last executing test programs: 16m35.211009092s ago: executing program 4 (id=284): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 16m35.03024978s ago: executing program 4 (id=285): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x80000001, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket(0x2, 0x80805, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) write(r5, &(0x7f0000000000)="d5", 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, 0x0, &(0x7f0000000040)) close(r2) 16m28.70500508s ago: executing program 4 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 16m25.179030885s ago: executing program 4 (id=308): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 16m23.971183039s ago: executing program 4 (id=309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200044e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000010000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f000000000000080000000000000001"], 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16m22.459252132s ago: executing program 4 (id=313): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 16m6.919879187s ago: executing program 32 (id=313): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 25.707228192s ago: executing program 3 (id=2197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) close(r2) 21.334531634s ago: executing program 1 (id=2203): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20.990236665s ago: executing program 2 (id=2205): ftruncate(0xffffffffffffffff, 0x80079a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) 18.471405495s ago: executing program 2 (id=2206): socket$key(0xf, 0x3, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f6870000", @ANYRES32, @ANYBLOB="0100000001"], 0x3c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0xf, 0x3, 0x0, 0x7, 0x0}) io_setup(0x5, &(0x7f0000000100)) write(r1, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fb", 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000) 18.339102089s ago: executing program 1 (id=2207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x4048001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") 15.210767068s ago: executing program 1 (id=2209): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r7, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.788032681s ago: executing program 0 (id=2211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20008040) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x90) 14.718775307s ago: executing program 2 (id=2212): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="010040000000000002034400", @ANYRES32=r1, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)=ANY=[@ANYBLOB="0815ffff", @ANYRES16=r3, @ANYBLOB="010028bd7010ffdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374009cff830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0xe0) sendmsg$inet6(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x1}], 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x492, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x62, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 13.156865171s ago: executing program 1 (id=2213): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 13.111076144s ago: executing program 3 (id=2214): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r1, 0x0, 0x58) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 12.198272235s ago: executing program 2 (id=2216): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0xa, @pix_mp={0x0, 0x0, 0xeb0468be, 0x9, 0x0, [{}, {0x0, 0x2}], 0x0, 0x0, 0x16, 0x1}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f0000000480)="fafc789d56568e963377e899e583954bc114d5b8721f50c6035d745c6cc91b4a677beb549c6ed7e5d51a96676679162e3d57546bcb645e56120a50e4c27ab32f744d67f16cbabf1259440dbfb511e1cedcb9680a0bf778e8904ce9546c7f8ce326a1e2be7730f28ecf388aa4f27261141de7729b86432065b277371ad4d2f90be8e95d5d11eb23491021541c169dff5c417e076b24bf434f08d224fe59f28adaacbce525a9684d5d3a873a8509bcb80b362decd5f9d7bef23a0c1df7a971832d51f93da6d013433adedf69bc", 0x8000, 0x10000}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1803000000ccc8efcb7b5f2712ec7a00"/25, @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="efe3fe7b3a76a83985ef2d9ce142db47d5f1592635874813b9bce1981ae915714f005a58f6675187bb002fc97f116c31c7ff845cd2c9e38f23fc9cd5433df8", 0x3f, 0x8005, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, r4, 0x0) 11.074284167s ago: executing program 3 (id=2219): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3c3, &(0x7f00000004c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_create(0x0, 0x0, 0x0) 10.905487976s ago: executing program 5 (id=2220): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10.860168014s ago: executing program 1 (id=2221): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 10.566819922s ago: executing program 2 (id=2222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x4048001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) 10.274566247s ago: executing program 6 (id=2223): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.34825549s ago: executing program 5 (id=2224): socket$key(0xf, 0x3, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f6870000", @ANYRES32, @ANYBLOB="0100000001"], 0x3c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0xf, 0x3, 0x0, 0x7, 0x0}) io_setup(0x5, &(0x7f0000000100)) write(r1, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fb", 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000) 7.644984826s ago: executing program 2 (id=2225): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000640), &(0x7f0000000680)=0x4) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r7, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000000)={0x0, 0x8, 0x4, "000000d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r4, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) 7.50652801s ago: executing program 6 (id=2226): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvfrom(r0, 0x0, 0x0, 0x102, 0x0, 0x0) 6.974668211s ago: executing program 1 (id=2227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) close(r2) 6.546522825s ago: executing program 5 (id=2228): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="010040000000000002034400", @ANYRES32=r1, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)=ANY=[@ANYBLOB="0815ffff", @ANYRES16=r3, @ANYBLOB="010028bd7010ffdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374009cff830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0xe0) sendmsg$inet6(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x1}], 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x492, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x62, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 6.324210035s ago: executing program 6 (id=2229): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.111017689s ago: executing program 0 (id=2230): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000240)}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x50) 4.746142961s ago: executing program 0 (id=2231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 4.663096977s ago: executing program 5 (id=2232): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) 3.93505148s ago: executing program 6 (id=2233): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB], 0x18}, 0x1, 0xf000000}, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) socket(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_IO_FLUSHER(0x3a) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a0000000900020054495043"], 0x7b}}, 0x8000) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x863, 0xa, 0x7, 0x3, 0x4, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getrlimit(0x7, &(0x7f0000000100)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_IE={0x59, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xae, 0xe7}}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x11, @random="3f7b5b3c36fee8d78627fe58d2bcf92d7d"}, @link_id={0x65, 0x12, {@random="8c8171a4e6ae", @device_a, @broadcast}}, @ssid={0x0, 0x19, @random="f6e42dc92ba51600fa850a76fb2194e42776118005eba8d53f"}, @chsw_timing={0x68, 0x4, {0x0, 0x1}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x45841}, 0x1) sendfile(r6, r3, 0x0, 0x10000a007) 3.779003386s ago: executing program 0 (id=2234): r0 = syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) openat(0xffffffffffffff9c, 0x0, 0x185342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.748846457s ago: executing program 3 (id=2235): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0xa, @pix_mp={0x0, 0x0, 0xeb0468be, 0x9, 0x0, [{}, {0x0, 0x2}], 0x0, 0x0, 0x16, 0x1}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f0000000480)="fafc789d56568e963377e899e583954bc114d5b8721f50c6035d745c6cc91b4a677beb549c6ed7e5d51a96676679162e3d57546bcb645e56120a50e4c27ab32f744d67f16cbabf1259440dbfb511e1cedcb9680a0bf778e8904ce9546c7f8ce326a1e2be7730f28ecf388aa4f27261141de7729b86432065b277371ad4d2f90be8e95d5d11eb23491021541c169dff5c417e076b24bf434f08d224fe59f28adaacbce525a9684d5d3a873a8509bcb80b362decd5f9d7bef23a0c1df7a971832d51f93da6d013433adedf69bc", 0x8000, 0x10000}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1803000000ccc8efcb7b5f2712ec7a00"/25, @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="efe3fe7b3a76a83985ef2d9ce142db47d5f1592635874813b9bce1981ae915714f005a58f6675187bb002fc97f116c31c7ff845cd2c9e38f23fc9cd5433df8", 0x3f, 0x8005, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, r4, 0x0) 3.286185125s ago: executing program 5 (id=2236): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.247264769s ago: executing program 0 (id=2237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.958886954s ago: executing program 3 (id=2238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.948786489s ago: executing program 6 (id=2239): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 376.811459ms ago: executing program 3 (id=2240): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0xf151}}, {@orlov}, {@nombcache}]}, 0x1, 0x476, &(0x7f0000000340)="$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") chdir(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_create_resource$binfmt(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xe3}]}}]}, 0x40}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 134.435608ms ago: executing program 0 (id=2241): socket$key(0xf, 0x3, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f6870000", @ANYRES32, @ANYBLOB="0100000001"], 0x3c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0xf, 0x3, 0x0, 0x7, 0x0}) io_setup(0x5, &(0x7f0000000100)) write(r1, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fb", 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000) 86.727543ms ago: executing program 6 (id=2242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20008040) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 5 (id=2243): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close(r4) fcntl$setsig(r3, 0xa, 0x21) munlockall() kernel console output (not intermixed with test programs): e descriptor's value: 3 [ 840.522576][ T6013] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 840.548844][ T6013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.599824][T11849] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 840.867080][ T6013] usb 4-1: GET_CAPABILITIES returned 0 [ 840.881831][ T6013] usbtmc 4-1:16.0: can't read capabilities [ 841.076319][ T6013] usb 4-1: USB disconnect, device number 26 [ 841.329467][T11863] loop1: detected capacity change from 0 to 64 [ 842.430156][ T5862] hfs: walked past end of dir [ 842.582131][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1461'. [ 844.911723][ T6013] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 845.291751][ T6013] usb 2-1: Using ep0 maxpacket: 16 [ 845.326416][ T6013] usb 2-1: config 0 has no interfaces? [ 845.424576][ T6013] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.498903][ T6013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.582790][ T6013] usb 2-1: Product: syz [ 845.621353][ T6013] usb 2-1: Manufacturer: syz [ 845.668494][ T6013] usb 2-1: SerialNumber: syz [ 845.725371][ T6013] usb 2-1: config 0 descriptor?? [ 846.586719][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1469'. [ 846.596056][T11907] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 846.603638][T11907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.723048][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 850.339217][ T5926] usb 2-1: USB disconnect, device number 12 [ 854.431765][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 854.431792][ T30] audit: type=1326 audit(1757136827.083:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 854.650091][ T30] audit: type=1326 audit(1757136827.083:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 854.775556][T11980] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 854.882967][ T30] audit: type=1326 audit(1757136827.083:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 855.105177][ T30] audit: type=1326 audit(1757136827.083:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 855.271867][ T30] audit: type=1326 audit(1757136827.083:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 855.422945][ T30] audit: type=1326 audit(1757136827.083:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 855.598416][ T30] audit: type=1326 audit(1757136827.083:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 855.822291][ T30] audit: type=1326 audit(1757136827.083:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 855.972035][T11984] loop2: detected capacity change from 0 to 7 [ 856.020779][ T30] audit: type=1326 audit(1757136827.083:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 856.046516][T11984] loop2: [POWERTEC] p1 p2 p3 [ 856.136391][T11984] loop2: p2 start 4294967287 is beyond EOD, truncated [ 856.172279][ T30] audit: type=1326 audit(1757136827.083:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 856.172332][T11984] loop2: p3 start 1932423285 is beyond EOD, truncated [ 857.737572][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 858.022051][ T90] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 858.194534][ T90] usb 7-1: config 0 interface 0 has no altsetting 0 [ 858.218070][ T90] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 858.246327][ T90] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.314040][ T90] usb 7-1: config 0 descriptor?? [ 859.544955][ T90] video4linux radio48: keene_cmd_set failed (-71) [ 859.551591][ T90] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 859.608188][ T90] usb 7-1: USB disconnect, device number 11 [ 863.969628][T12055] loop3: detected capacity change from 0 to 256 [ 863.976942][T12055] exfat: Unknown parameter '' [ 865.948308][T12067] loop8: detected capacity change from 0 to 7 [ 865.982270][T12067] Dev loop8: unable to read RDB block 7 [ 866.008400][T12067] loop8: unable to read partition table [ 866.062083][T12067] loop8: partition table beyond EOD, truncated [ 866.088588][T12067] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 867.237559][T12080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1518'. [ 867.374282][T12082] loop2: detected capacity change from 0 to 7 [ 867.402486][ T5848] Dev loop2: unable to read RDB block 7 [ 867.434379][ T5848] loop2: unable to read partition table [ 867.450840][ T5848] loop2: partition table beyond EOD, truncated [ 867.482337][T12082] Dev loop2: unable to read RDB block 7 [ 867.511943][T12082] loop2: unable to read partition table [ 867.548330][T12082] loop2: partition table beyond EOD, truncated [ 867.573315][T12082] loop_reread_partitions: partition scan of loop2 (þè– ) failed (rc=-5) [ 870.913886][T12110] loop8: detected capacity change from 0 to 7 [ 870.965576][T12110] Dev loop8: unable to read RDB block 7 [ 871.101728][T12110] loop8: unable to read partition table [ 871.153716][T12110] loop8: partition table beyond EOD, truncated [ 871.294530][T12110] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 871.985096][T12119] loop2: detected capacity change from 0 to 7 [ 872.529642][T12119] Dev loop2: unable to read RDB block 7 [ 872.762809][T12119] loop2: unable to read partition table [ 872.768699][T12119] loop2: partition table beyond EOD, truncated [ 872.769480][T12118] tipc: Enabled bearer , priority 0 [ 872.782445][T12119] loop_reread_partitions: partition scan of loop2 (þè– ) failed (rc=-5) [ 872.847571][T12124] syzkaller0: entered promiscuous mode [ 872.867432][T12128] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 872.881012][T12124] syzkaller0: entered allmulticast mode [ 873.249202][T12118] tipc: Resetting bearer [ 873.440336][T12114] tipc: Resetting bearer [ 873.446773][ T6013] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 873.619206][T12114] tipc: Disabling bearer [ 873.658086][ T6013] usb 3-1: config 47 has no interfaces? [ 873.711749][ T6013] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 873.735529][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.881729][ T6013] usb 3-1: Product: syz [ 873.886014][ T6013] usb 3-1: Manufacturer: syz [ 873.914146][ T6013] usb 3-1: SerialNumber: syz [ 876.330273][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 876.330298][ T30] audit: type=1326 audit(1757136849.183:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 876.437690][ T30] audit: type=1326 audit(1757136849.183:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 876.586410][ T30] audit: type=1326 audit(1757136849.183:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.041910][ T30] audit: type=1326 audit(1757136849.183:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.191696][ T30] audit: type=1326 audit(1757136849.183:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.349809][ T30] audit: type=1326 audit(1757136849.183:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.471492][ T30] audit: type=1326 audit(1757136849.183:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.564977][ T6013] usb 3-1: USB disconnect, device number 22 [ 877.673120][ T30] audit: type=1326 audit(1757136849.183:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.795084][ T30] audit: type=1326 audit(1757136849.183:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.869247][ T30] audit: type=1326 audit(1757136849.183:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12155 comm="syz.6.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 877.910125][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1548'. [ 879.698124][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.704796][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.471907][T12183] tipc: Started in network mode [ 880.600829][T12183] tipc: Node identity c24dd491818b, cluster identity 4711 [ 880.692666][T12183] tipc: Enabled bearer , priority 0 [ 880.762830][T12186] syzkaller0: entered promiscuous mode [ 880.768351][T12186] syzkaller0: entered allmulticast mode [ 880.924217][T12183] tipc: Resetting bearer [ 881.091974][T12182] tipc: Resetting bearer [ 881.123197][T12182] tipc: Disabling bearer [ 882.475407][T12210] loop5: detected capacity change from 0 to 256 [ 882.482833][T12210] exfat: Unknown parameter '' [ 884.027438][T12223] loop6: detected capacity change from 0 to 128 [ 884.377326][T12223] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 885.087034][T12223] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 885.152133][T12231] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 886.579910][T12236] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1564'. [ 886.651815][ T90] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 886.903717][ T7943] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 887.800385][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1567'. [ 887.956941][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1568'. [ 888.140732][T12254] usb usb8: usbfs: process 12254 (syz.2.1568) did not claim interface 0 before use [ 888.194991][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 888.195014][ T30] audit: type=1400 audit(1757136860.993:301): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=12248 comm="syz.2.1568" [ 888.658410][T12252] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1567'. [ 890.131140][ T30] audit: type=1326 audit(1757136862.983:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 890.621794][ T30] audit: type=1326 audit(1757136862.983:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 890.652259][ T30] audit: type=1326 audit(1757136863.133:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 890.705524][ T30] audit: type=1326 audit(1757136863.133:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 890.921715][ T30] audit: type=1326 audit(1757136863.133:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 891.063455][ T90] usb 1-1: unable to read config index 0 descriptor/all [ 891.118327][ T90] usb 1-1: can't read configurations, error -71 [ 891.128806][ T30] audit: type=1326 audit(1757136863.133:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 891.208129][T12268] loop6: detected capacity change from 0 to 256 [ 891.215244][T12268] exfat: Unknown parameter '' [ 891.415982][ T30] audit: type=1326 audit(1757136863.133:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 891.438989][ T30] audit: type=1326 audit(1757136863.133:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 892.251169][ T30] audit: type=1326 audit(1757136863.143:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 892.272506][T12272] loop8: detected capacity change from 0 to 7 [ 892.284751][T12272] Dev loop8: unable to read RDB block 7 [ 892.352322][T12272] loop8: unable to read partition table [ 892.423991][T12272] loop8: partition table beyond EOD, truncated [ 892.530193][T12272] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 896.474358][T12298] can0: slcan on ttyS3. [ 897.431853][T12298] can0 (unregistered): slcan off ttyS3. [ 897.437806][T12298] Falling back ldisc for ttyS3. [ 898.088994][T12306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 898.326047][T12314] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 899.578860][T12321] loop5: detected capacity change from 0 to 256 [ 899.585955][T12321] exfat: Unknown parameter '' [ 902.299263][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'. [ 902.380666][T12349] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 902.466293][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.951638][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 902.951663][ T30] audit: type=1326 audit(1757136875.793:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 903.275474][ T30] audit: type=1326 audit(1757136875.813:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 903.312064][T12340] loop3: detected capacity change from 0 to 8192 [ 903.466686][ T30] audit: type=1326 audit(1757136875.813:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 903.620098][ T30] audit: type=1326 audit(1757136875.813:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 903.780243][ T30] audit: type=1326 audit(1757136875.913:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 903.946994][ T30] audit: type=1326 audit(1757136875.913:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 904.321680][ T30] audit: type=1326 audit(1757136875.913:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 904.455913][ T30] audit: type=1326 audit(1757136876.003:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 904.700829][ T30] audit: type=1326 audit(1757136876.003:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 904.856617][ T30] audit: type=1326 audit(1757136876.003:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.2.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 905.941728][ T90] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 906.181765][ T90] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 906.189959][ T90] usb 4-1: config 0 has no interface number 0 [ 906.251924][ T90] usb 4-1: config 0 interface 29 has no altsetting 0 [ 906.338224][ T90] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 906.351718][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.408115][ T90] usb 4-1: Product: syz [ 906.491665][ T90] usb 4-1: Manufacturer: syz [ 906.506918][ T90] usb 4-1: SerialNumber: syz [ 906.544506][ T90] usb 4-1: config 0 descriptor?? [ 906.922126][ T90] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 907.382291][T12386] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 909.920812][T12408] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1606'. [ 910.009618][T12407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 910.112921][ T90] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 910.121391][ T90] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 910.733479][ T90] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 910.864029][ T90] usb 4-1: USB disconnect, device number 27 [ 911.270837][T12420] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 913.398111][T12423] kthread_run failed with err -4 [ 913.659816][T12439] can0: slcan on ttyS3. [ 914.560309][T12439] can0 (unregistered): slcan off ttyS3. [ 914.566294][T12439] Falling back ldisc for ttyS3. [ 914.930930][T12448] netlink: 868 bytes leftover after parsing attributes in process `syz.1.1616'. [ 916.808325][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 916.818663][T12464] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 917.005100][T12467] loop5: detected capacity change from 0 to 512 [ 917.024641][T12467] msdos: Bad value for 'time_offset' [ 918.585616][T12464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.258015][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1633'. [ 922.893568][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1633'. [ 925.046560][T12536] loop1: detected capacity change from 0 to 128 [ 925.113373][T12536] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 925.137052][T12533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 925.277841][T12536] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 925.330309][T12544] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 926.701975][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 926.736629][T12555] fuse: Unknown parameter 'user_i00000000000000000000' [ 926.751732][ T5926] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 927.020277][ T5926] usb 6-1: config 47 has no interfaces? [ 927.047795][T12559] loop8: detected capacity change from 0 to 8 [ 927.093963][T12559] Dev loop8: unable to read RDB block 8 [ 927.099569][T12559] loop8: unable to read partition table [ 927.162207][T12559] loop8: partition table beyond EOD, truncated [ 927.164570][ T5926] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 927.195394][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.202144][T12559] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 927.260406][T12565] tipc: Enabled bearer , priority 0 [ 927.267910][T12565] syzkaller0: entered promiscuous mode [ 927.273819][T12565] syzkaller0: entered allmulticast mode [ 927.285031][T12565] tipc: Resetting bearer [ 927.336253][T12563] tipc: Resetting bearer [ 927.352785][ T5926] usb 6-1: Product: syz [ 927.391781][ T5926] usb 6-1: Manufacturer: syz [ 927.396445][ T5926] usb 6-1: SerialNumber: syz [ 927.418157][T12563] tipc: Disabling bearer [ 927.481761][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 927.514908][T12568] loop2: detected capacity change from 0 to 764 [ 927.545597][T12568] iso9660: Unknown parameter 'À' [ 927.698822][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 927.844942][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 927.882974][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.921515][ T24] usb 7-1: Product: syz [ 927.937711][ T24] usb 7-1: Manufacturer: syz [ 927.955185][ T24] usb 7-1: SerialNumber: syz [ 930.173802][ T24] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 930.283458][ T24] usb 7-1: USB disconnect, device number 12 [ 930.322992][ T24] usblp0: removed [ 931.202193][T12597] loop1: detected capacity change from 0 to 128 [ 931.480418][T12597] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 931.559218][T12597] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 931.596253][ T5926] usb 6-1: USB disconnect, device number 19 [ 933.058285][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 933.711749][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 933.901825][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 933.901850][ T30] audit: type=1326 audit(1757136906.753:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 934.071097][ T30] audit: type=1326 audit(1757136906.753:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 934.116176][ T30] audit: type=1326 audit(1757136906.753:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 934.429400][ T30] audit: type=1326 audit(1757136906.753:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 934.685724][ T30] audit: type=1326 audit(1757136906.753:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 934.721718][ T30] audit: type=1326 audit(1757136906.753:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 934.744569][ T30] audit: type=1326 audit(1757136906.753:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 934.869340][ T30] audit: type=1326 audit(1757136906.753:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 935.108924][ T30] audit: type=1326 audit(1757136906.753:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 935.174959][T12633] tipc: Failed to remove unknown binding: 66,1,1/0:2186857805/2186857807 [ 935.183502][T12633] tipc: Failed to remove unknown binding: 66,1,1/0:2186857805/2186857807 [ 935.801660][ T30] audit: type=1326 audit(1757136906.833:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec35f8ebe9 code=0x7ffc0000 [ 938.016644][T12652] loop6: detected capacity change from 0 to 128 [ 938.145135][T12652] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 938.195788][T12656] tipc: Enabled bearer , priority 0 [ 938.199320][T12664] loop8: detected capacity change from 0 to 8 [ 938.211849][T12664] Dev loop8: unable to read RDB block 8 [ 938.217433][T12664] loop8: unable to read partition table [ 938.223476][T12664] loop8: partition table beyond EOD, truncated [ 938.235819][T12664] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 938.272041][T12652] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 938.328559][T12668] syzkaller0: entered promiscuous mode [ 938.360827][T12668] syzkaller0: entered allmulticast mode [ 938.403052][T12656] tipc: Resetting bearer [ 939.329288][ T7943] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 939.350119][T12653] tipc: Resetting bearer [ 939.602615][T12653] tipc: Disabling bearer [ 940.391080][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1681'. [ 940.459998][T12682] bridge_slave_1: left allmulticast mode [ 940.481683][T12682] bridge_slave_1: left promiscuous mode [ 940.487558][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.707799][T12682] bridge_slave_0: left allmulticast mode [ 940.724869][T12682] bridge_slave_0: left promiscuous mode [ 940.763314][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.136454][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.145148][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.320241][T12708] fuse: Bad value for 'fd' [ 942.411474][T12709] can0: slcan on ttyS3. [ 942.946778][T12710] can0 (unregistered): slcan off ttyS3. [ 942.966033][T12710] Falling back ldisc for ttyS3. [ 948.087506][T12753] loop6: detected capacity change from 0 to 128 [ 948.133968][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 948.346326][T12753] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 948.411772][T12753] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 949.435941][ T7943] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 949.672970][T12767] fuse: Bad value for 'fd' [ 949.945507][T12775] can0: slcan on ttyS3. [ 950.645089][T12777] can0 (unregistered): slcan off ttyS3. [ 950.674134][T12777] Falling back ldisc for ttyS3. [ 952.493901][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1711'. [ 953.356782][T12814] loop6: detected capacity change from 0 to 128 [ 953.516651][T12814] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 953.667931][T12814] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 955.015353][ T7943] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 955.755372][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'. [ 955.777050][T12828] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 955.813530][T12828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.512701][T12834] fuse: Bad value for 'fd' [ 956.794923][T12837] loop2: detected capacity change from 0 to 128 [ 957.060407][T12837] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 957.105747][T12837] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 957.185625][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 958.239524][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 958.248703][T12850] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 958.290397][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.647887][T12857] loop8: detected capacity change from 0 to 8 [ 959.674104][ T5848] Dev loop8: unable to read RDB block 8 [ 959.680031][ T5848] loop8: unable to read partition table [ 959.687130][ T5848] loop8: partition table beyond EOD, truncated [ 959.714327][T12857] Dev loop8: unable to read RDB block 8 [ 959.731979][T12857] loop8: unable to read partition table [ 959.762646][T12857] loop8: partition table beyond EOD, truncated [ 959.787448][T12857] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 959.872028][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'. [ 960.180389][T12866] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3804873482/3804873484 [ 960.190291][T12866] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3804873482/3804873484 [ 960.381228][ T5873] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 961.052665][T12886] fuse: Bad value for 'fd' [ 963.312098][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 963.410096][T12903] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 963.421699][T12903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.806656][T12908] tipc: Enabled bearer , priority 0 [ 963.814180][T12908] syzkaller0: entered promiscuous mode [ 963.851173][T12908] syzkaller0: entered allmulticast mode [ 963.936402][T12908] tipc: Resetting bearer [ 964.036872][T12907] tipc: Resetting bearer [ 964.227027][T12907] tipc: Disabling bearer [ 964.313300][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'. [ 964.359292][T12912] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 964.399711][T12912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.527112][T12916] loop8: detected capacity change from 0 to 8 [ 964.545604][T12916] Dev loop8: unable to read RDB block 8 [ 964.551202][T12916] loop8: unable to read partition table [ 964.565085][T12916] loop8: partition table beyond EOD, truncated [ 964.582580][T12916] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 964.622464][T12921] binder: 12915:12921 ioctl c0306201 0 returned -14 [ 965.474646][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'. [ 966.004900][T12945] fuse: Bad value for 'fd' [ 966.156614][T12947] can0: slcan on ttyS3. [ 966.541701][T12947] can0 (unregistered): slcan off ttyS3. [ 966.547992][T12947] Falling back ldisc for ttyS3. [ 967.030174][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1751'. [ 967.222369][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1751'. [ 968.334110][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 968.379516][T12972] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 968.419455][T12972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.744273][T12984] loop8: detected capacity change from 0 to 8 [ 968.913484][T12984] Dev loop8: unable to read RDB block 8 [ 968.935533][T12984] loop8: unable to read partition table [ 968.956786][T12984] loop8: partition table beyond EOD, truncated [ 968.996668][T12984] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 971.822810][T12993] tipc: Enabling of bearer rejected, failed to enable media [ 972.022980][T13024] fuse: Unknown parameter '0x0000000000000003' [ 972.182032][T13029] overlayfs: failed to resolve './file0/file0': -2 [ 973.232290][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 973.259094][T13048] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 973.317110][T13048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.841801][T12591] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 973.967163][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'. [ 974.711716][T12591] usb 6-1: Using ep0 maxpacket: 16 [ 974.986705][T12591] usb 6-1: config 0 has an invalid interface number: 94 but max is 0 [ 975.098608][T13060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1777'. [ 975.868675][T12591] usb 6-1: config 0 has no interface number 0 [ 975.993251][T12591] usb 6-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 976.027654][T12591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.077222][T12591] usb 6-1: Product: syz [ 976.106978][T12591] usb 6-1: Manufacturer: syz [ 976.126445][T12591] usb 6-1: SerialNumber: syz [ 976.189223][T12591] usb 6-1: config 0 descriptor?? [ 976.214669][T12591] usb 6-1: unsupported MDLM descriptors [ 976.522498][ T5934] usb 6-1: USB disconnect, device number 20 [ 976.837081][T13072] tipc: Enabling of bearer rejected, failed to enable media [ 978.541347][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 983.000190][T13132] loop8: detected capacity change from 0 to 8 [ 983.226430][T13132] Dev loop8: unable to read RDB block 8 [ 983.239180][T13132] loop8: unable to read partition table [ 983.247315][T13132] loop8: partition table beyond EOD, truncated [ 983.429800][T13132] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 983.772728][T13140] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2366206749/2366206751 [ 983.782139][T13140] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2366206749/2366206751 [ 983.873104][ T90] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 984.021458][T13145] tipc: Enabling of bearer rejected, failed to enable media [ 984.071646][ T90] usb 7-1: Using ep0 maxpacket: 16 [ 984.080123][ T90] usb 7-1: config 0 has an invalid interface number: 94 but max is 0 [ 984.088882][ T90] usb 7-1: config 0 has no interface number 0 [ 984.126740][ T90] usb 7-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 984.136568][ T90] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.194316][ T90] usb 7-1: Product: syz [ 984.231833][ T90] usb 7-1: Manufacturer: syz [ 984.266860][ T90] usb 7-1: SerialNumber: syz [ 984.420943][ T90] usb 7-1: config 0 descriptor?? [ 984.448448][ T90] usb 7-1: unsupported MDLM descriptors [ 985.088848][ T90] usb 7-1: USB disconnect, device number 13 [ 986.803365][T13170] loop3: detected capacity change from 0 to 128 [ 987.022600][T13170] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 987.127122][T13170] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 987.153417][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 987.190273][T13176] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 987.473095][T13176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.195465][ T5866] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 989.097914][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 990.099253][T13191] binder: 13185:13191 ioctl c0306201 0 returned -14 [ 990.410618][T13194] overlayfs: failed to resolve './file0/file0': -2 [ 990.828472][T13202] tipc: Enabling of bearer rejected, failed to enable media [ 991.422252][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1810'. [ 991.800325][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 991.800376][ T30] audit: type=1326 audit(1757136964.623:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13211 comm="syz.6.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 991.982166][ T30] audit: type=1326 audit(1757136964.623:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13211 comm="syz.6.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 993.720727][T13236] loop2: detected capacity change from 0 to 128 [ 993.869077][T13236] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 994.094498][T13236] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 994.505701][T13241] fuse: Unknown parameter '0x0000000000000003' [ 995.397509][ T5873] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 996.115869][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 997.521996][T12591] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 997.683455][T13259] loop8: detected capacity change from 0 to 8 [ 997.722036][T12591] usb 1-1: Using ep0 maxpacket: 16 [ 997.730491][T13259] Dev loop8: unable to read RDB block 8 [ 997.746450][T13259] loop8: unable to read partition table [ 997.762720][T13259] loop8: partition table beyond EOD, truncated [ 997.807656][T13259] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 997.807778][T12591] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 997.859614][T12591] usb 1-1: config 0 has no interface number 0 [ 997.929836][T12591] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 997.971241][T12591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.001977][T13269] tipc: Enabling of bearer rejected, failed to enable media [ 998.014932][T12591] usb 1-1: Product: syz [ 998.019277][T12591] usb 1-1: Manufacturer: syz [ 998.081475][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 998.240698][T12591] usb 1-1: SerialNumber: syz [ 998.326997][T12591] usb 1-1: config 0 descriptor?? [ 998.375235][T12591] usb 1-1: unsupported MDLM descriptors [ 998.471748][ T24] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 998.985660][T13293] loop6: detected capacity change from 0 to 16 [ 999.851227][T13293] erofs (device loop6): mounted with root inode @ nid 36. [ 999.898141][T13293] erofs (device loop6): corrupted dir block 0 @ nid 36 [ 1001.078520][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1825'. [ 1001.102302][T13287] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1001.110167][T13287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.659829][ T10] usb 1-1: USB disconnect, device number 25 [ 1001.746774][T13299] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.780743][T13299] binder: 13298:13299 ioctl 4018620d 200000004a80 returned -16 [ 1003.093265][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.102568][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.023264][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1831'. [ 1006.012344][ T24] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 1006.029623][ T24] usb 4-1: can't read configurations, error -110 [ 1006.281716][ T24] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1006.475021][T13328] loop6: detected capacity change from 0 to 128 [ 1006.639382][T13328] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1006.782761][T13328] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.206055][ T7943] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1008.734214][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1837'. [ 1009.197157][T13348] tipc: Enabling of bearer rejected, failed to enable media [ 1009.474700][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1837'. [ 1009.494166][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1009.683881][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1009.877651][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1010.068763][T13366] loop3: detected capacity change from 0 to 128 [ 1010.273261][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1010.287290][T13366] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1010.348696][T13366] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.735172][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1010.841829][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.901693][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1010.997084][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.353986][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 1011.380040][ T24] usbtmc 2-1:16.0: can't read capabilities [ 1011.593597][ T24] usb 2-1: USB disconnect, device number 13 [ 1011.819135][T13377] tipc: Enabled bearer , priority 0 [ 1011.863479][T13378] syzkaller0: entered promiscuous mode [ 1011.932153][T13378] syzkaller0: entered allmulticast mode [ 1012.033504][T13377] tipc: Resetting bearer [ 1012.174533][T13376] tipc: Resetting bearer [ 1012.417223][T13376] tipc: Disabling bearer [ 1012.471134][T13381] binder: BINDER_SET_CONTEXT_MGR already set [ 1012.554552][T13381] binder: 13380:13381 ioctl 4018620d 200000004a80 returned -16 [ 1014.408769][T13402] loop1: detected capacity change from 0 to 128 [ 1014.437748][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1849'. [ 1014.517589][T13402] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1014.627245][T13402] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.921834][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1015.755581][T13414] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1015.767778][T13414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.087395][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1016.206872][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1016.336129][T13425] loop2: detected capacity change from 0 to 256 [ 1016.343808][T13425] exfat: Unknown parameter '' [ 1016.565081][ T24] usb 6-1: no configurations [ 1016.570591][ T24] usb 6-1: can't read configurations, error -22 [ 1017.437173][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1017.558157][T13428] can0: slcan on ttyS3. [ 1017.830596][ T24] usb 6-1: no configurations [ 1017.835369][T13439] can0 (unregistered): slcan off ttyS3. [ 1017.852590][T13439] Falling back ldisc for ttyS3. [ 1017.953762][ T24] usb 6-1: can't read configurations, error -22 [ 1018.012183][ T24] usb usb6-port1: attempt power cycle [ 1018.168493][T13442] tipc: Enabled bearer , priority 0 [ 1018.205257][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'. [ 1018.284213][T13447] tipc: Resetting bearer [ 1018.292822][T13442] syzkaller0: entered promiscuous mode [ 1018.298520][T13442] syzkaller0: entered allmulticast mode [ 1018.395367][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1018.405064][T13441] tipc: Resetting bearer [ 1018.494217][ T24] usb 6-1: no configurations [ 1018.499017][ T24] usb 6-1: can't read configurations, error -22 [ 1018.590380][ T5866] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1018.625438][T13441] tipc: Disabling bearer [ 1018.653844][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1018.752558][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'. [ 1018.761434][ T24] usb 6-1: no configurations [ 1018.766424][ T24] usb 6-1: can't read configurations, error -22 [ 1018.810112][ T24] usb usb6-port1: unable to enumerate USB device [ 1018.821777][ T90] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1019.021747][ T90] usb 2-1: Using ep0 maxpacket: 16 [ 1019.060884][ T90] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 1019.099645][T13455] loop2: detected capacity change from 0 to 7 [ 1019.109458][ T90] usb 2-1: config 0 has no interface number 0 [ 1019.147396][ T90] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 1019.163833][T13455] Dev loop2: unable to read RDB block 7 [ 1019.172786][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.186533][T13455] loop2: unable to read partition table [ 1019.200851][ T90] usb 2-1: Product: syz [ 1019.205423][ T90] usb 2-1: Manufacturer: syz [ 1019.230697][T13455] loop2: partition table beyond EOD, truncated [ 1019.240556][ T90] usb 2-1: SerialNumber: syz [ 1019.278356][ T90] usb 2-1: config 0 descriptor?? [ 1019.284691][T13455] loop_reread_partitions: partition scan of loop2 (þè– ) failed (rc=-5) [ 1019.335948][ T90] usb 2-1: unsupported MDLM descriptors [ 1020.211706][ T5926] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1020.432562][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 1020.663257][ T5926] usb 4-1: config 0 has no interfaces? [ 1020.700852][ T5926] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1020.701218][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 1020.746855][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.161876][ T5926] usb 4-1: Product: syz [ 1021.193148][ T5926] usb 4-1: Manufacturer: syz [ 1021.215945][ T5926] usb 4-1: SerialNumber: syz [ 1021.256490][ T5926] usb 4-1: config 0 descriptor?? [ 1021.759511][T13486] binder: 13483:13486 ioctl c0306201 0 returned -14 [ 1022.215057][T13489] loop2: detected capacity change from 0 to 128 [ 1022.337235][T13489] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1022.424626][T13489] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.089749][ T5873] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1026.110124][T13507] loop5: detected capacity change from 0 to 128 [ 1026.361291][T13509] can0: slcan on ttyS3. [ 1026.761423][T13510] can0 (unregistered): slcan off ttyS3. [ 1026.822032][T13510] Falling back ldisc for ttyS3. [ 1026.833195][T13507] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1026.911084][T13507] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.297917][T13522] fuse: Unknown parameter 'fd0x0000000000000003' [ 1027.466382][T13524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1027.848114][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1027.972377][ T24] usb 4-1: USB disconnect, device number 30 [ 1028.060762][ T5926] usb 2-1: USB disconnect, device number 14 [ 1028.356762][T13534] loop8: detected capacity change from 0 to 8 [ 1028.732168][T13534] Dev loop8: unable to read RDB block 8 [ 1028.874243][T13534] loop8: unable to read partition table [ 1028.891203][T13534] loop8: partition table beyond EOD, truncated [ 1029.049593][T13534] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 1029.141982][ T90] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1029.317941][T13543] loop2: detected capacity change from 0 to 512 [ 1032.642911][T13543] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1881: casefold flag without casefold feature [ 1032.663132][T13543] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1881: couldn't read orphan inode 15 (err -117) [ 1032.677966][T13543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.058226][ T5873] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.185046][ T5877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1034.600540][T13553] loop2: detected capacity change from 0 to 128 [ 1035.118265][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1884'. [ 1036.163515][T13564] binder: 13557:13564 ioctl c0306201 0 returned -14 [ 1036.264684][ T90] usb 2-1: device descriptor read/all, error -110 [ 1036.471773][ T90] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1036.706940][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 1037.491918][ T90] usb 2-1: device descriptor read/64, error -32 [ 1037.794902][ T90] usb usb2-port1: attempt power cycle [ 1038.896519][ T30] audit: type=1326 audit(1757137011.753:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1038.902084][ T90] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1039.093429][ T30] audit: type=1326 audit(1757137011.753:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.116268][ T30] audit: type=1326 audit(1757137011.753:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.139113][ T30] audit: type=1326 audit(1757137011.753:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.171810][ T30] audit: type=1326 audit(1757137011.753:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.282684][ T90] usb 2-1: device descriptor read/8, error -71 [ 1039.387214][ T30] audit: type=1326 audit(1757137011.813:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.615555][ T30] audit: type=1326 audit(1757137011.813:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.782171][ T30] audit: type=1326 audit(1757137011.823:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.813003][ T30] audit: type=1326 audit(1757137011.823:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.836033][ T30] audit: type=1326 audit(1757137011.823:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.6.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1039.896360][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1040.251852][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1040.360427][ T24] usb 1-1: config 0 has no interfaces? [ 1040.409951][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.485661][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.546161][ T24] usb 1-1: Product: syz [ 1040.567434][ T24] usb 1-1: Manufacturer: syz [ 1040.612187][ T24] usb 1-1: SerialNumber: syz [ 1040.635089][ T24] usb 1-1: config 0 descriptor?? [ 1041.353877][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 1041.363436][T13600] bridge_slave_1: left allmulticast mode [ 1041.431112][T13600] bridge_slave_1: left promiscuous mode [ 1041.495741][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.556510][T13600] bridge_slave_0: left allmulticast mode [ 1041.603806][T13600] bridge_slave_0: left promiscuous mode [ 1041.650432][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.801606][T13607] loop6: detected capacity change from 0 to 512 [ 1044.673162][T13607] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1896: casefold flag without casefold feature [ 1044.693173][T13607] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1896: couldn't read orphan inode 15 (err -117) [ 1044.728132][T13607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.854738][T13617] loop3: detected capacity change from 0 to 128 [ 1045.878624][ T7943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.284139][T13617] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1047.774120][T13617] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.469471][T13632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1901'. [ 1048.555484][ T10] usb 1-1: USB disconnect, device number 26 [ 1048.906993][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1901'. [ 1049.563272][ T5866] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1050.744049][T13660] binder: 13656:13660 ioctl c0306201 0 returned -14 [ 1050.897841][ T5926] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1051.188853][ T5926] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1051.197474][ T5926] usb 4-1: config 0 has no interface number 0 [ 1051.211442][ T5926] usb 4-1: config 0 interface 29 has no altsetting 0 [ 1051.262118][ T5926] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1051.271812][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.279852][ T5926] usb 4-1: Product: syz [ 1051.351943][ T5926] usb 4-1: Manufacturer: syz [ 1051.366816][ T5926] usb 4-1: SerialNumber: syz [ 1051.393450][ T5926] usb 4-1: config 0 descriptor?? [ 1051.785997][ T5926] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1052.034071][T12591] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1052.262065][T12591] usb 2-1: Using ep0 maxpacket: 16 [ 1052.283399][T12591] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 1052.299169][T12591] usb 2-1: config 0 has no interface number 0 [ 1052.377726][T12591] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 1052.407321][T12591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.448886][T12591] usb 2-1: Product: syz [ 1052.471688][T12591] usb 2-1: Manufacturer: syz [ 1052.476349][T12591] usb 2-1: SerialNumber: syz [ 1052.582490][T12591] usb 2-1: config 0 descriptor?? [ 1052.613826][T12591] usb 2-1: unsupported MDLM descriptors [ 1056.025110][ T5926] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1056.091114][ T5926] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1056.413346][ T5926] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 1056.489577][ T5926] usb 4-1: USB disconnect, device number 31 [ 1056.516099][T13693] tipc: Enabling of bearer rejected, failed to enable media [ 1057.705477][ T10] usb 2-1: USB disconnect, device number 19 [ 1058.061769][ T5926] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1058.329053][ T5926] usb 4-1: config 0 has no interfaces? [ 1058.342702][ T5926] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1058.361755][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.369792][ T5926] usb 4-1: Product: syz [ 1058.438702][ T5926] usb 4-1: Manufacturer: syz [ 1058.469328][ T5926] usb 4-1: SerialNumber: syz [ 1058.496978][ T5926] usb 4-1: config 0 descriptor?? [ 1059.151748][ T5926] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1059.351607][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.431028][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1059.487662][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1059.555593][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.655419][ T5926] usb 3-1: config 0 descriptor?? [ 1059.959277][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1922'. [ 1060.075071][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 1060.106328][T13718] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 1060.147969][T13718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1060.989030][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1924'. [ 1061.298367][T13746] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1924'. [ 1061.830962][ T10] usb 4-1: USB disconnect, device number 32 [ 1062.347336][ T5926] usb 3-1: USB disconnect, device number 23 [ 1063.809130][T13764] loop1: detected capacity change from 0 to 512 [ 1063.831344][T13764] msdos: Bad value for 'time_offset' [ 1064.004475][T13761] binder: 13757:13761 ioctl 4018620d 0 returned -22 [ 1064.456033][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.462527][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.313663][T13774] tipc: Enabling of bearer rejected, failed to enable media [ 1067.103791][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 1068.327170][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1936'. [ 1071.242857][T13816] netlink: 828 bytes leftover after parsing attributes in process `syz.2.1940'. [ 1072.161421][T13819] loop6: detected capacity change from 0 to 40427 [ 1072.741909][T13819] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (769, 24) [ 1072.749809][T13819] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1072.764176][T13819] F2FS-fs (loop6): invalid crc value [ 1072.871443][T13819] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1073.077081][T13827] loop2: detected capacity change from 0 to 7 [ 1073.125048][T13501] Dev loop2: unable to read RDB block 7 [ 1073.252405][T13501] loop2: unable to read partition table [ 1073.258931][T13501] loop2: partition table beyond EOD, truncated [ 1073.273337][T13827] Dev loop2: unable to read RDB block 7 [ 1073.278945][T13827] loop2: unable to read partition table [ 1073.291232][T13827] loop2: partition table beyond EOD, truncated [ 1073.301868][T13827] loop_reread_partitions: partition scan of loop2 (þè– ) failed (rc=-5) [ 1073.310533][T13833] binder: 13831:13833 ioctl 4018620d 0 returned -22 [ 1073.456958][T13834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1074.553322][T13849] tipc: Enabling of bearer rejected, failed to enable media [ 1074.788864][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1074.788888][ T30] audit: type=1326 audit(1757137047.623:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1075.020492][ T30] audit: type=1326 audit(1757137047.623:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1075.224642][ T30] audit: type=1326 audit(1757137047.623:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1075.529204][ T30] audit: type=1326 audit(1757137047.623:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1075.641352][ T30] audit: type=1326 audit(1757137047.623:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1075.750891][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1949'. [ 1075.885132][ T30] audit: type=1326 audit(1757137047.633:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1076.546282][T13874] loop5: detected capacity change from 0 to 764 [ 1076.588648][ T30] audit: type=1326 audit(1757137047.633:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1076.616217][T13874] iso9660: Unknown parameter 'À' [ 1076.690961][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1949'. [ 1076.741676][ T30] audit: type=1326 audit(1757137047.633:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1076.982180][ T30] audit: type=1326 audit(1757137047.633:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1077.362970][ T30] audit: type=1326 audit(1757137047.633:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886658ebe9 code=0x7ffc0000 [ 1080.215100][T13895] loop2: detected capacity change from 0 to 40427 [ 1080.249563][T13895] F2FS-fs (loop2): build fault injection rate: 771 [ 1080.262343][T13895] F2FS-fs (loop2): invalid crc value [ 1080.355560][T13895] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1080.381793][T13895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1083.437242][ T5873] syz-executor: attempt to access beyond end of device [ 1083.437242][ T5873] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1083.567480][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1083.567522][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1083.567539][ T5873] Call Trace: [ 1083.567548][ T5873] [ 1083.567558][ T5873] dump_stack_lvl+0x16c/0x1f0 [ 1083.567615][ T5873] f2fs_handle_critical_error+0x624/0x9f0 [ 1083.567659][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.567696][ T5873] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1083.567735][ T5873] f2fs_write_end_io+0x958/0xcf0 [ 1083.567782][ T5873] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1083.567824][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.567865][ T5873] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1083.567902][ T5873] bio_endio+0x713/0x860 [ 1083.567957][ T5873] submit_bio_noacct+0x306/0x1ed0 [ 1083.568005][ T5873] __submit_merged_bio+0x33c/0x770 [ 1083.568048][ T5873] __submit_merged_write_cond+0x319/0x3f0 [ 1083.568118][ T5873] f2fs_write_cache_pages+0x2067/0x2570 [ 1083.568197][ T5873] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1083.568239][ T5873] ? arch_stack_walk+0x88/0x100 [ 1083.568282][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.568315][ T5873] ? __lock_acquire+0x62e/0x1ce0 [ 1083.568403][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.568435][ T5873] ? find_held_lock+0x2b/0x80 [ 1083.568497][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.568536][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.568575][ T5873] f2fs_write_data_pages+0x4ad/0xd90 [ 1083.568625][ T5873] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1083.568667][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.568708][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.568745][ T5873] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1083.568791][ T5873] do_writepages+0x27a/0x600 [ 1083.568838][ T5873] ? __pfx_do_writepages+0x10/0x10 [ 1083.568872][ T5873] ? do_raw_spin_unlock+0x172/0x230 [ 1083.568905][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.568937][ T5873] ? _raw_spin_unlock+0x28/0x50 [ 1083.568985][ T5873] filemap_fdatawrite_wbc+0x104/0x160 [ 1083.569030][ T5873] __filemap_fdatawrite_range+0xb9/0x100 [ 1083.569079][ T5873] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1083.569171][ T5873] ? find_held_lock+0x2b/0x80 [ 1083.569218][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.569262][ T5873] ? do_raw_spin_unlock+0x172/0x230 [ 1083.569294][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.569331][ T5873] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1083.569375][ T5873] block_operations+0x2b0/0xfe0 [ 1083.569400][ T5873] ? __pfx_stack_trace_save+0x10/0x10 [ 1083.569447][ T5873] ? __lock_acquire+0xb97/0x1ce0 [ 1083.569495][ T5873] ? __pfx_block_operations+0x10/0x10 [ 1083.569520][ T5873] ? kasan_save_stack+0x42/0x60 [ 1083.569608][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.569640][ T5873] ? down_write+0x14d/0x200 [ 1083.569667][ T5873] ? __pfx_down_write+0x10/0x10 [ 1083.569695][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.569728][ T5873] ? rcu_is_watching+0x12/0xc0 [ 1083.569771][ T5873] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1083.569803][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.569835][ T5873] ? kfree+0x2b4/0x4d0 [ 1083.569870][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.569902][ T5873] ? lockdep_hardirqs_on+0x7c/0x110 [ 1083.569948][ T5873] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1083.569979][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.570020][ T5873] kill_f2fs_super+0x3c2/0x470 [ 1083.570049][ T5873] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1083.570075][ T5873] ? lockdep_hardirqs_on+0x7c/0x110 [ 1083.570134][ T5873] deactivate_locked_super+0xc1/0x1a0 [ 1083.570184][ T5873] deactivate_super+0xde/0x100 [ 1083.570226][ T5873] cleanup_mnt+0x225/0x450 [ 1083.570278][ T5873] task_work_run+0x150/0x240 [ 1083.570325][ T5873] ? __pfx_task_work_run+0x10/0x10 [ 1083.570363][ T5873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.570400][ T5873] ? __pfx___x64_sys_umount+0x10/0x10 [ 1083.570435][ T5873] exit_to_user_mode_loop+0xeb/0x110 [ 1083.570468][ T5873] do_syscall_64+0x3f6/0x4c0 [ 1083.570496][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.570524][ T5873] RIP: 0033:0x7f3db2f8ff17 [ 1083.570546][ T5873] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1083.570573][ T5873] RSP: 002b:00007ffddd9071c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1083.570600][ T5873] RAX: 0000000000000000 RBX: 00007f3db3011c05 RCX: 00007f3db2f8ff17 [ 1083.570617][ T5873] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddd907280 [ 1083.570634][ T5873] RBP: 00007ffddd907280 R08: 0000000000000000 R09: 0000000000000000 [ 1083.570652][ T5873] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddd908310 [ 1083.570669][ T5873] R13: 00007f3db3011c05 R14: 0000000000108526 R15: 00007ffddd908350 [ 1083.570705][ T5873] [ 1084.061628][ T5873] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1084.303357][T13904] binder: 13903:13904 ioctl 4018620d 0 returned -22 [ 1085.500752][T13920] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1086.536958][T13921] tipc: Enabled bearer , priority 0 [ 1086.613407][T13923] syzkaller0: entered promiscuous mode [ 1086.618988][T13923] syzkaller0: entered allmulticast mode [ 1086.746117][T13924] tipc: Resetting bearer [ 1086.845874][T13918] tipc: Resetting bearer [ 1087.220952][T13918] tipc: Disabling bearer [ 1088.441736][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1088.681632][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1088.688877][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.699280][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1088.801660][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1088.801686][ T30] audit: type=1326 audit(1757137061.623:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1088.812825][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1088.918233][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.038252][T13948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1089.110497][ T30] audit: type=1326 audit(1757137061.623:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1089.133990][ T30] audit: type=1326 audit(1757137061.623:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1089.276061][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.294325][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.428883][ T30] audit: type=1326 audit(1757137061.623:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1089.618461][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 1089.628003][ T10] usbtmc 3-1:16.0: can't read capabilities [ 1089.644875][ T30] audit: type=1326 audit(1757137061.623:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1089.672011][ T30] audit: type=1326 audit(1757137061.623:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1089.821636][ T30] audit: type=1326 audit(1757137061.623:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1089.896651][ T10] usb 3-1: USB disconnect, device number 24 [ 1090.005534][ T30] audit: type=1326 audit(1757137061.623:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1090.161597][ T30] audit: type=1326 audit(1757137061.793:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1090.343495][ T30] audit: type=1326 audit(1757137061.793:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1094.757285][T13988] loop1: detected capacity change from 0 to 1024 [ 1094.859191][T13988] EXT4-fs: Ignoring removed nobh option [ 1095.109620][T13988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.661747][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1096.871845][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1096.894759][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1097.141780][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1097.161576][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1097.171776][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.231781][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1098.081667][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.490577][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 1098.531605][ T24] usbtmc 1-1:16.0: can't read capabilities [ 1098.794236][ T24] usb 1-1: USB disconnect, device number 27 [ 1099.004472][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.402914][T14017] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1100.591676][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1100.688726][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1100.688757][ T30] audit: type=1326 audit(1757137073.483:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1100.804407][ T30] audit: type=1326 audit(1757137073.483:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1101.126050][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 1101.213593][T14030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1101.421931][ T24] usb 7-1: config 47 has no interfaces? [ 1101.447473][ T24] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1101.501974][ T30] audit: type=1326 audit(1757137073.483:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1101.531877][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.593220][ T30] audit: type=1326 audit(1757137073.493:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1101.657120][ T30] audit: type=1326 audit(1757137073.493:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1101.740965][ T30] audit: type=1326 audit(1757137073.493:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1101.841919][ T24] usb 7-1: Product: syz [ 1101.881211][ T30] audit: type=1326 audit(1757137073.493:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1101.939973][ T30] audit: type=1326 audit(1757137073.493:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1102.061648][ T30] audit: type=1326 audit(1757137073.493:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1102.114028][ T30] audit: type=1326 audit(1757137073.493:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1198d8ebe9 code=0x7ffc0000 [ 1102.327632][ T24] usb 7-1: Manufacturer: syz [ 1102.614425][ T24] usb 7-1: SerialNumber: syz [ 1104.214361][T14056] netlink: 'syz.1.1997': attribute type 72 has an invalid length. [ 1104.222370][T14056] netlink: 'syz.1.1997': attribute type 8 has an invalid length. [ 1105.006147][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1105.159620][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1106.110350][T14063] loop1: detected capacity change from 0 to 40427 [ 1106.181702][T14063] F2FS-fs (loop1): build fault injection rate: 771 [ 1106.196781][T14063] F2FS-fs (loop1): invalid crc value [ 1106.289207][T14063] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1106.310555][T14063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1108.732583][ T24] usb 7-1: can't set config #47, error -110 [ 1109.455070][ T5862] syz-executor: attempt to access beyond end of device [ 1109.455070][ T5862] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1109.616637][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1109.616681][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1109.616698][ T5862] Call Trace: [ 1109.616708][ T5862] [ 1109.616719][ T5862] dump_stack_lvl+0x16c/0x1f0 [ 1109.616775][ T5862] f2fs_handle_critical_error+0x624/0x9f0 [ 1109.616819][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.616856][ T5862] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1109.616894][ T5862] f2fs_write_end_io+0x958/0xcf0 [ 1109.616941][ T5862] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1109.616985][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.617025][ T5862] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1109.617062][ T5862] bio_endio+0x713/0x860 [ 1109.617118][ T5862] submit_bio_noacct+0x306/0x1ed0 [ 1109.617167][ T5862] __submit_merged_bio+0x33c/0x770 [ 1109.617210][ T5862] __submit_merged_write_cond+0x319/0x3f0 [ 1109.617258][ T5862] f2fs_write_cache_pages+0x2067/0x2570 [ 1109.617326][ T5862] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1109.617380][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.617412][ T5862] ? __lock_acquire+0x62e/0x1ce0 [ 1109.617469][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.617501][ T5862] ? __lock_acquire+0x62e/0x1ce0 [ 1109.617575][ T5862] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1109.617647][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.617693][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.617746][ T5862] f2fs_write_data_pages+0x4ad/0xd90 [ 1109.617807][ T5862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1109.617849][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.617890][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.617927][ T5862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1109.617973][ T5862] do_writepages+0x27a/0x600 [ 1109.618017][ T5862] ? __pfx_do_writepages+0x10/0x10 [ 1109.618051][ T5862] ? do_raw_spin_unlock+0x172/0x230 [ 1109.618084][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.618118][ T5862] ? _raw_spin_unlock+0x28/0x50 [ 1109.618164][ T5862] filemap_fdatawrite_wbc+0x104/0x160 [ 1109.618208][ T5862] __filemap_fdatawrite_range+0xb9/0x100 [ 1109.618256][ T5862] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1109.618344][ T5862] ? find_held_lock+0x2b/0x80 [ 1109.618385][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.618418][ T5862] ? do_raw_spin_unlock+0x172/0x230 [ 1109.618449][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.618487][ T5862] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1109.618529][ T5862] block_operations+0x2b0/0xfe0 [ 1109.618554][ T5862] ? __pfx_stack_trace_save+0x10/0x10 [ 1109.618598][ T5862] ? __lock_acquire+0xb97/0x1ce0 [ 1109.618644][ T5862] ? __pfx_block_operations+0x10/0x10 [ 1109.618670][ T5862] ? kasan_save_stack+0x42/0x60 [ 1109.618756][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.618791][ T5862] ? down_write+0x14d/0x200 [ 1109.618830][ T5862] ? __pfx_down_write+0x10/0x10 [ 1109.618862][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.618894][ T5862] ? rcu_is_watching+0x12/0xc0 [ 1109.618940][ T5862] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1109.618973][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.619006][ T5862] ? kfree+0x2b4/0x4d0 [ 1109.619044][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.619076][ T5862] ? lockdep_hardirqs_on+0x7c/0x110 [ 1109.619124][ T5862] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1109.619155][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.619197][ T5862] kill_f2fs_super+0x3c2/0x470 [ 1109.619225][ T5862] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1109.619251][ T5862] ? lockdep_hardirqs_on+0x7c/0x110 [ 1109.619306][ T5862] deactivate_locked_super+0xc1/0x1a0 [ 1109.619355][ T5862] deactivate_super+0xde/0x100 [ 1109.619400][ T5862] cleanup_mnt+0x225/0x450 [ 1109.619451][ T5862] task_work_run+0x150/0x240 [ 1109.619486][ T5862] ? __pfx_task_work_run+0x10/0x10 [ 1109.619513][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.619548][ T5862] ? __pfx___x64_sys_umount+0x10/0x10 [ 1109.619583][ T5862] exit_to_user_mode_loop+0xeb/0x110 [ 1109.619616][ T5862] do_syscall_64+0x3f6/0x4c0 [ 1109.619643][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.619672][ T5862] RIP: 0033:0x7f3fc018ff17 [ 1109.619694][ T5862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1109.619722][ T5862] RSP: 002b:00007ffcc6233e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1109.619747][ T5862] RAX: 0000000000000000 RBX: 00007f3fc0211c05 RCX: 00007f3fc018ff17 [ 1109.619765][ T5862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc6233f50 [ 1109.619782][ T5862] RBP: 00007ffcc6233f50 R08: 0000000000000000 R09: 0000000000000000 [ 1109.619800][ T5862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc6234fe0 [ 1109.619818][ T5862] R13: 00007f3fc0211c05 R14: 000000000010e2f3 R15: 00007ffcc6235020 [ 1109.619853][ T5862] [ 1110.341947][ T5862] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1110.622211][ T10] usb 7-1: USB disconnect, device number 14 [ 1111.088523][T14077] loop6: detected capacity change from 0 to 1024 [ 1111.232503][T14077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1111.692096][ T7943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.887188][T14111] loop5: detected capacity change from 0 to 1024 [ 1116.895949][T14111] ext3: Unknown parameter 'nouser_xattr' [ 1120.016254][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1120.016275][ T30] audit: type=1326 audit(1757137092.843:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1120.247482][ T30] audit: type=1326 audit(1757137092.863:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1120.578668][ T30] audit: type=1326 audit(1757137092.933:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1120.805012][ T30] audit: type=1326 audit(1757137092.933:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1120.993595][ T30] audit: type=1326 audit(1757137092.933:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1121.021816][ T30] audit: type=1326 audit(1757137092.933:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1121.044747][ T30] audit: type=1326 audit(1757137092.933:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1121.072225][ T30] audit: type=1326 audit(1757137092.933:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1121.132216][ T30] audit: type=1326 audit(1757137092.933:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1121.220487][T14131] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1121.247935][ T30] audit: type=1326 audit(1757137092.933:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.2.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1121.404158][T14134] trusted_key: encrypted_key: key user:syz not found [ 1121.861669][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1122.068500][ T10] usb 6-1: config 47 has no interfaces? [ 1122.083236][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1122.361554][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.464563][ T10] usb 6-1: Product: syz [ 1122.468797][ T10] usb 6-1: Manufacturer: syz [ 1122.561749][ T10] usb 6-1: SerialNumber: syz [ 1125.456099][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.462693][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.541678][ T90] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1125.742150][ T90] usb 2-1: Using ep0 maxpacket: 16 [ 1125.773205][ T90] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1125.841226][ T90] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1125.900224][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.963553][ T90] usb 2-1: Product: syz [ 1125.967854][ T90] usb 2-1: Manufacturer: syz [ 1126.014403][ T10] usb 6-1: USB disconnect, device number 25 [ 1126.028066][ T90] usb 2-1: SerialNumber: syz [ 1126.057602][ T90] usb 2-1: config 0 descriptor?? [ 1126.127741][ T90] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1126.205932][ T90] usb 2-1: Detected FT232R [ 1126.326437][ T90] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1127.402340][T14161] loop5: detected capacity change from 0 to 8192 [ 1129.406292][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 1129.415965][T14163] bridge_slave_1: left allmulticast mode [ 1129.422819][T14163] bridge_slave_1: left promiscuous mode [ 1129.428991][T14163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.464690][T14163] bridge_slave_0: left allmulticast mode [ 1129.470433][T14163] bridge_slave_0: left promiscuous mode [ 1129.499792][T14163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.602936][ T90] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 1129.635487][ T90] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1129.822660][ T90] usb 2-1: USB disconnect, device number 20 [ 1129.843911][ T90] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1129.909270][ T90] ftdi_sio 2-1:0.0: device disconnected [ 1131.933136][T14198] loop1: detected capacity change from 0 to 2048 [ 1133.574407][T14198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.214752][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.345506][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1135.346602][ T30] audit: type=1326 audit(1757137108.193:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1135.566201][ T30] audit: type=1326 audit(1757137108.193:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1135.652847][ T30] audit: type=1326 audit(1757137108.193:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1135.868233][T14209] loop2: detected capacity change from 0 to 256 [ 1135.894357][ T30] audit: type=1326 audit(1757137108.193:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1135.938078][T14211] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1135.998328][T14209] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1136.041179][ T30] audit: type=1326 audit(1757137108.193:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1136.231650][ T30] audit: type=1326 audit(1757137108.193:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1136.474701][ T30] audit: type=1326 audit(1757137108.193:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1136.511937][ T90] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1136.741617][ T30] audit: type=1326 audit(1757137108.193:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1136.764847][ T30] audit: type=1326 audit(1757137108.193:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1136.981767][ T30] audit: type=1326 audit(1757137108.193:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcee6b8ebe9 code=0x7ffc0000 [ 1138.061683][ T90] usb 2-1: config 47 has no interfaces? [ 1138.209450][ T90] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1138.276568][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.330511][ T90] usb 2-1: Product: syz [ 1138.350780][ T90] usb 2-1: Manufacturer: syz [ 1138.394820][ T90] usb 2-1: SerialNumber: syz [ 1141.279341][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 1143.723209][T14252] 9pnet_fd: Insufficient options for proto=fd [ 1144.467337][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1144.475185][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1144.482839][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1144.648589][ T90] usb 2-1: USB disconnect, device number 21 [ 1145.317258][T14260] netlink: 892 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1147.181656][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1147.353686][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1147.371687][ T24] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 1147.420359][ T24] usb 3-1: config 0 has no interface number 0 [ 1147.606967][ T24] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 1147.622761][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.651183][ T24] usb 3-1: Product: syz [ 1147.676696][ T24] usb 3-1: Manufacturer: syz [ 1147.694960][ T24] usb 3-1: SerialNumber: syz [ 1147.743435][ T24] usb 3-1: config 0 descriptor?? [ 1147.817491][ T24] usb 3-1: unsupported MDLM descriptors [ 1148.282244][ T90] usb 3-1: USB disconnect, device number 25 [ 1149.377564][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2061'. [ 1149.627643][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1149.627671][ T30] audit: type=1326 audit(1757137122.483:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.050095][ T30] audit: type=1326 audit(1757137122.533:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.159991][ T30] audit: type=1326 audit(1757137122.533:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.328597][ T30] audit: type=1326 audit(1757137122.533:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.500688][ T30] audit: type=1326 audit(1757137122.533:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.578961][ T30] audit: type=1326 audit(1757137122.533:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.609935][T14309] loop6: detected capacity change from 0 to 256 [ 1150.702356][ T30] audit: type=1326 audit(1757137122.533:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.817224][ T30] audit: type=1326 audit(1757137122.533:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1150.961964][ T30] audit: type=1326 audit(1757137122.533:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1151.110248][ T30] audit: type=1326 audit(1757137122.533:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3db2f8ebe9 code=0x7ffc0000 [ 1151.731719][T14317] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1154.091285][T14321] loop5: detected capacity change from 0 to 512 [ 1154.112935][T14321] msdos: Bad value for 'time_offset' [ 1156.387425][T14332] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2071'. [ 1157.610524][T14339] dummy0: entered promiscuous mode [ 1157.620406][T14339] macsec1: entered promiscuous mode [ 1158.151963][T14339] dummy0: left promiscuous mode [ 1159.581631][ T90] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1159.972967][ T90] usb 6-1: Using ep0 maxpacket: 16 [ 1160.012177][ T90] usb 6-1: config 0 has an invalid interface number: 94 but max is 0 [ 1160.058218][ T90] usb 6-1: config 0 has no interface number 0 [ 1160.121991][ T90] usb 6-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 1160.138787][ T90] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.183578][ T90] usb 6-1: Product: syz [ 1160.222967][ T90] usb 6-1: Manufacturer: syz [ 1160.513282][ T90] usb 6-1: SerialNumber: syz [ 1160.654573][ T90] usb 6-1: config 0 descriptor?? [ 1160.670634][ T90] usb 6-1: unsupported MDLM descriptors [ 1160.911165][ T90] usb 6-1: USB disconnect, device number 26 [ 1161.646249][T14368] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2082'. [ 1161.664042][T14370] trusted_key: encrypted_key: key user:syz not found [ 1162.343619][T14374] loop2: detected capacity change from 0 to 512 [ 1163.502989][T14374] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2083: casefold flag without casefold feature [ 1163.630487][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2082'. [ 1163.687040][T14374] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.2083: couldn't read orphan inode 15 (err -117) [ 1163.739386][T14374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.571927][ T5845] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1165.827550][ T5873] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.841818][ T5845] usb 6-1: device descriptor read/64, error -71 [ 1165.890479][T14402] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2088'. [ 1165.901795][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 1166.111676][ T5845] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1166.280539][T14407] dummy0: entered promiscuous mode [ 1166.291944][ T5845] usb 6-1: device descriptor read/64, error -71 [ 1166.322136][T14407] macsec1: entered promiscuous mode [ 1166.390104][T14407] dummy0: left promiscuous mode [ 1166.502325][ T5845] usb usb6-port1: attempt power cycle [ 1166.891660][ T5845] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1166.932484][ T5845] usb 6-1: device descriptor read/8, error -71 [ 1167.171763][ T5845] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1167.629492][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 1167.947073][ T5845] usb 6-1: device descriptor read/8, error -71 [ 1168.101996][ T5845] usb usb6-port1: unable to enumerate USB device [ 1170.136701][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2099'. [ 1170.490873][T14439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2099'. [ 1171.058418][T14448] binder: 14443:14448 ioctl c0306201 0 returned -14 [ 1171.602575][T14458] trusted_key: encrypted_key: key user:syz not found [ 1172.654869][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 1173.826211][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2107'. [ 1175.054863][T14488] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1176.491697][T12591] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1176.942473][T12591] usb 7-1: config 47 has no interfaces? [ 1177.009321][T12591] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1177.044327][T12591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.090144][T12591] usb 7-1: Product: syz [ 1177.144776][T12591] usb 7-1: Manufacturer: syz [ 1177.179843][T14500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2115'. [ 1177.201538][T12591] usb 7-1: SerialNumber: syz [ 1177.577818][T14507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2115'. [ 1180.248884][T14522] dummy0: entered promiscuous mode [ 1180.268785][T14522] macsec1: entered promiscuous mode [ 1180.410699][T14522] dummy0: left promiscuous mode [ 1182.492980][ T90] usb 7-1: USB disconnect, device number 15 [ 1184.266978][T14546] binder: 14532:14546 ioctl c0306201 0 returned -14 [ 1185.713356][T14559] netlink: 'syz.6.2131': attribute type 16 has an invalid length. [ 1185.833205][T14562] trusted_key: encrypted_key: key user:syz not found [ 1185.950827][T14559] netlink: 'syz.6.2131': attribute type 27 has an invalid length. [ 1186.942094][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.948443][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.530922][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2133'. [ 1187.994870][T14580] loop6: detected capacity change from 0 to 4096 [ 1188.014265][T14580] EXT4-fs: Ignoring removed mblk_io_submit option [ 1188.850223][T14580] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1188.924994][T14580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.976972][T14579] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1189.013834][T14566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2133'. [ 1189.521313][ T7943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.827751][T14587] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2137'. [ 1189.837291][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 1190.253428][T14588] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1190.890826][T14596] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1191.081965][ T90] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1195.971593][T12591] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1196.165967][T12591] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 1196.174642][T12591] usb 7-1: config 0 has no interface number 0 [ 1196.180822][T12591] usb 7-1: config 0 interface 29 has no altsetting 0 [ 1196.510082][T12591] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1196.519733][T12591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.595189][T12591] usb 7-1: Product: syz [ 1196.630260][T14630] binder: 14627:14630 ioctl c0306201 0 returned -14 [ 1196.676572][T12591] usb 7-1: Manufacturer: syz [ 1196.701334][T12591] usb 7-1: SerialNumber: syz [ 1196.805840][T12591] usb 7-1: config 0 descriptor?? [ 1198.173304][ T90] usb 3-1: device descriptor read/all, error -110 [ 1200.479172][ T90] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1200.560393][T12591] peak_usb 7-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1200.618700][T12591] peak_usb 7-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1201.096057][T12591] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -71 [ 1202.016855][T14646] loop6: detected capacity change from 0 to 512 [ 1202.164482][T14646] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2156: casefold flag without casefold feature [ 1202.179824][T14646] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.2156: couldn't read orphan inode 15 (err -117) [ 1202.238201][T14646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.439203][T14646] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1203.111876][T12591] usb 7-1: USB disconnect, device number 16 [ 1204.681304][ T7943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.811890][ T5926] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1205.212597][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 1206.353585][ T5926] usb 6-1: config 0 has no interfaces? [ 1206.490173][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1206.499688][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.511566][ T5926] usb 6-1: Product: syz [ 1206.515774][ T5926] usb 6-1: Manufacturer: syz [ 1206.520401][ T5926] usb 6-1: SerialNumber: syz [ 1206.676694][ T5926] usb 6-1: config 0 descriptor?? [ 1206.725074][T14665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1207.446077][T14671] tipc: Failed to remove unknown binding: 66,1,1/0:4030695726/4030695728 [ 1207.468520][T14671] tipc: Failed to remove unknown binding: 66,1,1/0:4030695726/4030695728 [ 1208.110584][T14673] fuse: Bad value for 'fd' [ 1211.473757][T14690] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1212.678890][ T90] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1213.037436][ T90] usb 1-1: config 47 has no interfaces? [ 1213.083142][ T90] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1213.100716][ T90] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.132110][ T90] usb 1-1: Product: syz [ 1213.159856][ T90] usb 1-1: Manufacturer: syz [ 1213.211263][ T90] usb 1-1: SerialNumber: syz [ 1213.257378][ T10] usb 6-1: USB disconnect, device number 31 [ 1215.135843][T14713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1217.238968][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2179'. [ 1218.117855][T14741] loop5: detected capacity change from 0 to 512 [ 1220.834503][T14741] EXT4-fs: error -4 creating inode table initialization thread [ 1220.842954][T14741] EXT4-fs (loop5): mount failed [ 1221.322693][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2179'. [ 1221.911804][ T90] usb 1-1: USB disconnect, device number 28 [ 1223.302736][T14767] trusted_key: encrypted_key: key user:syz not found [ 1226.045200][T14782] binder: 14777:14782 ioctl c0306201 0 returned -14 [ 1228.614130][T14780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1228.901297][T14806] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1229.251654][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1230.912211][ T24] usb 1-1: config 47 has no interfaces? [ 1230.942342][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1230.971692][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.990345][ T24] usb 1-1: Product: syz [ 1231.010257][ T24] usb 1-1: Manufacturer: syz [ 1231.040583][ T24] usb 1-1: SerialNumber: syz [ 1231.377411][ T24] usb 1-1: USB disconnect, device number 29 [ 1233.788442][T14831] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2202'. [ 1235.582547][T14838] loop1: detected capacity change from 0 to 40427 [ 1235.622345][T14838] F2FS-fs (loop1): build fault injection rate: 771 [ 1235.633986][T14838] F2FS-fs (loop1): invalid crc value [ 1235.652014][T14839] trusted_key: encrypted_key: key user:syz not found [ 1235.761818][T14838] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1235.789925][T14838] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1239.598798][T14864] tipc: New replicast peer: 10.1.1.2 [ 1239.606897][T14864] tipc: Enabled bearer , priority 10 [ 1240.603559][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1240.652967][T14868] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1240.721756][T12591] tipc: Node number set to 1137104017 [ 1240.811844][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1240.940181][ T24] usb 1-1: config 0 has no interfaces? [ 1240.981392][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1241.133111][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.184504][ T24] usb 1-1: Product: syz [ 1241.189059][ T24] usb 1-1: Manufacturer: syz [ 1241.361274][ T24] usb 1-1: SerialNumber: syz [ 1241.386323][ T24] usb 1-1: config 0 descriptor?? [ 1242.026757][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2218'. [ 1243.419737][T14895] loop2: detected capacity change from 0 to 40427 [ 1243.428534][T14895] F2FS-fs (loop2): build fault injection rate: 771 [ 1243.437590][T14895] F2FS-fs (loop2): invalid crc value [ 1243.513617][T14895] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1243.555239][T14895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1246.062276][T14912] trusted_key: encrypted_key: key user:syz not found [ 1246.921818][ T5926] usb 1-1: USB disconnect, device number 30 [ 1247.432596][T14928] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2229'. [ 1248.338266][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.344851][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.702741][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2229'. [ 1249.401770][ T90] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1249.647584][ T90] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1249.669549][ T90] usb 3-1: config 0 has no interface number 0 [ 1249.699200][ T90] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1249.771751][ T90] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1249.781008][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.790995][ T90] usb 3-1: Product: syz [ 1249.811339][ T90] usb 3-1: Manufacturer: syz [ 1249.845824][ T90] usb 3-1: SerialNumber: syz [ 1249.872211][ T90] usb 3-1: config 0 descriptor?? [ 1250.398116][ T90] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1251.259798][T14954] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 1253.852916][T14978] trusted_key: encrypted_key: key user:syz not found [ 1358.881398][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1358.888408][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14970/1:b..l [ 1358.897478][ C0] rcu: (detected by 0, t=10502 jiffies, g=75289, q=41 ncpus=2) [ 1358.905121][ C0] task:syz.0.2241 state:R running task stack:26200 pid:14970 tgid:14969 ppid:5871 task_flags:0x400140 flags:0x00004000 [ 1358.919883][ C0] Call Trace: [ 1358.923167][ C0] [ 1358.926103][ C0] __schedule+0x1190/0x5de0 [ 1358.930649][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.936307][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1358.941323][ C0] ? __pfx___schedule+0x10/0x10 [ 1358.946205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.951868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.957524][ C0] ? page_table_check_set+0x631/0x750 [ 1358.962940][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1358.968349][ C0] preempt_schedule_common+0x44/0xc0 [ 1358.973677][ C0] preempt_schedule_thunk+0x16/0x30 [ 1358.978915][ C0] _raw_spin_unlock+0x3e/0x50 [ 1358.983622][ C0] do_wp_page+0x177b/0x4f00 [ 1358.988161][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1358.993027][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.998689][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1359.004084][ C0] ? ___pte_offset_map+0x2ad/0x4f0 [ 1359.009217][ C0] __handle_mm_fault+0x1b2d/0x2a50 [ 1359.014368][ C0] ? mt_find+0x3ef/0xa30 [ 1359.018630][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1359.024124][ C0] ? __pfx_mt_find+0x10/0x10 [ 1359.028765][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.034422][ C0] ? find_vma+0xbf/0x140 [ 1359.038676][ C0] ? __pfx_find_vma+0x10/0x10 [ 1359.043368][ C0] handle_mm_fault+0x589/0xd10 [ 1359.048161][ C0] ? trace_raw_output_exceptions+0x131/0x150 [ 1359.054191][ C0] do_user_addr_fault+0x7a6/0x1370 [ 1359.059366][ C0] ? rcu_is_watching+0x12/0xc0 [ 1359.064203][ C0] exc_page_fault+0x5c/0xb0 [ 1359.068753][ C0] asm_exc_page_fault+0x26/0x30 [ 1359.073624][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1359.079389][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 32 39 7e f5 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 0c 39 7e f5 90 90 90 90 90 90 90 90 90 90 [ 1359.099013][ C0] RSP: 0018:ffffc9000e2779f8 EFLAGS: 00050287 [ 1359.105097][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000000a030 [ 1359.113075][ C0] RDX: 0000000000080000 RSI: ffffffff89617f73 RDI: 0000000000000005 [ 1359.121054][ C0] RBP: ffffc9000e277d98 R08: 0000000000000005 R09: 0000000000000000 [ 1359.129028][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1359.137027][ C0] R13: 000020000000a000 R14: ffffc9000e277ddc R15: 0000000000000002 [ 1359.145026][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 1359.149991][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.155683][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 1359.160481][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1359.165803][ C0] ? kfree+0x24f/0x4d0 [ 1359.169908][ C0] ___sys_recvmsg+0x114/0x1a0 [ 1359.174624][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1359.179880][ C0] ? __pfx___might_resched+0x10/0x10 [ 1359.185204][ C0] do_recvmmsg+0x2fe/0x750 [ 1359.189662][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1359.194643][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.200296][ C0] ? do_futex+0x122/0x350 [ 1359.204692][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.210347][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.216004][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 1359.221068][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1359.226652][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.232336][ C0] do_syscall_64+0xcd/0x4c0 [ 1359.236856][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.242763][ C0] RIP: 0033:0x7f1198d8ebe9 [ 1359.247182][ C0] RSP: 002b:00007f1199c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1359.255609][ C0] RAX: ffffffffffffffda RBX: 00007f1198fc5fa0 RCX: 00007f1198d8ebe9 [ 1359.263582][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1359.271557][ C0] RBP: 00007f1198e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1359.279531][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1359.287507][ C0] R13: 00007f1198fc6038 R14: 00007f1198fc5fa0 R15: 00007ffe41d3fb38 [ 1359.295509][ C0] [ 1359.298537][ C0] rcu: rcu_preempt kthread starved for 10408 jiffies! g75289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1359.309747][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1359.319717][ C0] rcu: RCU grace-period kthread stack dump: [ 1359.325596][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1359.339225][ C0] Call Trace: [ 1359.342499][ C0] [ 1359.345433][ C0] __schedule+0x1190/0x5de0 [ 1359.350005][ C0] ? __pfx___schedule+0x10/0x10 [ 1359.354894][ C0] ? find_held_lock+0x2b/0x80 [ 1359.359598][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.365266][ C0] schedule+0xe7/0x3a0 [ 1359.369365][ C0] schedule_timeout+0x123/0x290 [ 1359.374240][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1359.379634][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1359.384953][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.390603][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1359.396442][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.402095][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1359.407596][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1359.412373][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.418024][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1359.423321][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1359.428563][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1359.433507][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1359.438375][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1359.444217][ C0] rcu_gp_kthread+0x270/0x380 [ 1359.448904][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1359.454108][ C0] ? rcu_is_watching+0x12/0xc0 [ 1359.458895][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1359.464133][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.469787][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.475440][ C0] ? __kthread_parkme+0x19e/0x250 [ 1359.480500][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1359.485707][ C0] kthread+0x3c5/0x780 [ 1359.489790][ C0] ? __pfx_kthread+0x10/0x10 [ 1359.494393][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.500043][ C0] ? rcu_is_watching+0x12/0xc0 [ 1359.504832][ C0] ? __pfx_kthread+0x10/0x10 [ 1359.509465][ C0] ret_from_fork+0x5d7/0x6f0 [ 1359.514063][ C0] ? __pfx_kthread+0x10/0x10 [ 1359.518664][ C0] ret_from_fork_asm+0x1a/0x30 [ 1359.523473][ C0] [ 1359.526499][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1359.532820][ C0] CPU: 0 UID: 0 PID: 14976 Comm: syz.3.2240 Not tainted syzkaller #0 PREEMPT(full) [ 1359.542201][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1359.552257][ C0] RIP: 0010:smp_call_function_many_cond+0xe02/0x1600 [ 1359.558969][ C0] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 35 00 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 1359.578587][ C0] RSP: 0018:ffffc9001cd9f298 EFLAGS: 00000246 [ 1359.584664][ C0] RAX: 0000000000000000 RBX: ffff8880b853ffc0 RCX: ffffc9000f274000 [ 1359.592639][ C0] RDX: 0000000000080000 RSI: ffffffff81af8d6b RDI: 0000000000000005 [ 1359.600615][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1359.608590][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1359.616563][ C0] R13: ffffed10170a7ff9 R14: 0000000000000001 R15: 0000000000000001 [ 1359.624537][ C0] FS: 00007fec36de16c0(0000) GS:ffff8881246b7000(0000) knlGS:0000000000000000 [ 1359.633475][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1359.640064][ C0] CR2: 0000200000b36030 CR3: 0000000064bbe000 CR4: 0000000000350ef0 [ 1359.648046][ C0] Call Trace: [ 1359.651327][ C0] [ 1359.654261][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1359.659666][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1359.664908][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1359.671276][ C0] ? lock_acquire+0x179/0x350 [ 1359.676002][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1359.681228][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1359.686627][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1359.691766][ C0] flush_tlb_mm_range+0x4a0/0x17a0 [ 1359.696909][ C0] ? page_table_check_clear+0x362/0x740 [ 1359.702545][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.708212][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 1359.714230][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1359.719814][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 1359.724778][ C0] ptep_clear_flush+0x136/0x180 [ 1359.729644][ C0] do_wp_page+0x1683/0x4f00 [ 1359.734179][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1359.739042][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.744703][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1359.750092][ C0] ? ___pte_offset_map+0x2ad/0x4f0 [ 1359.755222][ C0] __handle_mm_fault+0x1b2d/0x2a50 [ 1359.760369][ C0] ? mt_find+0x3ef/0xa30 [ 1359.764628][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1359.770107][ C0] ? __pfx_mt_find+0x10/0x10 [ 1359.774732][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.780457][ C0] ? find_vma+0xbf/0x140 [ 1359.784721][ C0] ? __pfx_find_vma+0x10/0x10 [ 1359.789414][ C0] handle_mm_fault+0x589/0xd10 [ 1359.794206][ C0] ? trace_raw_output_exceptions+0x131/0x150 [ 1359.800235][ C0] do_user_addr_fault+0x7a6/0x1370 [ 1359.805364][ C0] ? rcu_is_watching+0x12/0xc0 [ 1359.810160][ C0] exc_page_fault+0x5c/0xb0 [ 1359.814700][ C0] asm_exc_page_fault+0x26/0x30 [ 1359.819562][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1359.825354][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 32 39 7e f5 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 0c 39 7e f5 90 90 90 90 90 90 90 90 90 90 [ 1359.844974][ C0] RSP: 0018:ffffc9001cd9f9f8 EFLAGS: 00050246 [ 1359.851050][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000b36030 [ 1359.859022][ C0] RDX: 0000000000080000 RSI: ffffffff89617f73 RDI: 0000000000000005 [ 1359.866993][ C0] RBP: ffffc9001cd9fd98 R08: 0000000000000005 R09: 0000000000000000 [ 1359.874966][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1359.882936][ C0] R13: 0000200000b36000 R14: ffffc9001cd9fddc R15: 0000000000000002 [ 1359.890927][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 1359.895887][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.901540][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 1359.906336][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1359.911652][ C0] ? kfree+0x24f/0x4d0 [ 1359.915745][ C0] ? ___sys_recvmsg+0xed/0x1a0 [ 1359.920550][ C0] ___sys_recvmsg+0x114/0x1a0 [ 1359.925262][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1359.930518][ C0] ? __pfx___might_resched+0x10/0x10 [ 1359.935844][ C0] do_recvmmsg+0x2fe/0x750 [ 1359.940298][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1359.945269][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.950917][ C0] ? lock_acquire+0x179/0x350 [ 1359.955638][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.961289][ C0] ? do_futex+0x122/0x350 [ 1359.965678][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.971329][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.976993][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 1359.982056][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1359.987640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.993303][ C0] do_syscall_64+0xcd/0x4c0 [ 1359.997821][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.003725][ C0] RIP: 0033:0x7fec35f8ebe9 [ 1360.008145][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1360.027835][ C0] RSP: 002b:00007fec36de1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1360.036291][ C0] RAX: ffffffffffffffda RBX: 00007fec361c6090 RCX: 00007fec35f8ebe9 [ 1360.044277][ C0] RDX: 000000000400034f RSI: 0000200000000480 RDI: 0000000000000007 [ 1360.052253][ C0] RBP: 00007fec36011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1360.060228][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1360.068202][ C0] R13: 00007fec361c6128 R14: 00007fec361c6090 R15: 00007fff8a103518 [ 1360.076204][ C0] [ 1432.657431][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 172s! [ 1432.668133][ C0] Showing busy workqueues and worker pools: [ 1432.674097][ C0] workqueue events: flags=0x0 [ 1432.678867][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=12 refcnt=13 [ 1432.678947][ C0] pending: 3*psi_avgs_work, vmstat_shepherd, psi_avgs_work, 7*ovs_dp_masks_rebalance [ 1432.679128][ C0] workqueue events_unbound: flags=0x2 [ 1432.701852][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=9 refcnt=10 [ 1432.701932][ C0] pending: flush_memcg_stats_dwork, 4*macvlan_process_broadcast, crng_reseed, 3*macvlan_process_broadcast [ 1432.702100][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=8 refcnt=9 [ 1432.702161][ C0] pending: deferred_probe_work_func, 7*nsim_dev_trap_report_work [ 1432.702270][ C0] workqueue events_power_efficient: flags=0x80 [ 1432.741985][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 1432.742069][ C0] pending: wg_ratelimiter_gc_entries, 2*check_lifetime [ 1432.742191][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 1432.762426][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1432.762500][ C0] pending: kfree_rcu_monitor [ 1432.762580][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1432.779572][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1432.779650][ C0] pending: vmstat_update [ 1432.779732][ C0] workqueue usb_hub_wq: flags=0x4 [ 1432.796651][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1432.796726][ C0] in-flight: 90:hub_event hub_event [ 1432.796924][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 1432.815418][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 1432.815499][ C0] pending: addrconf_verify_work [ 1432.815571][ C0] workqueue krdsd: flags=0x6000a [ 1432.832579][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=9 [ 1432.832647][ C0] pending: rds_connect_worker [ 1432.832709][ C0] inactive: 5*rds_connect_worker [ 1432.832766][ C0] workqueue bat_events: flags=0x6000a [ 1432.855300][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=50 [ 1432.855369][ C0] in-flight: 1083:batadv_tt_purge [ 1432.855471][ C0] inactive: 5*batadv_tt_purge, 6*batadv_nc_worker, 6*batadv_mcast_mla_update, 12*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work [ 1432.856040][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1432.905910][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1432.905988][ C0] pending: wg_packet_handshake_send_worker [ 1432.906072][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1432.924162][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1432.924237][ C0] pending: 2*wg_packet_handshake_send_worker [ 1432.924327][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1432.942573][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1432.942645][ C0] pending: 2*wg_packet_handshake_send_worker [ 1432.942731][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1432.961177][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1432.961256][ C0] pending: wg_packet_encrypt_worker [ 1432.961330][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1432.979226][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1432.979302][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1432.979419][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1433.000961][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1433.001043][ C0] pending: wg_packet_encrypt_worker [ 1433.001110][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.018993][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.019072][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1433.019186][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1433.040721][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1433.040806][ C0] pending: wg_packet_encrypt_worker [ 1433.040876][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1433.058790][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.058874][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.058960][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1433.077197][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.077269][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.077354][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1433.095577][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.095647][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.095731][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.113953][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.114026][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.114107][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.132351][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.132431][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1433.132547][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1433.153803][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.153872][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.153952][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1433.172161][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.172231][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.172311][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.190480][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.190549][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.190639][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1433.208844][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.208918][ C0] pending: wg_queued_expired_zero_key_material [ 1433.208982][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1433.227357][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1433.227426][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1433.227532][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.248937][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.249004][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.249092][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=178s workers=4 idle: 10 5934 5845 [ 1433.249231][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=179s workers=13 idle: 13224 6604 4905 1151 59 36 13154 6188 6060 37 13294 12 [ 1433.249528][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: