8624] ext4_xattr_set_handle+0xbff/0x1290 [ 390.224937][ T8624] ext4_xattr_set+0x22d/0x320 [ 390.229686][ T8624] __vfs_setxattr+0x431/0x470 [ 390.234386][ T8624] __vfs_setxattr_noperm+0x12d/0x5e0 [ 390.239710][ T8624] vfs_setxattr+0x16c/0x2f0 [ 390.244254][ T8624] path_setxattr+0x362/0x550 [ 390.248885][ T8624] __x64_sys_setxattr+0xbb/0xd0 [ 390.253785][ T8624] do_syscall_64+0x55/0xb0 [ 390.258242][ T8624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.264174][ T8624] [ 390.266526][ T8624] The buggy address belongs to the object at ffff88807c610800 [ 390.266526][ T8624] which belongs to the cache kmalloc-1k of size 1024 [ 390.280634][ T8624] The buggy address is located 64 bytes inside of [ 390.280634][ T8624] 1024-byte region [ffff88807c610800, ffff88807c610c00) [ 390.294036][ T8624] [ 390.296372][ T8624] The buggy address belongs to the physical page: [ 390.302800][ T8624] page:ffffea0001f18400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c610 [ 390.313055][ T8624] head:ffffea0001f18400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 390.322024][ T8624] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 390.330280][ T8624] page_type: 0xffffffff() [ 390.334652][ T8624] raw: 00fff00000000840 ffff888017841dc0 dead000000000100 dead000000000122 [ 390.343275][ T8624] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 390.351982][ T8624] page dumped because: kasan: bad access detected [ 390.358526][ T8624] page_owner tracks the page as allocated [ 390.364301][ T8624] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 59, tgid 59 (kworker/u4:4), ts 88750660214, free_ts 88668215178 [ 390.383376][ T8624] post_alloc_hook+0x1cd/0x210 [ 390.388269][ T8624] get_page_from_freelist+0x195c/0x19f0 [ 390.393873][ T8624] __alloc_pages+0x1e3/0x460 [ 390.398517][ T8624] alloc_slab_page+0x5d/0x170 [ 390.403260][ T8624] new_slab+0x87/0x2e0 [ 390.407382][ T8624] ___slab_alloc+0xc6d/0x1300 [ 390.412106][ T8624] __kmem_cache_alloc_node+0x1a2/0x260 [ 390.417623][ T8624] __kmalloc+0xa4/0x240 [ 390.421827][ T8624] ieee802_11_parse_elems_full+0xb9/0x2080 [ 390.427692][ T8624] ieee80211_ibss_rx_queued_mgmt+0x49b/0x2ac0 [ 390.433863][ T8624] ieee80211_iface_work+0x717/0xc70 [ 390.439092][ T8624] cfg80211_wiphy_work+0x225/0x260 [ 390.444266][ T8624] process_scheduled_works+0xa45/0x15b0 [ 390.449863][ T8624] worker_thread+0xa55/0xfc0 [ 390.454498][ T8624] kthread+0x2fa/0x390 [ 390.458621][ T8624] ret_from_fork+0x48/0x80 [ 390.463255][ T8624] page last free stack trace: [ 390.468134][ T8624] free_unref_page_prepare+0x7ce/0x8e0 [ 390.473625][ T8624] free_unref_page+0x32/0x2e0 [ 390.478356][ T8624] __slab_free+0x35e/0x410 [ 390.482827][ T8624] qlist_free_all+0x75/0xe0 [ 390.487373][ T8624] kasan_quarantine_reduce+0x143/0x160 [ 390.492976][ T8624] __kasan_slab_alloc+0x22/0x80 [ 390.497869][ T8624] slab_post_alloc_hook+0x6e/0x4d0 [ 390.503001][ T8624] __kmem_cache_alloc_node+0x13e/0x260 [ 390.508575][ T8624] kmalloc_trace+0x2a/0xe0 [ 390.513036][ T8624] ref_tracker_alloc+0x134/0x460 [ 390.518011][ T8624] netdev_queue_update_kobjects+0x191/0x480 [ 390.523961][ T8624] netdev_register_kobject+0x269/0x310 [ 390.529466][ T8624] register_netdevice+0x128f/0x1ae0 [ 390.534718][ T8624] cfg80211_register_netdevice+0x159/0x2f0 [ 390.540576][ T8624] ieee80211_if_add+0xa1b/0x14e0 [ 390.545572][ T8624] ieee80211_register_hw+0x2f10/0x3b10 [ 390.551092][ T8624] [ 390.553444][ T8624] Memory state around the buggy address: [ 390.559102][ T8624] ffff88807c610700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 390.567280][ T8624] ffff88807c610780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 390.575379][ T8624] >ffff88807c610800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.583477][ T8624] ^ [ 390.589669][ T8624] ffff88807c610880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.597861][ T8624] ffff88807c610900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.605958][ T8624] ================================================================== [ 391.046678][ T8624] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 391.053931][ T8624] CPU: 1 PID: 8624 Comm: syz.4.737 Not tainted syzkaller #0 [ 391.061305][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.071389][ T8624] Call Trace: [ 391.074683][ T8624] [ 391.077614][ T8624] dump_stack_lvl+0x16c/0x230 [ 391.082322][ T8624] ? show_regs_print_info+0x20/0x20 [ 391.087536][ T8624] ? load_image+0x3b0/0x3b0 [ 391.092047][ T8624] panic+0x2c0/0x710 [ 391.095946][ T8624] ? bpf_jit_dump+0xd0/0xd0 [ 391.100451][ T8624] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 391.106088][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 391.111555][ T8624] ? check_panic_on_warn+0x70/0xa0 [ 391.116669][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 391.122129][ T8624] check_panic_on_warn+0x84/0xa0 [ 391.127068][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 391.132530][ T8624] end_report+0x6f/0x140 [ 391.136777][ T8624] kasan_report+0x128/0x150 [ 391.141299][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 391.146777][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 391.152238][ T8624] kasan_check_range+0x288/0x290 [ 391.157178][ T8624] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 391.162667][ T8624] __asan_memmove+0x29/0x70 [ 391.167264][ T8624] ext4_xattr_set_entry+0x94b/0x1e90 [ 391.172564][ T8624] ext4_xattr_block_set+0xae3/0x32a0 [ 391.177869][ T8624] ? ext4_destroy_inode+0x200/0x200 [ 391.183081][ T8624] ? proc_nr_inodes+0x230/0x230 [ 391.187933][ T8624] ? do_raw_spin_unlock+0x121/0x230 [ 391.193223][ T8624] ? _raw_spin_unlock+0x28/0x40 [ 391.198168][ T8624] ? ext4_xattr_block_find+0x350/0x350 [ 391.203631][ T8624] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 391.209013][ T8624] ext4_xattr_set_handle+0xbff/0x1290 [ 391.214401][ T8624] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 391.220479][ T8624] ? __ext4_journal_start_sb+0x259/0x570 [ 391.226121][ T8624] ext4_xattr_set+0x22d/0x320 [ 391.230813][ T8624] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 391.236377][ T8624] ? evm_protected_xattr_common+0x170/0x190 [ 391.242297][ T8624] ? evm_protect_xattr+0x534/0x7a0 [ 391.247427][ T8624] ? ext4_xattr_security_get+0x40/0x40 [ 391.252904][ T8624] __vfs_setxattr+0x431/0x470 [ 391.257595][ T8624] __vfs_setxattr_noperm+0x12d/0x5e0 [ 391.262891][ T8624] vfs_setxattr+0x16c/0x2f0 [ 391.267406][ T8624] ? xattr_permission+0x470/0x470 [ 391.272431][ T8624] ? __mnt_want_write+0x223/0x2a0 [ 391.277466][ T8624] ? path_setxattr+0x314/0x550 [ 391.282261][ T8624] path_setxattr+0x362/0x550 [ 391.286863][ T8624] ? simple_xattrs_free+0x150/0x150 [ 391.292077][ T8624] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 391.298064][ T8624] ? lock_chain_count+0x20/0x20 [ 391.302919][ T8624] __x64_sys_setxattr+0xbb/0xd0 [ 391.307782][ T8624] do_syscall_64+0x55/0xb0 [ 391.312203][ T8624] ? clear_bhb_loop+0x40/0x90 [ 391.316886][ T8624] ? clear_bhb_loop+0x40/0x90 [ 391.321567][ T8624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.327467][ T8624] RIP: 0033:0x7fc26578f749 [ 391.331880][ T8624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.351672][ T8624] RSP: 002b:00007fc2665d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 391.360106][ T8624] RAX: ffffffffffffffda RBX: 00007fc2659e5fa0 RCX: 00007fc26578f749 [ 391.368083][ T8624] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 391.376057][ T8624] RBP: 00007fc265813f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.384028][ T8624] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 391.392023][ T8624] R13: 00007fc2659e6038 R14: 00007fc2659e5fa0 R15: 00007ffe1ccf8eb8 [ 391.400010][ T8624] [ 391.403452][ T8624] Kernel Offset: disabled [ 391.407783][ T8624] Rebooting in 86400 seconds..