last executing test programs: 6m57.732114829s ago: executing program 2 (id=317): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x9, 0x36314d4e, 0x2, @stepwise={0x2, 0x4, 0x101, 0x7, 0x10000, 0x8}}) 6m56.554198836s ago: executing program 2 (id=319): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x9, 0x36314d4e, 0x2, @stepwise={0x2, 0x4, 0x101, 0x7, 0x10000, 0x8}}) 6m55.401132903s ago: executing program 2 (id=323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020040edffffff000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69}, 0x94) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x8880, 0xa5) lseek(r5, 0x101, 0x1) getdents64(r5, 0x0, 0x4f) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x60d3, 0x5, r0}) 6m54.087927572s ago: executing program 2 (id=332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf53, &(0x7f0000000bc0)="$eJzs3U9sHNX9APA3a6/txCZeAz8w8COk0IpAwQ5JpKa3IFCPiEsPvYFCQiMMRQ0ciICYHhCVEEVCnFoOVFwolVKkIoEqVaintqdWvfWEeqFSlUqhPbRIiavY7+2fyQ67nqxn17ufj/T185s3O9/veP1nZjz7NgATq7b58ejR5SyEtz956+GXnsg+urLsjuYaBzY/ZrHXCCHU2/pZbnufxQWXLr54olubhcObH1M/PHKh+dj5EMJ6OBA+DY3wweraF++/89DBD1+du+mNs0+9vEO735TfDwAAGEfn/7j213v+/of7lr48v/94mG0uT8fnjdifj8f9h+KBcjperoXOftYW7WZy603FqOXWm8qtN53LM12Qr57bTr1gvZke+abalnXbTwAAANiN0nltI2S1lY5+rbaysnXef8VnizPZyjOn106dGVKhAAAAQGn/Prd5060QQgghhBADiH2tA82h1yKEEKI9NhaHefUBAAAAmET5+cKusj7YmbqaW2v0l//Cg7Xuj4cBqPr7/6vzzw05fxcTnv+9V/zGAQCgvHE9mkz7lY6j0zwG+XkEp3KP2+7xfy23nelt1lk0r+BumW+wqM7813VUFdW/3edxWIrqz8+HOaq61b/QZZ7OUVX09Z+tuI6yiurvcuVnJBXVv6fiOsoqqn9vxXWUVVT/fMV1lFVU/0LFdZRVVP91FddRVlH9+yquo6yi+nfLbbVF9TcqrqOsovqXKq6jrKL6r6+4jrKK6r+h4jrKqhWcAd9YeSXDcXts0/O4Pzee/o7Mdzmn2y3neAAAADDp/mv+PyGEEKI9tm6BGH4dQgghhNhufC/eCTvsOkY0zg338gMAAAAwAtLrAtKrJDaiND7VY3y6fXyutUIar/d4/EyP8dke4wAAAEAIv3nt1C1vZq357q51Prw0b9Se8NHlUGIeo/xsDNvNf63znl1r/t0ybxkAAACTJfvOp5fvffjd55a+PL//eNvZ7+V4vpvmAZ2O1wY+jv10X8BCrp+lc+jjnXlqBevlrw9cV7S9R69xRwEAAGCCpfP3RshqK23n3Y1Qq62stM7Hl0M9O3V67eSh2E/vz/L7xfrsleUPVFw3AAAA0L/W+X738//0Pr7LYSZbeeb02qkzW/2F5vJ6rf26wGJredZ+XaCRW364YPmR2E/v3/n9xT2by1dO/GDtiUHvPAAAAEyIMy+cferxtbWTP/TJrvskzXUwKvX4ZJw+GfIvJgAAYOA+//yt+vNHFn679fr/1vx3l+MnB2K/Eef2+1Ncnu4TSK8DuOr1+o915lksWu/ZzvUaufWmYszm6p5r207YnG+w83FLRfkanduZKcg3n8u3kMuXn6dgOrd+1mUuwdBlfsK03mJueX4exulmjlpHHSn/nV1yAQAAQLL63NPPrp554ez9p59+/MmTT5585sjhY98+duzQA996YHXzvv7V9rv7AQAAgN2oddPvsCsBAAAAAAAAAAAAAAAAAACAyVXF24kNex8BAABg0v3zXAhhXYiCSG8wOOw6xCjHxuzwa6g0fhYq/rmoOp8QQgghxi+c94n1EDY28u80DwAAALCzLl188UR7e5X1bKD5mltrbDWXY97ULtz/l6UrkVa78GDn9ZK9A62GSVf197/8o5p/tuv4e68MNv9caP3uC339/qt1buB4R29Pv3nvXv3FcjN/COHW6T7z5/f/0X4zdjqYy3936C//xru5/I919Gr95r8nl39vn/mv2v9n+83Y6d6Yfzn2D97Vb/7OXUzfpWk/+v0G+GZu/58I/ebP7X+jz4Q598X8ADCJmn/NN84Nt5ABS0cJ6Xh6PvbT/sbDzZC/+2G7x/+13Hamr7nyzu2m46CbY3+uWUdn3mS79aevy0JsrytZZ95U+Gxmm5saiqL6B/U87rSi+usV11FWUf274pvnK+rvfvY+eorqn6u4jrKK6u/7QsSQFdW/W64rF9U/X3EdZRXVv1BxHWUV1b/dv+PDUlT/vorrKKuo/sWK6yirqP6Sl9UqV1T/UsV1lFVU//UV11FWUf03VFxHWUX131hxHcNyW2yLzofT+ediHEv9Rq4/2+Vr2fc/QwAAAIAd9Y+RnAei7cpB5bkvjcD+CzH0yLKh/QyKIcS5nXiunx/+fo12+Bkbx5jzvIrdHP/Z2NL3Y2Z3tJ5/+XkSYvCxsbHjlxgYYTv7amYARpXf/5PN8z/ZPP+TzfPPV0n/ic9y/WSqNV7vNj7d4/H1HuMzufH89+tsj/EbctvdSNc1oxt7jP9f3IOi8X09Hn9zj/HlHuO39Bi/tcf4bT3GAQAAmAw3xdb5IQAAAIyvl3758eu/vvuxi0tfnt9/PMxcNe/8odifjf9bfy328/PeJ/X4P/8fxf7PY/u72P4tt777TwAAAGDnpfeJ8f9/AAAAGF/pfUqd/wMAAMD4Woqt838AAAAYX9fH1vk/AAAAjLFsrvvi2KbrAnfGtt95/QCA0ff/sb09tvtje0dsvxbbdBxwV2y/XlF9AMDg/PS7Pz72Ztaa7/9IbvxSXJ7aq6xvXSnIap0z+e+J7d7YfqPPevLvB9Bv/mRfn3l2Kv/iNeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZHbfPj0aPLWQhvf/LWwz+Zef3PV5bd0VzjwObHLPYaIYR683FptNX/VVzx0sUXT7S3l2ObhcMhC1lzeXjkQjPTfAhhPRwIn4ZG+GB17Yv333no4Ievzt30xtmnXt7BL0HH/gEAAMA4+l8AAAD//3j9GpA=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d8a6f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442d, &(0x7f000000f600)="$eJzs3c9PXNUeAPBzL/QV+to+6OuiL3mJk9hEo4ZAVypNpJSWQos11TbGzXSAaYsOTAODcdEF7pq4MnFhXDSauGPVsHBb/wQ3Luu6iS7cmJg0YmbmDnAvM2EkDNj6+Sx6uOc3fO89c2Zxe+JE5c7cUm5uKVdYyJVnbi2dyX1cLi3PF0O8T5qOf2j/xqep7mwAOnGfHPS990929fzFd2+cCeH72R+frK+vr4eq7tDU0Jaff/v13szWtCHOtKn227y3vfJBCOHktnlVdYUQ3v8uhCiEcC7JG03S3hDCsVAvu3Hvs5u5PZrNw8fFs/mnU/fXhk9Prj5Ya/27RyF8Vfrfa7fnf36xa/inV/ZoeAAAAAAAAAAAAAAAAAAAnnHj165ef2dwKDyKQvdqtP193fEkbfV+7PqeeaHzvywAAAAAAAAAAAAAAAAAAAD8TW2+/5+LTjR5/38sSUdatF9/q/NzpHMm3r46dmFwKDn/PdpW/nqS9cu5rtDf5Nz37Pnv5zLtm5//vn2c3WrMrzFuX4jigdR1HA8MhPBNcvD7qehIXCovVV69VV5emN2zaTyz0vGvn96fik5yoH+78R/N9N/58///u+1uql7f3Ltb7LmWjn9Xy3rffhq1Ff/zmXb7EX92Lx3/7lpe79YKI/UFoBr/z7t3jv9Ypv9Oxf94CCEXVeeaS60A1T1MNb/VfoW0dPwP1fJSS2fyh2z1/P+eif+FTP8Htf6vZD+IaCod/3/V8npSNTaf//545+f/Yqb/g4h/df4rPv/bko7/4Xpmd6pK7S/Z7vo/num/U/G/HifzPB6l7oDVqJ7f6v+rIy0d/55t5Zvf/+K29n+XMu336/tfY9zG97/G8v9yVP/+R3Pp+Pe2rNfu8z+Radfp9X+ktv9jt9LxP1LLS++d+5KkvfhPZvrvVPxru5KeRvw315M/Dtfzv7b/a0s6/v+uZ8Zba6zU/q3t/6Kd9/+XM/0fxP6vOv+VuLOjPi/S8T/asl41/j+08fl/JdOu8/EPYdBef9fS8T/Wsl7t+e/ZOf5TmXadjv9LnewcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BkwmqR9IYoHUtdxPDAQwvnk+lQ4Ek0XZvPTpfLMR0shjCX5uXAiul0qTxdK+bmF8mwxXyiVyjMhXEjKT4aeaKlUruTnC3cvbvTVG90pFhYr08VCJYQwnuT/Pxxr9DU9V5kv3A0hXNoo+09cXrx7p7CQn51bfHNwcHAwTGzMoT8qflIpLlTqo9dLQ5jcaNsXbZlcrfjyxlyORh+WlxcXCqVa/pUtbUrlmUJpS5uppOyL0B9VFpcXZgqVYr5Uvt0Y7yCNJOnYxLX3rl0Z2lZ+M6qno/s7LQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+okfDb3wZQuiuX8UhhJHGD1Gz+g8fF8/mn07dXxs+Pbn6YO1Jq3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpWOUBoIoDMBvxkLtPIbVstvZriiihSuCJ9BjeBg9ipfwDilSpE0RAskshM0ubJNU39c8mJ+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMM/Te/fxVjcRKa42lxF/X/+Lw/yl1J/78fsXZ5iR03l+7R4e66b8ezrK78rRss27dL36/oyR2vsd7Mlwn/b6PteTc03t29R8fd+bSLmKiLbktynnqpr3FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCWHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rKPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH4FAAD//xs8Hfs=") gettid() r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file1\x00', 0x20ff7ffffc) 6m50.643217454s ago: executing program 2 (id=345): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x9, 0x36314d4e, 0x2, @stepwise={0x2, 0x4, 0x101, 0x7, 0x10000, 0x8}}) 6m49.61070351s ago: executing program 2 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 6m34.386279096s ago: executing program 32 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4m14.71129362s ago: executing program 3 (id=915): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f7221d7743d303030303030303030302c70726976706f7274"]) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x1, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000180)={0x1a, 0x336, 0x0, 0x80, 0x0, 0x8, @broadcast}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d000a117ea60809000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f00000005c0)={0x18, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xe1, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x2, 0x3, 0x40, 0x9, 0xf, 0x0, 0x70bd2d, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffd, 0x0, @empty, 0xfffffffc}}]}, 0x78}, 0x1, 0x7}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', 0x20, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'exec '}}, {@uid_gt}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee00}}, {@obj_user}]}}, 0x1, 0x0, &(0x7f0000000380)="0a73aac416e2055bf308f24dccd92aca63288d8797eded57d8681eda64ba42a0887a9e655ca4990e18a83f46dd0019a69855906177d06438559b50f62819b10dfaa6e824ffd4ac6da8491f4e7968100791be86") ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000400)={@id={0x2, 0x0, @c}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563203a007e142d901405008f51686a1b04e58da1c2aa2dc7674423031ceeaadd809e2f197b5315feba4faea17a2cde2d8f4b4e86679be4feae2f90d85e4f868184ab71eb8b3b46e9eec8d1668a00d8e31a8620b4510514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa2838864c0e5cf4614347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf53ed800c6b74eddb7c102dbef194"], 0xb0) 4m13.635988496s ago: executing program 3 (id=918): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000080)={0x9, 0x36314d4e, 0x2, @stepwise={0x2, 0x4, 0x101, 0x7, 0x10000, 0x8}}) 4m12.714409502s ago: executing program 3 (id=922): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001200190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 4m12.537399233s ago: executing program 3 (id=924): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4m11.299874291s ago: executing program 3 (id=927): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000240), 0x4) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0x2, 0xd0f00) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x68, r10, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000100)) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) 4m9.87493982s ago: executing program 3 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffeff, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x0, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "6554eaf5b4d5a532fbed12d1366295e36b51ac50474cfdcb6b842cd11a1e15d864ac5d3f6609599b7a5d94c843ddde58f794a5b5ec533a521125c2ad55b6f52cbb71ed99a7817b4c33c1ed4c49ed1da10b09ed89f1a67fcd22d3c589d6146f15623ec312080fb78ecafea851a53b68196fa985f85d21881bab71a79d6c96cc836d80adf3a10922cf541be2ac8532386343d8374165bba3f0f1263229eb3691edd5a0a5b954b2fe710efee7bf3947adf4c4854b32cd7b1919c3a055d104a7158bb9e0c7827973b15b529a630fe9dd"}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "2beac925f2882b7bec7c7f4ae24e863a4840426bf7994f98a44a63c4c8f558e8e7b42cc7e5403f543b6835d4ddc4b400c973f3ece7b12a462c989612138b0b2f8c231519c0dcfdb128499808e8231fddb4bdb563590753bd67b5af0428614d14b436afb5c53077032fe7301fcd48732eb3b5b0625d3cee2c02891918953580b725da07067d771b8cb9d36b9a149f04d9f43038e8b6f39fc3b03a33e8d1953737146c04059bb5488c641d09"}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) sendto$unix(r1, &(0x7f0000000080)="f9bb33e6b5e7d10f59364c04d1332006acf769fa6e71657e5b2d928430ca14e3b3d1c9765c", 0x25, 0x20000000, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3m55.394909062s ago: executing program 33 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffeff, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x0, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "6554eaf5b4d5a532fbed12d1366295e36b51ac50474cfdcb6b842cd11a1e15d864ac5d3f6609599b7a5d94c843ddde58f794a5b5ec533a521125c2ad55b6f52cbb71ed99a7817b4c33c1ed4c49ed1da10b09ed89f1a67fcd22d3c589d6146f15623ec312080fb78ecafea851a53b68196fa985f85d21881bab71a79d6c96cc836d80adf3a10922cf541be2ac8532386343d8374165bba3f0f1263229eb3691edd5a0a5b954b2fe710efee7bf3947adf4c4854b32cd7b1919c3a055d104a7158bb9e0c7827973b15b529a630fe9dd"}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "2beac925f2882b7bec7c7f4ae24e863a4840426bf7994f98a44a63c4c8f558e8e7b42cc7e5403f543b6835d4ddc4b400c973f3ece7b12a462c989612138b0b2f8c231519c0dcfdb128499808e8231fddb4bdb563590753bd67b5af0428614d14b436afb5c53077032fe7301fcd48732eb3b5b0625d3cee2c02891918953580b725da07067d771b8cb9d36b9a149f04d9f43038e8b6f39fc3b03a33e8d1953737146c04059bb5488c641d09"}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) sendto$unix(r1, &(0x7f0000000080)="f9bb33e6b5e7d10f59364c04d1332006acf769fa6e71657e5b2d928430ca14e3b3d1c9765c", 0x25, 0x20000000, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3m19.965290146s ago: executing program 6 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x2c}}, 0x0) 3m19.876203086s ago: executing program 6 (id=1151): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c2d94f90324fc602f1a04000a740100053582c137153e370248018000", 0x29}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m19.696928527s ago: executing program 6 (id=1154): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000080)={0x9, 0x36314d4e, 0x2, @stepwise={0x2, 0x4, 0x101, 0x7, 0x10000, 0x8}}) 3m15.992478921s ago: executing program 6 (id=1167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@user_xattr}, {@noacl}, {@grpjquota}]}, 0x1, 0x3ce, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH7UpjUbQVD0EvFgpJif1lbxYE5e9KR48bQk6Q9ME2lWsCVCBc8FQdCrR/8A8dKDgtW/wKtHkUKQJN5XZndmMybZtJtuHNl8PvDIe/M2+97MY2bfPN57AZxakxHxVkQMRcRsRNTy42ke4k47ZJ/b3d5cykISzeZ7fyWRRMTO9uZS8V1J/vdc/gVTaUT6RRLPH1Luxq3bH9VXV1du5umZxo2PZzZu3X7l+o361ZWrK2sLC/Pzly/OXnrtct/O9evNdz/84fe3d765M/5Mfbl2N6vv+TyvfB79MhmTnWuy3+v9LqxiT5TiyXCFFQEA4Ehp3vcfbvX/azEUe523Wtz9udLKAQAAAH3RbBZ/AQAAgMGVePcHAACAAVfMA9jZ3lwqQoXTEfiPbS1GxES7/Yv13e2c4c6a3pF963v7aTIi/p76/uUsxAmtwwYAAAA4zX5cbG/8d3D8L41nS587GxFjxd5+fTS5L31w/Cd90OciKdlajHiztLfjbqn9cxNDeerJ1lDhSHLl+urKbESMR8RUjJzJ0nNHlDH+xh/3uuWVx/+ykJVfjAXm9XgwfObf/7Ncb9Qf55zZs/V5xHPDh7V/0hnzLe+TeRyfXfvyWre8h7c/J6n5bcRLh97/ezuXJkfvzzrTeh7MFE+Fg9bu3X+hW/nav1rZ/T92dPtPJOX9ejd6L+OD++d/65Z33Of/aPJ+q4Kj+bFP643GzbmI0eSdg8fne6/zoCquR3G9svafevHw3/+i/5fkv/3jpf2he/HTL7uXuuW5/6uVtf9yT/d/75GLv353oVv5j3b/v9qqzFR+RP/v4R61gaquJwAAAAAAAAD9kbbm9iXpdCeeptPT7Xm+T8dYurq+0bhwZf2TteX2HMCJGEmLmV610nzQufYy8k56fl96ISKeioivamdb6eml9dXlqk8eAAAATolzXd7/M38eZ7EHAAAA8P80UXUFAAAAgBPn/R8AAAAG2uPs6y8iIjKokaqfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn2z8BAAD//yly2dE=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x140, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r2) inotify_add_watch(r5, &(0x7f00000001c0)='./file0\x00', 0x10000103) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00'}, 0x94) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x86a0}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m14.963959957s ago: executing program 6 (id=1170): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x9aa9b000) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) keyctl$KEYCTL_CAPABILITIES(0x1f, 0xfffffffffffffffc, 0xfffffffffffffd8a) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x44, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x24048042) sendto$netrom(r0, 0x0, 0x0, 0x50, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp850,dmask=00000000000000000000777,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30300000000000000040303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030372c6572726f72733d72476d6f756e742d726f2c6e616d65636173653d312c706c6c6f775f7574696d653d30303030323030303030303030303015303134373037302c00904f5ef6c3660c06b4d7d3172ed33955a22d96c6b58d48d25609fc8fd957db7f4cfb97e98333158a7878aa16963be19155c4a0068007e41cc520b790c6292f5e20dbf5725a2a02670903b3d75dfbb2030d8cdef5210ed5485e27f1d33f67e2d90248d081d098053c"], 0x1, 0x1528, &(0x7f00000037c0)="$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") futex(&(0x7f0000000000), 0x80, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)=0x1, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0x54) getdents64(r5, &(0x7f0000000200)=""/240, 0xf0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r6, &(0x7f00000037c0)={0x2020}, 0x2020) 3m13.363751557s ago: executing program 6 (id=1178): r0 = msgget$private(0x0, 0x624) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) r2 = accept$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000280)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x228, 0x20a, 0x278, 0x228, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0x7f000080], [0x0, 0xffffffff, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x3}}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x6, 0xe, 0x7, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffed9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x151d40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000040000000830000c0"]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) mq_notify(r6, &(0x7f0000000080)={0x0, 0x41, 0x1, @tid=0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000d40)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000580)="ee1f870660f455a949758b6ff8f1733250b6ce4974e3be024d9210349e3db0d45742a7ef283236ec3f0b6924e0bf75abbbeb348e354aa4a47c8aff8a492f72986bf330ea98abbabdabe42d2b905ec7c9925ac7c19e48808190e010ca0cc244dfe2e0cf1041ef37c3e27a8eafadbce8fa6cd7b9eaa447aab5c5c90eaac80e9494a2886df99155b5b60050a8a8ec8ea9185de0b52cab9d65826cb665324bb2112b88f6abb0414b60356d06d45ffbabe3df1a166c45afe2d1e85a75bdb8ae8a0407712e5e9ce2552a73c9d68baa20f1f859b3f3722f9f159919147c71ba66011b90c0015ae94e4f66bb", 0xe8}], 0x1, &(0x7f0000003340)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x8000) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="550000007d01000000fcffffffffffffff200200000003000000000000000000210202000000000000000000000000000000090072656973657266730009006370752e7374617463000009002f6465762f6b767600"], 0x55) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1291c1) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4a27, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r7, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/65, 0x41}, 0x7}], 0x1, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18810000000000000000008c97ac850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000001000000700000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_generic(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000002240)={0x31e4, 0x2d, 0x400, 0x70bd25, 0x766, {0x2}, [@nested={0x154, 0x8, 0x0, 0x1, [@generic="ada2cd2a34a546118fcbb7b67fbffc497bb818f911348e8c5a7b7ed0448ad81c220a35d28d53786de2ec923931da84728374cf718889d90759291944da31b209032deeb0595397e5fbe6dc4b7f015ce9378f3e6a05fe2007fd123f1e85acb4"]}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0xb}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x4}, @nested={0x2014, 0x6}, @typed={0x1004, 0xf2, 0x0, 0x0, @binary="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"}, @generic="49d18d5437478fcde72c0bfe9db2fbfa360f32d2570cd2fae07aa9c219707e27b5ae32a13096b97de24c604422b63554a30d038e7cc87edfb0b9f103453aa9d41403cad7812806984c9d8e17e8d1"]}, 0x31e4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r9}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80082, 0x0) msgrcv(r0, 0x0, 0x0, 0xd9481726d31966ee, 0x0) 3m12.590874432s ago: executing program 34 (id=1178): r0 = msgget$private(0x0, 0x624) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) r2 = accept$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000280)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x228, 0x20a, 0x278, 0x228, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0x7f000080], [0x0, 0xffffffff, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x3}}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x6, 0xe, 0x7, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffed9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x151d40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000040000000830000c0"]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) mq_notify(r6, &(0x7f0000000080)={0x0, 0x41, 0x1, @tid=0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000d40)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000580)="ee1f870660f455a949758b6ff8f1733250b6ce4974e3be024d9210349e3db0d45742a7ef283236ec3f0b6924e0bf75abbbeb348e354aa4a47c8aff8a492f72986bf330ea98abbabdabe42d2b905ec7c9925ac7c19e48808190e010ca0cc244dfe2e0cf1041ef37c3e27a8eafadbce8fa6cd7b9eaa447aab5c5c90eaac80e9494a2886df99155b5b60050a8a8ec8ea9185de0b52cab9d65826cb665324bb2112b88f6abb0414b60356d06d45ffbabe3df1a166c45afe2d1e85a75bdb8ae8a0407712e5e9ce2552a73c9d68baa20f1f859b3f3722f9f159919147c71ba66011b90c0015ae94e4f66bb", 0xe8}], 0x1, &(0x7f0000003340)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x8000) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="550000007d01000000fcffffffffffffff200200000003000000000000000000210202000000000000000000000000000000090072656973657266730009006370752e7374617463000009002f6465762f6b767600"], 0x55) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1291c1) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4a27, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r7, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/65, 0x41}, 0x7}], 0x1, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18810000000000000000008c97ac850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000001000000700000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_generic(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000002240)={0x31e4, 0x2d, 0x400, 0x70bd25, 0x766, {0x2}, [@nested={0x154, 0x8, 0x0, 0x1, [@generic="ada2cd2a34a546118fcbb7b67fbffc497bb818f911348e8c5a7b7ed0448ad81c220a35d28d53786de2ec923931da84728374cf718889d90759291944da31b209032deeb0595397e5fbe6dc4b7f015ce9378f3e6a05fe2007fd123f1e85acb4"]}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0xb}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x4}, @nested={0x2014, 0x6}, @typed={0x1004, 0xf2, 0x0, 0x0, @binary="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"}, @generic="49d18d5437478fcde72c0bfe9db2fbfa360f32d2570cd2fae07aa9c219707e27b5ae32a13096b97de24c604422b63554a30d038e7cc87edfb0b9f103453aa9d41403cad7812806984c9d8e17e8d1"]}, 0x31e4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r9}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80082, 0x0) msgrcv(r0, 0x0, 0x0, 0xd9481726d31966ee, 0x0) 8.572689136s ago: executing program 7 (id=1906): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @broadcast}, &(0x7f0000000200)=0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x30, 0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f0000000280)=""/17, 0x2f, 0x11, 0x0, 0x1ff, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0x19408fa4, 0x8, 0x2221a, 0x1, 0x8, '\x00', r0, r1, 0x4, 0x1, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d73f00007b8af8ff00000000c6a200000000000007020000f8ffffffb703000008000000b70000000100000085000000820000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffffe}, 0xdf) ftruncate(r2, 0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.99223843s ago: executing program 7 (id=1909): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x9, 0x0, 0xfcff, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.671961082s ago: executing program 1 (id=1911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x13) tkill(0x0, 0x12) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b38320987f70e06d038e7ff7fc6e5539b356d298b089b0708374b090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94e813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5525c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f0317d5d92bf8f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x8b8}}, 0x1006) 7.053388126s ago: executing program 7 (id=1912): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f00000005c0)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a85035eb86c32a59f1f3acdb98c", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX, @ANYRES8=0x0], 0x1, 0x6eb, &(0x7f0000000dc0)="$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") ftruncate(0xffffffffffffffff, 0xc17a) ftruncate(0xffffffffffffffff, 0x85) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a27030000000000000000000000000000fdffffffffffffff0000000000000000ff0f000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) capset(&(0x7f00000000c0)={0xf1504}, &(0x7f0000000140)={0x7ff, 0x1, 0x2, 0x0, 0x9365, 0x5}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xe, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.265323261s ago: executing program 1 (id=1915): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x1c}}, 0x4800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x3000)=nil, 0x3000, &(0x7f0000000340)='\x14\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x1008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x80002, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x3288b000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xc, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) r5 = socket$inet6(0xa, 0x40000080806, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001800348014003580"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000008961b080000000000000109022400030001fe09210101910122050009058103ff030d000000000000aa717f3ac7dd8e301969dc77857a3142af6a6a2985e5db0d"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 5.640676494s ago: executing program 7 (id=1917): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/2, 0x2}], 0x1}, 0xe429}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x80e}], 0x2, 0x21, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@private=0xa010102, 0x1, 0x0, 0x60, 0x0, [{}, {@private}, {@local}, {@private}, {}, {@remote}]}}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x1a1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.553846055s ago: executing program 1 (id=1919): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x12086, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="012e040aaaaaaaaa04120600000058e4d253fbc487a926"], 0xe) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x687, &(0x7f0000000fc0)="$eJzs3c1vHGcdB/DvrNeOHaTUfUlaUCWsRioIi8QvcsFcGjggHypUhUOFxMVKnMbKxq1sF7kVAvN+5dA/oBx8QOICEvdIReKAgFvFzeKAKiFx6cm3oJmdtdfxS9Ybv8Tw+Viz+8w8r/PbmWd3dmVNgP9bc+NpPkiRufE31sr1zY3p1ubG9IU6u5WkTDeSZvspxVJSfJzcSHvJ58uNdfnioH4+XJy9+clnm5+215r1UpVvHFavN+v1krEkA/XzXoN9tXfrwPYON7+dKrb3sAzY1U7g4Kw93GP9KNWf8LwFngZF+31zj9HkYpLh+nNA6tmhcbqjO35HmuUAAADgnHpmK1tZy6WzHgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJ/X9/4t6aXTSYyk69/8fqrelTt9snPGYn8SDsx4AAAAAAAAAAByDL25lK2u5lPrH/YftX/ZfqR5fqB4/l/eykoUs51rWMp/VrGY5k0lGuxoaWptfXV2e7KHm1L41p/ob/+/7qwYAAAAAAAAA/2t+mrn27/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC0KJKB9lO1vNBJj6bRTDKcZKgst578vZM+J4r9Nj44/XEAAADAExnuo84zW9nKWi511h8W1TX/lep6eTjvZSmrWcxqWlnI7foaurzqb2xuTLc2N6bvb25MVx1//2Fbu51v/udIw6haTPu7h/17fqkqMZI7Way2XMutajC306hqll6qx7O97O7kJ+WYRl6v9Tiy2/Vz2dmvD/oW4Tg0jlphtKo0uB2RiXpsZUPPHh6Jx746zUN7mkxj+5ufFw7pqbNLxRFjfrFTL8kvH4n56//67fd6bOYEbEeikSoSU11H35XDY5586Y+/e+tua+ne3Tsr4yd2GJ2WR4+J6a5IvHiuI9E8YvmJKhKXt9fn8u18N+MZy5tZzmJ+kPmsZiH1zJj5+nguH0e7opTsidSNXWtvPm4kQ/Xr0p5FexnTWC5Uqfm8UtW9lMUUeSe3s5DXqr+pTOZrmclMZrte4csHvsLVvlUzbeNoZ/3VL2fnVP9VOVP3Vi/5c68Fj679llrG9dmuuHbPuaNVXveWnSg918P70RHnxuYX6kTZx8/6eds4MY9GYrIrEs8fHonfVOfGSmvp3vLd+XcPaH/9kfVXB3fSv+jrnfmkpp7yeHkuw/VMsvvoKPOe355ldsdrqP7FpZ3X2JN3ucoris6Z+p19ztQy4rNV6Sv7tjRV5b24N2+gHvk//tmVt+vzVt756wkFDIDjdfErF4dG/j3yt5GPRn4+cnfkjeFvXfj6hZeHMvinwW80JwZebbxc/CEf5Uc71/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/Vt7/4N58q7WwvH+icXDW8SaK+rY8B5VpZiSnMIzTTBTJ+rG3nLPfrx4SnZsIPmk7b914KnbnXCcGktRbfpzsHD/1S9TPzUWBc+H66v13r6+8/8FXF+/Pv73w9sLS4MzM7MTszGvT1+8sthYm2o9nPUrgJOx8HuixwuAJDwgAAAAAAAAAAAB4rP3+MeAvx/yfBl3djZ3hrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1Nx4moMpMjlxbaJc39yYbpVLJ71Tspmk0UiKHybFx8mNtJeMdjVXHNTPh4uzNz/5bPPTnbaanfKNw+r1Zr1eMpZkoH7eY6i/9m4d1F7Piu09LAN2tRM4OGv/DQAA//+iHAcm") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xc, 0x4}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) r5 = gettid() bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r4, &(0x7f0000000200)="c91ea20845b27519e4e009f643591a3dbc2e10bae70009a9438801e3dd9d0107fe829026bb48acceef938746eb3ba5b99de951fd3a7ef3b502484957823fa4ad6d193b1e9667ef75", &(0x7f0000000340)=""/79, 0x4}, 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = fanotify_init(0x0, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfff, 0x809, 0x0, 0xffff, 0xb, 'DF\x00\x00@\x00\x00\x00\x00\x00\r\x00'}) fanotify_mark(r8, 0x1, 0x8000039, r1, 0x0) 5.424026726s ago: executing program 0 (id=1921): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r5, 0x26, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/cpuinfo\x00', 0x0, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x100000000001, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab00000d9fd10b000000f2ff0000785d752f01f5ff000004000000000000000000000000e1ffffff0000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x6}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0200000010000000", @ANYRES32=r4, @ANYBLOB="fa00e2ac850b7ff66ae85f42e927d5b3b18a8e76044b1fda2889b59b5ed0a7866f021485daf360ee39e3d722332d4cadb8d66f6bf6da5a06a86d0203c66abfd77e4f0fd0ff86aae4b6970bfb7539bc9e3cf8bc65f8561da201391d36ba670da3d373b85a139789d84fb06b4fbde0cc49f7f69627c55c3dbc253ac530306e04aac55f61b98d33740d2b2913b65644f2e29cac699fa010b174bf51dcee45df1594e10d24f1dcadfb3b954397690e7892ad5a5bed", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r8], 0x20) close(r6) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904040000000800000000000000", @ANYRES32=r1, @ANYBLOB="00100000fb0062726964676500000c00028005002d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)) close_range(r12, r12, 0x2) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r13, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r13, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x40051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) 4.671571191s ago: executing program 5 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c000180060017"], 0x124}}, 0x44040) 4.009860465s ago: executing program 5 (id=1924): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x54, r2, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x32}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004801}, 0x80) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f00000088c0)="$eJzs3c9vE9kdAPA3kwCBAg2UA5Uq1VKRWrVVlHBqG6SGEAgJpFS0cOjFOImBtE6MEqfqgUN6Q+qpUg/VHtCutLecUKQ9s3/CXvbInpF2D3tZaSW0WdkeJ56xTQxrJxv28zl4PO93/J0fb5CGFycqD5fWcktrucJKrrxwf+1i7p/l0vpyMcT7pG3/R/avf7rTj+PkdW1+1LOR086tK9f+cvdiCB8vfvpye3t7O1QNhrbGmr5/9eXjheZtQ5ypU223fWu98rcQwrmWcVUNhBCGQghRCOFykjaZbI+HEE4leXcf/+derkejefaieCn/au7J1viF2c2nW53/9iiE90o//e2D5c9/MTD+2a971D0AAAAAAAAAAAAAAAAAAIfc9O1bd/48OhaeR2FwM2p9X3c62XZ6P3a7Z37e/z8WAAAAAAAAAAAAAAAAAAAAvqd23//PRWfbvP8/lWwnUrWinW/bf9yfcdIfM3+6NXV1dCxZ/z1qyf9dkvTF5YFwps2679n13y9n6rdf/721n7fVGF+j3+EQxSOp/TgeGQnhg2Th9/PRibhUXqv85n55fWWxZ8M4tNLxr6/en4pOsqB/l/GPJzPt93/9/5+0HE3V/Xu9O8Teaen4D3Qs9+G/o67O/yuZevsRf95eOv6DtbTjzQUm6heAavz/O7h3/Kcy7fco/keyCadDCLmoOtZc6gpQncNU0yd60OkPQTr+9Z85delMfshO5//XmfhfzbR/UNf/jeyNiLbS8T9aSxtKlThW+6zFP977/L+Waf8g4l8d/4b7f1fS8a/H+mi6SO2X7Pb6P51pv2P8j323cd+p3paqt6vTUeoI2Izq6bv/X13LrYMm6fgPteTvPv/FXc3/rmfqv/b5r7W7N9YYX6PfxvNf4/L/q6j+/Ed7jfif2KNct+f/TKZev6//E7X535uIevrvD4dd+vyvHwXpufNw7bPb+M9m2u9X/GtPJUON+O/G85tj9fT3zf+6ko7/j+qJcXOJjdpnbf4X7T3/v5Fp/yDmf9Xxb8T97fVdkY7/yY7lqvH/pIv7/81Mvf7HP4RRl/O3lo7/qY7lauf/0N7xn8vU63f8f9nPxgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgclkOxyieCS1H8cjIyFcSfbPhxPRfGExP18qL/xjLYSpJD0XzkYPSuX5Qim/tFJeLOYLpVJ5IYSrSf65MBStlcqV/HLh0bWdto5HD4uF1cp8sVAJIUwn6T8LpxptzS9VlguPQgjXd/J+HJdXHz0srOQXl1b/MDo6OhpmdsZwJir+q1JcqdR7r+eGMLtTdzhqGlwt+8bOWE5Gfy+vr64USrX0m011SuWFQqmpzlyS979wJqqsrq8sFCrFfKn8oNHfQZpItlMzt/96++ZYS/69qL6d3N9hAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCGno///v8hhMH6XhxCmGh8idqVf/aieCn/au7J1viF2c2nWy87lQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+ZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq7dIyaQBCFAfjNpEjS5RiplqRLuyEQkiIbBE+gx/AwehQv4R0sLGwtRJBd1HUXttHq+5oH8zPzHswDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAYb5H1fj/7T0ixdP+MWI5Xa3P89+6zj+77z/cYUZu5+ev+jr9YbrKP+qjTZmP6W47m0RHbSxae9Lep8s+z71z9e1b33xN35dIuYiIss5fU85FMewtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbR9G3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//GYUWeg==") r8 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r8, 0xfffffffffffffffe, 0x41) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) 4.009564476s ago: executing program 1 (id=1925): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setpriority(0x0, 0x0, 0xacf0165) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x28048015}, 0x24000800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x4, 0x0, 0x400003}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000", @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) 3.573470168s ago: executing program 4 (id=1927): shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000880)=""/201) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'bridge0\x00', {0x2}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {}, 0x40}) r1 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x0) 3.386647689s ago: executing program 5 (id=1928): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') (fail_nth: 6) preadv(r3, &(0x7f0000000040), 0x0, 0x7c, 0x0) 3.32015698s ago: executing program 1 (id=1929): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x1c}}, 0x4800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x3000)=nil, 0x3000, &(0x7f0000000340)='\x14\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x1008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x80002, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x3288b000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xc, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) r5 = socket$inet6(0xa, 0x40000080806, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001800348014003580"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000008961b080000000000000109022400030001fe09210101910122050009058103ff030d000000000000aa717f3ac7dd8e301969dc77857a3142af6a6a2985e5db0d"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 2.421226055s ago: executing program 4 (id=1930): socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x4003, &(0x7f00000000c0)=0x9, 0x5) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f00000007c0)="$eJzslj+v0lAYxp9zSgoYjYmji4Mk6mBpixoXElmcHEz8QxxMJFIJUiUBBiEx6Cdwd3Nw9wuY6OqHMOiiC07euTfnT+m5XApcbrkM9/0lnD5tz3n7nvdtngKCIE4tv3/tTaL/1T8FAGdRQl5f/2slc7gx/2fh39vv9+7WPzz9/CM/cYqLYkbR+s/PAfhWszCYrT24uqSPD8Fn+hE4rmldB4Oj9TNwPNY6AMMTrV8auivmO86Ldhg4z7thUwhXDJ4YfDFU5vObvmdoGvkx435/OOo0wjDobVGsqt+0xlE18jP75UBl6xr188DhaV0BwwOtbyMf10aVxNj/xVwS31q6fxvbrohI5QirLpxLbZUNYLM0AJZV7/FOv7LbfIdShAUp4o5mFNk6oV2IF33FHOSWVT67LWcnNunF1ztqTXwlGqtzOed8SsBovOYjbBy6VVy9KvGn6BPDFcOflJV8lJ8a0cJyfzi63n7VaAWt4LXvV265N1z3pl+WRqTGJf5XlP50Jom/8JsksJmNN43BoOepcXbuq3GR43LpfxxXL6tz4ab2XNyCoZn+cXmU3tv5kpo9QRDE7rgEJj1Z+nIs9NcExn/d+zvMkSAIgiAIgiAIgiCI47EfAAD//xEmRfM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x82400, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x105200) vmsplice(r1, &(0x7f0000001180)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="39a7ce4005cfc6ff1cd8e880c22f3e1455b2b1ff01b9654471148c9a99dcae1e5819c2fadb3cc170345f9d8e6a242661e507b60407281cedd6530516bdd84e505d2ef4d4b233169184647ea19bfe444eca1c28705aece9aec95a4203733a8ca0bd32d60556ad532f5575fc0772dd3600aca54d01feb4549b0b0336dd5b1eebe06a847a0159d2f4", 0x87}], 0x2, 0xa) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bind$rds(r0, &(0x7f00000011c0)={0x2, 0x4e21, @empty}, 0x10) 2.385561336s ago: executing program 5 (id=1931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000180)='./file0\x00', 0x400007, &(0x7f0000000ec0)={[{@volume={'volume', 0x3d, 0x3f}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@session}, {@uid_forget}, {@undelete}, {}, {@longad}, {@uid_forget}, {@utf8}]}, 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) truncate(&(0x7f0000000040)='./file1\x00', 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000e40)={0x1, 0x2, 0x1ff, 0x4, r2}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000084000040000100008000000000001200"]) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f540000000e0a0108000000000000000001000000090096f6fa3187aa158c90015ce076020073797a32000000002800038024000080140003400000000418000b80140001800a00010071756f7461000000040002800900010073797a3000000000140000001000010000000000000000000000000a"], 0xd8}}, 0x0) 2.028184168s ago: executing program 7 (id=1932): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x9, 0x36314d4e, 0x2, @stepwise={0x2, 0x4, 0x101, 0x7, 0x10000, 0x8}}) 2.019006008s ago: executing program 0 (id=1933): r0 = syz_io_uring_setup(0xbda, 0x0, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x9, 0x0, 0xfcff, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.874645899s ago: executing program 0 (id=1934): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0x10, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x5, 0x0, 0x0, 0x8a5b, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x40000000000000, 0x0, 0x80000001, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0xfffffffffffffffc, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x76, 0x8, 0xc39, 0x0, 0x0, 0x452124fa, 0x0, 0xfffffffffffffffa, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfb8, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x10000000000000, 0x5, 0x0, 0xfffffffffffffff9, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff80000003, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x81, 0x751, 0x0, 0x0, 0x2000000000000, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1ffffffff, 0xf, 0xfffffffffffffffe, 0x0, 0x100000001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x41, 0x0, 0xa5de, 0x0, 0xfffffffffffffffd, 0x5, 0x1, 0x81]}) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77114227e65f3e8866646e0100cb9e8263a1f82efa4f8e0de163e27ed16f47a9583b62764a3fb656e625072a77f3a05ed0d4f9060c3c67ebad16c5d3583d785c867681146a66d51d6d0aed621c14dcfbddd80fbd036c5240540e6eb97364cc45879b8a0634cef41562c73b848ba8e258f3d0a141c2f3ebcb91e226fb1b07c55695bb68271b1e97ddbf0000651dbebbd2dc7e656aed2cf250ed6944f8c4bf319be825d650c766e136f01b683968706763a26e074ae7786ff53119f2898f86fe6187f3c23d13a239dcb10dab11863f81be", @ANYRESHEX=r1, @ANYBLOB="2c6f626a5f757365723d7766646e6f2c646f6e745f686173682c6673757569643d35343939376536992d303563342d633900312d3900b1302d30033639353839632c00"]) 1.66857674s ago: executing program 4 (id=1935): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.536231671s ago: executing program 0 (id=1936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x25}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) 1.381394292s ago: executing program 4 (id=1937): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 1) 956.432054ms ago: executing program 4 (id=1938): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x3, 0x65cd, 0x2, 0xffffffffffff15ef, 0x3ff, 0x7, 0x1, 0x7, 0x1000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00') (fail_nth: 7) 776.210456ms ago: executing program 5 (id=1939): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f000000ae40)=[{{&(0x7f0000009b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0xeffd, &(0x7f0000001f40)=ANY=[], 0x30, 0x4000000}}, {{&(0x7f000000ad40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x2, 0x0) 569.816317ms ago: executing program 0 (id=1940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) symlink(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa9) readlink(0x0, &(0x7f0000000100)=""/93, 0x5d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, 0x0, 0x4ffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000200), &(0x7f0000000280)='./bus\x00', 0x4840, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0xa0, &(0x7f0000000340)="$eJzs17GJAkEABdB/Gxx7yTZwwXWwNdwVcRUYGhopgjZkK5ZgamRgajIiuyIsaGCyCu/BMHw+Az+d7WnznSYpq6SUsk6nXMzmi+ln7nvU8R6q/q6T/DRdPvwlv0k++n53XE6uZ/D8vx5hMwAA8Jwq7TC3t5/d/muUUQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv5BwAAP//ToEaBw==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRESOCT], 0xff, 0xc2d, &(0x7f00000001c0)="$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") unlink(&(0x7f0000000000)='./file0/file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 183.394209ms ago: executing program 7 (id=1941): prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/206) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x81fe) 161.73625ms ago: executing program 1 (id=1942): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000010000000000000000000f50697200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, 0x0, 0x0) r6 = dup(r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0xfffffffffffffffa, {0x8000, 0xcd, 0x0, {0x0, 0x0, 0x9ef1, 0x1000, 0x5, 0x0, 0xf79c000, 0x2339fdf8, 0x5, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0xfffffffffffffffd, 0x5, 0xfffffff8}}, 0x30) write$FUSE_DIRENTPLUS(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',posixacl']) 88.13107ms ago: executing program 5 (id=1943): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x98400, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0), 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x3}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000300)={[{@fileset={'fileset', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x10002}}, {@anchor={'anchor', 0x3d, 0x16}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uid_ignore}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@volume={'volume', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x1, 0xc37, &(0x7f0000001280)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x0, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2000008}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', '', [{0x20, '#-)(,}]^:'}, {0x20, '/dev/sg#\x00'}, {0x20, 'ext4\x00'}, {}, {0x20, '#^\x88%$'}, {0x20, '@--#&({'}, {0x20, '-'}, {0x20, '!'}], 0xa, "b33129f110fcc19ef8dff6dafe224cc1041cd0522e02f1fbff61f41bdbb43b87de23d9"}, 0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x587, &(0x7f00000045c0)="$eJzs3V1rHFUcB+D/mWzSl7QmFUFrEQMFW1CTJq0oIthivfPCl4JXgjFJS+m2DU0EWyttoX4D/QCCd96Il0WkqCDeeif4AUQs0ubGu8hsZtJtu5vmZdOpneeBbebMyXDOZPn1zJydmQ2gtkbyf7KI3RExmyKG2uoaUVSOLP3erZsXpxZuXpxKsbj43j8pUrGu/P1U/BwsNt4aEb/9mOLxvnvbnTt/4dRkszlzriiPzZ+eHZs7f+HFk6cnT8ycmDkzMf7y+EuHDk4cOtCT/dwZET+PHm1cPf7Gnm+nvt516ftvrqU4HDuK+vb96JWRGFn+m7TL/66v9LqxivQV+9P+FqdGhR1iTcr3rz8inoyh6Ivbb95QfP5OpZ0DNtViilgEairJP9RUeRyQn/+Wr2qPSIAH5caRpQmAW2lpbm9hOf+NpbnB2NqaG9i+kKJ9WidFRC9m5vI2Zp9LQ/krNmkeDujs8pWIeKrT+J9a2RxuzeLn+c/uyH8WEW8XP/P1766z/ZG7yvIPD85G8v9hW/4/Wmf78g8AAAAAAAC9c/1IRLzQ6fO/bPn6n+hw/c9gRBzuQfv3//wvu9SDZoAObhyJeC0iymv/FtryXxjuK0o7W9cD9KfjJ5szByLisYjYH/1b8vL4Cm2M7Pm1v2td2/V/+Stvv7wWsOjHX40td24zPTk/uZF9BpbcuBLxdKNT/tPy+J/uHP9/eaYY+2dX2cbi0dd/6lZ3//wDm2Xxq4h9Hcf/20+uSCs/n2OsdTwwVh4V3OvTD6591619+Yfq5OP/9pXzP5zan9czt/Y2Pvv7jw3kv/Px/0A61nrkzECx7pPJ+flz4xED6a1710+svc/wKCrzUOYlz//+vZ3P/7sc/7dsi4jLq2zz2A9vXu1WZ/yH6uT5n17T+L/2hb3vf/lvt/ZXN/4fao3p+4s15v9gZasNaNX9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/oywidkTKRpeXs2x0NGIwIp6I7Vnz7Nz888fPfnxmOq9rff9/Vn7T79BSOZXf/z/cVp64q3wwInZFxBd921rl0amzzemqdx4AAAAAAAAAAAAAAAAAAAAeEoNd7v/P/dlXde+ATdeougNAZeQf6kv+ob7kH+pL/qG+5B/qS/6hvuQf6kv+ob7kHwAAAAAAHim7nr3+e4qIy69ua71yA0Vdf6U9Azbb4ao7AFTGI36gvlz6A/XlHB9I96nfuu4tAQAAAAAAAAAAAIBe2bfb/f9QV1nVHQAq0/3+f08GgEed+/+hvpzjA+7/BwAAAAAAAAAAAICH39z5C6cmm82Zc+td2LKxzS1YqM9CpB4k7gEtVP0/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUPovAAD//0C19y8=") 87.92379ms ago: executing program 4 (id=1944): r0 = syz_io_uring_setup(0xbda, 0x0, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x9, 0x0, 0xfcff, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 0 (id=1945): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000002"]) kernel console output (not intermixed with test programs): should_fail+0x38c/0x4c0 [ 391.890514][ T9869] should_failslab+0x5/0x20 [ 391.895035][ T9869] slab_pre_alloc_hook+0x51/0xc0 [ 391.899980][ T9869] ? xas_create+0xfdd/0x1620 [ 391.904615][ T9869] kmem_cache_alloc+0x3d/0x290 [ 391.910038][ T9869] ? xas_descend+0x210/0x3b0 [ 391.914736][ T9869] xas_create+0xfdd/0x1620 [ 391.919268][ T9869] xas_store+0xa2/0x19f0 [ 391.923530][ T9869] ? xas_start+0x38d/0x770 [ 391.927945][ T9869] __xa_insert+0x1b4/0x290 [ 391.932366][ T9869] cma_alloc_port+0x1b5/0x610 [ 391.937170][ T9869] rdma_bind_addr+0x2f95/0x3d40 [ 391.942021][ T9869] ? mark_lock+0x94/0x320 [ 391.946360][ T9869] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 391.952356][ T9869] ? lock_chain_count+0x20/0x20 [ 391.957213][ T9869] ? __rwlock_init+0x140/0x140 [ 391.961978][ T9869] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 391.967361][ T9869] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 391.973258][ T9869] ? lockdep_hardirqs_on+0x94/0x140 [ 391.978550][ T9869] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 391.984448][ T9869] ? rdma_listen+0xca0/0xca0 [ 391.989039][ T9869] ? __mutex_trylock_common+0x14f/0x250 [ 391.994596][ T9869] rdma_resolve_addr+0x3f2/0x1fc0 [ 391.999628][ T9869] ? __mutex_lock_common+0x431/0x2390 [ 392.005013][ T9869] ? rdma_resolve_route+0x2910/0x2910 [ 392.010409][ T9869] ? xa_load+0x286/0x2a0 [ 392.014659][ T9869] ? do_raw_spin_unlock+0x11d/0x230 [ 392.019894][ T9869] ? __might_fault+0xb3/0x110 [ 392.024610][ T9869] ucma_resolve_ip+0x1d4/0x280 [ 392.029400][ T9869] ? ucma_bind_ip+0x230/0x230 [ 392.034102][ T9869] ? __might_fault+0xb3/0x110 [ 392.038811][ T9869] ? _copy_from_user+0x111/0x170 [ 392.043770][ T9869] ucma_write+0x248/0x2e0 [ 392.048123][ T9869] ? ucma_get_global_nl_info+0x70/0x70 [ 392.053603][ T9869] ? common_file_perm+0x171/0x1c0 [ 392.058637][ T9869] ? fsnotify_perm+0x5d/0x560 [ 392.063326][ T9869] ? security_file_permission+0x75/0xa0 [ 392.069286][ T9869] do_iter_write+0x3e4/0x7b0 [ 392.073986][ T9869] do_writev+0x254/0x410 [ 392.078256][ T9869] ? do_readv+0x3e0/0x3e0 [ 392.082723][ T9869] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 392.088729][ T9869] ? lock_chain_count+0x20/0x20 [ 392.093602][ T9869] ? vtime_user_exit+0x2dc/0x400 [ 392.098564][ T9869] ? lockdep_hardirqs_on+0x94/0x140 [ 392.103785][ T9869] do_syscall_64+0x4c/0xa0 [ 392.108213][ T9869] ? clear_bhb_loop+0x30/0x80 [ 392.112918][ T9869] ? clear_bhb_loop+0x30/0x80 [ 392.117616][ T9869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.123578][ T9869] RIP: 0033:0x7f89bac626c9 [ 392.128006][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.147703][ T9869] RSP: 002b:00007f89b8ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 392.156133][ T9869] RAX: ffffffffffffffda RBX: 00007f89baeb8fa0 RCX: 00007f89bac626c9 [ 392.164123][ T9869] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 392.172214][ T9869] RBP: 00007f89b8ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 392.180204][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.188205][ T9869] R13: 00007f89baeb9038 R14: 00007f89baeb8fa0 R15: 00007ffd299a6928 [ 392.196206][ T9869] [ 392.199293][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.601806][ T5038] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 392.861693][ T5038] usb 5-1: Using ep0 maxpacket: 8 [ 393.135675][ T6962] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 393.421532][ T6962] usb 1-1: Using ep0 maxpacket: 32 [ 393.581732][ T6962] usb 1-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 393.598540][ T6962] usb 1-1: config 1 interface 0 has no altsetting 0 [ 393.783404][ T6962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.799091][ T6962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.807568][ T6962] usb 1-1: Product: syz [ 393.813036][ T6962] usb 1-1: Manufacturer: syz [ 393.817935][ T6962] usb 1-1: SerialNumber: syz [ 394.191055][ T9911] loop1: detected capacity change from 0 to 512 [ 394.353255][ T9911] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 394.463000][ T9911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 394.483728][ T9911] EXT4-fs (loop1): orphan cleanup on readonly fs [ 394.515548][ T9911] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.1299: bad orphan inode 4128779 [ 394.557130][ T9911] EXT4-fs (loop1): Remounting filesystem read-only [ 394.579004][ T9911] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 394.649558][ T6962] usb 1-1: bad CDC descriptors [ 394.657975][ T6962] usb 1-1: USB disconnect, device number 14 [ 395.672691][ T9940] loop7: detected capacity change from 0 to 64 [ 395.767944][ T9940] hfs: session requires an argument [ 395.799159][ T9940] hfs: unable to parse mount options [ 395.960411][ T5038] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.022071][ T5038] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 396.029689][ T5038] usb 5-1: can't read configurations, error -71 [ 397.621697][ T9976] loop1: detected capacity change from 0 to 512 [ 398.099244][ T9978] loop4: detected capacity change from 0 to 256 [ 398.272143][ T9976] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 398.286133][ T9976] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.293619][ T9978] FAT-fs (loop4): Directory bread(block 64) failed [ 398.331659][ T9978] FAT-fs (loop4): Directory bread(block 65) failed [ 398.341617][ T9978] FAT-fs (loop4): Directory bread(block 66) failed [ 398.405261][ T9978] FAT-fs (loop4): Directory bread(block 67) failed [ 398.642484][ T9978] FAT-fs (loop4): Directory bread(block 68) failed [ 398.731141][ T9978] FAT-fs (loop4): Directory bread(block 69) failed [ 398.803943][ T9978] FAT-fs (loop4): Directory bread(block 70) failed [ 398.881621][ T9978] FAT-fs (loop4): Directory bread(block 71) failed [ 398.888300][ T9978] FAT-fs (loop4): Directory bread(block 72) failed [ 398.912176][ T9978] FAT-fs (loop4): Directory bread(block 73) failed [ 399.429080][ T9999] loop7: detected capacity change from 0 to 128 [ 399.605549][ T9999] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 399.655679][ T9999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.755492][ T9999] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 400.041661][ T4334] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 400.411822][ T4334] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 134, changing to 11 [ 400.464949][ T4334] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26337, setting to 1024 [ 400.490305][ T4334] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 400.545790][ T4334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.576556][ T4334] usb 8-1: config 0 descriptor?? [ 400.612360][ T9997] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 400.764870][T10006] loop4: detected capacity change from 0 to 32768 [ 400.771730][ T6962] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 400.821211][T10006] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1329 (10006) [ 400.844250][ T8382] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.880407][T10006] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 400.902648][T10006] BTRFS info (device loop4): using free space tree [ 400.909366][T10006] BTRFS info (device loop4): has skinny extents [ 401.099609][T10006] BTRFS info (device loop4): enabling ssd optimizations [ 401.151959][ T6962] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 401.167273][ T6962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.194366][T10006] fuse: Bad value for 'fd' [ 401.261713][T10042] loop0: detected capacity change from 0 to 4096 [ 401.292493][ T6962] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 401.308572][ T6962] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 401.312287][T10042] ntfs3: Unknown parameter '' [ 401.323413][ T6962] usb 2-1: Manufacturer: syz [ 401.330141][ T6962] usb 2-1: config 0 descriptor?? [ 401.600578][ T6962] rc_core: IR keymap rc-hauppauge not found [ 401.619948][ T6962] Registered IR keymap rc-empty [ 401.639252][ T6962] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 401.654181][ T6962] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 401.711686][ T4334] ath6kl: Failed to submit usb control message: -110 [ 401.743574][ T4334] ath6kl: unable to send the bmi data to the device: -110 [ 401.765031][ T4334] ath6kl: Unable to send get target info: -110 [ 401.981650][ C0] igorplugusb 2-1:0.0: receive overflow, at least 33 lost [ 402.089562][ T4334] ath6kl: Failed to init ath6kl core: -110 [ 402.213650][ T4334] ath6kl_usb: probe of 8-1:0.0 failed with error -110 [ 402.260101][ T4334] usb 8-1: USB disconnect, device number 2 [ 402.547369][T10064] raw_sendmsg: syz.7.1337 forgot to set AF_INET. Fix it! [ 402.577802][ T5039] usb 2-1: USB disconnect, device number 13 [ 402.775150][T10069] lo speed is unknown, defaulting to 1000 [ 402.910271][T10077] loop1: detected capacity change from 0 to 4096 [ 402.977164][T10079] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 403.221365][T10083] loop0: detected capacity change from 0 to 1024 [ 403.461694][T10083] hfsplus: invalid extended attribute record [ 403.551079][ T25] audit: type=1800 audit(1762435755.747:53): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1342" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 403.732310][ T144] hfsplus: b-tree write err: -5, ino 4 [ 406.233729][T10141] fuse: Unknown parameter '' [ 406.487534][T10148] FAULT_INJECTION: forcing a failure. [ 406.487534][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 406.500396][T10148] CPU: 1 PID: 10148 Comm: syz.7.1359 Not tainted syzkaller #0 [ 406.507873][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.518545][T10148] Call Trace: [ 406.521834][T10148] [ 406.524780][T10148] dump_stack_lvl+0x168/0x230 [ 406.529669][T10148] ? show_regs_print_info+0x20/0x20 [ 406.534885][T10148] ? load_image+0x3b0/0x3b0 [ 406.539742][T10148] ? __might_sleep+0xf0/0xf0 [ 406.544459][T10148] ? __lock_acquire+0x7c60/0x7c60 [ 406.549671][T10148] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 406.556093][T10148] should_fail+0x38c/0x4c0 [ 406.560640][T10148] should_failslab+0x5/0x20 [ 406.565250][T10148] slab_pre_alloc_hook+0x51/0xc0 [ 406.570374][T10148] __kmalloc+0x6b/0x330 [ 406.574894][T10148] ? tomoyo_encode+0x27e/0x540 [ 406.579673][T10148] tomoyo_encode+0x27e/0x540 [ 406.584268][T10148] tomoyo_realpath_from_path+0x5cd/0x610 [ 406.590221][T10148] tomoyo_path_number_perm+0x1d5/0x5d0 [ 406.595817][T10148] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 406.601476][T10148] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 406.607985][T10148] security_file_ioctl+0x6c/0xa0 [ 406.613220][T10148] __se_sys_ioctl+0x48/0x170 [ 406.617938][T10148] do_syscall_64+0x4c/0xa0 [ 406.622581][T10148] ? clear_bhb_loop+0x30/0x80 [ 406.627266][T10148] ? clear_bhb_loop+0x30/0x80 [ 406.632306][T10148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.638226][T10148] RIP: 0033:0x7f89bac626c9 [ 406.642642][T10148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.662690][T10148] RSP: 002b:00007f89b8e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.671635][T10148] RAX: ffffffffffffffda RBX: 00007f89baeb9180 RCX: 00007f89bac626c9 [ 406.679693][T10148] RDX: 0000200000000300 RSI: 0000000000004602 RDI: 000000000000000a [ 406.687749][T10148] RBP: 00007f89b8e87090 R08: 0000000000000000 R09: 0000000000000000 [ 406.696082][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.704258][T10148] R13: 00007f89baeb9218 R14: 00007f89baeb9180 R15: 00007ffd299a6928 [ 406.712433][T10148] [ 406.716429][T10148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 407.686429][T10168] loop0: detected capacity change from 0 to 22 [ 407.749320][T10168] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 407.904504][T10168] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 408.458986][T10174] loop0: detected capacity change from 0 to 4096 [ 408.681032][T10183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.914849][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 411.941811][T10051] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 412.146697][T10234] loop0: detected capacity change from 0 to 8192 [ 412.221860][T10051] usb 5-1: Using ep0 maxpacket: 32 [ 412.250190][T10234] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 412.264119][T10234] REISERFS (device loop0): using ordered data mode [ 412.466885][T10234] reiserfs: using flush barriers [ 412.491824][T10051] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 412.503375][T10234] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 412.530073][T10051] usb 5-1: config 0 has no interface number 0 [ 412.598930][T10234] REISERFS (device loop0): checking transaction log (loop0) [ 412.644611][T10234] REISERFS (device loop0): Using r5 hash to sort names [ 412.682174][T10234] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 412.752018][T10051] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 412.777350][T10051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.808835][T10051] usb 5-1: Product: syz [ 412.829044][T10051] usb 5-1: Manufacturer: syz [ 412.870438][T10051] usb 5-1: SerialNumber: syz [ 412.910170][T10051] usb 5-1: config 0 descriptor?? [ 412.973289][T10051] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 413.203431][T10051] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 413.257614][T10051] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 413.296008][ T5039] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 413.639721][T10051] usb 5-1: USB disconnect, device number 16 [ 413.645721][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 413.672813][ T5039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.684997][T10051] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 413.696665][ T5039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.726618][T10051] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 413.730494][ T5039] usb 8-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 413.754338][ T5039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.756346][T10051] quatech2 5-1:0.51: device disconnected [ 413.781212][ T5039] usb 8-1: config 0 descriptor?? [ 413.951634][ T4334] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 414.204785][ T4334] usb 1-1: Using ep0 maxpacket: 32 [ 414.273439][ T5039] elo 0003:04E7:0030.0005: item fetching failed at offset 3/7 [ 414.283749][ T5039] elo 0003:04E7:0030.0005: parse failed [ 414.289381][ T5039] elo: probe of 0003:04E7:0030.0005 failed with error -22 [ 414.331954][ T4334] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 414.340483][ T4334] usb 1-1: config 0 has no interface number 0 [ 414.347212][ T4334] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.359736][ T4334] usb 1-1: config 0 interface 85 has no altsetting 0 [ 414.479730][T10051] usb 8-1: USB disconnect, device number 3 [ 414.511793][ T5038] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 414.522011][ T4334] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 414.532803][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.541193][ T4334] usb 1-1: Product: syz [ 414.545801][ T4334] usb 1-1: Manufacturer: syz [ 414.550855][ T4334] usb 1-1: SerialNumber: syz [ 414.558277][ T4334] usb 1-1: config 0 descriptor?? [ 414.751788][ T5038] usb 5-1: Using ep0 maxpacket: 32 [ 414.872148][ T5038] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 415.024502][T10256] udc-core: couldn't find an available UDC or it's busy [ 415.032501][T10256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 415.072132][ T5038] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.081548][ T5038] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.090500][ T5038] usb 5-1: Product: syz [ 415.094960][ T5038] usb 5-1: Manufacturer: syz [ 415.100205][ T5038] usb 5-1: SerialNumber: syz [ 415.108795][ T5038] usb 5-1: config 0 descriptor?? [ 415.132699][T10264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 415.154025][ T5038] hub 5-1:0.0: bad descriptor, ignoring hub [ 415.160335][ T5038] hub: probe of 5-1:0.0 failed with error -5 [ 415.251875][ T4334] appletouch 1-1:0.85: Geyser mode initialized. [ 415.259459][ T4334] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input8 [ 415.291748][ T4336] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 415.368292][T10264] udc-core: couldn't find an available UDC or it's busy [ 415.379274][T10264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 415.446685][T10277] udc-core: couldn't find an available UDC or it's busy [ 415.453954][T10277] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 415.455160][T10051] usb 1-1: USB disconnect, device number 15 [ 415.481606][T10051] appletouch 1-1:0.85: input: appletouch disconnected [ 415.571638][ T4336] usb 8-1: Using ep0 maxpacket: 8 [ 415.673974][T10277] udc-core: couldn't find an available UDC or it's busy [ 415.680982][T10277] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 415.691756][ T4336] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.705505][ T4336] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.715017][ T4336] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 415.726688][ T4336] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 415.738133][ T4336] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 415.748668][ T4336] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.822721][ T4336] hub 8-1:1.0: bad descriptor, ignoring hub [ 415.833303][ T4336] hub: probe of 8-1:1.0 failed with error -5 [ 415.839674][ T4336] cdc_wdm 8-1:1.0: skipping garbage [ 415.846288][ T4336] cdc_wdm 8-1:1.0: skipping garbage [ 415.854970][ T4336] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 415.860993][ T4336] cdc_wdm 8-1:1.0: Unknown control protocol [ 416.261680][ T4334] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 416.391928][ T5038] usb 8-1: USB disconnect, device number 4 [ 416.501600][ T4334] usb 1-1: Using ep0 maxpacket: 16 [ 416.622082][ T4334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.633522][ T4334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 416.645583][ T4334] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 416.659006][ T4334] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 416.668565][ T4334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.680261][ T4334] usb 1-1: config 0 descriptor?? [ 416.741757][ T5038] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 417.141874][ T5038] usb 8-1: unable to get BOS descriptor or descriptor too short [ 417.231869][ T5038] usb 8-1: config 0 interface 0 has no altsetting 0 [ 417.412155][ T5038] usb 8-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 417.421294][ T5038] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.429534][ T5038] usb 8-1: Product: syz [ 417.434561][ T5035] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 417.443719][ T5038] usb 8-1: Manufacturer: syz [ 417.448513][ T5038] usb 8-1: SerialNumber: syz [ 417.460029][ T5038] usb 8-1: config 0 descriptor?? [ 417.491839][ T5035] usb 5-1: device reset changed ep0 maxpacket size! [ 417.504432][ T5035] usb 5-1: USB disconnect, device number 17 [ 417.524336][ T4334] hid-generic 0003:057E:2019.0006: unknown main item tag 0x0 [ 417.532087][ T4334] hid-generic 0003:057E:2019.0006: unknown main item tag 0x0 [ 417.540291][ T4334] hid-generic 0003:057E:2019.0006: unknown main item tag 0x0 [ 417.548481][ T4334] hid-generic 0003:057E:2019.0006: unknown main item tag 0x0 [ 417.557600][ T4334] hid-generic 0003:057E:2019.0006: unknown main item tag 0x0 [ 417.566321][ T4334] hid-generic 0003:057E:2019.0006: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 417.735484][T10296] udc-core: couldn't find an available UDC or it's busy [ 417.743144][T10296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 417.861679][ T5035] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 417.925544][T10272] udc-core: couldn't find an available UDC or it's busy [ 417.932884][T10272] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 417.942338][T10272] udc-core: couldn't find an available UDC or it's busy [ 417.949465][T10272] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 417.958022][T10296] udc-core: couldn't find an available UDC or it's busy [ 417.964371][T10272] udc-core: couldn't find an available UDC or it's busy [ 417.965395][T10296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 417.972293][T10272] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 418.024809][ T5038] snd_usb_podhd 8-1:0.0: Line 6 POD HDDESKTOP found [ 418.051836][ T5038] snd_usb_podhd 8-1:0.0: set_interface failed [ 418.059261][ T5038] snd_usb_podhd 8-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 418.067418][ T5038] snd_usb_podhd: probe of 8-1:0.0 failed with error -71 [ 418.077455][ T5038] usb 8-1: USB disconnect, device number 5 [ 418.381710][ T5035] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 418.391061][ T5035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.399164][ T5035] usb 5-1: Product: syz [ 418.403585][ T5035] usb 5-1: Manufacturer: syz [ 418.408186][ T5035] usb 5-1: SerialNumber: syz [ 419.002011][ T4334] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 419.210459][ T1107] usb 1-1: USB disconnect, device number 16 [ 419.251677][ T4334] usb 8-1: Using ep0 maxpacket: 32 [ 419.372153][ T4334] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 419.541713][ T4334] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 419.550940][ T4334] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 419.559318][ T4334] usb 8-1: Product: syz [ 419.563588][ T4334] usb 8-1: Manufacturer: syz [ 419.568466][ T4334] usb 8-1: SerialNumber: syz [ 419.575359][ T4334] usb 8-1: config 0 descriptor?? [ 419.592040][T10309] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 419.601575][ T1107] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 419.661913][ T5035] (unnamed net_device) (uninitialized): Assigned a random MAC address: 02:d0:66:f2:5d:23 [ 419.704989][ T5035] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 419.905941][ T4336] usb 8-1: USB disconnect, device number 6 [ 420.121788][ T1107] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 420.130981][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.143914][ T1107] usb 1-1: Product: syz [ 420.148076][ T1107] usb 1-1: Manufacturer: syz [ 420.156459][ T1107] usb 1-1: SerialNumber: syz [ 420.244856][ T5035] usb 5-1: USB disconnect, device number 18 [ 420.261557][ C1] usb 5-1: eth9: intr status -71 [ 420.269220][ T3854] usb 5-1: device reset failed [ 420.591745][ T4258] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 420.641833][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 420.841657][ T4258] usb 8-1: Using ep0 maxpacket: 32 [ 420.971811][ T4258] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 421.071937][ T4336] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 421.181867][ T4258] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 421.191065][ T4258] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 421.199453][ T4258] usb 8-1: Product: syz [ 421.204674][ T4258] usb 8-1: Manufacturer: syz [ 421.210571][ T4258] usb 8-1: SerialNumber: syz [ 421.217390][ T4258] usb 8-1: config 0 descriptor?? [ 421.241969][T10309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 421.331538][ T4336] usb 5-1: Using ep0 maxpacket: 32 [ 421.475804][ T5039] usb 8-1: USB disconnect, device number 7 [ 421.511848][ T4336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.612374][ T4336] usb 5-1: config 0 has no interfaces? [ 421.811865][ T4336] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.821320][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.829824][ T4336] usb 5-1: Product: syz [ 421.836868][ T4336] usb 5-1: Manufacturer: syz [ 421.841604][ T4336] usb 5-1: SerialNumber: syz [ 421.852149][ T4336] usb 5-1: config 0 descriptor?? [ 422.011648][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 422.097653][T10357] udc-core: couldn't find an available UDC or it's busy [ 422.104989][T10357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 422.113383][T10357] udc-core: couldn't find an available UDC or it's busy [ 422.120481][T10357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 422.129191][ T5039] usb 5-1: USB disconnect, device number 19 [ 422.301772][ T4336] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 422.501689][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 422.551717][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 422.711605][ T5039] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 422.901803][ T4336] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.910895][ T4336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.919171][ T4336] usb 8-1: Product: syz [ 422.923775][ T4336] usb 8-1: Manufacturer: syz [ 422.928365][ T4336] usb 8-1: SerialNumber: syz [ 422.938440][ T4336] usb 8-1: config 0 descriptor?? [ 423.072315][ T5039] usb 5-1: config index 0 descriptor too short (expected 159, got 149) [ 423.081152][ T5039] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.091585][ T5039] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.211947][ T4336] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 423.251745][ T5039] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 1.40 [ 423.262724][ T5039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.270769][ T5039] usb 5-1: Product: syz [ 423.275544][ T5039] usb 5-1: Manufacturer: syz [ 423.280585][ T5039] usb 5-1: SerialNumber: syz [ 423.385279][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.528341][ T5039] usb 5-1: USB disconnect, device number 20 [ 423.841625][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 423.872180][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 423.901669][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 423.940154][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 423.971739][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 423.983574][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 423.998621][ T1107] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 424.008161][ T1107] lan78xx: probe of 1-1:1.0 failed with error -71 [ 424.018316][ T1107] usb 1-1: USB disconnect, device number 17 [ 424.321704][ T5039] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 424.541596][ T1107] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 424.602201][ T5039] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 424.681854][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.691123][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.702664][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.781738][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.791040][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.802370][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.881728][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.890805][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.905381][ T1107] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.914166][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.921147][ T1107] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 424.931612][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.940675][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 424.951990][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 425.011757][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.021889][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.033677][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 425.081793][ T1107] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.090999][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.099547][ T1107] usb 1-1: Product: syz [ 425.103851][ T1107] usb 1-1: Manufacturer: syz [ 425.112119][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.121383][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.132648][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 425.153196][ T1107] cdc_wdm 1-1:1.0: skipping garbage [ 425.158419][ T1107] cdc_wdm 1-1:1.0: skipping garbage [ 425.168075][ T1107] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 425.174367][ T1107] cdc_wdm 1-1:1.0: Unknown control protocol [ 425.211780][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.220782][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.232499][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 425.331807][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.340984][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.352648][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 425.451696][ T5039] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.460849][ T5039] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.472912][ T5039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 425.481893][ T4336] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 425.499607][ T4336] usb 8-1: USB disconnect, device number 8 [ 425.651849][ T5039] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 425.662469][ T5039] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 425.670991][ T5039] usb 5-1: Product: syz [ 425.675339][ T5039] usb 5-1: Manufacturer: syz [ 425.679944][ T5039] usb 5-1: SerialNumber: syz [ 425.687022][ T5039] usb 5-1: config 0 descriptor?? [ 425.733531][ T5039] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 425.862484][ T5039] usb 1-1: USB disconnect, device number 18 [ 425.938724][T10051] usb 5-1: USB disconnect, device number 21 [ 425.975797][T10051] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 426.251584][ T4336] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 426.275110][ T5039] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 426.501830][ T4336] usb 8-1: Using ep0 maxpacket: 8 [ 426.521797][T10051] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 426.621757][ T4336] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.632299][ T4336] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 426.671769][ T5039] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 426.682566][ T5039] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.696440][ T5039] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.705703][ T5039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.717090][ T5039] usb 1-1: config 0 descriptor?? [ 426.764816][ T5039] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 426.821792][ T4336] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 426.831319][ T4336] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 426.839851][ T4336] usb 8-1: Product: syz [ 426.844439][ T4336] usb 8-1: Manufacturer: syz [ 426.849088][ T4336] usb 8-1: SerialNumber: syz [ 426.862640][ T4336] usb 8-1: config 0 descriptor?? [ 426.914612][T10051] usb 5-1: unable to get BOS descriptor set [ 426.923540][ T4336] imon_raw 8-1:0.0: IR endpoint missing [ 427.117797][ T5039] usb 8-1: USB disconnect, device number 9 [ 427.231701][T10051] usb 5-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 427.240975][T10051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.249040][T10051] usb 5-1: Product: syz [ 427.266351][T10051] usb 5-1: config 0 descriptor?? [ 427.301809][T10051] usb 5-1: can't set config #0, error -71 [ 427.316164][T10051] usb 5-1: USB disconnect, device number 22 [ 427.676214][T10423] udc-core: couldn't find an available UDC or it's busy [ 427.683862][T10423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 427.707240][T10051] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 427.931720][ T13] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 428.328486][T10051] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 428.344769][T10051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.370083][T10051] usb 5-1: Product: syz [ 428.383567][T10051] usb 5-1: Manufacturer: syz [ 428.399161][ T13] usb 8-1: unable to get BOS descriptor or descriptor too short [ 428.410513][T10051] usb 5-1: SerialNumber: syz [ 428.451779][ T13] usb 8-1: not running at top speed; connect to a high speed hub [ 428.568203][ T13] usb 8-1: config 106 has an invalid interface number: 8 but max is 0 [ 428.587683][ T13] usb 8-1: config 106 has no interface number 0 [ 428.601532][ T13] usb 8-1: config 106 interface 8 has no altsetting 0 [ 428.791825][ T13] usb 8-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 428.806105][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.818470][ T13] usb 8-1: Product: syz [ 428.823072][ T13] usb 8-1: Manufacturer: syz [ 428.828668][ T13] usb 8-1: SerialNumber: syz [ 428.908539][ T4258] usb 1-1: USB disconnect, device number 19 [ 428.931744][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 429.157844][ T13] kalmia 8-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 429.178984][ T13] kalmia: probe of 8-1:106.8 failed with error -22 [ 429.207118][ T13] usb 8-1: USB disconnect, device number 10 [ 430.067050][T10450] loop0: detected capacity change from 0 to 4096 [ 430.080635][T10445] loop7: detected capacity change from 0 to 32768 [ 430.202619][T10454] lo speed is unknown, defaulting to 1000 [ 430.893712][T10445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1460 (10445) [ 430.945393][T10455] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.987242][T10445] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 431.057702][T10445] BTRFS info (device loop7): using free space tree [ 431.071722][T10445] BTRFS info (device loop7): has skinny extents [ 431.131619][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 431.480542][T10479] overlayfs: failed to clone upperpath [ 431.661713][T10445] BTRFS info (device loop7): enabling ssd optimizations [ 432.017900][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 432.231695][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 432.481700][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 432.561931][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 432.635758][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 432.886767][ T8406] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 433.197749][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 433.227297][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 433.256617][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 433.305092][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 433.319962][T10496] loop4: detected capacity change from 0 to 512 [ 433.466764][T10051] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 433.477981][T10051] lan78xx: probe of 5-1:1.0 failed with error -71 [ 433.479501][T10496] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 433.490361][T10051] usb 5-1: USB disconnect, device number 23 [ 433.528065][T10496] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 433.696625][T10496] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1470: Corrupt directory, running e2fsck is recommended [ 433.790978][T10496] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 433.845381][T10496] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.1470: corrupted in-inode xattr [ 433.909346][T10496] EXT4-fs (loop4): Remounting filesystem read-only [ 433.957443][T10496] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1470: couldn't read orphan inode 15 (err -117) [ 434.061737][T10496] EXT4-fs (loop4): Remounting filesystem read-only [ 434.069046][T10496] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 434.381076][T10496] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 434.619023][T10496] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 434.697459][T10496] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 434.766282][T10496] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1470: Corrupt directory, running e2fsck is recommended [ 435.741606][ T5039] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 436.020215][ T5039] usb 8-1: Using ep0 maxpacket: 16 [ 436.141726][ T5039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.201556][ T5039] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 436.642637][ T25] audit: type=1326 audit(1762435788.837:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 436.816657][ T5039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.826874][ T5039] usb 8-1: config 0 descriptor?? [ 436.835040][ T25] audit: type=1326 audit(1762435788.837:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 436.894263][ T25] audit: type=1326 audit(1762435788.837:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 437.046335][T10540] kvm: pic: non byte read [ 437.057439][ T25] audit: type=1326 audit(1762435788.837:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 437.232306][ T25] audit: type=1326 audit(1762435788.837:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 437.371766][ T25] audit: type=1326 audit(1762435788.837:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 437.695566][ T25] audit: type=1326 audit(1762435788.837:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 437.830478][ T25] audit: type=1326 audit(1762435788.837:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 437.871561][ T25] audit: type=1326 audit(1762435788.837:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 438.031591][ T25] audit: type=1326 audit(1762435788.837:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x7ffc0000 [ 438.634522][T10565] loop4: detected capacity change from 0 to 256 [ 438.911737][ T5039] usbhid 8-1:0.0: can't add hid device: -71 [ 438.920585][ T5039] usbhid: probe of 8-1:0.0 failed with error -71 [ 439.115354][T10565] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.124950][ T5039] usb 8-1: USB disconnect, device number 11 [ 439.154786][T10565] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 439.199475][T10565] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 439.514593][T10575] loop7: detected capacity change from 0 to 4096 [ 440.170089][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.186905][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.606995][T10606] loop7: detected capacity change from 0 to 4096 [ 442.781674][T10613] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.894252][T10614] loop4: detected capacity change from 0 to 2048 [ 442.994638][T10614] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 443.062916][T10614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.791348][T10619] delete_channel: no stack [ 443.802115][T10622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1507'. [ 444.601989][ T1107] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 444.881684][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 445.151786][ T1107] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 445.161825][ T1107] usb 5-1: config 179 has no interface number 0 [ 445.168815][ T1107] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 445.210987][ T1107] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 445.233865][ T1107] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.265386][ T1107] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 445.298241][ T1107] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 445.324870][ T1107] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 445.341093][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.391978][T10638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 445.656363][ T5033] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 446.133884][T10664] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 446.204636][T10667] netlink: 'syz.4.1513': attribute type 21 has an invalid length. [ 446.235994][T10667] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.320198][T10667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.328384][T10667] IPv6: NLM_F_CREATE should be set when creating new route [ 446.336212][T10667] IPv6: NLM_F_CREATE should be set when creating new route [ 446.343463][T10667] IPv6: NLM_F_CREATE should be set when creating new route [ 446.767546][ T5033] usb 5-1: USB disconnect, device number 24 [ 446.773650][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 446.773695][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 446.853782][ T5033] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 447.049057][T10677] FAULT_INJECTION: forcing a failure. [ 447.049057][T10677] name failslab, interval 1, probability 0, space 0, times 0 [ 447.061809][T10677] CPU: 1 PID: 10677 Comm: syz.4.1522 Not tainted syzkaller #0 [ 447.069281][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.079433][T10677] Call Trace: [ 447.082722][T10677] [ 447.085661][T10677] dump_stack_lvl+0x168/0x230 [ 447.090489][T10677] ? show_regs_print_info+0x20/0x20 [ 447.095806][T10677] ? load_image+0x3b0/0x3b0 [ 447.100530][T10677] should_fail+0x38c/0x4c0 [ 447.104980][T10677] should_failslab+0x5/0x20 [ 447.109604][T10677] slab_pre_alloc_hook+0x51/0xc0 [ 447.114665][T10677] ? nf_ct_ext_add+0x42e/0x660 [ 447.119450][T10677] __kmalloc_track_caller+0x69/0x330 [ 447.124838][T10677] ? nf_ct_ext_add+0x42e/0x660 [ 447.129707][T10677] krealloc+0x5a/0xf0 [ 447.133813][T10677] nf_ct_ext_add+0x42e/0x660 [ 447.139134][T10677] init_conntrack+0x751/0x14b0 [ 447.144092][T10677] ? __nf_conntrack_find_get+0x54c/0x620 [ 447.150446][T10677] ? early_drop+0x810/0x810 [ 447.155001][T10677] ? nf_conntrack_find_get+0x600/0x600 [ 447.160568][T10677] ? __siphash_unaligned+0x25c/0x3a0 [ 447.165974][T10677] nf_conntrack_in+0xce9/0x16f0 [ 447.173323][T10677] ? lockdep_hardirqs_on+0x94/0x140 [ 447.179448][T10677] ? nf_ct_pernet+0x240/0x240 [ 447.184704][T10677] ? ipv4_conntrack_defrag+0x284/0x590 [ 447.191920][T10677] ? ipv4_conntrack_local+0x11f/0x200 [ 447.197479][T10677] ? ipv4_conntrack_in+0x20/0x20 [ 447.202528][T10677] nf_hook_slow+0xb9/0x200 [ 447.206971][T10677] nf_hook+0x1f2/0x350 [ 447.211229][T10677] ? __ip_make_skb+0x11b6/0x1920 [ 447.216421][T10677] ? __ip_local_out+0x5e0/0x5e0 [ 447.221904][T10677] ? nf_hook+0x350/0x350 [ 447.226636][T10677] __ip_local_out+0x4b7/0x5e0 [ 447.231949][T10677] ? nf_hook+0x350/0x350 [ 447.237160][T10677] ip_send_skb+0x48/0x1c0 [ 447.241515][T10677] udp_send_skb+0x94a/0x1330 [ 447.246322][T10677] udp_sendmsg+0x1aaa/0x2340 [ 447.250930][T10677] ? verify_lock_unused+0x140/0x140 [ 447.256687][T10677] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 447.261679][T10677] ? udp_cmsg_send+0x350/0x350 [ 447.266679][T10677] ? aa_af_perm+0x2b0/0x2b0 [ 447.271205][T10677] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 447.277749][T10677] ? sock_rps_record_flow+0x17/0x3b0 [ 447.283232][T10677] ? inet_send_prepare+0x260/0x260 [ 447.288367][T10677] ? inet_sendmsg+0x78/0x2f0 [ 447.293104][T10677] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 447.298417][T10677] ? security_socket_sendmsg+0x7c/0xa0 [ 447.303991][T10677] ? inet_send_prepare+0x260/0x260 [ 447.309152][T10677] ____sys_sendmsg+0x5a2/0x8c0 [ 447.314024][T10677] ? memset+0x1e/0x40 [ 447.318215][T10677] ? __sys_sendmsg_sock+0x30/0x30 [ 447.323883][T10677] ? import_iovec+0x6f/0xa0 [ 447.328407][T10677] ___sys_sendmsg+0x1f0/0x260 [ 447.333789][T10677] ? __sys_sendmsg+0x250/0x250 [ 447.339228][T10677] ? __fdget+0x18b/0x210 [ 447.343582][T10677] __sys_sendmmsg+0x27c/0x4a0 [ 447.348390][T10677] ? __ia32_sys_sendmsg+0x80/0x80 [ 447.353663][T10677] ? __context_tracking_exit+0x4c/0x80 [ 447.359167][T10677] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 447.365202][T10677] ? lock_chain_count+0x20/0x20 [ 447.370087][T10677] ? vtime_user_exit+0x2dc/0x400 [ 447.375234][T10677] __x64_sys_sendmmsg+0x9c/0xb0 [ 447.380107][T10677] do_syscall_64+0x4c/0xa0 [ 447.384558][T10677] ? clear_bhb_loop+0x30/0x80 [ 447.389519][T10677] ? clear_bhb_loop+0x30/0x80 [ 447.394325][T10677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.400700][T10677] RIP: 0033:0x7fa3b8a1f6c9 [ 447.405134][T10677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.426068][T10677] RSP: 002b:00007fa3b6c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 447.435111][T10677] RAX: ffffffffffffffda RBX: 00007fa3b8c75fa0 RCX: 00007fa3b8a1f6c9 [ 447.443543][T10677] RDX: 0400000000000077 RSI: 0000200000000180 RDI: 0000000000000007 [ 447.451635][T10677] RBP: 00007fa3b6c86090 R08: 0000000000000000 R09: 0000000000000000 [ 447.459865][T10677] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000001 [ 447.467964][T10677] R13: 00007fa3b8c76038 R14: 00007fa3b8c75fa0 R15: 00007ffc431e1838 [ 447.476756][T10677] [ 447.750350][T10670] loop0: detected capacity change from 0 to 32768 [ 447.844988][T10670] XFS: ikeep mount option is deprecated. [ 448.080794][T10670] XFS (loop0): Mounting V5 Filesystem [ 448.250248][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 448.301389][T10670] XFS (loop0): Ending clean mount [ 448.355600][T10670] XFS (loop0): Quotacheck needed: Please wait. [ 448.732643][T10670] XFS (loop0): Quotacheck: Done. [ 449.276908][T10670] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x244b dinode [ 449.289304][T10670] XFS (loop0): Unmount and run xfs_repair [ 449.295416][T10670] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 449.303207][T10670] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 449.312244][T10670] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 449.321351][T10670] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 449.378815][T10670] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 449.389180][T10670] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 449.398497][T10670] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 449.407612][T10670] 00000060: ff ff ff ff e6 8a f7 29 00 00 00 00 00 00 00 00 .......)........ [ 449.417246][T10670] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 449.427015][T10670] XFS (loop0): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_symlink+0x7c8/0x1890 [ 449.440918][T10670] CPU: 1 PID: 10670 Comm: syz.0.1519 Not tainted syzkaller #0 [ 449.448421][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.459099][T10670] Call Trace: [ 449.462398][T10670] [ 449.465346][T10670] dump_stack_lvl+0x168/0x230 [ 449.470050][T10670] ? show_regs_print_info+0x20/0x20 [ 449.475750][T10670] ? preempt_count_add+0x8d/0x190 [ 449.480798][T10670] ? xfs_defer_cancel_list+0x5b8/0x5d0 [ 449.486481][T10670] ? xfs_error_report+0x8e/0xc0 [ 449.491657][T10670] ? xfs_symlink+0x7c8/0x1890 [ 449.496888][T10670] ? xfs_symlink+0x7c8/0x1890 [ 449.501624][T10670] xfs_trans_cancel+0x1bc/0x410 [ 449.507708][T10670] ? xfs_symlink+0x7c8/0x1890 [ 449.512610][T10670] xfs_symlink+0x7c8/0x1890 [ 449.517344][T10670] ? xfs_readlink+0x3e0/0x3e0 [ 449.522106][T10670] ? tomoyo_path_perm+0x418/0x510 [ 449.527911][T10670] ? tomoyo_path_permission+0x380/0x380 [ 449.535028][T10670] ? do_raw_spin_unlock+0x11d/0x230 [ 449.540335][T10670] ? end_current_label_crit_section+0x14b/0x170 [ 449.546633][T10670] xfs_vn_symlink+0x17c/0x670 [ 449.551342][T10670] ? xfs_vn_unlink+0x210/0x210 [ 449.556139][T10670] ? generic_permission+0x230/0x510 [ 449.561364][T10670] ? inode_permission+0xef/0x480 [ 449.566314][T10670] ? bpf_lsm_inode_symlink+0x5/0x10 [ 449.571533][T10670] ? security_inode_symlink+0xb2/0x100 [ 449.577018][T10670] vfs_symlink+0x247/0x3d0 [ 449.581453][T10670] do_symlinkat+0x1be/0x6c0 [ 449.585974][T10670] ? __check_object_size+0x30c/0x410 [ 449.591366][T10670] ? vfs_symlink+0x3d0/0x3d0 [ 449.595986][T10670] ? getname_flags+0x1fe/0x500 [ 449.600800][T10670] __x64_sys_symlink+0x7a/0x90 [ 449.605607][T10670] do_syscall_64+0x4c/0xa0 [ 449.610051][T10670] ? clear_bhb_loop+0x30/0x80 [ 449.614748][T10670] ? clear_bhb_loop+0x30/0x80 [ 449.619465][T10670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.625640][T10670] RIP: 0033:0x7fa6197b26c9 [ 449.630164][T10670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.651091][T10670] RSP: 002b:00007fa617a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 449.660057][T10670] RAX: ffffffffffffffda RBX: 00007fa619a08fa0 RCX: 00007fa6197b26c9 [ 449.668151][T10670] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000200000001640 [ 449.677472][T10670] RBP: 00007fa619834f91 R08: 0000000000000000 R09: 0000000000000000 [ 449.685670][T10670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.693687][T10670] R13: 00007fa619a09038 R14: 00007fa619a08fa0 R15: 00007ffeb60352d8 [ 449.701900][T10670] [ 449.705370][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.807913][T10670] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1d5/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 449.823354][T10670] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 449.876343][ T4182] XFS (loop0): Unmounting Filesystem [ 449.976152][T10738] loop7: detected capacity change from 0 to 164 [ 450.408967][T10741] FAULT_INJECTION: forcing a failure. [ 450.408967][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 450.496886][T10741] CPU: 1 PID: 10741 Comm: syz.4.1539 Not tainted syzkaller #0 [ 450.504401][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.514466][T10741] Call Trace: [ 450.517751][T10741] [ 450.520687][T10741] dump_stack_lvl+0x168/0x230 [ 450.525375][T10741] ? show_regs_print_info+0x20/0x20 [ 450.530680][T10741] ? load_image+0x3b0/0x3b0 [ 450.535199][T10741] ? __might_sleep+0xf0/0xf0 [ 450.540037][T10741] ? __lock_acquire+0x7c60/0x7c60 [ 450.545200][T10741] should_fail+0x38c/0x4c0 [ 450.549640][T10741] should_failslab+0x5/0x20 [ 450.554160][T10741] slab_pre_alloc_hook+0x51/0xc0 [ 450.559114][T10741] __kmalloc_node_track_caller+0x68/0x3a0 [ 450.564838][T10741] ? alloc_skb_with_frags+0xa7/0x730 [ 450.570304][T10741] ? kmem_cache_alloc_node+0x162/0x2d0 [ 450.575949][T10741] ? __alloc_skb+0xf4/0x750 [ 450.580602][T10741] ? alloc_skb_with_frags+0xa7/0x730 [ 450.585913][T10741] __alloc_skb+0x22c/0x750 [ 450.590354][T10741] alloc_skb_with_frags+0xa7/0x730 [ 450.595508][T10741] sock_alloc_send_pskb+0x853/0x980 [ 450.600780][T10741] ? sock_kzfree_s+0x50/0x50 [ 450.605398][T10741] __ip_append_data+0x1f82/0x3230 [ 450.610449][T10741] ? _local_bh_enable+0xa0/0xa0 [ 450.615329][T10741] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 450.620203][T10741] ? rcu_lock_release+0x9/0x20 [ 450.624992][T10741] ? ip_setup_cork+0x890/0x890 [ 450.629778][T10741] ? ipv4_mtu+0x2c5/0x3e0 [ 450.634171][T10741] ? ip_setup_cork+0x496/0x890 [ 450.638965][T10741] ip_make_skb+0x1d6/0x3e0 [ 450.643424][T10741] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 450.648387][T10741] ? ip_flush_pending_frames+0x250/0x250 [ 450.655194][T10741] udp_sendmsg+0x1a5a/0x2340 [ 450.659906][T10741] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 450.665125][T10741] ? udp_cmsg_send+0x350/0x350 [ 450.670443][T10741] ? __lock_acquire+0x12d9/0x7c60 [ 450.675514][T10741] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 450.681523][T10741] udpv6_sendmsg+0x92f/0x2320 [ 450.686399][T10741] ? release_sock+0x2b/0x1b0 [ 450.691007][T10741] ? reacquire_held_locks+0x2f9/0x590 [ 450.696410][T10741] ? udp_v6_early_demux+0xe90/0xe90 [ 450.701736][T10741] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 450.707765][T10741] ? __local_bh_enable_ip+0x12a/0x1b0 [ 450.713246][T10741] ? lockdep_hardirqs_on+0x94/0x140 [ 450.718575][T10741] ? __local_bh_enable_ip+0x12a/0x1b0 [ 450.724186][T10741] ? _local_bh_enable+0xa0/0xa0 [ 450.729672][T10741] ? ip6_datagram_release_cb+0x37e/0x4f0 [ 450.735809][T10741] ? do_raw_spin_unlock+0x11d/0x230 [ 450.741174][T10741] ? inet_send_prepare+0x1af/0x260 [ 450.746420][T10741] ? inet_send_prepare+0x1af/0x260 [ 450.751568][T10741] ? inet6_compat_ioctl+0x380/0x380 [ 450.756799][T10741] ? inet6_sendmsg+0x5b/0xd0 [ 450.761411][T10741] ? inet6_compat_ioctl+0x380/0x380 [ 450.766885][T10741] ____sys_sendmsg+0x5a2/0x8c0 [ 450.771688][T10741] ? __sys_sendmsg_sock+0x30/0x30 [ 450.776836][T10741] ? import_iovec+0x6f/0xa0 [ 450.781363][T10741] ___sys_sendmsg+0x1f0/0x260 [ 450.787160][T10741] ? __sys_sendmsg+0x250/0x250 [ 450.792355][T10741] ? __fdget+0x18b/0x210 [ 450.796644][T10741] __sys_sendmmsg+0x27c/0x4a0 [ 450.801347][T10741] ? __ia32_sys_sendmsg+0x80/0x80 [ 450.806398][T10741] ? __context_tracking_exit+0x4c/0x80 [ 450.811899][T10741] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 450.818006][T10741] ? lock_chain_count+0x20/0x20 [ 450.822880][T10741] ? vtime_user_exit+0x2dc/0x400 [ 450.827881][T10741] __x64_sys_sendmmsg+0x9c/0xb0 [ 450.832976][T10741] do_syscall_64+0x4c/0xa0 [ 450.837413][T10741] ? clear_bhb_loop+0x30/0x80 [ 450.842099][T10741] ? clear_bhb_loop+0x30/0x80 [ 450.846792][T10741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.852692][T10741] RIP: 0033:0x7fa3b8a1f6c9 [ 450.857335][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.877833][T10741] RSP: 002b:00007fa3b6c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 450.886259][T10741] RAX: ffffffffffffffda RBX: 00007fa3b8c75fa0 RCX: 00007fa3b8a1f6c9 [ 450.894341][T10741] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006 [ 450.902322][T10741] RBP: 00007fa3b6c86090 R08: 0000000000000000 R09: 0000000000000000 [ 450.910484][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.918762][T10741] R13: 00007fa3b8c76038 R14: 00007fa3b8c75fa0 R15: 00007ffc431e1838 [ 450.926858][T10741] [ 450.930107][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.465648][T10747] binder: 10744:10747 ioctl c0306201 0 returned -14 [ 451.647073][T10752] loop7: detected capacity change from 0 to 8192 [ 452.177211][T10761] loop7: detected capacity change from 0 to 512 [ 452.248692][T10761] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 452.271681][T10761] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.378881][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f967400: rx timeout, send abort [ 454.403502][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805f967400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 454.627056][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1554'. [ 455.328296][T10806] loop0: detected capacity change from 0 to 4096 [ 455.416353][T10811] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.321202][T10841] tipc: Started in network mode [ 458.333337][T10841] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 458.341262][T10841] tipc: Enabled bearer , priority 12 [ 459.304211][ T8373] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.336318][ T1107] tipc: Node number set to 15444650 [ 459.533705][ T8373] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.703878][ T8373] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.824497][ T8373] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.240993][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.319542][T10869] net_ratelimit: 1 callbacks suppressed [ 460.319552][T10869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.451831][ T4258] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 462.723520][T10901] FAULT_INJECTION: forcing a failure. [ 462.723520][T10901] name failslab, interval 1, probability 0, space 0, times 0 [ 462.736407][T10901] CPU: 0 PID: 10901 Comm: syz.7.1577 Not tainted syzkaller #0 [ 462.743969][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 462.754300][T10901] Call Trace: [ 462.757590][T10901] [ 462.760536][T10901] dump_stack_lvl+0x168/0x230 [ 462.765230][T10901] ? show_regs_print_info+0x20/0x20 [ 462.770632][T10901] ? load_image+0x3b0/0x3b0 [ 462.775278][T10901] should_fail+0x38c/0x4c0 [ 462.779721][T10901] should_failslab+0x5/0x20 [ 462.784432][T10901] slab_pre_alloc_hook+0x51/0xc0 [ 462.789600][T10901] ? skb_clone+0x1bd/0x350 [ 462.794320][T10901] kmem_cache_alloc+0x3d/0x290 [ 462.799108][T10901] skb_clone+0x1bd/0x350 [ 462.803367][T10901] __netlink_deliver_tap+0x3cd/0x7c0 [ 462.809218][T10901] netlink_deliver_tap+0x16c/0x180 [ 462.814651][T10901] netlink_unicast+0x74f/0x920 [ 462.819545][T10901] netlink_sendmsg+0x8ab/0xbc0 [ 462.824365][T10901] ? netlink_getsockopt+0x560/0x560 [ 462.829951][T10901] ? aa_sock_msg_perm+0x94/0x150 [ 462.835213][T10901] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 462.840517][T10901] ? security_socket_sendmsg+0x7c/0xa0 [ 462.846066][T10901] ? netlink_getsockopt+0x560/0x560 [ 462.851265][T10901] ____sys_sendmsg+0x5a2/0x8c0 [ 462.856049][T10901] ? memset+0x1e/0x40 [ 462.860211][T10901] ? __sys_sendmsg_sock+0x30/0x30 [ 462.865446][T10901] ? import_iovec+0x6f/0xa0 [ 462.870237][T10901] ___sys_sendmsg+0x1f0/0x260 [ 462.875288][T10901] ? __sys_sendmsg+0x250/0x250 [ 462.880094][T10901] ? vfs_write+0x84d/0xd00 [ 462.884632][T10901] ? __fdget+0x18b/0x210 [ 462.888983][T10901] __se_sys_sendmsg+0x190/0x250 [ 462.893853][T10901] ? __x64_sys_sendmsg+0x80/0x80 [ 462.898883][T10901] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 462.904973][T10901] ? lockdep_hardirqs_on+0x94/0x140 [ 462.910640][T10901] do_syscall_64+0x4c/0xa0 [ 462.915060][T10901] ? clear_bhb_loop+0x30/0x80 [ 462.919757][T10901] ? clear_bhb_loop+0x30/0x80 [ 462.924536][T10901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 462.930445][T10901] RIP: 0033:0x7f89bac626c9 [ 462.934886][T10901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.954609][T10901] RSP: 002b:00007f89b8e87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.963179][T10901] RAX: ffffffffffffffda RBX: 00007f89baeb9180 RCX: 00007f89bac626c9 [ 462.972434][T10901] RDX: 00000000000c2010 RSI: 0000200000000a00 RDI: 0000000000000003 [ 462.980685][T10901] RBP: 00007f89b8e87090 R08: 0000000000000000 R09: 0000000000000000 [ 462.988763][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.997200][T10901] R13: 00007f89baeb9218 R14: 00007f89baeb9180 R15: 00007ffd299a6928 [ 463.006323][T10901] [ 463.952399][ T4258] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.042137][ T4258] usb 5-1: string descriptor 0 read error: -71 [ 464.049650][ T4258] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.081370][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.101852][ T1107] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 464.193785][ T8376] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.282074][ T4258] usb 5-1: can't set config #1, error -71 [ 464.301421][ T4258] usb 5-1: USB disconnect, device number 25 [ 464.471823][ T1107] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 464.494805][ T1107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.540267][ T1107] usb 8-1: config 0 descriptor?? [ 464.604077][ T1107] cp210x 8-1:0.0: cp210x converter detected [ 464.776262][T10912] loop0: detected capacity change from 0 to 32768 [ 464.860816][T10912] (syz.0.1580,10912,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "heartbeat=nonenc_commit" or missing value [ 465.054521][T10912] (syz.0.1580,10912,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 465.345970][ T8373] device hsr_slave_0 left promiscuous mode [ 465.511695][ T1107] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 465.546152][ T1107] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 465.554491][T10912] loop0: detected capacity change from 0 to 4096 [ 466.024606][ T1107] usb 8-1: cp210x converter now attached to ttyUSB0 [ 466.034112][ T1107] usb 8-1: USB disconnect, device number 12 [ 466.048631][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.058063][T10912] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 466.058561][ T1107] cp210x 8-1:0.0: device disconnected [ 466.076645][T10912] ntfs3: loop0: Failed to load $Extend. [ 466.096843][ T8373] device hsr_slave_1 left promiscuous mode [ 466.116434][T10912] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 466.136913][ T8373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.166593][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.208665][ T8373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.231763][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.250283][ T8373] device bridge_slave_1 left promiscuous mode [ 466.276861][T10964] loop7: detected capacity change from 0 to 512 [ 466.286521][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.306761][ T8373] device bridge_slave_0 left promiscuous mode [ 466.326427][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.479715][T10964] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 466.511862][ T8373] device veth1_macvtap left promiscuous mode [ 466.519050][ T8373] device veth0_macvtap left promiscuous mode [ 466.526695][ T8373] device veth1_vlan left promiscuous mode [ 466.532775][ T8373] device veth0_vlan left promiscuous mode [ 466.683781][T10964] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 466.815174][T10964] EXT4-fs (loop7): 1 truncate cleaned up [ 466.821060][T10964] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 467.401650][ T8373] team0 (unregistering): Port device team_slave_1 removed [ 467.433443][ T8373] team0 (unregistering): Port device team_slave_0 removed [ 467.463588][ T8373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.590851][ T8373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.814966][ T8373] bond0 (unregistering): Released all slaves [ 468.699887][T10984] loop4: detected capacity change from 0 to 512 [ 469.011896][T10984] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.264040][T10984] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1598: invalid indirect mapped block 4294967295 (level 1) [ 469.372259][T10984] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1598: invalid indirect mapped block 4294967295 (level 1) [ 469.393828][ T1107] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 469.428304][T10984] EXT4-fs (loop4): 2 truncates cleaned up [ 469.446442][T10984] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 469.885367][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 470.091982][ T1107] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.129107][ T1107] usb 1-1: config 0 has no interface number 0 [ 470.157655][ T1107] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.197079][ T1107] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.256367][ T1107] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 470.318888][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.369831][ T1107] usb 1-1: config 0 descriptor?? [ 470.440814][T11032] loop7: detected capacity change from 0 to 4096 [ 470.532728][T11044] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 470.871764][ T1107] usbhid 1-1:0.1: can't add hid device: -71 [ 470.878464][ T1107] usbhid: probe of 1-1:0.1 failed with error -71 [ 470.927333][ T1107] usb 1-1: USB disconnect, device number 20 [ 473.381247][T11097] loop4: detected capacity change from 0 to 4096 [ 473.539426][T11097] ntfs: volume version 3.1. [ 473.746094][T11053] loop0: detected capacity change from 0 to 40427 [ 474.137802][T11110] loop7: detected capacity change from 0 to 8192 [ 474.313449][T11122] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.446196][T11129] loop4: detected capacity change from 0 to 7 [ 475.474901][T11129] Dev loop4: unable to read RDB block 7 [ 475.480831][T11129] loop4: unable to read partition table [ 475.636463][T11129] loop4: partition table beyond EOD, truncated [ 475.800892][T11129] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 476.753946][T11149] device macvlan2 entered promiscuous mode [ 477.001674][ T5033] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 477.263731][ T5033] usb 1-1: Using ep0 maxpacket: 32 [ 477.391897][ T5033] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 477.400507][ T5033] usb 1-1: config 0 has no interface number 0 [ 477.451579][ T5033] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 477.671872][ T5033] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 477.687697][ T5033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.726601][ T5033] usb 1-1: Product: syz [ 477.731414][ T5033] usb 1-1: Manufacturer: syz [ 477.741657][ T5033] usb 1-1: SerialNumber: syz [ 477.762326][ T5033] usb 1-1: config 0 descriptor?? [ 477.829452][ T5033] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 477.840371][ T3560] Dev loop4: unable to read RDB block 7 [ 477.850436][ T3560] loop4: unable to read partition table [ 477.870703][ T5033] em28xx 1-1:0.132: Video interface 132 found: [ 477.878323][ T3560] loop4: partition table beyond EOD, truncated [ 478.218123][T11194] FAULT_INJECTION: forcing a failure. [ 478.218123][T11194] name failslab, interval 1, probability 0, space 0, times 0 [ 478.261522][T11194] CPU: 0 PID: 11194 Comm: syz.4.1639 Not tainted syzkaller #0 [ 478.270200][T11194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.281738][T11194] Call Trace: [ 478.285905][T11194] [ 478.289862][T11194] dump_stack_lvl+0x168/0x230 [ 478.295627][T11194] ? show_regs_print_info+0x20/0x20 [ 478.301282][T11194] ? load_image+0x3b0/0x3b0 [ 478.306395][T11194] should_fail+0x38c/0x4c0 [ 478.313837][T11194] should_failslab+0x5/0x20 [ 478.318799][T11194] slab_pre_alloc_hook+0x51/0xc0 [ 478.324237][T11194] kmem_cache_alloc_trace+0x47/0x2a0 [ 478.329570][T11194] ? sctp_add_bind_addr+0x89/0x350 [ 478.334823][T11194] sctp_add_bind_addr+0x89/0x350 [ 478.340232][T11194] sctp_copy_local_addr_list+0x2d4/0x490 [ 478.346466][T11194] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 478.352565][T11194] ? sctp_v6_is_any+0x60/0x70 [ 478.357476][T11194] ? sctp_copy_one_addr+0x93/0x660 [ 478.363583][T11194] sctp_bind_addr_copy+0xaf/0x3c0 [ 478.369077][T11194] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 478.375758][T11194] sctp_connect_new_asoc+0x2d6/0x690 [ 478.381078][T11194] ? __sctp_connect+0xd20/0xd20 [ 478.386111][T11194] ? __local_bh_enable_ip+0x12a/0x1b0 [ 478.391788][T11194] ? lock_sock_nested+0x68/0x100 [ 478.396845][T11194] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 478.402661][T11194] ? security_sctp_bind_connect+0x85/0xb0 [ 478.408506][T11194] sctp_sendmsg+0x15e0/0x2950 [ 478.413284][T11194] ? aa_sk_perm+0x7b4/0x8f0 [ 478.417815][T11194] ? sctp_getsockopt+0x8a0/0x8a0 [ 478.422873][T11194] ? aa_af_perm+0x2b0/0x2b0 [ 478.427466][T11194] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 478.433919][T11194] ? sock_rps_record_flow+0x17/0x3b0 [ 478.439535][T11194] ? inet_send_prepare+0x260/0x260 [ 478.444697][T11194] ? inet_sendmsg+0xe5/0x2f0 [ 478.449329][T11194] ? inet_send_prepare+0x260/0x260 [ 478.454803][T11194] ____sys_sendmsg+0x5a2/0x8c0 [ 478.459880][T11194] ? memset+0x1e/0x40 [ 478.464245][T11194] ? __sys_sendmsg_sock+0x30/0x30 [ 478.469678][T11194] ? import_iovec+0x6f/0xa0 [ 478.474528][T11194] ___sys_sendmsg+0x1f0/0x260 [ 478.479441][T11194] ? __sys_sendmsg+0x250/0x250 [ 478.484513][T11194] ? __fdget+0x18b/0x210 [ 478.488778][T11194] __sys_sendmmsg+0x27c/0x4a0 [ 478.493485][T11194] ? __ia32_sys_sendmsg+0x80/0x80 [ 478.498673][T11194] ? __context_tracking_exit+0x4c/0x80 [ 478.504176][T11194] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 478.511599][T11194] ? lock_chain_count+0x20/0x20 [ 478.516877][T11194] ? vtime_user_exit+0x2dc/0x400 [ 478.522211][T11194] __x64_sys_sendmmsg+0x9c/0xb0 [ 478.527081][T11194] do_syscall_64+0x4c/0xa0 [ 478.531683][T11194] ? clear_bhb_loop+0x30/0x80 [ 478.536541][T11194] ? clear_bhb_loop+0x30/0x80 [ 478.541613][T11194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.547631][T11194] RIP: 0033:0x7fa3b8a1f6c9 [ 478.551786][ T5033] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 478.552727][T11194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.578929][T11194] RSP: 002b:00007fa3b6c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 478.587367][T11194] RAX: ffffffffffffffda RBX: 00007fa3b8c75fa0 RCX: 00007fa3b8a1f6c9 [ 478.596556][T11194] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 478.604841][T11194] RBP: 00007fa3b6c86090 R08: 0000000000000000 R09: 0000000000000000 [ 478.613007][T11194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.621202][T11194] R13: 00007fa3b8c76038 R14: 00007fa3b8c75fa0 R15: 00007ffc431e1838 [ 478.630493][T11194] [ 479.355184][T11183] loop7: detected capacity change from 0 to 32768 [ 480.231778][ T5033] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 480.238697][ T5033] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 480.551583][ T5033] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 480.559606][ T5033] em28xx 1-1:0.132: analog set to bulk mode. [ 480.740915][ T5033] usb 1-1: USB disconnect, device number 21 [ 480.759471][ T5033] em28xx 1-1:0.132: Disconnecting em28xx [ 480.765811][ T5039] em28xx 1-1:0.132: Registering V4L2 extension [ 481.823799][T11202] loop4: detected capacity change from 0 to 32768 [ 481.922208][T11202] [ 481.922208][T11202] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 481.922208][T11202] [ 482.182201][T11242] loop0: detected capacity change from 0 to 32768 [ 482.197583][T11241] loop7: detected capacity change from 0 to 32768 [ 482.819106][ T4188] [ 482.819106][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 482.819106][ T4188] [ 482.891672][ T4188] [ 482.891672][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 482.891672][ T4188] [ 482.906440][T11241] (syz.7.1649,11241,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 482.917910][T11241] (syz.7.1649,11241,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 482.987310][T11242] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 483.009021][T11242] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 483.029162][T11242] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 483.040535][T11242] OCFS2: File system is now read-only. [ 483.046432][T11242] (syz.0.1650,11242,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 483.054131][T11242] (syz.0.1650,11242,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 483.063145][T11242] (syz.0.1650,11242,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 483.071163][T11242] (syz.0.1650,11242,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 483.082467][T11242] (syz.0.1650,11242,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 483.091261][T11242] (syz.0.1650,11242,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 483.100983][T11242] (syz.0.1650,11242,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 483.104287][ T5039] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 483.109813][T11242] (syz.0.1650,11242,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 483.128668][T11242] (syz.0.1650,11242,0):ocfs2_mknod:298 ERROR: status = -5 [ 483.137088][T11242] (syz.0.1650,11242,0):ocfs2_mknod:502 ERROR: status = -5 [ 483.146268][T11242] (syz.0.1650,11242,0):ocfs2_mkdir:659 ERROR: status = -5 [ 483.240239][ T5039] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 483.271344][ T5039] em28xx 1-1:0.132: No AC97 audio processor [ 483.317818][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 483.454040][ T5039] usb 1-1: Decoder not found [ 483.530877][ T5039] em28xx 1-1:0.132: failed to create media graph [ 483.621973][ T5039] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 483.741165][ T5039] em28xx 1-1:0.132: Remote control support is not available for this card. [ 483.792292][T11284] loop7: detected capacity change from 0 to 4096 [ 483.809980][ T5033] em28xx 1-1:0.132: Closing input extension [ 484.640667][ T5033] em28xx 1-1:0.132: Freeing device [ 484.742264][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1662'. [ 484.841364][T11284] overlayfs: upper fs is r/o, try multi-lower layers mount [ 485.077540][T11305] tipc: Started in network mode [ 485.116312][T11317] overlayfs: failed to clone upperpath [ 485.126319][T11317] overlayfs: missing 'lowerdir' [ 485.137671][T11317] fuse: Bad value for 'fd' [ 485.161317][T11305] tipc: Node identity be1444e460c6, cluster identity 4711 [ 485.253127][T11305] tipc: Enabled bearer , priority 0 [ 485.297581][T11306] device syzkaller0 entered promiscuous mode [ 485.367067][T11305] tipc: Resetting bearer [ 485.428182][T11304] tipc: Resetting bearer [ 485.492692][T11304] tipc: Disabling bearer [ 485.498850][T11328] loop7: detected capacity change from 0 to 4096 [ 485.680087][T11346] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 485.702537][T11328] fuse: Unknown parameter 'f 0x0000000000000006' [ 486.042143][T11328] NILFS error (device loop7): nilfs_dotdot: directory #12 missing '.' [ 486.167693][T11328] Remounting filesystem read-only [ 486.477745][T11369] loop0: detected capacity change from 0 to 512 [ 486.957777][T11369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 486.990253][T11369] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.063822][ T5106] Bluetooth: hci1: command 0x0406 tx timeout [ 488.325005][T11400] FAULT_INJECTION: forcing a failure. [ 488.325005][T11400] name failslab, interval 1, probability 0, space 0, times 0 [ 488.409977][T11400] CPU: 1 PID: 11400 Comm: syz.0.1678 Not tainted syzkaller #0 [ 488.417496][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.427735][T11400] Call Trace: [ 488.431027][T11400] [ 488.433958][T11400] dump_stack_lvl+0x168/0x230 [ 488.438662][T11400] ? show_regs_print_info+0x20/0x20 [ 488.443879][T11400] ? load_image+0x3b0/0x3b0 [ 488.448392][T11400] should_fail+0x38c/0x4c0 [ 488.452814][T11400] should_failslab+0x5/0x20 [ 488.457329][T11400] slab_pre_alloc_hook+0x51/0xc0 [ 488.462275][T11400] ? skb_clone+0x1bd/0x350 [ 488.466697][T11400] kmem_cache_alloc+0x3d/0x290 [ 488.471465][T11400] skb_clone+0x1bd/0x350 [ 488.475712][T11400] __netlink_deliver_tap+0x3cd/0x7c0 [ 488.481424][T11400] netlink_deliver_tap+0x16c/0x180 [ 488.486532][T11400] netlink_unicast+0x74f/0x920 [ 488.491306][T11400] netlink_sendmsg+0x8ab/0xbc0 [ 488.496075][T11400] ? netlink_getsockopt+0x560/0x560 [ 488.501455][T11400] ? mark_lock+0x94/0x320 [ 488.505786][T11400] ? aa_sock_msg_perm+0x94/0x150 [ 488.510724][T11400] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 488.516093][T11400] ? security_socket_sendmsg+0x7c/0xa0 [ 488.522083][T11400] ? netlink_getsockopt+0x560/0x560 [ 488.527284][T11400] ____sys_sendmsg+0x5a2/0x8c0 [ 488.532070][T11400] ? memset+0x1e/0x40 [ 488.536058][T11400] ? __sys_sendmsg_sock+0x30/0x30 [ 488.541097][T11400] ? import_iovec+0x6f/0xa0 [ 488.545654][T11400] ___sys_sendmsg+0x1f0/0x260 [ 488.550359][T11400] ? __sys_sendmsg+0x250/0x250 [ 488.555177][T11400] ? __might_fault+0xb3/0x110 [ 488.559877][T11400] __sys_sendmmsg+0x27c/0x4a0 [ 488.564666][T11400] ? __ia32_sys_sendmsg+0x80/0x80 [ 488.569730][T11400] ? __context_tracking_exit+0x4c/0x80 [ 488.575219][T11400] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 488.581233][T11400] ? lock_chain_count+0x20/0x20 [ 488.586459][T11400] ? vtime_user_exit+0x2dc/0x400 [ 488.591425][T11400] __x64_sys_sendmmsg+0x9c/0xb0 [ 488.596310][T11400] do_syscall_64+0x4c/0xa0 [ 488.600830][T11400] ? clear_bhb_loop+0x30/0x80 [ 488.605612][T11400] ? clear_bhb_loop+0x30/0x80 [ 488.610306][T11400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 488.616214][T11400] RIP: 0033:0x7fa6197b26c9 [ 488.620740][T11400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.641077][T11400] RSP: 002b:00007fa617a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 488.648459][T11374] delete_channel: no stack [ 488.650119][T11400] RAX: ffffffffffffffda RBX: 00007fa619a08fa0 RCX: 00007fa6197b26c9 [ 488.662935][T11400] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 488.671197][T11400] RBP: 00007fa617a19090 R08: 0000000000000000 R09: 0000000000000000 [ 488.679942][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.687953][T11400] R13: 00007fa619a09038 R14: 00007fa619a08fa0 R15: 00007ffeb60352d8 [ 488.695977][T11400] [ 488.743482][T11397] loop7: detected capacity change from 0 to 128 [ 489.191862][T11397] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 490.604169][T11397] hpfs: filesystem error: improperly stopped [ 490.612669][T11397] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 490.654521][T11397] hpfs: You really don't want any checks? You are crazy... [ 490.678708][T11397] hpfs: hpfs_map_sector(): read error [ 490.834381][T11397] hpfs: code page support is disabled [ 490.841026][T11397] hpfs: hpfs_map_4sectors(): unaligned read [ 490.853187][T11397] hpfs: hpfs_map_4sectors(): unaligned read [ 490.859528][T11397] hpfs: filesystem error: unable to find root dir [ 490.916072][T11437] loop0: detected capacity change from 0 to 64 [ 490.927794][T11440] loop4: detected capacity change from 0 to 512 [ 491.038187][T11437] hfs: request for non-existent node 131072 in B*Tree [ 491.125590][T11437] hfs: request for non-existent node 131072 in B*Tree [ 491.176895][T11435] lo speed is unknown, defaulting to 1000 [ 491.218349][T11440] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 491.248688][T11453] hfs: request for non-existent node 131072 in B*Tree [ 491.279624][T11440] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.286506][T11453] hfs: request for non-existent node 131072 in B*Tree [ 492.134196][ T5033] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 492.491585][ T5033] usb 8-1: Using ep0 maxpacket: 16 [ 492.620984][T11480] loop4: detected capacity change from 0 to 512 [ 493.112738][T11480] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 493.127391][T11480] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.171927][ T5033] usb 8-1: config 0 interface 0 has no altsetting 0 [ 493.184121][ T5033] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 493.257419][ T5033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.298633][ T5033] usb 8-1: config 0 descriptor?? [ 493.617855][T11492] delete_channel: no stack [ 493.674260][T11463] udc-core: couldn't find an available UDC or it's busy [ 493.722249][T11463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 493.823433][T11463] udc-core: couldn't find an available UDC or it's busy [ 493.841620][T11463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.117459][ T5033] hid (null): unknown global tag 0xc [ 494.156933][ T5033] hid (null): unknown global tag 0xe [ 494.179550][ T5033] hid (null): unknown global tag 0xc [ 494.845841][T11509] loop5: detected capacity change from 0 to 16735 [ 495.819026][ T5038] usb 8-1: USB disconnect, device number 13 [ 496.194681][ T8434] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.985219][T11554] loop4: detected capacity change from 0 to 64 [ 497.110130][T11556] loop7: detected capacity change from 0 to 512 [ 497.560574][T11556] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 497.575309][T11556] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.669740][T11554] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 498.631627][T10051] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 499.269317][T11531] lo speed is unknown, defaulting to 1000 [ 500.061654][T10051] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.071011][T10051] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.114807][T10051] usb 8-1: Product: syz [ 500.269156][T10051] usb 8-1: Manufacturer: syz [ 500.274576][T10051] usb 8-1: SerialNumber: syz [ 500.286565][T10051] usb 8-1: config 0 descriptor?? [ 500.845638][T10051] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 501.422432][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.428874][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.123068][T11633] loop0: detected capacity change from 0 to 16 [ 502.292222][T11633] erofs: (device loop0): mounted with root inode @ nid 36. [ 502.386790][T11633] erofs: (device loop0): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 502.452172][T11633] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 502.651222][T11633] erofs: (device loop0): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 502.724811][T11633] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 502.885799][T10051] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 502.918188][T10051] usb 8-1: USB disconnect, device number 14 [ 503.127860][T11641] loop0: detected capacity change from 0 to 8 [ 503.201684][T11627] loop4: detected capacity change from 0 to 32768 [ 503.262242][T11627] XFS: ikeep mount option is deprecated. [ 504.169398][T11627] XFS (loop4): Mounting V5 Filesystem [ 504.878542][T11627] XFS (loop4): Ending clean mount [ 504.913731][T11627] XFS (loop4): Quotacheck needed: Please wait. [ 505.144057][T11627] XFS (loop4): Quotacheck: Done. [ 505.222820][ T4188] XFS (loop4): Unmounting Filesystem [ 505.383110][T11696] binder: BINDER_SET_CONTEXT_MGR already set [ 505.423447][T11698] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1742'. [ 505.438597][T11696] binder: 11692:11696 ioctl 4018620d 200000000040 returned -16 [ 505.751420][T11707] loop0: detected capacity change from 0 to 16 [ 505.779491][T11707] erofs: (device loop0): mounted with root inode @ nid 36. [ 505.826777][T11707] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 505.900978][ T4197] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 505.906421][T11705] loop7: detected capacity change from 0 to 4096 [ 505.968659][T11707] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 506.141696][T11717] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 506.172089][ T25] kauditd_printk_skb: 30 callbacks suppressed [ 506.172105][ T25] audit: type=1800 audit(1762435858.377:94): pid=11707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1743" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 507.207420][T11747] overlayfs: missing 'workdir' [ 507.462562][T11754] loop0: detected capacity change from 0 to 8 [ 507.676659][ T25] audit: type=1326 audit(1762435859.867:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11763 comm="syz.1.1752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91693a66c9 code=0x0 [ 507.727372][T11766] loop0: detected capacity change from 0 to 64 [ 507.897085][T11766] attempt to access beyond end of device [ 507.897085][T11766] loop0: rw=2049, want=162, limit=64 [ 508.370443][T11787] loop0: detected capacity change from 0 to 512 [ 508.526959][T11787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 508.544381][T11787] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.861787][T11804] netlink: 'syz.4.1760': attribute type 3 has an invalid length. [ 510.168995][T11824] loop4: detected capacity change from 0 to 256 [ 511.054703][T11843] loop0: detected capacity change from 0 to 16 [ 511.207749][T11843] erofs: (device loop0): mounted with root inode @ nid 36. [ 512.117755][T11883] loop7: detected capacity change from 0 to 8 [ 512.166876][T11883] squashfs: Unknown parameter 'îŸJe [ 512.166876][T11883] CðQí65Ä' [ 512.525050][T11888] loop7: detected capacity change from 0 to 512 [ 512.617021][T11888] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 512.650042][T11888] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 9: comm syz.7.1773: lblock 0 mapped to illegal pblock 9 (length 1) [ 512.667023][T11888] EXT4-fs (loop7): mount failed [ 513.374661][T11880] loop0: detected capacity change from 0 to 32768 [ 513.560521][T11910] loop7: detected capacity change from 0 to 8 [ 513.646502][T11880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1771 (11880) [ 513.837370][T11910] SQUASHFS error: xz decompression failed, data probably corrupt [ 513.846053][T11910] SQUASHFS error: Failed to read block 0x108: -5 [ 513.852597][T11910] SQUASHFS error: Unable to read metadata cache entry [106] [ 513.860028][T11910] SQUASHFS error: Unable to read inode 0x11f [ 514.078517][T11880] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 514.099294][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 514.113290][T11880] BTRFS info (device loop0): setting nodatacow, compression disabled [ 514.166834][T11880] BTRFS info (device loop0): allowing degraded mounts [ 514.207778][T11911] loop4: detected capacity change from 0 to 256 [ 514.232453][T11909] lo speed is unknown, defaulting to 1000 [ 514.265893][T11880] BTRFS info (device loop0): disabling tree log [ 514.273278][T11880] BTRFS info (device loop0): max_inline at 0 [ 514.279455][T11880] BTRFS info (device loop0): using free space tree [ 514.286627][T11880] BTRFS info (device loop0): has skinny extents [ 514.420949][T11911] FAT-fs (loop4): Directory bread(block 64) failed [ 514.481784][T11911] FAT-fs (loop4): Directory bread(block 65) failed [ 514.489807][T11911] FAT-fs (loop4): Directory bread(block 66) failed [ 514.532433][ T25] audit: type=1800 audit(1762435866.737:96): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1771" name="bus" dev="loop0" ino=264 res=0 errno=0 [ 514.627389][T11911] FAT-fs (loop4): Directory bread(block 67) failed [ 514.756202][T11911] FAT-fs (loop4): Directory bread(block 68) failed [ 514.838063][T11911] FAT-fs (loop4): Directory bread(block 69) failed [ 514.881852][T11911] FAT-fs (loop4): Directory bread(block 70) failed [ 514.899059][ T25] audit: type=1326 audit(1762435867.097:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.0.1771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6197b26c9 code=0x0 [ 514.972198][T11911] FAT-fs (loop4): Directory bread(block 71) failed [ 515.019920][T11911] FAT-fs (loop4): Directory bread(block 72) failed [ 515.072191][T11911] FAT-fs (loop4): Directory bread(block 73) failed [ 515.370877][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1783'. [ 515.406769][T11947] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1783'. [ 516.451683][ T5035] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 516.541667][ T21] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 516.800854][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 516.882149][ T5035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.906164][ T5035] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 516.944929][ T5035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.959639][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 517.009789][ T5035] usb 5-1: config 0 descriptor?? [ 517.058677][T11956] loop7: detected capacity change from 0 to 32768 [ 517.161639][T11956] ERROR: (device loop7): dbAllocNext: Corrupt dmap page [ 517.161639][T11956] [ 517.206746][ T21] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 517.224120][ T21] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 517.251663][ T21] usb 1-1: Product: syz [ 517.256014][ T21] usb 1-1: Manufacturer: syz [ 517.260619][ T21] usb 1-1: SerialNumber: syz [ 517.279220][ T21] usb 1-1: config 0 descriptor?? [ 517.321979][T11950] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 517.527782][ T5035] uclogic 0003:5543:0004.0008: No inputs registered, leaving [ 517.562415][ T5035] uclogic 0003:5543:0004.0008: hidraw0: USB HID v0.02 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0 [ 517.726730][ T5035] usb 5-1: USB disconnect, device number 26 [ 517.814900][ T5038] usb 1-1: USB disconnect, device number 22 [ 517.911201][T11969] fido_id[11969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 517.917891][T11967] loop7: detected capacity change from 0 to 32768 [ 517.981688][T11967] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1789 (11967) [ 518.003497][T11967] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 518.012761][T11967] BTRFS error (device loop7): superblock checksum mismatch [ 518.181335][ T4382] udevd[4382]: incorrect btrfs checksum on /dev/loop7 [ 518.383366][ T4287] udevd[4287]: incorrect btrfs checksum on /dev/loop7 [ 518.436051][T11967] BTRFS error (device loop7): open_ctree failed: -22 [ 518.482475][T11974] loop4: detected capacity change from 0 to 4096 [ 518.541801][ T21] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 518.545849][T11977] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 519.051849][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 519.370464][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 519.843301][ T21] usb 1-1: string descriptor 0 read error: -71 [ 519.877595][ T21] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 519.895018][ T21] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 519.909080][ T21] usb 1-1: config 0 descriptor?? [ 519.942292][ T25] audit: type=1326 audit(1762435872.137:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.4.1794" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3b8a1f6c9 code=0x0 [ 519.982356][ T21] usb 1-1: can't set config #0, error -71 [ 520.002944][ T21] usb 1-1: USB disconnect, device number 23 [ 520.145846][T11992] loop7: detected capacity change from 0 to 4096 [ 520.507722][T12003] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 520.744627][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 521.480504][T12016] FAULT_INJECTION: forcing a failure. [ 521.480504][T12016] name failslab, interval 1, probability 0, space 0, times 0 [ 521.495268][T12016] CPU: 1 PID: 12016 Comm: syz.0.1801 Not tainted syzkaller #0 [ 521.503204][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.513554][T12016] Call Trace: [ 521.517030][T12016] [ 521.520069][T12016] dump_stack_lvl+0x168/0x230 [ 521.524798][T12016] ? show_regs_print_info+0x20/0x20 [ 521.530018][T12016] ? load_image+0x3b0/0x3b0 [ 521.534817][T12016] ? __might_sleep+0xf0/0xf0 [ 521.539564][T12016] ? __lock_acquire+0x7c60/0x7c60 [ 521.544652][T12016] should_fail+0x38c/0x4c0 [ 521.549092][T12016] should_failslab+0x5/0x20 [ 521.553592][T12016] slab_pre_alloc_hook+0x51/0xc0 [ 521.558621][T12016] kmem_cache_alloc_trace+0x47/0x2a0 [ 521.563919][T12016] ? virtio_transport_do_socket_init+0x53/0x290 [ 521.570284][T12016] virtio_transport_do_socket_init+0x53/0x290 [ 521.576548][T12016] vsock_assign_transport+0x603/0x7c0 [ 521.582130][T12016] vsock_connect+0x597/0xcf0 [ 521.586760][T12016] ? aa_sk_perm+0x7b4/0x8f0 [ 521.591291][T12016] ? vsock_auto_bind+0xf0/0xf0 [ 521.596065][T12016] ? aa_af_perm+0x2b0/0x2b0 [ 521.601004][T12016] ? init_wait_entry+0xd0/0xd0 [ 521.605777][T12016] ? bpf_lsm_socket_connect+0x5/0x10 [ 521.611195][T12016] ? security_socket_connect+0x7c/0xa0 [ 521.616756][T12016] ? vsock_auto_bind+0xf0/0xf0 [ 521.622860][T12016] __sys_connect+0x389/0x410 [ 521.627907][T12016] ? __sys_connect_file+0x170/0x170 [ 521.633144][T12016] ? vtime_user_exit+0x2dc/0x400 [ 521.638220][T12016] __x64_sys_connect+0x76/0x80 [ 521.643576][T12016] do_syscall_64+0x4c/0xa0 [ 521.648024][T12016] ? clear_bhb_loop+0x30/0x80 [ 521.652806][T12016] ? clear_bhb_loop+0x30/0x80 [ 521.658362][T12016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 521.664492][T12016] RIP: 0033:0x7fa6197b26c9 [ 521.668936][T12016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.689209][T12016] RSP: 002b:00007fa6179d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 521.699473][T12016] RAX: ffffffffffffffda RBX: 00007fa619a09180 RCX: 00007fa6197b26c9 [ 521.709026][T12016] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 000000000000000a [ 521.717013][T12016] RBP: 00007fa6179d7090 R08: 0000000000000000 R09: 0000000000000000 [ 521.725162][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.736370][T12016] R13: 00007fa619a09218 R14: 00007fa619a09180 R15: 00007ffeb60352d8 [ 521.746133][T12016] [ 522.121129][T12023] loop0: detected capacity change from 0 to 512 [ 522.263805][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 522.939891][T12023] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 522.991661][T12023] EXT4-fs (loop0): Unrecognized mount option "smackfshat=stripe" or missing value [ 523.402625][T12017] loop4: detected capacity change from 0 to 32768 [ 523.814233][ T5106] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 524.076526][ T5031] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 524.083207][ T5106] usb 5-1: Using ep0 maxpacket: 32 [ 526.066538][T12056] loop7: detected capacity change from 0 to 16 [ 526.191834][ T5031] usb 1-1: Using ep0 maxpacket: 32 [ 526.271846][ T5031] usb 1-1: device descriptor read/all, error -71 [ 526.291294][T12058] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1818'. [ 526.301810][ T5106] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 526.324003][ T5106] usb 5-1: can't read configurations, error -71 [ 526.503353][T12056] erofs: (device loop7): mounted with root inode @ nid 36. [ 527.228974][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 527.416258][T12078] loop4: detected capacity change from 0 to 512 [ 527.423051][T12070] loop7: detected capacity change from 0 to 1024 [ 528.196986][ T144] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.337109][T12078] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 528.422621][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 528.477365][T12078] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.268690][ T8424] hfsplus: bad catalog file entry [ 530.307372][ T8424] hfsplus: b-tree write err: -5, ino 3 [ 530.375977][T12110] loop0: detected capacity change from 0 to 64 [ 530.548040][T12116] loop4: detected capacity change from 0 to 16 [ 530.610931][T12118] loop7: detected capacity change from 0 to 1024 [ 530.718225][T12118] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,min_batch_time=0x0000000000000005,user_xattr,,errors=continue. Quota mode: none. [ 530.748434][T12118] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.007093][T12116] erofs: (device loop4): mounted with root inode @ nid 36. [ 535.525533][T12165] loop0: detected capacity change from 0 to 32768 [ 535.665255][T12165] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 535.685106][T12165] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 535.704397][T12165] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 535.714935][T12165] OCFS2: File system is now read-only. [ 535.720405][T12165] (syz.0.1846,12165,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 535.729239][T12165] (syz.0.1846,12165,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 535.739215][T12165] (syz.0.1846,12165,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 535.747260][T12165] (syz.0.1846,12165,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 535.756025][T12165] (syz.0.1846,12165,1):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 535.764488][T12165] (syz.0.1846,12165,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 535.772764][T12165] (syz.0.1846,12165,1):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 535.781210][T12165] (syz.0.1846,12165,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 535.790290][T12165] (syz.0.1846,12165,1):ocfs2_mknod:298 ERROR: status = -5 [ 535.797496][T12165] (syz.0.1846,12165,1):ocfs2_mknod:502 ERROR: status = -5 [ 535.804783][T12165] (syz.0.1846,12165,1):ocfs2_mkdir:659 ERROR: status = -5 [ 535.900420][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 535.923596][T12179] loop7: detected capacity change from 0 to 16 [ 535.994986][T12179] erofs: (device loop7): mounted with root inode @ nid 36. [ 536.703190][ T4191] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 536.971928][ T4191] usb 5-1: device descriptor read/64, error -71 [ 537.039356][T12200] loop0: detected capacity change from 0 to 64 [ 537.812977][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 537.856781][ T4191] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 538.625855][ T4191] usb 5-1: device descriptor read/64, error -71 [ 538.648667][T12225] Device name cannot be null; rc = [-22] [ 538.852540][ T4191] usb usb5-port1: attempt power cycle [ 539.437291][T12245] loop7: detected capacity change from 0 to 128 [ 540.669980][T12260] loop4: detected capacity change from 0 to 4096 [ 540.690781][T12268] loop0: detected capacity change from 0 to 16 [ 540.807750][T12268] erofs: (device loop0): mounted with root inode @ nid 36. [ 540.863827][T12271] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.650674][T12285] loop0: detected capacity change from 0 to 1024 [ 542.364011][T12285] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 542.681129][T12285] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,i_version,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 543.335350][T12302] netlink: 'syz.7.1886': attribute type 3 has an invalid length. [ 543.357233][ T25] audit: type=1804 audit(1762435895.557:99): pid=12312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1881" name="/newroot/379/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 543.359669][T12312] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 543.409781][T12302] netlink: 'syz.7.1886': attribute type 3 has an invalid length. [ 543.564200][ T25] audit: type=1804 audit(1762435895.767:100): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1881" name="/newroot/379/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 544.486778][T12325] loop7: detected capacity change from 0 to 512 [ 544.489054][T12327] loop0: detected capacity change from 0 to 16 [ 544.533541][T12327] erofs: (device loop0): mounted with root inode @ nid 36. [ 544.601373][T12325] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 544.621911][T12325] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.152075][ T21] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 545.805150][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 546.367498][T12350] loop0: detected capacity change from 0 to 1764 [ 546.388906][T12352] lo speed is unknown, defaulting to 1000 [ 546.599867][T12360] loop7: detected capacity change from 0 to 8 [ 547.529962][T12367] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 547.567976][T12367] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 547.576431][T12367] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 547.583130][T10051] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 547.592642][T12367] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 547.599537][T12367] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 547.608491][T12367] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 547.621814][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 547.630926][T12367] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 547.639760][T12367] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 547.656533][T12367] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 547.679323][T12377] SET target dimension over the limit! [ 547.685756][T12376] loop4: detected capacity change from 0 to 512 [ 547.696137][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 547.706651][T12367] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 547.717270][ T21] usb 5-1: can't read configurations, error -71 [ 547.735522][T12367] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 547.746475][T12367] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 547.755593][T12367] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 547.797855][T12367] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 547.826313][T12376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 547.841720][T12367] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 547.848606][T12367] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 547.855464][T10051] usb 1-1: Using ep0 maxpacket: 8 [ 547.863250][T12367] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 547.869491][T12376] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.870080][T12367] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 547.888134][T12367] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 547.899146][T12367] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 548.825472][T10051] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 548.861879][T10051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.880276][T10051] usb 1-1: Product: syz [ 549.006022][T10051] usb 1-1: Manufacturer: syz [ 549.012938][T10051] usb 1-1: SerialNumber: syz [ 549.104367][T10051] usb 1-1: config 0 descriptor?? [ 549.351832][T10051] gspca_main: sq930x-2.14.0 probing 2770:930c [ 550.199054][T12408] loop7: detected capacity change from 0 to 1024 [ 550.207141][T10051] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 550.461653][T10051] gspca_sq930x: Sensor ov9630 not yet treated [ 550.472756][T10051] sq930x: probe of 1-1:0.0 failed with error -22 [ 550.854234][T10051] usb 1-1: USB disconnect, device number 26 [ 550.922181][T12411] loop4: detected capacity change from 0 to 16 [ 550.942707][T12408] netlink: 'syz.7.1912': attribute type 32 has an invalid length. [ 551.021868][T12411] erofs: (device loop4): mounted with root inode @ nid 36. [ 551.073422][T12421] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1916'. [ 551.187854][T12421] 0ªX¹¦À: renamed from caif0 [ 551.203222][T12411] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 551.248512][ T4197] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 551.293559][T12411] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 551.480962][ T25] audit: type=1800 audit(1762435903.677:101): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1914" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 551.522050][T12421] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 551.526062][ T9] hfsplus: b-tree write err: -5, ino 4 [ 551.645333][ T25] audit: type=1326 audit(1762435903.847:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 551.694505][T12436] loop4: detected capacity change from 0 to 512 [ 551.765097][ T25] audit: type=1326 audit(1762435903.877:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 551.832120][ T25] audit: type=1326 audit(1762435903.877:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 551.900122][ T25] audit: type=1326 audit(1762435903.877:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 551.923287][ T25] audit: type=1326 audit(1762435903.877:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 552.253392][T12436] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 552.293081][ T25] audit: type=1326 audit(1762435903.877:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 552.326644][T12436] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.399253][ T25] audit: type=1326 audit(1762435903.877:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 552.451714][ T4191] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 552.551580][ T25] audit: type=1326 audit(1762435903.877:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 552.632374][T12456] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1923'. [ 552.636182][ T25] audit: type=1326 audit(1762435903.877:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91693a66c9 code=0x7ffc0000 [ 552.651719][T12456] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 553.232340][T12441] loop7: detected capacity change from 0 to 40427 [ 553.306816][T12441] F2FS-fs (loop7): invalid crc value [ 553.363679][ T4191] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 553.404755][T12441] F2FS-fs (loop7): Found nat_bits in checkpoint [ 553.442403][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 553.461712][ T4191] usb 1-1: config 0 has no interface number 0 [ 553.511557][ T4191] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 553.578554][ T4191] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 553.661613][ T4191] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 553.772767][T12441] F2FS-fs (loop7): Start checkpoint disabled! [ 553.812282][ T4191] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 553.980513][T12441] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 555.093857][T12479] loop4: detected capacity change from 0 to 16 [ 555.128537][T12479] erofs: (device loop4): mounted with root inode @ nid 36. [ 555.139518][T12479] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 555.198239][ T4191] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 555.211267][ T4197] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 555.225979][ T4191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.274831][T12481] lo speed is unknown, defaulting to 1000 [ 555.282163][T12479] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 555.331740][ T4191] usb 1-1: Product: syz [ 555.358503][ T4191] usb 1-1: Manufacturer: syz [ 555.380428][ T4191] usb 1-1: config 0 descriptor?? [ 555.446979][T12490] 9pnet: Insufficient options for proto=fd [ 555.491800][ T4191] usb 1-1: can't set config #0, error -71 [ 555.545229][ T4191] usb 1-1: USB disconnect, device number 27 [ 555.776160][T12495] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1931'. [ 555.890397][T12497] FAULT_INJECTION: forcing a failure. [ 555.890397][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 555.931820][T12497] CPU: 1 PID: 12497 Comm: syz.4.1937 Not tainted syzkaller #0 [ 555.939332][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 555.950089][T12497] Call Trace: [ 555.953509][T12497] [ 555.956466][T12497] dump_stack_lvl+0x168/0x230 [ 555.961169][T12497] ? show_regs_print_info+0x20/0x20 [ 555.966612][T12497] ? load_image+0x3b0/0x3b0 [ 555.971179][T12497] ? __lock_acquire+0x7c60/0x7c60 [ 555.976220][T12497] ? vfs_write+0x84d/0xd00 [ 555.980660][T12497] should_fail+0x38c/0x4c0 [ 555.985106][T12497] should_failslab+0x5/0x20 [ 555.989634][T12497] slab_pre_alloc_hook+0x51/0xc0 [ 555.994598][T12497] ? __se_sys_mount+0x9b/0x3c0 [ 555.999377][T12497] __kmalloc_track_caller+0x69/0x330 [ 556.004776][T12497] ? __se_sys_mount+0x9b/0x3c0 [ 556.009562][T12497] ? strnlen_user+0x150/0x250 [ 556.014254][T12497] strndup_user+0x71/0x150 [ 556.018689][T12497] __se_sys_mount+0x9b/0x3c0 [ 556.023298][T12497] ? __x64_sys_mount+0xc0/0xc0 [ 556.028802][T12497] ? lockdep_hardirqs_on+0x94/0x140 [ 556.034187][T12497] ? __x64_sys_mount+0x1c/0xc0 [ 556.039286][T12497] do_syscall_64+0x4c/0xa0 [ 556.043889][T12497] ? clear_bhb_loop+0x30/0x80 [ 556.048863][T12497] ? clear_bhb_loop+0x30/0x80 [ 556.053655][T12497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.059568][T12497] RIP: 0033:0x7fa3b8a1f6c9 [ 556.064015][T12497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.083652][T12497] RSP: 002b:00007fa3b6c86038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 556.092145][T12497] RAX: ffffffffffffffda RBX: 00007fa3b8c75fa0 RCX: 00007fa3b8a1f6c9 [ 556.100131][T12497] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 556.108120][T12497] RBP: 00007fa3b6c86090 R08: 0000200000000000 R09: 0000000000000000 [ 556.116282][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.124279][T12497] R13: 00007fa3b8c76038 R14: 00007fa3b8c75fa0 R15: 00007ffc431e1838 [ 556.132287][T12497] [ 556.348131][T12504] FAULT_INJECTION: forcing a failure. [ 556.348131][T12504] name failslab, interval 1, probability 0, space 0, times 0 [ 556.663215][T12504] CPU: 0 PID: 12504 Comm: syz.4.1938 Not tainted syzkaller #0 [ 556.670940][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.681461][T12504] Call Trace: [ 556.684754][T12504] [ 556.687686][T12504] dump_stack_lvl+0x168/0x230 [ 556.692385][T12504] ? show_regs_print_info+0x20/0x20 [ 556.697611][T12504] ? load_image+0x3b0/0x3b0 [ 556.702148][T12504] ? __might_sleep+0xf0/0xf0 [ 556.707475][T12504] ? __lock_acquire+0x7c60/0x7c60 [ 556.712531][T12504] should_fail+0x38c/0x4c0 [ 556.717128][T12504] should_failslab+0x5/0x20 [ 556.721648][T12504] slab_pre_alloc_hook+0x51/0xc0 [ 556.726684][T12504] ? p9_client_prepare_req+0xbd/0xcd0 [ 556.732065][T12504] kmem_cache_alloc+0x3d/0x290 [ 556.736850][T12504] ? stack_trace_save+0x98/0xe0 [ 556.741719][T12504] p9_client_prepare_req+0xbd/0xcd0 [ 556.747125][T12504] ? stack_depot_save+0x404/0x440 [ 556.752160][T12504] ? __kasan_kmalloc+0xcc/0xf0 [ 556.757016][T12504] ? __kasan_kmalloc+0xb5/0xf0 [ 556.761884][T12504] ? p9_fid_create+0x50/0x2b0 [ 556.766603][T12504] p9_client_rpc+0x157/0xf80 [ 556.771225][T12504] ? p9_fid_create+0x2b0/0x2b0 [ 556.776015][T12504] ? local_lock_release+0x97/0x170 [ 556.781450][T12504] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 556.787030][T12504] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.792243][T12504] ? lockdep_hardirqs_on+0x94/0x140 [ 556.797461][T12504] p9_client_walk+0x197/0x5c0 [ 556.802146][T12504] ? trace_9p_protocol_dump+0x1a0/0x1a0 [ 556.807700][T12504] ? v9fs_fid_lookup_with_uid+0xc1/0x800 [ 556.813359][T12504] v9fs_vfs_lookup+0x183/0x3c0 [ 556.818137][T12504] ? v9fs_inode_from_fid+0x200/0x200 [ 556.823923][T12504] ? _raw_spin_unlock+0x24/0x40 [ 556.829011][T12504] ? d_alloc+0x1e7/0x250 [ 556.833265][T12504] lookup_one_qstr_excl+0x10e/0x240 [ 556.838507][T12504] filename_create+0x21e/0x450 [ 556.843312][T12504] ? kern_path_create+0x190/0x190 [ 556.848409][T12504] do_symlinkat+0xb3/0x6c0 [ 556.852957][T12504] ? vfs_symlink+0x3d0/0x3d0 [ 556.857654][T12504] ? getname_flags+0x1fe/0x500 [ 556.862617][T12504] __x64_sys_symlinkat+0x95/0xa0 [ 556.868453][T12504] do_syscall_64+0x4c/0xa0 [ 556.872905][T12504] ? clear_bhb_loop+0x30/0x80 [ 556.877590][T12504] ? clear_bhb_loop+0x30/0x80 [ 556.882275][T12504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.888271][T12504] RIP: 0033:0x7fa3b8a1f6c9 [ 556.892698][T12504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.912768][T12504] RSP: 002b:00007fa3b6c86038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 556.921216][T12504] RAX: ffffffffffffffda RBX: 00007fa3b8c75fa0 RCX: 00007fa3b8a1f6c9 [ 556.929203][T12504] RDX: 0000200000000080 RSI: 0000000000000006 RDI: 0000200000000180 [ 556.937214][T12504] RBP: 00007fa3b6c86090 R08: 0000000000000000 R09: 0000000000000000 [ 556.944918][T12510] loop0: detected capacity change from 0 to 64 [ 556.945410][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.959643][T12504] R13: 00007fa3b8c76038 R14: 00007fa3b8c75fa0 R15: 00007ffc431e1838 [ 556.967927][T12504] [ 557.010024][T12514] loop7: detected capacity change from 0 to 128 [ 557.045739][T12510] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 557.123065][T12514] EXT4-fs (loop7): Test dummy encryption mode enabled [ 557.189162][T12514] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 557.214921][T12516] ------------[ cut here ]------------ [ 557.271823][T12514] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 557.306429][T12516] WARNING: CPU: 0 PID: 12516 at mm/page_alloc.c:5462 __alloc_pages+0x391/0x470 [ 557.335118][T12516] Modules linked in: [ 557.351726][T12516] CPU: 0 PID: 12516 Comm: syz.1.1942 Not tainted syzkaller #0 [ 557.394929][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.411722][T12516] RIP: 0010:__alloc_pages+0x391/0x470 [ 557.433945][T12516] Code: 31 ff e9 b2 fe ff ff e8 fd e6 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 55 8e 4f 7e 41 83 fd 08 [ 557.478529][T12516] RSP: 0018:ffffc9000357fb20 EFLAGS: 00010246 [ 557.487300][T12516] RAX: ffffc9000357fb60 RBX: 1ffff920006aff68 RCX: 0000000000000000 [ 557.495845][T12516] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000357fb88 [ 557.504361][T12516] RBP: ffffc9000357fc18 R08: dffffc0000000000 R09: ffffc9000357fb60 [ 557.513674][T12516] R10: fffff520006aff71 R11: 1ffff920006aff6c R12: dffffc0000000000 [ 557.522126][T12516] R13: 0000000000000000 R14: 0000000000040d40 R15: 000000000000001c [ 557.531317][T12516] FS: 00007f916760d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 557.541031][T12516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.555104][T12514] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 557.556975][T12516] CR2: 00007fa3b8c412f8 CR3: 0000000049217000 CR4: 00000000003506e0 [ 557.576649][T12516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 557.587370][T12516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 557.598238][T12516] Call Trace: [ 557.602662][T12516] [ 557.605720][T12516] ? zone_statistics+0x170/0x170 [ 557.610887][T12516] ? v9fs_fid_xattr_get+0x1b2/0x220 [ 557.617786][T12516] ? refcount_inc+0x70/0x70 [ 557.628609][T12516] ? alloc_pages+0x438/0x550 [ 557.634280][T12516] kmalloc_order+0x40/0x150 [ 557.638949][T12516] ? __v9fs_get_acl+0xfc/0x110 [ 557.644587][T12516] kmalloc_order_trace+0x14/0xf0 [ 557.649773][T12516] __v9fs_get_acl+0x40/0x110 [ 557.654928][T12516] v9fs_get_acl+0xa9/0x260 [ 557.659517][T12516] v9fs_mount+0x6c0/0x850 [ 557.664553][T12516] legacy_get_tree+0xe6/0x180 [ 557.669356][T12516] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 557.675252][T12516] vfs_get_tree+0x88/0x270 [ 557.680316][T12516] do_new_mount+0x24a/0xa40 [ 557.685254][T12516] __se_sys_mount+0x2d6/0x3c0 [ 557.706877][T12516] ? __x64_sys_mount+0xc0/0xc0 [ 557.713469][T12516] ? lockdep_hardirqs_on+0x94/0x140 [ 557.738353][T12516] ? __x64_sys_mount+0x1c/0xc0 [ 557.743659][T12516] do_syscall_64+0x4c/0xa0 [ 557.748185][T12516] ? clear_bhb_loop+0x30/0x80 [ 557.754682][T12516] ? clear_bhb_loop+0x30/0x80 [ 557.759561][T12516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.765905][T12516] RIP: 0033:0x7f91693a66c9 [ 557.770735][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.791050][T12516] RSP: 002b:00007f916760d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 557.799958][T12516] RAX: ffffffffffffffda RBX: 00007f91695fcfa0 RCX: 00007f91693a66c9 [ 557.808534][T12516] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 557.818931][T12516] RBP: 00007f9169428f91 R08: 0000200000000580 R09: 0000000000000000 [ 557.827370][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.836375][T12516] R13: 00007f91695fd038 R14: 00007f91695fcfa0 R15: 00007ffe8c529c98 [ 557.845557][T12516] [ 557.848865][T12516] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 557.856157][T12516] CPU: 1 PID: 12516 Comm: syz.1.1942 Not tainted syzkaller #0 [ 557.863891][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.874133][T12516] Call Trace: [ 557.877506][T12516] [ 557.880443][T12516] dump_stack_lvl+0x168/0x230 [ 557.885141][T12516] ? show_regs_print_info+0x20/0x20 [ 557.890368][T12516] ? load_image+0x3b0/0x3b0 [ 557.894900][T12516] panic+0x2c9/0x7f0 [ 557.898854][T12516] ? bpf_jit_dump+0xd0/0xd0 [ 557.903378][T12516] ? __alloc_pages+0x391/0x470 [ 557.908140][T12516] __warn+0x248/0x2b0 [ 557.912140][T12516] ? __alloc_pages+0x391/0x470 [ 557.916904][T12516] report_bug+0x1b7/0x2e0 [ 557.921266][T12516] handle_bug+0x3a/0x70 [ 557.925408][T12516] exc_invalid_op+0x16/0x40 [ 557.930005][T12516] asm_exc_invalid_op+0x16/0x20 [ 557.934954][T12516] RIP: 0010:__alloc_pages+0x391/0x470 [ 557.940359][T12516] Code: 31 ff e9 b2 fe ff ff e8 fd e6 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 55 8e 4f 7e 41 83 fd 08 [ 557.959964][T12516] RSP: 0018:ffffc9000357fb20 EFLAGS: 00010246 [ 557.966574][T12516] RAX: ffffc9000357fb60 RBX: 1ffff920006aff68 RCX: 0000000000000000 [ 557.974627][T12516] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000357fb88 [ 557.982592][T12516] RBP: ffffc9000357fc18 R08: dffffc0000000000 R09: ffffc9000357fb60 [ 557.990554][T12516] R10: fffff520006aff71 R11: 1ffff920006aff6c R12: dffffc0000000000 [ 557.998641][T12516] R13: 0000000000000000 R14: 0000000000040d40 R15: 000000000000001c [ 558.006731][T12516] ? zone_statistics+0x170/0x170 [ 558.011691][T12516] ? v9fs_fid_xattr_get+0x1b2/0x220 [ 558.016909][T12516] ? refcount_inc+0x70/0x70 [ 558.021433][T12516] ? alloc_pages+0x438/0x550 [ 558.026021][T12516] kmalloc_order+0x40/0x150 [ 558.030529][T12516] ? __v9fs_get_acl+0xfc/0x110 [ 558.035849][T12516] kmalloc_order_trace+0x14/0xf0 [ 558.040808][T12516] __v9fs_get_acl+0x40/0x110 [ 558.045400][T12516] v9fs_get_acl+0xa9/0x260 [ 558.049815][T12516] v9fs_mount+0x6c0/0x850 [ 558.054142][T12516] legacy_get_tree+0xe6/0x180 [ 558.058834][T12516] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 558.064289][T12516] vfs_get_tree+0x88/0x270 [ 558.068714][T12516] do_new_mount+0x24a/0xa40 [ 558.073305][T12516] __se_sys_mount+0x2d6/0x3c0 [ 558.077972][T12516] ? __x64_sys_mount+0xc0/0xc0 [ 558.082730][T12516] ? lockdep_hardirqs_on+0x94/0x140 [ 558.087932][T12516] ? __x64_sys_mount+0x1c/0xc0 [ 558.092700][T12516] do_syscall_64+0x4c/0xa0 [ 558.097104][T12516] ? clear_bhb_loop+0x30/0x80 [ 558.101779][T12516] ? clear_bhb_loop+0x30/0x80 [ 558.106536][T12516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 558.112514][T12516] RIP: 0033:0x7f91693a66c9 [ 558.117093][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.136696][T12516] RSP: 002b:00007f916760d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 558.145124][T12516] RAX: ffffffffffffffda RBX: 00007f91695fcfa0 RCX: 00007f91693a66c9 [ 558.153100][T12516] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 558.161077][T12516] RBP: 00007f9169428f91 R08: 0000200000000580 R09: 0000000000000000 [ 558.169049][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.177021][T12516] R13: 00007f91695fd038 R14: 00007f91695fcfa0 R15: 00007ffe8c529c98 [ 558.185004][T12516] [ 558.188304][T12516] Kernel Offset: disabled [ 558.192979][T12516] Rebooting in 86400 seconds..