last executing test programs: 12.659064158s ago: executing program 1 (id=1756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480)='wlan0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={0xffffffffffffffff, r1, 0x6, 0x0, @val=@iter={0x0}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0x0, @val=@tracing}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setitimer(0x0, &(0x7f0000000240)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000340)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x2353) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff7, 0xffff, 0x0, 0xd9fa, 0x0, 0xe6]}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100000000000000", @ANYRES32=r2], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) 11.545797335s ago: executing program 2 (id=1761): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x6, 0x1000, 0x1, 0x2000}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f00007fe000/0x800000)=nil) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000598000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 10.548171394s ago: executing program 5 (id=1765): creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 10.300726488s ago: executing program 5 (id=1768): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6144fa7990672888019d976b900a7ff5"}, 0x0, 0x9, 0x2}}}, 0x90) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) 9.95937807s ago: executing program 2 (id=1770): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) close(0x4) 9.52562606s ago: executing program 2 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010108000000000000000000000008000a40000000000900010073797a3000000000080005400000000f08000240000000000c000b40000000000000000008000f40000004000800034000000040"], 0x7c}}, 0x0) 8.083081081s ago: executing program 5 (id=1773): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) rename(0x0, &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(0xffffffffffffffff, r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x8) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x2284, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x890b, 0x0) 8.082069321s ago: executing program 2 (id=1774): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$bt_hci(r0, 0x84, 0x0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) rename(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(0xffffffffffffffff, r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x8) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x2284, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 8.03347656s ago: executing program 1 (id=1775): syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440)) r1 = creat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4) tkill(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12) sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9c4c}, [@country_functional={0x10, 0x24, 0x7, 0x80, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x6]}, @call_mgmt={0x5}, @mdlm_detail={0x27, 0x24, 0x13, 0x0, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1}}}}}}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.786657326s ago: executing program 3 (id=1777): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xae, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 7.368353772s ago: executing program 3 (id=1778): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.769995124s ago: executing program 5 (id=1779): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x101}}) 5.596572321s ago: executing program 3 (id=1780): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 5.590324019s ago: executing program 0 (id=1781): unshare(0x2a060400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) 5.388574055s ago: executing program 0 (id=1782): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}}}) 5.388375524s ago: executing program 5 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) 5.373957277s ago: executing program 3 (id=1784): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) close(0x4) 5.192772153s ago: executing program 0 (id=1785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semtimedop(0x0, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)={[{@noflushoncommit}, {@ref_verify}, {@user_subvol_rm}, {@treelog}, {@max_inline={'max_inline', 0x3d, [0x36, 0x25, 0x39, 0x38, 0x78, 0x38, 0x2d]}}, {@max_inline={'max_inline', 0x3d, [0x25, 0x6d, 0x25, 0x2d, 0x31, 0x30, 0x74]}}, {@noflushoncommit}, {@nossd}, {@nossd}]}, 0xfe, 0x55a3, &(0x7f0000005680)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x8d, 0x1, 0x1002, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}, @private0, 0x10, 0x10, 0x8000800, 0x8}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket(0x15, 0x0, 0x0) bind$l2tp(r0, &(0x7f0000000100)={0xa, 0x0, @local}, 0x1c) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64697363617264000000000089bd4700"/30], 0xfe, 0xedb, &(0x7f0000000f80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0xfea0) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x179) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000400000000eaff000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000240)="92", 0x1}], 0x1) syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f752c736d61636b66736465663d6263616368656673002c736d54636b6673666c6f6f723d0500616368656673002c736d61636b66736465664e1081d146d06dc780011e04e97b3d5bdeec6dc24212915e965aff4f25421bc5b4c9c5b581d925183e3fdea9e6a33322e68e7b325929abf58405"], 0x1, 0x5d5e, &(0x7f0000005e40)="$eJzs3X2QHOWZGPDumVntSquPlSybFRJiMbIdccEWKBDLd442ztmxHdnIwgIsTicJWGEdQhL6QCBdwlcOCCYpVUEdBOKUDihylbpKcOkSwp1SJWPAV74qCpn4D458HRWcP+IjqrPEEcnlTe1u9+5Mb7/Ts9OzQuDfr0o78/Y+87zv0/NOd7+j3dkIAACAXwmv/N6ed79+/hd/dO/Qqbu+/Ce33hP1Vke396QBfcntHe/XCJlOy398puGZ7a71j95m58V5f7rw3b771nztoVVf+vHmP5s/uHTZ0JXfO3LV/fe9+PlfvPjYE2uK+knn0yUT7fiv4iha+vaRx+5/+c/PG9kWj/Qf990dzZ8fL/j+/DiTYsXpKIpuGh9n4zePnFq5deT2nu90N2yfl0livv9q60nm2cFNNzx17JbBl48M7Fr5s5NX7Lx7IiTuqZtPUTR3c/3ju6Iompn8G5HOtv70wcnt2iiKZtU97rMF47q4xfFfGmgvSW5nJLe9BXnS71+UaddaHEctc9vd4uPaVZnm/FnZ/Zc9GE2XtM65ye3zye0lU8xTTf/FUSWOauPD3x5PzJGo7nmLo3h0bveMtyuj7Wi8HWXbcaZdybSrXZm6RvtNdmw1jhu3p3GZ7enhuJZsv6j+WJ1jXWD7ouS2J3mhvpe2o+ydMb2T7kzUEdWN68TZmhgBlcBrL90+PrzkyehNtvXGCyY9ZjhH+r0TP9yy4Z03DjzfFxhH/Fyc5I/byj849OSxZ687uqg/lH9zJclfaSv/K9VXTz9zsn92MP+hNH+1rfzrf/nTB++9ev/C4P45ke6fWlv5lz08++Cp/eu6B0L5D6f5e9rKf+XGpasuOLnv9uD4V6T7Z2Zb+X/yyPIzGw+9cDSYP0rzz2or/5tPPr2kuujR48H8x9L909tW/mtWPr76q4vveyK4/19L889pK/+G4/dv3vXUS8uD83Ntun/62sp/evXrb53pW/N06NgZHz7bZ1iAD5ePJNdYDybtdteZZdWtFx4fqI1d881O/s3pZEcZcd3aBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa9ejq/3BbffsT/+f29cf/49JttaTdXYuiOIqid6pj7XT7jCiKZ0ZRtGfvlt17t+24eeB3du7bvWPL9oEteweGduzdfefA3/nbA7uHdm3fcufId1dcunLscQtGs0XRgviCSWMZHh4ejqJooH5b2t8ffOW5/7f+ib/+VhSt+OjrS2vBej7zX9/64sKcrxnx4PDaf3XFIwdm/K95Yxv6knH1hcbV17gtHUHv4Gt/8YXn3xgZ18eajeuxV6/9vw0DGt0wkSdR6Y4qo3e641m54xgf9cR4RvdXbeu27UMrivdvHNi/n3rpj0/++zvW//Ox/dsTrKPF/TuyV2vDD/383k/d/YWhz53Dz3vR/q4rYXR86f7rSfb33KSuuYG6KoG6bh9488S/+Hf/+Zm7oxW1n184ue+iurqSCdAVL2qp37SHWfH8htieJD59xtPHfWbvrbs+s+fOA5duu3XLzUM3D+1YufKKVZetvOzyVSs/M1r62NeO1Z/2/6kW65+dZJodL87db9mtab8Xjn6tRsmw05u6O426ot6x28x+TsOzVfcm3+uNF0zKNZwj/d6JH27Z8M4bB54PvfLi58Z6nBnNGbuNlwQit2ceWB0fcF7/Z+d1ufP3e7anX1t7XRaNq2hejYyreF7Vj6jJcezVix/8+VMP/MvrWzhe1IWOji8d56yRl8tlUd3rdvK+yqurhednMG8/3Hjp7j++c9uGQ0XH8/pnpv5rRjw4/D+XxF/bt+cvdo9tOCvny/oBtXm+HB/1xHhG91dP8nycq/u3O6omdfXmjmtd/NTnP3Xr0V8bH9+MGdEdW/bu3X3Z2NcPal1/OWPewm33LL5gUl2Xj30tOu5fmGkXHvcr+fUVHfez/UzE5+cbyLR7o2pb54n1v/zpg/devX9h8DxxotXzxO82tKolzxOVwOv9ob/+7sC713/z3aL5dNWexXctzPmaLW9w+IU/+vXLPnft1V8a23BWjkP1A2rzODQ+6mQ86f4aPQ5dfu7U8f49zw0vxHhw+MLvffKaM6du+8bYhqL9Ox6dt39XFh/nq4G6ru/6+PxHfrb4452bv3s2/c3Fn541+xybvz3J/u0J7N/xUSfjqdbv30/fuHP7TWPtc/e6bUx3wfonPe/sufPALVu2bx/avae1ulo9n6b9ZPdyu+fT9OyxoKCu9PmaqGv67rSyv1p9vaXjvymTo93XG0Bq4rwwo2F79viZvu+3dG60/tMP/ODVeGDsfNmp91vTfs7PnJjbfb+1aJ308Uy7cZ1Ui+rqHjN5nTT6kKJ1UrafonXSxZl28TrmwdxKQs9fV3LmzXvfNDPe2kiG0PzoT/L3J+30enPpp6Mrqs9/4ivxYGvzo9Xr6bSfv5XZQe1eTxfNj2VR/rg6PT8+mXlQ8fN9KHdkPYHno+j5XtaQaHi47Lq8LzDqdF3eG8Vt5R8cevLYs9cdXRTMv7mS5K+0lf+V6qunnznZPzuY/1Cav9ZW/mUPzz54av+67mD+w+n+6Wkr/5Ubl6664OS+24P5V6Tjn9lW/p88svzMxkMvHA3mj9L8vW3lv2bl46u/uvi+J4L5X4uTfkZeu1F05NTKrWPtOOpK5n86jq6GcUXZdpxpVzLtan27MvZ/veMdVOO4cXsal9me1lFLtl9UN8Y86wPb01dtT/LCfi9tR9k7zbenh6d0XCcC55+zpVJ37ZG3vej9yU555+3+P6hvp///n86B7trYc3d5Zn8VnT+yR+80X/B92MBbGEXXC5P//21WW6+/N598ekl10aPHg++rHmv1fdVdDa1ZBe+rlh1v8HhxLD2eljse9Yfyv5bmL3c+COZPzgdF8+wTmXbhPOvK769onmWvU3qjOW3VveH4/Zt3PfXS8uA8Wzv2gi+eZ482tOYUzrNy/y8dnGfPxR3ZH8H8aztzXROcZ8l1TdE8uyTTLj/PGq9Hv5bc3pGJ703eIZ5q3adXv/7Wmb41Twfn2eFW59kfNrT6CudZuevb4PM0fn073dfnH+zrz/ft+jD579zpuj5cF9g+1evD3kl3JuqIPojXh4HjDAA086OH7vzf9e10/Z+eu9P1/w8yjyu7rsz+PFSqU+vKYP7DnVmvBK9Tx9cr073emu7r7Oldb7mOD+Qffx95ut8Xmt51pXVI0o6yd8ZYhwAA8H646N989zfr2+n6f/zn3pLf/38pbWceb50byH/W1rnT/T6JdXRu/g79fEXx+2DT/T6V9wG8D1DM+wAAAB8Om7buHhras2vLjUObtu3Ytnd8e9foymnyz6n+3eR2bSZP0c9P58XPahL/jWD+xvF8NhAfUhv9mdcouuHGb1++6aah26daf6i/ovrz4pvVn11fhOpfFYgPKVt/qL+i+vPim9V/dTB/43g+F4gPKVt/qL+i+vPim9X/zWD+xvH8eiA+pGz9of6K6s+Lb1Z/9vfBQvX/RiA+pGz9of6K6s+Lb1b/NcH8jeP5fCA+pGz9of6K6s+Lb1b/tcH8jeP5e4H4kLL1h/orqj8vvln91wXzN45ndSA+pGz9of6K6s+Lb1b/t4L5G8czGIgPKVt/qL+i+vPim9W/IZi/cTx/PxAfUrb+UH9F9efFN6v/+mD+xvF8IRAfUrb+UH9F9efFN6v/t4L5G8fzDwLxIWXrD/VXVH9efLP6NwbzN47nNwPxIWXrD/VXVH9efLP6fzuYv3E8XwzEh5StP9RfUf158c3q3xTM3zieLwXiQ8rWH+qvqP68+Gb1bw7mbxzPPwzEh5StP9RfUf158c3q3xLM3zieLwfiQ8rWH+qvqP68+Gb13xDM3zierwTiQ8rWH+qvqP68+Gb13xjM3zierwbiQ8rWH+qvqP68+Gb1Zz/vMFT/PwrEh5StP9RfUf158c3qHwrmbxzPmkB8SNn6Q/0V1Z8X36z+rcH8+Z8bkI0PKVt/qL+i+vPim9V/czB/43i+HogPKVt/qL+i+vPim9X/7WD+xvFcFYgPKVt/qL+i+vPim9W/LZi/cTxrA/EhZesP9VdUf158s/p/J5i/cTzfCMSHlK0/1F9R/Xnxzeq/JZi/cTzrAvEhZesP9VdUf158s/q3B/M3jufqQHxI2fpD/RXVnxffrP5bg/kbx/PNQHxI2fpD/RXVnxffrP4dwfyN41kfiA8pW3+ov6L68+Kb1b8zmL9xPNcE4kPK1h/qr6j+vPhm9e8K5m8cz7WB+JCy9Yf6K6o/L75Z/bcF8zeO57pAfEjZ+kP9FdWfF9+s/t3B/I3j+VYgPqRs/aH+iurPi29W/55g/sbxbAjEh5StP9RfUf158c3q3xvM3zie6wPxIWXrD/VXVH9efLP69wXzN47ntwLxIWXrD/VXVH9efLP6bw/mbxzPxkB8SNn6Q/0V1Z8X36z+/cH8jeP57UB8SNn6Q/0V1Z8X36z+7OdAhurfFIgPGa9/7+6hoU37dt20Ze/Qph07bxras2n/7m179w4lF2plf68s/HtB7/MvstBUw+tjbJJs27FnaPfk4/fMpvO3fk5Eo7/2NHPsNv5YS/HZj71ud9acK/O9K6o13V/nZ9rzks+jnRf4PNpsfJp28eidyZ9Hm+22VvA5rkXHp2z/oeNT3CQ+7/gaOp4Vnf+mfPwrnN89TevPbu5OfrGvO/5oS/FRk7/v1tp8Lfd7p8H5+lpr8zX7uetF8zUbP9X52ltyvmb7D82nSpP4ZtdDrc7XDYH4VOvzMw7Wmzevpvp3BtO0U/o7g5kvk7Txtwxafz2U+z3y4OshGXTR6yH7e9xFr4ds/FRfDzNLvh6y/Re9HvLim62PW309XBuID2l9PpT73ILgfFjR2nzI/h2rovmQjZ/qfOgpOR+y/RfNh7z4Zu8XtjofvhmIb1Xr86Pc54oE58fm1uZH9u9JFM2PbPxU50dccn5k+y+aH3nxzf4/pdX58Y1AfKrh/Ll1z+iiftuW7dsOZH4Aoy85f77f58Ozcl7+m9/4y/fGviTjqEwaR9H1RJwZx/xkJPNDf/cwMO4b/8u/Xf+DXzzw3Sha8dHqkvC4J4Y88SUjHhxecNeyZ6/72PEvjIy/0nT845Hp3y0u+HvH2fi0ntr2nXv2/trWnft2tPoTV82ln4dSGW9P0+ehJBurLX6+Sej3Cab6+SZdk+6cm1r+fBOAD4l5h5+bU99OP/8vPR/1J8e+mckBMN3e+nV2uc/XC15nH2rtOnt5tt6C6+xsfFpvq9fZlZLX2dn+i66z8+Kb/dxeq9fZXw/ET1XjPBmZIKPzY2jT/p27638mbrr/bm3nxzu9f8e3/Pim93Mb29X6+Kf3cyGnf/zT+3eAp3/80/t3ntt11tZLyYdFFn1+ZNE6KvR76VNdR82YdOfcZB0FAOe+f7b77X9d307X/8kqdnz9/52kXe1w/9O9jprudeV0Xyd/8D9/f3rXQdYDTTo7B1gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOT7w//+n75f3+6u9Y/evvJ7e979+vlf/NG9Q6fu+vKf3HrPeX+68N2++9Z87aFVX/rx5j+bP7h02dCV3zty1f33vfj5X7z42BNrCjvqG7u5JGn2RFH8V3EULX37yGP3v/zn541si0f6j/vujubPjxd8f36cybDidBRFN42Ps/GbR06t3Dpye893uhu2z8skydYV9VbT8TSMM7qjsCI+gHqSeXZw0w1PHbtl8OUjA7tW/uzkFTvvngiJe+rmUxTN3Vz/+K4oimYm/0aks60/fXByuzaKoll1j/tswbgubnH8lwbaS5LbGcltb0Ge9PsXZdq1FsdRy9x2t/i4dlWmOX9Wdv9lD0bTJa1zbnL7fHJ7yRTzVNN/cVSJo9r48LfHE3Mkqnve4igends94+3KaDsab0fZdpxpVzLtalemrtF+kx1bjePG7WlcZnt6OK4l2y+qP1bnWBfYvii57UleqO+l7Sh7Z0zvpDsTdUR14zpxtiZGQCXw2ku3jw8veTJ6k2298YJJjxnOkX7vxA+3bHjnjQPP9wXGET8XJ/njtvIPDj157Nnrji7qD+XfXEnyV9rK/0r11dPPnOyfHcx/KM1fbSv/+l/+9MF7r96/MLh/TqT7p9ZW/mUPzz54av+67oFQ/sNp/p628l+5cemqC07uuz04/hXp/pnZVv6fPLL8zMZDLxwN5o/S/LPayv/mk08vqS569Hgw/7F0//S2lf+alY+v/uri+54I7v/X0vxz2sq/4fj9m3c99dLy4Pxcm+6fvrbyn179+ltn+tY8HTp2xofP9hkW4MPlI8k11oNJu911Zll164XHB2pj13yzk39zOtlRRly3dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJCdw9V99e23jj501bf/x6b/VoujKA48ZjhH+r3qjMHBgTbGsezh2QdP7V/XnbZH+u5vIw8AAAAw2eI3H7itvp2uwytJO456ov5ofzwzWpz7+PQ9gsVpK27cnn0PYeZEZEfyVDqUp9qhPLUO5enqUJ4ZHcrT3aE8PQV5eqLW8sxsmqfS8nhmdShPb4fyzO5QnjkdyjO3Q3nmdShPX9M8rc/D+R3Ks6BDeT7SoTwLO5Tnox3K87EO5TmvQ3my7ylPdR7OSSLPD+UZvVMtzFOLq+PfyHs/Pe3ngpL99LbYT/Y9+6n2M7PFfi4u2U9Pi/18smQ/cYv9LM88rjLFfioF/aTz9o5QPWmrxfl/Z4fyHOhQnoMdyvO7HcrzjzuU5590KM9dJfMAhPz+i5f8UX07Xf+n68846ou6a5dHs5IjTvZdgHS9e+Ho18nnu9ABKc23JLO9qyhfdoGdyXfhVMeXfQMhk+/jTfPVJq1Xc/LV6vMt61A+AAAAmIp/evpgw3/NTV7/90fdtYXj69dPZB5fuF7P/kd2Is13SYfyAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9m11xi5yvIB4O/ZmZ2Z/3LpQtoypbdN2z+FEHqhqRFUmDSRBCNsEVsuDVkrLGzD0kK3BVo1RTC22QSDFi/cPliQGEIEEpIGXRMMKPGDjQ1iuLgurAS+EEF6A4qOmd1zds/OzrDLKK3V3y/knHnOeZ73ec8hIXnOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/+f74/b89m44H+3rbuwY6+kMUKv/UVK4huZfJlUptDezjnefWXvnXl7buTuJK73y2gYUAAACAcR4/b8bp6TiZw5PROwqFkM8uDfkoN6auGH8HKMZxU+vwec6isDyz+/8vjEpNQ/HJ0Ulj6gpxXSGOM3Fdz5at16/t7u7c+An+qPSpfo7q/UQhDH2+mHNiWLVo+zN7orbh52iZ4Dma4rrFm264cXHPlq1nrbth7XWd13WuX7Zs+TlLly09+5xli69d1925ZPgY8hOsF0IojX0vE/yLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAI2Dbb3d/Kx0P9vW2dw109LdEIUR1aso1JPcyuVKprYF9vHLfg7MyM+7em8SV3vlsAwsBAAAA4/zq8Rnnp+NkDk9G7ygUQj6bC5kwYyieN5qaDaFcTq4vqLp+JPYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcWfsOtv85HQ/29bZ3DXT0HxeFENWpKdeQ3MvkSqW2BvaxetmPzv/CzDvuTeJK72ID6wAAAADjvXB68x3pOJnDm+I4CoVQDPNDczRjTF3ybeDUqvWq85J1Zk8yr/rbQb28+ZPMO22SeWdMkHdxfL41AAAAwLHnitbfrU7HyfzfHMdRaA35bDFk4niiOT75LjC3Ki+pn2i+T+rn1amfaO5P6qvnfgAAAPhfdtabT3yYjsfP/8WQzxZG5u+J/p5+UXz2d3IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ5fH7zwF+l4sK+3vWugoz8ThRDVqSnXkNzL5Eqltgb2seofb+y4/dJbpiZxpXc+28BCAAAAwDiP5j59SzpO5vBk9I5CIeSzLaE5HDc097+WmzJ13Tdnzg4hlIYScrlw69pNmzaePXxM8r4U7frcwhv6zhyXt3T4eOSfFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Fcte2TnmnQ82Nfb3jXQ0f9/UQhRnZpyDcm9TK5UamtgHy/sPOPwVXc91ZfEld7FBtYBAAAAxpvV/fRf0nEyhyezfxQKoRhyIRemD8XpWb+iqWq9et8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8ePVu2Xr+2u7tzox9++OHHyI+j/V8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaPn5+u+9nY4H+3rbuwY6+gtRCFGdmnINyb1MrlRqa2Afn7pqzjmz92++OYkrvYsNrAMAAACMt+atzfvTcTKHJ7N/FAqhGJpDc5gWx+MNzf+tR2K3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0TQ3RKH8MZ2y8mjvGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgkHHhx1X3peLCvt71roKP/hCiEqE5NuYbkXiZXKrU1sI8r9377KzfuevaMJK70zmcbWAgAAAAYp/nNF7+ajpM5PBm9o1AI+eyskA+z4ivdYxeIMklize8Co3VfH1OWmXTdjqodD++sEH+HKIzsMwx9dhitu+sj64rx1abWyb0nAAAAOJZN23HxN9JxMv83x3EUWkM+Oy01V984pr5l0nP83WPqTph03U/H1LVOUPdveCUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIPuXPncKel4sK+3vWugoz+KQojq1JRrSO5lcqVSWwP7KHXe9/TDl/fNSOJK72ID6wAAAADjXfpG4bvpOJnDk9k/CoVQDLPDiWH20NwfWsfWJ3nHlX7/8ordL10RwpLpz8/J1u33wz2XvR0Offa194YPQ2EITWOTmkKYEveL6vS7+g+PrHrmw+0PhLBkWmZW/X6jrUYPVaJS+eRtCx6+fPreFXWXAQAAgGNa4cEDP0nHyfyfTNRRaA357Pq683+S97Hm//aemdumxsf4C0BVRVNr3K+pTr/edx9oO7jmywcr8//zcwoj/6/A6fPH5qdbpY9V3xyiUnnuE6etPnzgpkuGLyT9M3X6r2med9LOt2bOS/oX4uvXhMn2D1X9ezoOzV/UcvwFY/uHENpq9f/xhY+/v+red68Y7l//fS/+0+Dnp4YNPyh0J8fhK+P7r7x/+c6tudenjO0f1em/8Nkn9z9266o7q5//1Gyt/uOPVSpds+XefbcvvG1F57mp/k11+t/c9so73/nZLx+q9N83t2Wk/8KPeP4J+++Zv2Pfru33rBn7/ku1+l991sYnt6y78q7q52+pWjj95tPH8e//1VnRRZt7Xt5YfQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODY1vHYB4fS8WBfb3vXQEd/UxRCVKemXENyL5Mrldoa2MdvMns+eGh/8fgkrvQuNrAOAAAAMN4lK169Lh0nc3gy+0ehEIohF3KhZWjuP3nbgocvn753RWiN78fnbPeGnk1nXrth8/prjvQjAAAAABPYdd77K9JxMv9n4zgKrSGfXRCa4/l/5f3Ld27NvT4lmf9DCEN/7s9eu667c0kY+U7Q03Fo/qKW4y9I8jLxuVDJW3T1hu74M0Gy7lOPfmbpuZddOpLflM4/ezRv7hOnrT584KZLauYtG817dVZ00eaelzem9lkayVs6mte77/aFt63oPDd5jig+F+LnSfL2zN+xb9f2e9YkeU3xuSVeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI4aT3/v61dDzY19veNdDRHzIhRHVqyjUk9zK5UqmtgX18cP7zg4dbv/hgEld657MNLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXT2gcVRwH8Pd2t2bbTeumFppoDSn20oJQCBZ7kObiHyRqqShaKEYxXlQsiFbswbbBUNRDQaGlvZRWPCs5FLWHWGwVBbGKB/GkoCeVHJIiqagkmbfZTDskjraU8vnA8Pb3Zuc7b96+nd0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBr2uM/3ltrrztq3bPtuddfvPDgzXd/cWB46rX7Pnp+/9qP11xojgw+8MbWe74Z+rxroHfD8JYPxh4aHTlz159nDh8dXPREr8w1m7KyHkL8LYbQ+/PY4dGzX66d6Ysz54/NfaGrK67+pCvmEjZPhxCebo1z4c6xqf5nZtr9b3Ys6L8xF5K/rtCopvHMaS4cL9eXerbO9j7x1InxZwfOjvXt7v918o4X9s2/Jdbb1lMIq4baj18WQliebTPSautOB2ft9hDCirbj7lxkXLctcfy3F9TrsvaGrG0skpP2r8/VtSWOo5ZrO5Z4XFmVK5yfl5+//M3oSknXuSprT2Xtpn+ZU01bDJUYaq3hPxfn10ho+9xiiLNru96qK7N1aNUhX8dcXcnV1WW565o9bzax1RgX9qf35frT7biW9a9vv1dfxo6C/p6srWdf1D9SHfIv5jQueTF/HaFtXBNXa2EUqBR891J/a3jZh9HI+hpx9SXH/H0Zad/EZ0/u/P37V081C8YR349ZfiyVPzB8bPy9x073dBflD1Wy/Eqp/HPVr6bfnezuLMw/lPKrpfIf+euXgwce3rOmcH4m0vzUSuVveKtz79SeHR19RfnHU369VP6WXb1bb5186eXC8W9O87O8VP53b2+8uOvQh6cL80PKX1Eq/4djJ9dVe945X5g/nuanUSr/0f4j2+6/ZeRo4fx/nfJXlsrfeX50aPeJTzcWrs/taX6apfKnt33708Xm4Mmie2c8frV/YQGuLzdl/7EOZnXZ58z/qu154Uhfbe4/X2e2rfw/T5QT255dAAAAAAD+YQeOBQAAAACE+Vt3ZbEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAoAAP//pgBmrg==") acct(&(0x7f0000000080)='./file0/file0\x00') 5.095442925s ago: executing program 5 (id=1786): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) connect$rxrpc(r1, &(0x7f0000001bc0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0xdd, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x9, 0x10}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x250, 0x5, 0x4, 0x9f, 0x8, 0x1}, 0x43, &(0x7f0000000a80)={0x5, 0xf, 0x43, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x7, 0x1, 0x1, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "670104ca16f7285c2a094b4f68672551"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xb6, 0x7, 0x5, 0x69}, @ss_container_id={0x14, 0x10, 0x4, 0xc7, "65fe1478372f4fab68883d70e98e9a7b"}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc0a}}, {0xd2, &(0x7f0000000b80)=@string={0xd2, 0x3, "16db66307316bda58320eb35a7d5444a51db5c1b1efee8b28d5c5bbafa857d1267c2fb9e197a2028123642b878eb721227e79011d2fdb54055e8e072e052a70cf9c479749d3ca4ac102270f807c55faf074cdb7ca80708115c01306fd02ba09d8af94c122c2bbffd5b52e8826a72c25032e03fb5c436ff628a254101d7c6befa86477827f35b97efa1dab54fd1c06566a5ffac623dd7689b7abc36bfc486fb479e52d9b3de1eb183d54a0dd5603f6b7e2382c6e224bdc9664603eafb18186c025d5a4ffd959e6635841b4fc312f49fec"}}, {0x76, &(0x7f0000000d00)=@string={0x76, 0x3, "eef0901993ef6951bf9cac4ce0987472e07321a778a4b0c82552d4bec26a56296e320ea2e71d368eaed8008ce8c2687d5b520a905fd96eeab3bbdcfff6185411f0b29961cfb14348735295c65d7b9557fab9b2bb9f82073304bd226c27b74e523020f84adf853261c81a8860a6d74926703d1b32"}}, {0xb1, &(0x7f0000000e40)=@string={0xb1, 0x3, "ddcd84521adac6ad486e9ce9a94ae2bf26ed34b716b1b9487357b8d3715df74467fe552966c4f8ece3163f8efb850ed942f9ec8f47b430248da8052cf4649d9378deec9a71b4d997eac13a2e0e9a054ce030194270e4d27309154238d4a2166c8827e82c77f9bc8f7030834dc750a3e66dbcc9fb50407351f661a7ce1bbd0c338134f9e755421c99926efa964fd8e9eeb86d8e2d01c40bc82a289c7865293eb7f548e67f963aaf45e5f1ec8a60c8b4"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000080)={0x40, 0x7, 0x9, {0x9, 0xf, "82a041d058d77f"}}, &(0x7f0000000180)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "50412222febd7212f5aabc14ad26b15ede62f379dee88a27bc3e2d7f69a2e855809340f7b4b603c0257c808788d50951a6b101db0c12e9621c4db7791e73f7376d1e33656bb88046d24ba713ec6a163b4fc6dacd80fd11d11678d32730fb891184d6e8a880e3e13f3318874af9dd7553aed3aabf2ea1c4960a67050a620c83a535bebad851914d683d4534ee12030b2abff44e226f471bfb26867054b4c3fdc28220dd789e82c52b088c19326d96a861624d3969edf4dbd3dd6e5a58b4719698c7c14c8cbb877fca9265adf67f465d93bc1df0579cde8cb5eed71db56c957757fb5c21fb5992f14ed76c5427ab13210db4438b58f59e2b6443"}}}, &(0x7f00000009c0)={0x24, &(0x7f00000002c0)={0x0, 0x32, 0xeb, "3f3dd012300b5048a5876173fff20881f8256bd2e1a933e78228de38cf98da2a5389b1b8bf48f588ceaa84080cb64c09d3e80aec2ff5cb048ff5ddf6bd6e35518d0079bef4addf1d7f809df76878ecaed2f03d9d37408ae1310af0cd8fc5513d842a60f34c27e168a79f81287c76afd0cc41f1781b67e7bb80c1180ec5a0091bf99fabafb047b0b7b04a0b1688f18ac26dae585bc6bdcf5cf7747b1940adfad9fa522be551cafbfe9d1af0da2608783514784468c63d6ebfaef21efa1e86a61aaaac4c00135c9cb439e18798bea276acc2dfbfad177e0dc5df3deee17d9bdbbb4b915812cb7c517b0ba038"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x81, 0x3, "b417a6"}, &(0x7f00000008c0)={0x20, 0x82, 0x1, "ef"}, &(0x7f0000000900)={0x20, 0x83, 0x3, "4d7eef"}, &(0x7f0000000940)={0x20, 0x84, 0x4, "66f21faa"}, &(0x7f0000000980)={0x20, 0x85, 0x3, '%wX'}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540100001000130700000000000000007f00000100"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0xff2b}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 5.093363855s ago: executing program 3 (id=1787): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@gid}, {}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@gid}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) ftruncate(r0, 0x1f) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 4.753663485s ago: executing program 1 (id=1788): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x204002, &(0x7f0000000480)=ANY=[@ANYBLOB='noadinicb,iocharset=euc-jp,iocharsep855,nostrict,dmode=00000000000000000000006,partition=00000000000200000367,adinicb,shortad,\x00\x00\x00\x00'], 0xfc, 0xc3d, &(0x7f0000002700)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x406000, 0x0) mknod(0x0, 0x8001420, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001800000426bd7000010000801c2020fffd04c802002000000c00090001001020", @ANYRES32=0x0, @ANYBLOB="840013000000000000000000000f0f00000002000000000000000000000000000000010000000f000000000000000800000000000000a8f03d3900000000000000000000000000000000000000000000000000000000040000000000000000000000010000000000000001000000000000000300000000000000000005001a0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) write$UHID_INPUT(r2, &(0x7f0000001980)={0x765, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3245078b089b39353b0e1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 3.700886064s ago: executing program 3 (id=1789): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) r1 = eventfd2(0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x5, 0x10) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x1, @dev}, 0x8, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 'nicvf0\x00'}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) getgroups(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r7 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)) 3.414245117s ago: executing program 1 (id=1790): socket$inet(0x2b, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 2.013976096s ago: executing program 4 (id=1791): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) 1.780496449s ago: executing program 4 (id=1792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@lld}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.736665448s ago: executing program 2 (id=1793): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r3}, 0x10) brk(0x0) 1.713118396s ago: executing program 0 (id=1794): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081124e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.501913672s ago: executing program 4 (id=1795): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000001440)=""/182, 0xb6}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {0x0}, {&(0x7f0000000d40)=""/146, 0x92}], 0xd}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.202889917s ago: executing program 4 (id=1796): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000340)}, 0x20) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87030b0000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.158535266s ago: executing program 1 (id=1797): syz_read_part_table(0x59c, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="480000001400197f09", 0x9}], 0x65) 645.839493ms ago: executing program 4 (id=1798): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 614.456566ms ago: executing program 0 (id=1799): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000200)="270427003c0f00000000002f1eafbcf706e10500000086ddffff1104ee162fd4b8bf4a82f6184b8a34f90186cee84400000000000000001900", 0x39}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdaf0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2a2217cd9378c73ae90c801681f55ef26cb00"/130, 0x82}, {&(0x7f0000001a40)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7033246635093ba4d30fcf19a90804f04a10939db8f4e13069cda667bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5c63c0daa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a557228cdb3ea5c24712b0f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c956c05f2ee7ae045e61ce09d719", 0x1b5}, {&(0x7f0000000700)="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", 0xce6}, {&(0x7f0000000500)="4f12f31ad8", 0x5}], 0x5}, 0x0) 479.164186ms ago: executing program 4 (id=1800): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b000c00010000000000000000007581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000009e79c7ad2600bb2b53e4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 460.068373ms ago: executing program 1 (id=1801): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0xfffffffffffffeb5, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x140, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x40}, @remote, 0xffffff00, 0xffffffff, 'syz_tun\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x2, 0x8}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x76}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x1}, {0x4, 0x3, 0x4}, {0x3, 0x3, 0x3}, 0x401, 0x9}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc43b, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) recvmmsg(r2, 0x0, 0x0, 0xa002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080), 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(r4, 0x5423, 0x0) 408.638807ms ago: executing program 0 (id=1802): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0xd, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}]}, 0x20}], 0x1}, 0x0) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a7ff070000000000004da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05dfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f9ff86086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace85c370183f23cf0838fb5a1d75c145feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000000000000000000000000000000096e4a7b57a867432217cf0be18b96865ee3dca3a03a5e0d3060705c499776bb3e8c442aa1d3b26842c96080c4c251b8cbc5de68938316e95857b0e3cdb14d4a93d49dd4f7a08639ee6943861886fabfac35f9aab09c77bc495b5c7116de70619c5ac798f1974d7a6e9b80ac4bab0f1657488278a40480731b7f51ff921e8ad8a1986b6da1660c40875504d1265679a718dc9a1400ac15ce81696f712a1074ac47de09e95d64eb72a186f11bf360e5841a283841762a0cda06ac7c74520427465c128763e3258169d32bce06dbf95fcf8e19ffdb7c56fb5e236f2422f631ead769969699318140ad2b431b21f88bf824e1590524a0aea10ad2c5f961533e78d8e46da0e6ef484d25bd09f6de08e398485d95c51f3a5dc76dbdea7b2d236d819018b22467116b359e8c38147565203c75a4a2789019e7e4bf06a2b3779cea3206cc2d10e5a458b81"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x11}]}]}}}]}, 0x90}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0xd3, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x7, 0x8}, {0x1, 0x2, 0xf, 0x4}, {0x2, 0x3, 0x10, 0x9}], 0x10, 0x7}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x11}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x30}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x102) close(r10) 0s ago: executing program 2 (id=1803): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x46100) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x6, 0x0, 0x0}, 0x90) r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0xdc, 0x453, 0x0, 0x0, 0x0, "fa6086af374a70199a266fbacdd0b861ae5e1d116555756267d8e70a5ea6394988608ca475ec442606ebeefc69133c27a1e3373b10000000fb03cc868dcfff4ee4a1e924de10a6c9dacad04a4ba02f7bd098821c9ad6a4ad14d8b8705bfef681055945b82928325fe42a829bcb0bfab19379684ba4def212ade8f789cafeeba18d3b0d3feefc903bde39472f082c19ac0811ee635a2d892c5cb9bf1e19970a95487a8ef6651879175992fed93f0588669448d6ad644dddaa503a6dd71217606915cfe4d3af06959f92", ["", "", "", ""]}, 0xdc}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r7, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) fallocate(r0, 0x20, 0x4000, 0x1000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r9) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r10, 0x321}, 0x14}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) kernel console output (not intermixed with test programs): ed pid=14306 comm="syz.3.1452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9f75bd9 code=0x0 [ 973.878042][ T5195] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 973.903050][T13802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.922028][T13802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.148880][T13802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.682518][ T5195] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 974.709661][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.725731][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.730443][ T5195] bcachefs (loop0): unshutdown complete, journal seq 14 [ 974.735855][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.756959][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.758126][ T5195] bcachefs (loop0): done going read-only, filesystem not clean [ 974.766831][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.766855][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.766873][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.766893][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.766919][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.766939][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.769430][T13807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.789234][T11730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 974.800674][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.895204][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.922037][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.944450][T14280] bcachefs (loop0): shutdown complete [ 974.947828][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.966458][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.979174][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.999085][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.011456][ T5148] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 975.021474][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.031453][T13807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.041945][T13807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.055581][T13807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.082533][T13802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.092867][T13802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.105159][T13802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.114078][T13802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.136752][T13807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.158501][T13807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.190383][T13807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.199178][T13807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.254975][ T5148] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 975.266565][ T5148] usb 2-1: config 1 has no interface number 1 [ 975.266834][T14335] loop5: detected capacity change from 0 to 1024 [ 975.284858][ T5148] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 975.304868][T14335] EXT4-fs: Ignoring removed orlov option [ 975.327549][ T5148] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 975.355008][T14335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 975.402921][ T5148] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.425606][T14335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 975.451046][ T5148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.463571][ T5148] usb 2-1: Product: చ [ 975.467853][ T5148] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗒మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴{ [ 975.470422][T14335] System zones: [ 975.493151][ T5148] usb 2-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 975.511302][T14335] 0-1, 3-36 [ 975.575183][T14335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.592288][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.626530][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.776940][T10388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.785329][T14331] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 975.803013][T10388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.818253][T13131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.847708][ T5148] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 975.912954][ T5723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.933164][ T5723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.049121][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.060311][ T5148] usb 2-1: USB disconnect, device number 24 [ 976.097514][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.454274][T14340] loop5: detected capacity change from 0 to 32768 [ 976.464629][T14340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1459 (14340) [ 976.491320][T14340] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 976.501918][T14340] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 976.510496][T14340] BTRFS info (device loop5): using free-space-tree [ 976.614675][T14333] loop3: detected capacity change from 0 to 40427 [ 976.629710][T14345] loop2: detected capacity change from 0 to 2048 [ 976.733140][T14333] F2FS-fs (loop3): invalid crc value [ 976.770114][T14333] F2FS-fs (loop3): Found nat_bits in checkpoint [ 978.974741][T14366] Process accounting resumed [ 979.194714][T13131] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 979.873586][T14377] ax25_connect(): syz.0.1466 uses autobind, please contact jreuter@yaina.de [ 979.935286][T14375] loop3: detected capacity change from 0 to 4096 [ 979.982480][T14375] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 980.071569][T14379] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 980.234008][ T5195] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 980.256646][ T29] audit: type=1800 audit(1720294967.615:160): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1464" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 980.315699][T14369] loop4: detected capacity change from 0 to 40427 [ 980.344201][ T29] audit: type=1800 audit(1720294967.635:161): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1464" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 980.348729][T14386] loop2: detected capacity change from 0 to 64 [ 980.371762][T14369] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 980.379452][T14369] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 980.396642][T14384] loop5: detected capacity change from 0 to 1024 [ 980.421554][T14387] loop1: detected capacity change from 0 to 1024 [ 980.571093][T14384] EXT4-fs: Ignoring removed orlov option [ 980.592031][T14384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 980.640317][T14389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 980.671556][T14384] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 980.679905][T14384] System zones: 0-1, 3-36 [ 980.708750][T14369] F2FS-fs (loop4): invalid crc value [ 980.715648][ T5195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 980.739156][T14384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.753450][ T5195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 980.975280][ T5195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 981.145760][T14369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 981.408157][ T5195] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 981.463068][ T5195] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 981.526109][ T5195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 981.575329][ T5195] usb 1-1: SerialNumber: syz [ 981.606534][ T61] hfsplus: b-tree write err: -5, ino 4 [ 981.616397][T14377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 981.635716][T13131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.651381][T14377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 981.675099][ T5195] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 981.738964][T14369] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 981.760356][ T5148] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 981.779273][T14369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 981.805631][T14369] syz.4.1462: attempt to access beyond end of device [ 981.805631][T14369] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 982.087493][T14408] loop1: detected capacity change from 0 to 32768 [ 982.104204][T14408] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1475 (14408) [ 982.145201][T14369] syz.4.1462: attempt to access beyond end of device [ 982.145201][T14369] loop4: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 982.166718][T14408] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 982.167938][T14377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.177080][T14408] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 982.195674][T14408] BTRFS info (device loop1): using free-space-tree [ 982.206227][ T5148] usb 3-1: Using ep0 maxpacket: 8 [ 982.230600][T14377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.240653][ T5148] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 982.268615][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.308225][T14369] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 982.310966][ T5148] usb 3-1: config 0 descriptor?? [ 982.353488][T14369] F2FS-fs (loop4): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 982.361790][ T29] audit: type=1800 audit(1720294969.715:162): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1466" name="file2" dev="overlay" ino=242 res=0 errno=0 [ 982.416653][T14377] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 982.505949][ T5195] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 982.553837][ T5195] usb 1-1: USB disconnect, device number 10 [ 983.757496][T14429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.043946][T14429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.053985][T14414] loop5: detected capacity change from 0 to 2048 [ 984.110457][ T5148] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 984.150123][ T5148] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 984.173227][T14428] Process accounting resumed [ 984.195686][ T5148] asix 3-1:0.0: probe with driver asix failed with error -61 [ 984.374070][T13178] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 984.617442][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 985.434009][T14437] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1472'. [ 985.497527][T14438] 9pnet_fd: Insufficient options for proto=fd [ 985.799333][ T5195] usb 3-1: USB disconnect, device number 31 [ 986.029870][T14445] loop5: detected capacity change from 0 to 4096 [ 986.079806][T14445] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 986.269099][T14454] loop4: detected capacity change from 0 to 1024 [ 986.278280][T14454] EXT4-fs: Ignoring removed orlov option [ 986.639706][T14454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.990254][ T29] audit: type=1800 audit(1720294974.345:163): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1483" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 987.033544][T14461] loop3: detected capacity change from 0 to 1024 [ 987.174932][T14454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 987.217062][T14454] System zones: 0-1, 3-36 [ 987.237446][ T29] audit: type=1800 audit(1720294974.555:164): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1483" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 987.344837][T14454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.410171][T14476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1492'. [ 988.471826][T14472] loop2: detected capacity change from 0 to 32768 [ 988.480473][T14472] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1490 (14472) [ 988.506828][ T12] hfsplus: b-tree write err: -5, ino 4 [ 988.515484][T14472] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 988.517878][T13802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.525712][T14472] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 988.544946][T14472] BTRFS info (device loop2): using free-space-tree [ 989.108696][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 989.581699][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 989.852604][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 990.134102][T11727] Bluetooth: hci0: command 0x0406 tx timeout [ 990.620170][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 990.629289][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.768816][ T9] usb 2-1: config 0 descriptor?? [ 990.806317][T14512] loop4: detected capacity change from 0 to 1024 [ 990.904609][T14503] Process accounting resumed [ 991.053522][T14518] FAULT_INJECTION: forcing a failure. [ 991.053522][T14518] name failslab, interval 1, probability 0, space 0, times 0 [ 991.107997][T14518] CPU: 1 PID: 14518 Comm: syz.5.1502 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 991.118236][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 991.119781][T13807] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 991.128295][T14518] Call Trace: [ 991.128313][T14518] [ 991.128328][T14518] dump_stack_lvl+0x241/0x360 [ 991.128381][T14518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.128422][T14518] ? __pfx__printk+0x10/0x10 [ 991.128466][T14518] ? __pfx___might_resched+0x10/0x10 [ 991.165186][T14518] should_fail_ex+0x3b0/0x4e0 [ 991.169921][T14518] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 991.175676][T14518] should_failslab+0x9/0x20 [ 991.180221][T14518] __kmalloc_noprof+0xd8/0x400 [ 991.185047][T14518] ? kfree+0x4e/0x360 [ 991.189072][T14518] tomoyo_realpath_from_path+0xcf/0x5e0 [ 991.194663][T14518] tomoyo_path_number_perm+0x23a/0x880 [ 991.200172][T14518] ? tomoyo_path_number_perm+0x208/0x880 [ 991.205837][T14518] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 991.211990][T14518] ? __fget_files+0x29/0x470 [ 991.216621][T14518] ? __fget_files+0x3f6/0x470 [ 991.221337][T14518] ? __fget_files+0x29/0x470 [ 991.225970][T14518] security_file_ioctl+0x77/0xb0 [ 991.231032][T14518] __se_sys_ioctl+0x47/0x170 [ 991.235724][T14518] do_syscall_64+0xf3/0x230 [ 991.240397][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.246362][T14518] RIP: 0033:0x7fd4e2775bd9 [ 991.250820][T14518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.270465][T14518] RSP: 002b:00007fd4e3619048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.278910][T14518] RAX: ffffffffffffffda RBX: 00007fd4e2903f60 RCX: 00007fd4e2775bd9 [ 991.287071][T14518] RDX: 0000000020000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 991.295057][T14518] RBP: 00007fd4e36190a0 R08: 0000000000000000 R09: 0000000000000000 [ 991.303044][T14518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.311130][T14518] R13: 000000000000000b R14: 00007fd4e2903f60 R15: 00007ffe92d911d8 [ 991.319226][T14518] [ 991.330903][T14518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 991.375602][T14520] block nbd4: shutting down sockets [ 991.432586][T14528] netlink: 'syz.1.1496': attribute type 10 has an invalid length. [ 991.525118][T14529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.534191][T14529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.562530][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 991.567430][T14528] team0: Device veth1_macvtap failed to register rx_handler [ 991.590255][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 991.617224][ T9] asix 2-1:0.0: probe with driver asix failed with error -61 [ 991.668778][T14531] loop5: detected capacity change from 0 to 2048 [ 991.756401][T14531] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 992.024958][ T5149] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 992.094585][T14515] loop0: detected capacity change from 0 to 40427 [ 992.105079][T14533] loop4: detected capacity change from 0 to 1024 [ 992.132034][T14533] EXT4-fs: Ignoring removed orlov option [ 992.139178][T14533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.141973][T14515] F2FS-fs (loop0): invalid crc value [ 992.162475][T14537] loop2: detected capacity change from 0 to 512 [ 992.173482][T14533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 992.185628][T14515] F2FS-fs (loop0): Found nat_bits in checkpoint [ 992.193371][T14533] System zones: 0-1, 3-36 [ 992.228406][T14533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.244794][T14537] netlink: 'syz.2.1503': attribute type 6 has an invalid length. [ 992.268487][ T5149] usb 4-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b0.d2 [ 992.283050][ T5149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.292847][ T5149] usb 4-1: Product: syz [ 992.297143][ T5149] usb 4-1: Manufacturer: syz [ 992.302091][ T5149] usb 4-1: SerialNumber: syz [ 992.320356][ T5149] usb 4-1: config 0 descriptor?? [ 992.365490][T14546] loop5: detected capacity change from 0 to 64 [ 992.451266][T13802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.468346][T14515] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 992.516825][T14528] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1496'. [ 992.575869][ T5149] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 992.699854][T12972] syz-executor: attempt to access beyond end of device [ 992.699854][T12972] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 992.712707][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 992.737329][T12972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 992.812797][T12972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 992.872512][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 993.093339][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.099733][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.175277][ T5148] usb 4-1: USB disconnect, device number 24 [ 993.621201][T14560] loop5: detected capacity change from 0 to 256 [ 993.687559][T14560] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb22115ea, utbl_chksum : 0xe619d30d) [ 994.253957][T14568] loop2: detected capacity change from 0 to 32768 [ 994.271721][ T5148] usb 2-1: USB disconnect, device number 25 [ 994.294420][T14568] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1515 (14568) [ 994.324104][T14568] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 994.334481][T14568] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 994.343141][T14568] BTRFS info (device loop2): using free-space-tree [ 994.357703][T14572] loop5: detected capacity change from 0 to 512 [ 994.371223][T14573] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 994.378030][T14573] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 994.392136][T14553] loop4: detected capacity change from 0 to 40427 [ 994.392393][T14573] vhci_hcd vhci_hcd.0: Device attached [ 994.419920][T14572] EXT4-fs (loop5): orphan cleanup on readonly fs [ 994.479110][T14553] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 994.518957][T14553] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 994.532956][T14572] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 994.547783][T14553] F2FS-fs (loop4): invalid crc value [ 994.590978][T14572] EXT4-fs warning (device loop5): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 994.615927][T14572] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 994.618976][T14553] F2FS-fs (loop4): Found nat_bits in checkpoint [ 994.638390][T14572] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.1517: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 256(256) [ 994.751884][ T9] usb 16-1: SetAddress Request (2) to port 0 [ 994.758145][ T9] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 994.832202][T14572] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1517: couldn't read orphan inode 11 (err -117) [ 996.624392][T14572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 996.650148][T14574] vhci_hcd: connection reset by peer [ 996.656443][ T35] vhci_hcd: stop threads [ 996.677902][ T35] vhci_hcd: release socket [ 996.701057][ T35] vhci_hcd: disconnect device [ 996.861769][T14572] EXT4-fs error (device loop5): ext4_lookup:1854: inode #12: comm syz.5.1517: iget: bad extended attribute block 1 [ 996.887042][T14601] Process accounting resumed [ 996.986980][T14609] loop1: detected capacity change from 0 to 1024 [ 997.008106][T14609] EXT4-fs: Ignoring removed orlov option [ 997.025431][T14609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 997.050593][T14611] loop0: detected capacity change from 0 to 256 [ 997.086065][T14609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 997.089556][T13807] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 997.098350][T14609] System zones: 0-1, 3-36 [ 997.121512][T13131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.167722][T14611] FAT-fs (loop0): Directory bread(block 64) failed [ 997.174431][T14611] FAT-fs (loop0): Directory bread(block 65) failed [ 997.181164][T14611] FAT-fs (loop0): Directory bread(block 66) failed [ 997.187807][T14611] FAT-fs (loop0): Directory bread(block 67) failed [ 997.190667][T14609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.196048][T14611] FAT-fs (loop0): Directory bread(block 68) failed [ 997.213767][T14611] FAT-fs (loop0): Directory bread(block 69) failed [ 997.220538][T14611] FAT-fs (loop0): Directory bread(block 70) failed [ 997.227096][T14611] FAT-fs (loop0): Directory bread(block 71) failed [ 997.235407][T14611] FAT-fs (loop0): Directory bread(block 72) failed [ 997.242458][T14611] FAT-fs (loop0): Directory bread(block 73) failed [ 997.309206][T14611] syz.0.1522: attempt to access beyond end of device [ 997.309206][T14611] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 997.322957][T14611] Buffer I/O error on dev loop0, logical block 306, lost async page write [ 997.369035][T14615] program syz.3.1526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.465291][T14615] loop3: detected capacity change from 0 to 256 [ 997.564571][T13178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.574200][T14615] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 997.676463][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1525'. [ 997.972967][T14615] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 998.461371][T10388] kworker/u8:13: attempt to access beyond end of device [ 998.461371][T10388] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 998.554974][T10388] Buffer I/O error on dev loop0, logical block 306, lost async page write [ 998.653708][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 999.480222][ T5195] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 999.729885][ T5195] usb 1-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b0.d2 [ 999.770109][ T5195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.778395][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 999.810237][ T5195] usb 1-1: Product: syz [ 999.820044][ T5195] usb 1-1: Manufacturer: syz [ 999.820225][ T9] usb 16-1: device descriptor read/8, error -110 [ 999.832744][ T5195] usb 1-1: SerialNumber: syz [ 999.867318][ T5195] usb 1-1: config 0 descriptor?? [ 999.881587][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 1000.116101][T14630] loop1: detected capacity change from 0 to 32768 [ 1000.122988][ T5195] cdc_subset 1-1:0.0: probe with driver cdc_subset failed with error -22 [ 1000.241652][T14631] loop2: detected capacity change from 0 to 40427 [ 1000.274178][T14647] team0: Port device team_slave_0 removed [ 1000.311899][ T9] usb usb16-port1: attempt power cycle [ 1000.318905][T14630] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1000.340263][T14631] F2FS-fs (loop2): invalid crc value [ 1000.387575][T14631] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1000.503482][T14630] XFS (loop1): Ending clean mount [ 1000.543409][ T9167] usb 1-1: USB disconnect, device number 11 [ 1000.564382][T14630] XFS (loop1): Quotacheck needed: Please wait. [ 1000.617104][T14631] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1000.709168][T14630] XFS (loop1): Quotacheck: Done. [ 1000.729768][T13807] syz-executor: attempt to access beyond end of device [ 1000.729768][T13807] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1000.744315][T13807] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1000.752518][T13807] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1000.871203][T14630] FAULT_INJECTION: forcing a failure. [ 1000.871203][T14630] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.898682][T14644] loop3: detected capacity change from 0 to 40427 [ 1000.910292][T14630] CPU: 1 PID: 14630 Comm: syz.1.1527 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1000.920527][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1000.930731][T14630] Call Trace: [ 1000.934032][T14630] [ 1000.936987][T14630] dump_stack_lvl+0x241/0x360 [ 1000.941723][T14630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1000.946959][T14630] ? __pfx__printk+0x10/0x10 [ 1000.951679][T14630] ? is_bpf_text_address+0x285/0x2a0 [ 1000.957004][T14630] should_fail_ex+0x3b0/0x4e0 [ 1000.961712][T14630] ? alloc_empty_file+0x9e/0x1d0 [ 1000.966680][T14630] should_failslab+0x9/0x20 [ 1000.971208][T14630] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1000.976601][T14630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.982246][T14630] alloc_empty_file+0x9e/0x1d0 [ 1000.987037][T14630] path_openat+0x105/0x35f0 [ 1000.991555][T14630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.997204][T14630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.002930][T14630] ? mark_lock+0x9a/0x350 [ 1001.007531][T14630] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.013015][T14630] ? __lock_acquire+0x1346/0x1fd0 [ 1001.018051][T14630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.023796][T14630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.029435][T14630] ? __lock_acquire+0x1346/0x1fd0 [ 1001.034473][T14630] ? __pfx_path_openat+0x10/0x10 [ 1001.039448][T14630] do_filp_open+0x235/0x490 [ 1001.044054][T14630] ? __pfx_do_filp_open+0x10/0x10 [ 1001.049112][T14630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.054751][T14630] ? _raw_spin_unlock+0x28/0x50 [ 1001.059612][T14630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.065248][T14630] ? alloc_fd+0x5a1/0x640 [ 1001.069621][T14630] do_sys_openat2+0x13e/0x1d0 [ 1001.074349][T14630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1001.080440][T14630] ? __pfx_do_sys_openat2+0x10/0x10 [ 1001.085659][T14630] ? __fget_files+0x3f6/0x470 [ 1001.090366][T14630] __x64_sys_openat+0x247/0x2a0 [ 1001.095242][T14630] ? __pfx___x64_sys_openat+0x10/0x10 [ 1001.100730][T14630] ? do_syscall_64+0x100/0x230 [ 1001.105652][T14630] ? do_syscall_64+0xb6/0x230 [ 1001.110359][T14630] do_syscall_64+0xf3/0x230 [ 1001.114986][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.120928][T14630] RIP: 0033:0x7f798d175bd9 [ 1001.125440][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.145158][T14630] RSP: 002b:00007f798df1a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1001.153686][T14630] RAX: ffffffffffffffda RBX: 00007f798d303f60 RCX: 00007f798d175bd9 [ 1001.161672][T14630] RDX: 00000000001817c1 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1001.170104][T14630] RBP: 00007f798df1a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1001.178131][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.186225][T14630] R13: 000000000000000b R14: 00007f798d303f60 R15: 00007ffef152e7e8 [ 1001.194246][T14630] [ 1001.211287][ T9] usb usb16-port1: unable to enumerate USB device [ 1001.250885][T14644] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1001.300437][T13178] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1001.455693][T14644] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1001.689668][T11730] syz-executor: attempt to access beyond end of device [ 1001.689668][T11730] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1001.830156][T11730] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1001.845578][T14667] loop5: detected capacity change from 0 to 4096 [ 1001.918517][T14667] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1002.674867][ T29] audit: type=1800 audit(1720294990.035:165): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1537" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 1002.798343][ T29] audit: type=1800 audit(1720294990.035:166): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1537" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 1003.091546][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'. [ 1003.586746][T14693] loop4: detected capacity change from 0 to 16 [ 1003.626904][T14693] erofs: (device loop4): mounted with root inode @ nid 36. [ 1003.759572][T14672] loop1: detected capacity change from 0 to 40427 [ 1003.779980][T14693] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 1003.842534][T14672] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1003.874250][T14672] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1003.893162][T14693] syz.4.1548: attempt to access beyond end of device [ 1003.893162][T14693] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1003.938965][T14672] F2FS-fs (loop1): invalid crc value [ 1003.981311][T14672] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1004.022284][ T4485] Bluetooth: hci5: link tx timeout [ 1004.027961][ T4485] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1004.068030][T14676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.078831][T14694] syz.4.1548: attempt to access beyond end of device [ 1004.078831][T14694] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 1004.099076][T14705] loop3: detected capacity change from 0 to 1024 [ 1004.109510][T14702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.144610][T14705] EXT4-fs: Ignoring removed orlov option [ 1004.185876][T14697] syz.4.1548: attempt to access beyond end of device [ 1004.185876][T14697] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 1004.220330][T14705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1004.263723][T14699] syz.4.1548: attempt to access beyond end of device [ 1004.263723][T14699] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 1004.297099][T14672] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1004.315209][T14705] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 1004.321439][T14696] loop0: detected capacity change from 0 to 2048 [ 1004.340954][T14705] System zones: 0-1, 3-36 [ 1004.346539][T14672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1004.377878][T14705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1004.422885][T14672] syz.1.1536: attempt to access beyond end of device [ 1004.422885][T14672] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1004.525693][T14672] syz.1.1536: attempt to access beyond end of device [ 1004.525693][T14672] loop1: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 1004.659167][T14714] syz.1.1536: attempt to access beyond end of device [ 1004.659167][T14714] loop1: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 1004.693055][T11730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.724948][T14672] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1004.761137][T14717] FAULT_INJECTION: forcing a failure. [ 1004.761137][T14717] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.780294][T14672] F2FS-fs (loop1): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 1004.791229][T14714] F2FS-fs (loop1): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 1004.815257][T14717] CPU: 0 PID: 14717 Comm: syz.0.1550 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1004.825476][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1004.835673][T14717] Call Trace: [ 1004.838981][T14717] [ 1004.841929][T14717] dump_stack_lvl+0x241/0x360 [ 1004.846742][T14717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.851987][T14717] ? __pfx__printk+0x10/0x10 [ 1004.856612][T14717] ? stack_trace_save+0x118/0x1d0 [ 1004.861710][T14717] should_fail_ex+0x3b0/0x4e0 [ 1004.866423][T14717] ? __alloc_skb+0x1c3/0x440 [ 1004.871060][T14717] should_failslab+0x9/0x20 [ 1004.875598][T14717] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1004.881547][T14717] __alloc_skb+0x1c3/0x440 [ 1004.886072][T14717] ? __pfx___mutex_lock+0x10/0x10 [ 1004.891120][T14717] ? netlink_recvmsg+0x60a/0x11d0 [ 1004.896308][T14717] ? __pfx___alloc_skb+0x10/0x10 [ 1004.901304][T14717] netlink_dump+0x233/0xe50 [ 1004.905876][T14717] ? __pfx_netlink_dump+0x10/0x10 [ 1004.910922][T14717] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1004.917152][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.922818][T14717] ? lockdep_hardirqs_on+0x99/0x150 [ 1004.928060][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.933716][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.939367][T14717] ? kmem_cache_free+0x145/0x350 [ 1004.944349][T14717] netlink_recvmsg+0x6bb/0x11d0 [ 1004.949242][T14717] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1004.954561][T14717] ? __pfx_aa_sk_perm+0x10/0x10 [ 1004.959472][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.965121][T14717] ? aa_sock_msg_perm+0x91/0x160 [ 1004.970268][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1004.976183][T14717] ? security_socket_recvmsg+0x90/0xb0 [ 1004.981980][T14717] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1004.987561][T14717] sock_recvmsg+0x231/0x280 [ 1004.992273][T14717] ____sys_recvmsg+0x1db/0x470 [ 1004.997075][T14717] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1005.002430][T14717] do_recvmmsg+0x474/0xae0 [ 1005.006901][T14717] ? __pfx_lock_release+0x10/0x10 [ 1005.011946][T14717] ? __pfx_do_recvmmsg+0x10/0x10 [ 1005.016995][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.023201][T14717] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1005.029117][T14717] ? ksys_write+0x23e/0x2c0 [ 1005.033641][T14717] ? __pfx_lock_release+0x10/0x10 [ 1005.038771][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.044428][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.050070][T14717] ? vfs_write+0x7c4/0xc90 [ 1005.054508][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.060159][T14717] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1005.066098][T14717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.071745][T14717] ? __fget_files+0x3f6/0x470 [ 1005.076465][T14717] __x64_sys_recvmmsg+0x199/0x250 [ 1005.081522][T14717] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1005.087185][T14717] ? do_syscall_64+0x100/0x230 [ 1005.092002][T14717] ? do_syscall_64+0xb6/0x230 [ 1005.096730][T14717] do_syscall_64+0xf3/0x230 [ 1005.101268][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.107187][T14717] RIP: 0033:0x7fec1ad75bd9 [ 1005.111612][T14717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.131240][T14717] RSP: 002b:00007fec1bbf8048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1005.139788][T14717] RAX: ffffffffffffffda RBX: 00007fec1af03f60 RCX: 00007fec1ad75bd9 [ 1005.147820][T14717] RDX: 0000000000000007 RSI: 0000000020001bc0 RDI: 0000000000000006 [ 1005.155811][T14717] RBP: 00007fec1bbf80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1005.163826][T14717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.171896][T14717] R13: 000000000000000b R14: 00007fec1af03f60 R15: 00007fff2f8ded78 [ 1005.179922][T14717] [ 1005.268630][T14691] loop5: detected capacity change from 0 to 40427 [ 1005.298569][ T29] audit: type=1326 audit(1720294992.655:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1005.299535][T14723] loop3: detected capacity change from 0 to 1024 [ 1005.320996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.361447][ T29] audit: type=1326 audit(1720294992.705:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1005.396783][T14691] F2FS-fs (loop5): invalid crc value [ 1005.408154][ T29] audit: type=1326 audit(1720294992.705:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1005.432055][T14723] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1005.443472][T14691] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1005.449874][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.452456][T14723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.547392][ T29] audit: type=1326 audit(1720294992.705:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1005.648809][T14731] sctp: [Deprecated]: syz.3.1552 (pid 14731) Use of int in maxseg socket option. [ 1005.648809][T14731] Use struct sctp_assoc_value instead [ 1005.720139][ T29] audit: type=1326 audit(1720294992.705:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1005.831205][ T29] audit: type=1326 audit(1720294992.705:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1005.891143][T14691] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1005.909222][ T29] audit: type=1326 audit(1720294992.715:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1006.031808][ T29] audit: type=1326 audit(1720294992.715:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14718 comm="syz.4.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1017375bd9 code=0x7ffc0000 [ 1006.102431][T11727] Bluetooth: hci5: command 0x0406 tx timeout [ 1006.405805][ T5148] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1006.519483][T13131] syz-executor: attempt to access beyond end of device [ 1006.519483][T13131] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1006.566695][T13131] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1006.593062][T13131] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1006.805452][T14738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.813644][T14738] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.863145][ T5148] usb 4-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1006.927007][ T5148] usb 4-1: config 255 has an invalid descriptor of length 43, skipping remainder of the config [ 1006.998672][ T5148] usb 4-1: config 255 has no interfaces? [ 1007.015275][ T5148] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1007.045020][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.267427][T14747] loop1: detected capacity change from 0 to 256 [ 1007.317838][T14723] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1552: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1007.361706][T14747] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb22115ea, utbl_chksum : 0xe619d30d) [ 1007.400668][ T5148] usb 4-1: string descriptor 0 read error: -71 [ 1007.432690][ T5148] usb 4-1: USB disconnect, device number 25 [ 1007.558078][T14756] loop2: detected capacity change from 0 to 1024 [ 1007.569001][T14756] EXT4-fs: Ignoring removed orlov option [ 1007.587202][T14756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1007.625471][T14756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 1007.639876][T14756] System zones: 0-1, 3-36 [ 1007.649936][T14756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.818161][T13807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.984533][T11730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.139187][T14767] loop2: detected capacity change from 0 to 1024 [ 1008.287524][T14770] loop3: detected capacity change from 0 to 64 [ 1008.347791][T10388] hfsplus: b-tree write err: -5, ino 4 [ 1008.546500][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1008.546528][ T29] audit: type=1804 audit(1720294995.905:182): pid=14775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1567" name="/newroot/141/file1/cgroup.controllers" dev="loop3" ino=21 res=1 errno=0 [ 1008.661024][T14778] loop2: detected capacity change from 0 to 1024 [ 1008.866594][T14782] loop0: detected capacity change from 0 to 1024 [ 1008.991330][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'. [ 1009.094708][T14763] loop4: detected capacity change from 0 to 40427 [ 1009.118109][T14763] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1009.132145][T14763] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1009.157748][T14763] F2FS-fs (loop4): invalid crc value [ 1009.196142][T14763] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1009.205821][T14791] netem: unknown loss type 8 [ 1009.217012][T14791] netem: change failed [ 1009.340184][ T9167] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1009.357427][T14795] loop1: detected capacity change from 0 to 256 [ 1009.410311][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1009.436396][T14763] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1009.453012][T14795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb22115ea, utbl_chksum : 0xe619d30d) [ 1009.454484][T14772] loop5: detected capacity change from 0 to 40427 [ 1009.470406][T14763] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1009.492442][T14772] F2FS-fs (loop5): invalid crc value [ 1009.502160][T14763] syz.4.1565: attempt to access beyond end of device [ 1009.502160][T14763] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1009.520578][ T9167] usb 1-1: device descriptor read/64, error -71 [ 1009.529423][T14763] syz.4.1565: attempt to access beyond end of device [ 1009.529423][T14763] loop4: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 1009.539705][T14772] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1009.565596][T14800] syz.4.1565: attempt to access beyond end of device [ 1009.565596][T14800] loop4: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 1009.591214][ T9] usb 3-1: device descriptor read/64, error -71 [ 1009.594746][T14763] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1009.614726][T14763] F2FS-fs (loop4): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 1009.628871][T14800] F2FS-fs (loop4): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 1009.685602][T14772] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1009.747945][T13131] syz-executor: attempt to access beyond end of device [ 1009.747945][T13131] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1009.769235][T13131] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1009.782029][T13131] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1009.810965][ T9167] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1009.819292][T14805] loop1: detected capacity change from 0 to 1024 [ 1009.842318][T14805] EXT4-fs: Ignoring removed orlov option [ 1009.858388][T14805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1009.876985][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1009.914801][T14805] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 1009.930153][T14805] System zones: 0-1, 3-36 [ 1009.961504][T14805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.970919][ T9167] usb 1-1: device descriptor read/64, error -71 [ 1010.061394][ T9] usb 3-1: device descriptor read/64, error -71 [ 1010.105014][ T9167] usb usb1-port1: attempt power cycle [ 1010.180659][ T9] usb usb3-port1: attempt power cycle [ 1010.195481][T13178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.498848][T14817] loop1: detected capacity change from 0 to 256 [ 1010.530380][ T4485] Bluetooth: hci3: command 0x0406 tx timeout [ 1010.541023][ T9167] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1010.600967][ T9167] usb 1-1: device descriptor read/8, error -71 [ 1010.774165][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1010.816434][ T9] usb 3-1: device descriptor read/8, error -71 [ 1011.577016][ T9167] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1011.647522][ T9167] usb 1-1: device descriptor read/8, error -71 [ 1011.770501][ T9167] usb usb1-port1: unable to enumerate USB device [ 1011.814425][T14825] loop3: detected capacity change from 0 to 512 [ 1011.903398][T14831] loop1: detected capacity change from 0 to 64 [ 1011.964380][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 1011.974995][ T29] audit: type=1326 audit(1720294999.335:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.2.1585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b71f75bd9 code=0x0 [ 1012.004409][T14833] syz.5.1579: attempt to access beyond end of device [ 1012.004409][T14833] loop16: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1012.016966][T14825] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1012.033108][T14837] loop4: detected capacity change from 0 to 256 [ 1012.043132][T14839] loop2: detected capacity change from 0 to 64 [ 1012.054792][T14825] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.1586: corrupted in-inode xattr: invalid ea_ino [ 1012.073863][ T29] audit: type=1804 audit(1720294999.435:184): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1584" name="/newroot/43/file1/cgroup.controllers" dev="loop1" ino=21 res=1 errno=0 [ 1012.082119][T14825] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1586: couldn't read orphan inode 12 (err -117) [ 1012.120822][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 1012.135939][T14837] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb22115ea, utbl_chksum : 0xe619d30d) [ 1012.145072][T14825] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.180676][T14839] netlink: 187212 bytes leftover after parsing attributes in process `syz.2.1585'. [ 1012.191984][T14839] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 1012.382480][ T5145] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1012.830516][T14850] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1013.240577][ T5145] usb 6-1: Using ep0 maxpacket: 16 [ 1013.249028][T11730] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1013.249108][ T5145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1013.272845][ T5145] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1013.291669][ T5145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.313021][ T5145] usb 6-1: config 0 descriptor?? [ 1013.465291][T14859] loop2: detected capacity change from 0 to 1024 [ 1013.501300][T14859] EXT4-fs: Ignoring removed orlov option [ 1013.519876][T14859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1013.566437][T14859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 1013.580780][T14861] loop3: detected capacity change from 0 to 512 [ 1013.591729][T14859] System zones: 0-1, 3-36 [ 1013.633559][T14859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.688073][T14861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.757140][T14833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.763048][T14861] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.770532][T14833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.843989][ T5145] hid (null): unknown global tag 0xd [ 1013.849539][ T5145] hid (null): unknown global tag 0xe [ 1013.869543][ T5145] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 1013.887457][ T5145] hid-generic 0003:0158:0100.0010: unexpected long global item [ 1013.896251][ T5145] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22 [ 1013.935767][T14843] loop0: detected capacity change from 0 to 40427 [ 1013.949783][T13807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.975351][T14843] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1013.998903][T14843] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1014.062908][T14843] F2FS-fs (loop0): invalid crc value [ 1014.070998][ T5149] usb 6-1: USB disconnect, device number 11 [ 1014.097121][T11730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.116930][T14843] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1014.320907][T14871] loop3: detected capacity change from 0 to 256 [ 1014.328260][T14843] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1014.367051][T14843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1014.487690][T14843] syz.0.1589: attempt to access beyond end of device [ 1014.487690][T14843] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1014.559575][T14843] syz.0.1589: attempt to access beyond end of device [ 1014.559575][T14843] loop0: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 1014.653056][T14873] syz.0.1589: attempt to access beyond end of device [ 1014.653056][T14873] loop0: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 1014.720337][ T5145] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1014.933400][ T5145] usb 3-1: Using ep0 maxpacket: 32 [ 1015.106795][ T5145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.207090][T14873] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1015.230242][ T5145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.288232][T14877] loop5: detected capacity change from 0 to 512 [ 1015.294712][ T5145] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1015.305311][T14873] F2FS-fs (loop0): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 1015.331096][T14857] loop4: detected capacity change from 0 to 40427 [ 1015.353873][T14877] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1015.370099][ T5145] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1015.380394][T14873] F2FS-fs (loop0): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 1015.412298][T14857] F2FS-fs (loop4): invalid crc value [ 1015.417931][ T5145] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1015.459124][ T5145] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.487816][T14857] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1015.500275][T14877] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #12: comm syz.5.1597: corrupted in-inode xattr: invalid ea_ino [ 1015.517635][ T5145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.570416][ T5145] usb 3-1: Product: syz [ 1015.574726][ T5145] usb 3-1: Manufacturer: syz [ 1015.579341][ T5145] usb 3-1: SerialNumber: syz [ 1015.600204][T14877] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1597: couldn't read orphan inode 12 (err -117) [ 1015.642383][T14877] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.805978][T14857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1015.840774][ T5145] cdc_ncm 3-1:1.0: bind() failure [ 1015.842597][T13131] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1015.877063][ T5145] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1015.904856][ T5145] cdc_ncm 3-1:1.1: bind() failure [ 1015.959922][ T5145] usb 3-1: USB disconnect, device number 36 [ 1015.990143][T14890] loop3: detected capacity change from 0 to 1764 [ 1016.010122][T13802] syz-executor: attempt to access beyond end of device [ 1016.010122][T13802] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1016.078948][T13802] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1016.232604][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1601'. [ 1016.555753][T14897] loop5: detected capacity change from 0 to 256 [ 1016.700093][T14897] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb22115ea, utbl_chksum : 0xe619d30d) [ 1017.037838][T14903] loop5: detected capacity change from 0 to 512 [ 1017.364372][T14903] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1017.744238][T14903] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #12: comm syz.5.1606: corrupted in-inode xattr: invalid ea_ino [ 1017.831210][T14903] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1606: couldn't read orphan inode 12 (err -117) [ 1017.857194][T14903] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1018.215829][T14909] loop1: detected capacity change from 0 to 1024 [ 1018.292155][T14910] FAULT_INJECTION: forcing a failure. [ 1018.292155][T14910] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.305257][T14910] CPU: 0 PID: 14910 Comm: syz.5.1606 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1018.315464][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1018.325602][T14910] Call Trace: [ 1018.329272][T14910] [ 1018.332241][T14910] dump_stack_lvl+0x241/0x360 [ 1018.337003][T14910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1018.342469][T14910] ? __pfx__printk+0x10/0x10 [ 1018.347125][T14910] ? is_bpf_text_address+0x285/0x2a0 [ 1018.352548][T14910] should_fail_ex+0x3b0/0x4e0 [ 1018.357310][T14910] ? alloc_empty_file+0x9e/0x1d0 [ 1018.362530][T14910] should_failslab+0x9/0x20 [ 1018.367104][T14910] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1018.372531][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.378217][T14910] alloc_empty_file+0x9e/0x1d0 [ 1018.383088][T14910] path_openat+0x105/0x35f0 [ 1018.387633][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.393473][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.399151][T14910] ? mark_lock+0x9a/0x350 [ 1018.403516][T14910] ? __pfx_stack_trace_save+0x10/0x10 [ 1018.409051][T14910] ? __lock_acquire+0x1346/0x1fd0 [ 1018.414119][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.419879][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.425542][T14910] ? __lock_acquire+0x1346/0x1fd0 [ 1018.430600][T14910] ? __pfx_path_openat+0x10/0x10 [ 1018.435587][T14910] do_filp_open+0x235/0x490 [ 1018.440132][T14910] ? __pfx_do_filp_open+0x10/0x10 [ 1018.445223][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.450895][T14910] ? _raw_spin_unlock+0x28/0x50 [ 1018.455798][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.461545][T14910] ? alloc_fd+0x5a1/0x640 [ 1018.465925][T14910] do_sys_openat2+0x13e/0x1d0 [ 1018.470669][T14910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.476328][T14910] ? __pfx_do_sys_openat2+0x10/0x10 [ 1018.481581][T14910] __x64_sys_creat+0x123/0x170 [ 1018.486405][T14910] ? __pfx___x64_sys_creat+0x10/0x10 [ 1018.491725][T14910] ? do_syscall_64+0x100/0x230 [ 1018.496557][T14910] ? do_syscall_64+0xb6/0x230 [ 1018.501286][T14910] do_syscall_64+0xf3/0x230 [ 1018.505834][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.511769][T14910] RIP: 0033:0x7fd4e2775bd9 [ 1018.516209][T14910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.535893][T14910] RSP: 002b:00007fd4e35d7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1018.544358][T14910] RAX: ffffffffffffffda RBX: 00007fd4e2904110 RCX: 00007fd4e2775bd9 [ 1018.552463][T14910] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020000000 [ 1018.560463][T14910] RBP: 00007fd4e35d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.568461][T14910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.576555][T14910] R13: 000000000000006e R14: 00007fd4e2904110 R15: 00007ffe92d911d8 [ 1018.584590][T14910] [ 1019.068253][T14909] EXT4-fs: Ignoring removed orlov option [ 1019.088927][T13131] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1019.137271][T14909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1019.222975][T14909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 1019.280855][T14909] System zones: 0-1, 3-36 [ 1019.303936][T14909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.347594][T14916] loop0: detected capacity change from 0 to 256 [ 1019.482494][T13178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.679207][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 1020.509104][ T9167] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1020.713072][ T9167] usb 6-1: Using ep0 maxpacket: 16 [ 1021.294897][ T9167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1021.328138][ T9167] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1021.350057][ T9167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.360812][ T9167] usb 6-1: config 0 descriptor?? [ 1021.454701][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'. [ 1022.003266][T14921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.157170][T14921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.576731][ T9167] hid (null): unknown global tag 0xd [ 1022.590499][ T9167] hid (null): unknown global tag 0xe [ 1022.599609][ T9167] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 1022.630289][ T9167] hid-generic 0003:0158:0100.0011: unexpected long global item [ 1022.638855][ T9167] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 1022.674890][ T9167] usb 6-1: USB disconnect, device number 12 [ 1022.707124][T14926] loop1: detected capacity change from 0 to 512 [ 1023.312124][T14968] loop5: detected capacity change from 0 to 256 [ 1023.583659][T14954] delete_channel: no stack [ 1024.950604][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1630'. [ 1025.288334][ T1263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.544957][ T1263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.786500][ T1263] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.891308][T14979] loop0: detected capacity change from 0 to 32768 [ 1025.900800][ T5145] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1025.953716][T14979] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1026.057217][ T1263] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.079578][ T5145] usb 6-1: device descriptor read/64, error -71 [ 1026.103755][T14983] loop1: detected capacity change from 0 to 40427 [ 1026.114027][T14983] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1026.122368][T14983] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1026.172585][T14983] F2FS-fs (loop1): invalid crc value [ 1026.222172][ T4485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1026.225982][T14979] XFS (loop0): Ending clean mount [ 1026.237028][ T4485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1026.248865][T14983] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1026.255846][ T4485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1026.269255][ T4485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1026.279242][ T4485] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1026.289170][ T4485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1026.380203][ T5145] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1026.436480][T12972] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1026.463573][T14983] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1026.480118][T14983] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1026.512848][T14983] syz.1.1629: attempt to access beyond end of device [ 1026.512848][T14983] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1026.540161][ T5145] usb 6-1: device descriptor read/64, error -71 [ 1026.547374][T14983] syz.1.1629: attempt to access beyond end of device [ 1026.547374][T14983] loop1: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 1026.594942][ T1263] bridge_slave_1: left allmulticast mode [ 1026.595419][T15022] syz.1.1629: attempt to access beyond end of device [ 1026.595419][T15022] loop1: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 1026.601247][ T1263] bridge_slave_1: left promiscuous mode [ 1026.632556][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.651695][ T1263] bridge_slave_0: left allmulticast mode [ 1026.657701][ T1263] bridge_slave_0: left promiscuous mode [ 1026.661222][T15022] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1026.667098][ T5145] usb usb6-port1: attempt power cycle [ 1026.687192][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.707941][T15022] F2FS-fs (loop1): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 1026.726903][T15022] F2FS-fs (loop1): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 1027.110464][ T5145] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1027.178606][ T5145] usb 6-1: device descriptor read/8, error -71 [ 1027.490418][ T5145] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1027.546040][ T5145] usb 6-1: device descriptor read/8, error -71 [ 1027.680450][ T5145] usb usb6-port1: unable to enumerate USB device [ 1028.221664][T15039] FAULT_INJECTION: forcing a failure. [ 1028.221664][T15039] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.258016][T15039] CPU: 1 PID: 15039 Comm: syz.0.1640 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 1028.268234][T15039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1028.278310][T15039] Call Trace: [ 1028.281629][T15039] [ 1028.284633][T15039] dump_stack_lvl+0x241/0x360 [ 1028.289378][T15039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1028.294637][T15039] ? __pfx__printk+0x10/0x10 [ 1028.299279][T15039] ? __pfx___might_resched+0x10/0x10 [ 1028.304705][T15039] should_fail_ex+0x3b0/0x4e0 [ 1028.309419][T15039] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1028.315158][T15039] should_failslab+0x9/0x20 [ 1028.319685][T15039] __kmalloc_noprof+0xd8/0x400 [ 1028.324471][T15039] ? kfree+0x4e/0x360 [ 1028.328496][T15039] ? finish_task_switch+0x1e5/0x870 [ 1028.333718][T15039] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1028.339290][T15039] tomoyo_path_number_perm+0x23a/0x880 [ 1028.344826][T15039] ? tomoyo_path_number_perm+0x208/0x880 [ 1028.350505][T15039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1028.356592][T15039] ? __fget_files+0x29/0x470 [ 1028.361208][T15039] ? __fget_files+0x3f6/0x470 [ 1028.365907][T15039] ? __fget_files+0x29/0x470 [ 1028.370533][T15039] security_file_ioctl+0x77/0xb0 [ 1028.375508][T15039] __se_sys_ioctl+0x47/0x170 [ 1028.380126][T15039] do_syscall_64+0xf3/0x230 [ 1028.384659][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.390663][T15039] RIP: 0033:0x7fec1ad75bd9 [ 1028.395087][T15039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.414713][T15039] RSP: 002b:00007fec1bbf8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.423146][T15039] RAX: ffffffffffffffda RBX: 00007fec1af03f60 RCX: 00007fec1ad75bd9 [ 1028.431128][T15039] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 1028.439219][T15039] RBP: 00007fec1bbf80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1028.447204][T15039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.455196][T15039] R13: 000000000000000b R14: 00007fec1af03f60 R15: 00007fff2f8ded78 [ 1028.463316][T15039] [ 1028.476670][T11727] Bluetooth: hci4: command tx timeout [ 1028.651130][T15039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1028.856672][T15037] loop2: detected capacity change from 0 to 32768 [ 1028.883098][T15037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1647 (15037) [ 1028.924298][ T1263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.980553][ T1263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.005411][T15037] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1029.027210][T15037] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1029.034244][ T1263] bond0 (unregistering): Released all slaves [ 1029.046205][T15037] BTRFS info (device loop2): using free-space-tree [ 1029.994570][T13807] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1030.098909][ T1263] hsr_slave_0: left promiscuous mode [ 1030.193512][ T1263] hsr_slave_1: left promiscuous mode [ 1030.226404][ T1263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.250053][ T29] audit: type=1326 audit(1720295017.595:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1030.255831][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.351073][ T1263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.358536][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.370406][ T29] audit: type=1326 audit(1720295017.595:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1030.466973][ T29] audit: type=1326 audit(1720295017.665:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1030.516978][ T1263] veth1_macvtap: left promiscuous mode [ 1030.524005][ T1263] veth0_macvtap: left promiscuous mode [ 1030.530738][T11727] Bluetooth: hci4: command tx timeout [ 1030.570040][ T1263] veth1_vlan: left promiscuous mode [ 1030.572543][ T29] audit: type=1326 audit(1720295017.705:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1030.577284][ T1263] veth0_vlan: left promiscuous mode [ 1030.636786][ T29] audit: type=1326 audit(1720295017.705:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1030.722563][ T29] audit: type=1326 audit(1720295017.755:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec1ada7bc5 code=0x7ffc0000 [ 1030.822732][ T29] audit: type=1326 audit(1720295017.755:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1030.950105][ T29] audit: type=1326 audit(1720295017.755:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1031.038914][ T29] audit: type=1326 audit(1720295017.755:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1031.147690][ T29] audit: type=1326 audit(1720295017.755:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec1ad75bd9 code=0x7ffc0000 [ 1031.170556][ T780] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1031.400270][ T780] usb 3-1: Using ep0 maxpacket: 16 [ 1031.411821][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.436473][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.458586][ T780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1031.498961][ T780] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1031.529919][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.551565][ T780] usb 3-1: config 0 descriptor?? [ 1032.174456][ T780] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 1032.249886][ T780] HID 045e:07da: Invalid code 65791 type 1 [ 1032.260606][ T780] HID 045e:07da: Invalid code 768 type 1 [ 1032.266301][ T780] HID 045e:07da: Invalid code 769 type 1 [ 1032.274155][ T780] HID 045e:07da: Invalid code 770 type 1 [ 1032.279935][ T780] HID 045e:07da: Invalid code 771 type 1 [ 1032.285883][ T780] HID 045e:07da: Invalid code 772 type 1 [ 1032.305211][ T780] HID 045e:07da: Invalid code 773 type 1 [ 1032.311276][ T780] HID 045e:07da: Invalid code 774 type 1 [ 1032.317078][ T780] HID 045e:07da: Invalid code 775 type 1 [ 1032.328685][ T780] HID 045e:07da: Invalid code 776 type 1 [ 1032.377306][ T780] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input20 [ 1032.519890][ T780] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1032.620504][ T780] usb 3-1: USB disconnect, device number 37 [ 1032.625900][T11727] Bluetooth: hci4: command tx timeout [ 1032.812797][T15100] loop1: detected capacity change from 0 to 256 [ 1032.989864][T15108] loop1: detected capacity change from 0 to 256 [ 1033.362490][ T1263] team0 (unregistering): Port device team_slave_1 removed [ 1033.515655][ T1263] team0 (unregistering): Port device team_slave_0 removed [ 1034.161002][ T780] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1034.323150][ T780] usb 2-1: device descriptor read/64, error -71 [ 1034.615239][ T780] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1034.690926][T11727] Bluetooth: hci4: command tx timeout [ 1034.771965][ T780] usb 2-1: device descriptor read/64, error -71 [ 1034.891438][ T780] usb usb2-port1: attempt power cycle [ 1035.043266][T15009] chnl_net:caif_netlink_parms(): no params data found [ 1035.324954][ T780] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1035.381110][ T780] usb 2-1: device descriptor read/8, error -71 [ 1035.488630][T15009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.496707][T15009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.504373][T15009] bridge_slave_0: entered allmulticast mode [ 1035.529462][T15009] bridge_slave_0: entered promiscuous mode [ 1035.545918][T15009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.554355][T15009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.561759][T15009] bridge_slave_1: entered allmulticast mode [ 1035.569941][T15009] bridge_slave_1: entered promiscuous mode [ 1035.676933][ T780] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1035.754928][ T780] usb 2-1: device descriptor read/8, error -71 [ 1035.822681][T15009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.886190][T15009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.920471][ T780] usb usb2-port1: unable to enumerate USB device [ 1036.107373][T15009] team0: Port device team_slave_0 added [ 1036.194927][T15009] team0: Port device team_slave_1 added [ 1036.361015][T15009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.379126][T15009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.442899][T15009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.445318][T15118] loop0: detected capacity change from 0 to 32768 [ 1036.471956][T15118] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1664 (15118) [ 1036.518584][T15009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.532987][T15118] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1036.538146][T15009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.587524][T15009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.612105][ T4485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1036.620310][T15118] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1036.622901][ T5149] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1036.629210][T15118] BTRFS info (device loop0): using free-space-tree [ 1036.663775][ T4485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1036.676158][ T4485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1036.684590][ T4485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1036.692431][ T4485] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1036.699827][ T4485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1036.809485][ T1263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.869710][ T5149] usb 6-1: Using ep0 maxpacket: 32 [ 1036.906440][ T5149] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1036.922083][ T5149] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1036.932813][ T5149] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1036.956759][ T5149] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1036.969926][ T5149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.981799][ T5149] usb 6-1: Product: 㐉 [ 1036.986191][ T5149] usb 6-1: Manufacturer: 䀛 [ 1036.991109][ T5149] usb 6-1: SerialNumber: 쒠戒쳫蚯Թ㐗鷸쀿␸쵭롷セ栀汞쭴㑺댙䡏㱪뵂୤국蝯઄痳ࢌ珖矓㢊鷫㎹䓎⏒隧쥃먝촦䦸銣酕庖蕦ㄇ徎銹첆힤欽朏撐䩹쁸ޭ䗧∩䆉瀕䋁䮢F윴蔗붝鼸♸잭삙ᛈ⤭촀뉚㞼c뾣劤㔫ނ囑䆥瑧䟠☏ᗅ푩ᔰ錰榒붏肐ኟꗐ寒젘齾ᇽ஭霺 [ 1037.048783][T15150] loop1: detected capacity change from 0 to 256 [ 1037.229466][T15150] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1037.263075][ T1263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.367527][T15009] hsr_slave_0: entered promiscuous mode [ 1037.397635][T15009] hsr_slave_1: entered promiscuous mode [ 1037.426917][T12972] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1037.439321][T15009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1037.461175][T15009] Cannot create hsr debugfs directory [ 1037.564560][T15128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.585012][T15128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.614850][ T1263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.035049][ T1263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.197037][ T5149] usb 6-1: 0:2 : does not exist [ 1038.260172][ T5149] usb 6-1: USB disconnect, device number 17 [ 1038.783551][ T4485] Bluetooth: hci5: command tx timeout [ 1039.676161][T15172] loop0: detected capacity change from 0 to 512 [ 1039.722381][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 1039.847549][T15176] loop0: detected capacity change from 0 to 512 [ 1039.854556][ T1263] bridge_slave_1: left allmulticast mode [ 1039.863026][T15176] EXT4-fs: Ignoring removed nobh option [ 1039.871556][ T1263] bridge_slave_1: left promiscuous mode [ 1039.878483][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.892717][T15176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1039.906983][ T1263] bridge_slave_0: left allmulticast mode [ 1039.918649][ T1263] bridge_slave_0: left promiscuous mode [ 1039.924862][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.951997][T15176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1040.003412][T15176] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.291993][T11727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1040.314517][T11727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1040.334708][T11727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1040.345024][T11727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.355645][T11727] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1040.365715][T11727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1040.722298][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1040.722319][ T29] audit: type=1326 audit(1720295028.085:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15171 comm="syz.0.1674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x0 [ 1040.853210][T11727] Bluetooth: hci5: command tx timeout [ 1040.899448][ T1263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.913000][ T1263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.925991][ T1263] bond0 (unregistering): Released all slaves [ 1041.223582][T12972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1041.431258][T15132] chnl_net:caif_netlink_parms(): no params data found [ 1042.189944][ T1263] hsr_slave_0: left promiscuous mode [ 1042.199236][ T1263] hsr_slave_1: left promiscuous mode [ 1042.230375][ T780] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1042.253362][ T1263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.261140][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.287030][ T1263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.305691][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.366029][ T1263] veth1_macvtap: left promiscuous mode [ 1042.375135][ T1263] veth0_macvtap: left promiscuous mode [ 1042.387251][ T1263] veth1_vlan: left promiscuous mode [ 1042.393952][ T780] usb 1-1: device descriptor read/64, error -71 [ 1042.403368][ T1263] veth0_vlan: left promiscuous mode [ 1042.451438][T11727] Bluetooth: hci2: command tx timeout [ 1042.671352][ T780] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1042.834400][T15208] loop4: detected capacity change from 0 to 32768 [ 1042.840180][ T780] usb 1-1: device descriptor read/64, error -71 [ 1042.857027][T15208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1682 (15208) [ 1042.903460][T15208] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1042.917524][T15208] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 1042.926346][T15208] BTRFS info (device loop4): using free-space-tree [ 1042.935113][T11727] Bluetooth: hci5: command tx timeout [ 1042.980860][ T780] usb usb1-port1: attempt power cycle [ 1043.390162][ T780] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1043.430992][ T780] usb 1-1: device descriptor read/8, error -71 [ 1043.716003][ T780] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1043.758130][ T780] usb 1-1: device descriptor read/8, error -71 [ 1043.880604][ T780] usb usb1-port1: unable to enumerate USB device [ 1043.894332][ T1263] team0 (unregistering): Port device team_slave_1 removed [ 1043.978063][ T1263] team0 (unregistering): Port device team_slave_0 removed [ 1044.530425][T11727] Bluetooth: hci2: command tx timeout [ 1045.011258][T11727] Bluetooth: hci5: command tx timeout [ 1045.108793][T15132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.140284][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.147678][T15132] bridge_slave_0: entered allmulticast mode [ 1045.163352][T15132] bridge_slave_0: entered promiscuous mode [ 1045.193098][T15132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.210199][T15132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.217696][T15132] bridge_slave_1: entered allmulticast mode [ 1045.235889][T15132] bridge_slave_1: entered promiscuous mode [ 1045.242434][T13802] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1045.405493][T15009] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1045.438293][T15009] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1045.562279][T15009] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1045.665997][T15132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.714093][T15132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.740851][T15009] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1045.890490][ T5195] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1046.073161][T15132] team0: Port device team_slave_0 added [ 1046.114179][ T5195] usb 2-1: Using ep0 maxpacket: 8 [ 1046.124432][ T5195] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1046.136416][T15132] team0: Port device team_slave_1 added [ 1046.142578][ T5195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.198913][ T5195] usb 2-1: config 0 descriptor?? [ 1046.318061][T15132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.337602][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.449629][T15132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.550801][T15183] chnl_net:caif_netlink_parms(): no params data found [ 1046.604806][T15132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.611394][T11727] Bluetooth: hci2: command tx timeout [ 1046.620397][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.666957][T15132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.694063][T15239] netlink: 'syz.1.1689': attribute type 10 has an invalid length. [ 1046.746242][T15239] team0: Device veth1_macvtap failed to register rx_handler [ 1046.754316][T15247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.763115][T15247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.850484][ T5195] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1046.869728][ T5195] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1046.887521][ T5195] asix 2-1:0.0: probe with driver asix failed with error -61 [ 1047.163026][T15253] loop0: detected capacity change from 0 to 512 [ 1047.219969][T15132] hsr_slave_0: entered promiscuous mode [ 1047.271618][T15132] hsr_slave_1: entered promiscuous mode [ 1047.272336][T15132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1047.272445][T15132] Cannot create hsr debugfs directory [ 1047.639507][T15256] loop0: detected capacity change from 0 to 512 [ 1047.654762][T15256] EXT4-fs: Ignoring removed nobh option [ 1047.688129][T15256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1047.752919][T15256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1047.770342][T15256] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.884532][ T1263] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.896446][T15260] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1689'. [ 1048.003331][T15183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.013406][T15183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.030365][T15183] bridge_slave_0: entered allmulticast mode [ 1048.038382][T15183] bridge_slave_0: entered promiscuous mode [ 1048.057028][T15183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.067157][T15183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.085663][T15183] bridge_slave_1: entered allmulticast mode [ 1048.098762][T15183] bridge_slave_1: entered promiscuous mode [ 1048.135238][T15262] netlink: 'syz.4.1692': attribute type 7 has an invalid length. [ 1048.144158][T15262] netlink: 'syz.4.1692': attribute type 6 has an invalid length. [ 1048.207183][ T1263] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.218708][T15262] loop4: detected capacity change from 0 to 256 [ 1048.226185][T15262] FAT-fs (loop4): Unrecognized mount option "shrtname=win95" or missing value [ 1048.308734][ T29] audit: type=1326 audit(1720295035.665:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.1691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec1ad75bd9 code=0x0 [ 1048.392722][ T1263] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.415153][T15183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.452898][T15183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.496956][T15009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.588009][ T1263] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.690516][T11727] Bluetooth: hci2: command tx timeout [ 1048.788176][T15183] team0: Port device team_slave_0 added [ 1048.798043][T12972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1048.874571][T15183] team0: Port device team_slave_1 added [ 1048.967643][T15009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.012238][T15183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.028848][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.069495][T15183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.221901][T15183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.240372][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.307381][T15183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.329108][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.336379][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.572154][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.579436][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.843398][ T1263] bridge_slave_1: left allmulticast mode [ 1049.855747][ T1263] bridge_slave_1: left promiscuous mode [ 1049.864351][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.896733][ T1263] bridge_slave_0: left allmulticast mode [ 1049.908392][ T1263] bridge_slave_0: left promiscuous mode [ 1049.918842][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.665986][ T779] usb 2-1: USB disconnect, device number 30 [ 1050.850778][T15290] loop1: detected capacity change from 0 to 4096 [ 1050.894115][T15290] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1051.065933][T15290] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1051.200395][ T1263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.227897][ T1263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.247739][T15290] ntfs3: loop1: ino=21, "bus" attr_insert_range [ 1051.273070][ T1263] bond0 (unregistering): Released all slaves [ 1051.412017][ T2838] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22. [ 1051.458559][T15296] loop4: detected capacity change from 0 to 1024 [ 1051.477866][T15296] EXT4-fs: Ignoring removed orlov option [ 1051.488937][T15183] hsr_slave_0: entered promiscuous mode [ 1051.510605][T15296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1051.523337][T15183] hsr_slave_1: entered promiscuous mode [ 1051.540985][T15183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.548602][T15183] Cannot create hsr debugfs directory [ 1051.581376][T15296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c01c, mo2=0003] [ 1051.589880][T15296] System zones: 0-1, 3-36 [ 1051.613251][T11727] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1051.649665][T11727] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 1051.671518][T15296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.717595][T15009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1051.887434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1051.933241][T13802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.088286][T15294] loop0: detected capacity change from 0 to 32768 [ 1052.277515][T15306] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1052.284089][T15306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1052.327023][T15306] vhci_hcd vhci_hcd.0: Device attached [ 1052.628564][ T1263] hsr_slave_0: left promiscuous mode [ 1052.650296][ T779] usb 18-1: SetAddress Request (18) to port 0 [ 1052.656621][ T779] usb 18-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1052.672432][ T1263] hsr_slave_1: left promiscuous mode [ 1052.700516][ T1263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.718221][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.737801][ T1263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.760254][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.811993][ T1263] veth1_macvtap: left promiscuous mode [ 1052.817606][ T1263] veth0_macvtap: left promiscuous mode [ 1052.823703][ T1263] veth1_vlan: left promiscuous mode [ 1052.829097][ T1263] veth0_vlan: left promiscuous mode [ 1053.080151][T15307] vhci_hcd: connection reset by peer [ 1053.104459][ T35] vhci_hcd: stop threads [ 1053.108751][ T35] vhci_hcd: release socket [ 1053.122539][ T35] vhci_hcd: disconnect device [ 1053.387368][T15319] loop0: detected capacity change from 0 to 16 [ 1053.411854][T15319] erofs: Unknown parameter '0xffffffffffffffff0x0000000000000003wfH˨E|}' [ 1053.922621][ T1263] team0 (unregistering): Port device team_slave_1 removed [ 1054.001080][ T1263] team0 (unregistering): Port device team_slave_0 removed [ 1054.211516][T15328] loop0: detected capacity change from 0 to 256 [ 1054.419041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1054.533861][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.540907][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.286234][T15132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1055.305614][T15132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1055.433517][T15132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1055.599767][T15132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1055.729211][T15009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.167273][T15009] veth0_vlan: entered promiscuous mode [ 1056.271894][T15009] veth1_vlan: entered promiscuous mode [ 1056.488505][T15132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.501521][T15183] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1056.532462][T15183] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1056.574905][T15183] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1056.599272][T15183] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1056.620946][ T9167] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1056.736882][T15132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.770915][T15009] veth0_macvtap: entered promiscuous mode [ 1056.808356][T15009] veth1_macvtap: entered promiscuous mode [ 1056.822062][ T9167] usb 1-1: Using ep0 maxpacket: 8 [ 1056.837845][ T9167] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1056.865699][ T9167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.904337][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.911750][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.922335][ T9167] usb 1-1: config 0 descriptor?? [ 1056.966699][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.974030][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.073610][T15009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.115854][T15009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.150469][T15009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.163743][T15009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.180295][T15009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.191235][T15009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.205009][T15009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.336357][T15009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.380141][T15009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.392632][T11727] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1057.406932][T15009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.411079][T15351] loop1: detected capacity change from 0 to 8 [ 1057.433002][T15356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.449697][T15009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.459856][T15009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.470434][T15356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.478301][T15009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.492659][T15009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.501344][ T9167] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1057.519344][T15009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.530550][ T9167] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1057.550406][T15009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.559157][T15009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.568233][ T9167] asix 1-1:0.0: probe with driver asix failed with error -61 [ 1057.582940][T15009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.623664][T15345] netlink: 'syz.0.1713': attribute type 10 has an invalid length. [ 1057.710296][T15345] team0: Device veth1_macvtap failed to register rx_handler [ 1057.730507][ T779] usb 18-1: device descriptor read/8, error -110 [ 1058.129808][T15353] loop4: detected capacity change from 0 to 32768 [ 1058.167885][T15183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.189246][ T779] usb usb18-port1: attempt power cycle [ 1058.274168][ T2838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.292467][T15359] loop1: detected capacity change from 0 to 2048 [ 1058.309112][ T2838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.353331][T15183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.424956][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.432262][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.460445][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.474707][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.507143][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.514485][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.601220][T15363] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1713'. [ 1058.616445][T15132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.831887][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1633'. [ 1058.861987][ T779] usb usb18-port1: unable to enumerate USB device [ 1058.989338][T15132] veth0_vlan: entered promiscuous mode [ 1059.038892][T15132] veth1_vlan: entered promiscuous mode [ 1059.078980][T15373] loop4: detected capacity change from 0 to 16 [ 1059.108290][T15373] erofs: Unknown parameter '0xffffffffffffffff0x0000000000000003wfH˨E|}' [ 1059.163814][T15132] veth0_macvtap: entered promiscuous mode [ 1059.203988][T15132] veth1_macvtap: entered promiscuous mode [ 1059.214076][T11727] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 1059.358992][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.406024][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.436660][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.464566][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.478155][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.503597][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.528986][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.539948][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.581918][T15132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.602355][T15382] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1059.609032][T15382] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1059.622226][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.658768][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.681182][T15382] vhci_hcd vhci_hcd.0: Device attached [ 1059.690350][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.719238][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.736916][T15387] loop4: detected capacity change from 0 to 256 [ 1059.770561][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.950100][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.025334][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.096186][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.175508][T15132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.200400][ T9167] usb 16-1: SetAddress Request (6) to port 0 [ 1060.206593][ T9167] usb 16-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1060.215870][T15183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.237981][T15132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.274770][T15132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.299957][T15132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.325872][T15132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.395864][T15383] vhci_hcd: connection reset by peer [ 1060.411360][ T61] vhci_hcd: stop threads [ 1060.419297][ T61] vhci_hcd: release socket [ 1060.444243][ T61] vhci_hcd: disconnect device [ 1060.658197][ T946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.717762][ T946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.813897][ T946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.853651][ T946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.221448][T15183] veth0_vlan: entered promiscuous mode [ 1061.306664][T15183] veth1_vlan: entered promiscuous mode [ 1061.343211][ T8] usb 1-1: USB disconnect, device number 20 [ 1061.473373][T15183] veth0_macvtap: entered promiscuous mode [ 1061.521099][T15183] veth1_macvtap: entered promiscuous mode [ 1061.686304][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.708734][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.739359][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.773150][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.815476][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.875206][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.922004][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.974286][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.000270][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.044503][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.148843][T15183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.214177][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.225878][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.236293][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.247198][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.276555][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.289023][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.299812][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.311271][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.337815][T15183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.358694][T15435] loop3: detected capacity change from 0 to 64 [ 1062.375405][T15183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.398168][T15435] hfs: get root inode failed [ 1062.405936][T15183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.434590][T15183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.454826][T15183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.470947][T15183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.505934][T15438] loop4: detected capacity change from 0 to 1024 [ 1062.539227][T15183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.651728][T15438] hfsplus: bad catalog entry type [ 1062.750637][T15414] loop2: detected capacity change from 0 to 32768 [ 1062.812871][ T2838] hfsplus: b-tree write err: -5, ino 4 [ 1063.048025][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.069425][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.087557][T15414] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 1063.140243][T15414] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 1063.199299][T15414] bcachefs (loop2): alloc_read... done [ 1063.218270][T15414] bcachefs (loop2): stripes_read... done [ 1063.226128][ T5723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.248361][T15414] bcachefs (loop2): snapshots_read... done [ 1063.256340][ T5723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.303199][T15414] bcachefs (loop2): going read-write [ 1063.345017][T15414] bcachefs (loop2): journal_replay... done [ 1063.391107][T15455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.408993][T15414] bcachefs (loop2): resume_logged_ops... done [ 1063.430725][T15414] bcachefs (loop2): delete_dead_inodes... done [ 1063.448202][T15456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.468983][T15414] bcachefs (loop2): done starting filesystem [ 1063.633417][T15462] dvmrp1: entered allmulticast mode [ 1063.754783][T15464] pimreg: entered allmulticast mode [ 1063.852594][T15467] syz.2.1666 (15467) used greatest stack depth: 13560 bytes left [ 1063.891387][T11705] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1063.992594][T15132] bcachefs (loop2): shutting down [ 1064.007713][T15132] bcachefs (loop2): going read-only [ 1064.019788][T15132] bcachefs (loop2): finished waiting for writes to stop [ 1064.048593][T15132] bcachefs (loop2): flushing journal and stopping allocators, journal seq 14 [ 1064.112347][T11705] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1064.129289][T15132] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 17 [ 1064.136454][T11705] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1064.165732][T15132] bcachefs (loop2): shutdown complete, journal seq 18 [ 1064.179400][T15132] bcachefs (loop2): marking filesystem clean [ 1064.192253][T11705] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1064.229005][T11705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1064.254901][T11705] usb 6-1: SerialNumber: syz [ 1064.279805][T15132] bcachefs (loop2): shutdown complete [ 1064.300268][T15460] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1064.730817][ T779] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1064.952785][ T779] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1064.997576][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1065.049099][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1065.143937][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1065.199522][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1065.249454][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1065.313217][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1065.333999][ T9167] usb 16-1: device descriptor read/8, error -110 [ 1065.406404][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1065.466571][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1065.525648][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1065.563836][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1065.590775][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1065.640755][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1065.672911][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1065.717151][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1065.771610][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1065.799678][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1065.814539][ T9167] usb usb16-port1: attempt power cycle [ 1065.847285][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1065.893511][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1065.935530][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1065.975580][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1066.024244][T15517] syz.3.1754 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1066.044979][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1066.104069][ T779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1066.169182][ T779] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1066.366596][ T779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1066.411845][ T5145] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1066.438567][ T779] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1066.448228][ T779] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1066.484313][ T9167] usb usb16-port1: unable to enumerate USB device [ 1066.505630][ T779] usb 1-1: Product: syz [ 1066.541899][ T779] usb 1-1: Manufacturer: syz [ 1066.582800][ T779] usb 1-1: SerialNumber: syz [ 1066.624552][ T779] usb 1-1: config 0 descriptor?? [ 1066.656430][ T5145] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1066.685254][ T779] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1066.728020][T11705] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1066.747266][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.803050][ T5145] usb 5-1: Product: syz [ 1066.815131][T11705] usb 6-1: USB disconnect, device number 18 [ 1066.821203][ T5145] usb 5-1: Manufacturer: syz [ 1066.836291][ T5145] usb 5-1: SerialNumber: syz [ 1066.883935][ T5145] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1066.947056][ T9167] usb 1-1: USB disconnect, device number 21 [ 1066.988649][ T9167] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1067.116910][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1068.110597][T15542] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1762'. [ 1068.210754][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1068.219546][ T9] ath9k_htc: Failed to initialize the device [ 1068.268154][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 1068.376364][T15538] Cannot find set identified by id 0 to match [ 1068.717622][T15556] loop5: detected capacity change from 0 to 512 [ 1068.766897][T15556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1068.884401][T15556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.910524][T15556] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.610890][T15567] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1771'. [ 1070.745552][T15183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.094271][T15400] usb 5-1: USB disconnect, device number 17 [ 1071.200557][T11705] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1072.818338][T11727] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.970077][T11705] usb 2-1: Using ep0 maxpacket: 32 [ 1072.978097][T11705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.029156][T11705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.060166][T15400] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1073.067668][T11705] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1073.093971][T11705] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1073.130173][T11705] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1073.133213][T11705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1073.133249][T11705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.133276][T11705] usb 2-1: Product: syz [ 1073.133297][T11705] usb 2-1: Manufacturer: syz [ 1073.133319][T11705] usb 2-1: SerialNumber: syz [ 1073.271287][T15400] usb 5-1: Using ep0 maxpacket: 16 [ 1073.283123][T15400] usb 5-1: config index 0 descriptor too short (expected 64742, got 92) [ 1073.306122][T15400] usb 5-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 1073.341988][T15400] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.358028][T11705] cdc_ncm 2-1:1.0: bind() failure [ 1073.378315][T11705] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1073.380164][T15400] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.416114][T11705] cdc_ncm 2-1:1.1: bind() failure [ 1073.430131][T15400] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1073.449273][T11705] usb 2-1: USB disconnect, device number 31 [ 1073.464011][T15400] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1073.487931][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1783'. [ 1073.507399][T15400] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1073.526388][T15611] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1073.535224][T15400] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1073.558125][T15400] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1073.570083][T15400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.595727][T15400] usb 5-1: Product: syz [ 1073.606953][T15400] usb 5-1: Manufacturer: syz [ 1073.631264][T15400] usb 5-1: SerialNumber: syz [ 1073.651089][T15400] cdc_ncm 5-1:1.0: skipping garbage [ 1073.656366][T15400] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1073.680354][T15400] cdc_ncm 5-1:1.0: bind() failure [ 1073.711351][T15400] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1073.721872][T15400] cdc_ncm 5-1:1.1: bind() failure [ 1073.949688][T15618] loop3: detected capacity change from 0 to 256 [ 1074.010133][ T5195] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1074.035062][T15618] exfat: Unknown parameter '' [ 1074.049879][T15614] loop0: detected capacity change from 0 to 32768 [ 1074.062125][T15614] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1785 (15614) [ 1074.091992][T15614] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1074.099329][T15400] usb 5-1: USB disconnect, device number 18 [ 1074.102332][T15614] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1074.116721][T15614] BTRFS info (device loop0): using free-space-tree [ 1074.155770][T15622] loop1: detected capacity change from 0 to 2048 [ 1074.165443][T15622] udf: Unknown parameter 'iocharsep855' [ 1074.230177][ T5195] usb 6-1: Using ep0 maxpacket: 8 [ 1074.971738][ T5195] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1074.986176][ T5195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.997576][ T5195] usb 6-1: config 0 descriptor?? [ 1076.242370][T15617] netlink: 'syz.5.1786': attribute type 10 has an invalid length. [ 1076.565020][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.775074][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.779504][T15617] team0: Device veth1_macvtap failed to register rx_handler [ 1076.808100][ T5195] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1076.818309][ T5195] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1076.859317][ T5195] asix 6-1:0.0: probe with driver asix failed with error -61 [ 1077.184589][T12972] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1077.325281][T15655] netlink: 'syz.4.1795': attribute type 29 has an invalid length. [ 1077.354706][T15655] netlink: 'syz.4.1795': attribute type 29 has an invalid length. [ 1077.380903][T15656] netlink: 'syz.4.1795': attribute type 29 has an invalid length. [ 1077.411242][T15655] netlink: 'syz.4.1795': attribute type 29 has an invalid length. [ 1077.451250][T15655] netlink: 'syz.4.1795': attribute type 29 has an invalid length. [ 1077.476812][T15655] netlink: 'syz.4.1795': attribute type 29 has an invalid length. [ 1077.777405][T15662] netlink: 'syz.4.1796': attribute type 10 has an invalid length. [ 1077.825702][T15663] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1786'. [ 1077.826671][T15662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1796'. [ 1077.859069][T15661] loop1: detected capacity change from 0 to 2048 [ 1077.997350][T15662] team0: Port device syz_tun added [ 1078.024216][T15665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1794'. [ 1078.076050][T15661] Alternate GPT is invalid, using primary GPT. [ 1078.093963][T15661] loop1: p2 p3 p7 [ 1078.174939][T15670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1798'. [ 1078.413202][T15675] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1800'. [ 1078.449166][T15675] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 1078.501732][T15675] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1800'. [ 1078.584564][T15677] netlink: 'syz.0.1802': attribute type 3 has an invalid length. [ 1183.790024][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1183.797094][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15645/1:b..l [ 1183.806182][ C1] rcu: (detected by 1, t=10502 jiffies, g=136713, q=543 ncpus=2) [ 1183.813993][ C1] task:syz.3.1789 state:R running task stack:23640 pid:15645 tgid:15643 ppid:15009 flags:0x00004004 [ 1183.826949][ C1] Call Trace: [ 1183.830243][ C1] [ 1183.833173][ C1] __schedule+0x17e8/0x4a20 [ 1183.837879][ C1] ? pte_offset_map_nolock+0x137/0x1f0 [ 1183.843374][ C1] ? __pfx___schedule+0x10/0x10 [ 1183.848227][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.853870][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1183.859874][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1183.865157][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1183.870266][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1183.876010][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 1183.881394][ C1] irqentry_exit+0x5e/0x90 [ 1183.886433][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.892423][ C1] RIP: 0010:count_memcg_event_mm+0x334/0x420 [ 1183.898505][ C1] Code: 62 1f b3 ff 4c 8b 6c 24 18 eb 1f e8 56 1f b3 ff e8 51 de a2 09 4d 85 f6 74 84 e8 47 1f b3 ff fb 49 be 00 00 00 00 00 fc ff df d7 e4 a2 09 89 c3 31 ff 89 c6 e8 6c 23 b3 ff 85 db 74 10 e8 d3 [ 1183.918206][ C1] RSP: 0018:ffffc90004467740 EFLAGS: 00000283 [ 1183.924377][ C1] RAX: ffffffff81e30869 RBX: 0000000000000000 RCX: 0000000000040000 [ 1183.932347][ C1] RDX: ffffc9000c101000 RSI: 0000000000022d88 RDI: 0000000000022d89 [ 1183.940314][ C1] RBP: ffffc90004467810 R08: ffffffff81e307d9 R09: 1ffffffff25f4eb6 [ 1183.948277][ C1] R10: dffffc0000000000 R11: fffffbfff25f4eb7 R12: 0000000000000046 [ 1183.956324][ C1] R13: ffffffff81e305d4 R14: dffffc0000000000 R15: 1ffff9200088ceec [ 1183.964483][ C1] ? count_memcg_event_mm+0x94/0x420 [ 1183.969810][ C1] ? count_memcg_event_mm+0x299/0x420 [ 1183.975184][ C1] ? count_memcg_event_mm+0x329/0x420 [ 1183.980654][ C1] ? count_memcg_event_mm+0x94/0x420 [ 1183.985937][ C1] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 1183.991684][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1183.997072][ C1] handle_mm_fault+0x16c4/0x1ba0 [ 1184.002044][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1184.007432][ C1] ? __pfx_find_vma+0x10/0x10 [ 1184.012120][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.017853][ C1] ? vma_is_secretmem+0xd/0x50 [ 1184.022798][ C1] ? check_vma_flags+0x500/0x5a0 [ 1184.027735][ C1] __get_user_pages+0x6ef/0x1590 [ 1184.033141][ C1] ? mt_find+0x62d/0x850 [ 1184.037394][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1184.042785][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.048418][ C1] populate_vma_page_range+0x264/0x330 [ 1184.053902][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1184.059902][ C1] ? userfaultfd_unmap_complete+0x30c/0x360 [ 1184.065815][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.071441][ C1] ? do_mmap+0x915/0xfa0 [ 1184.075692][ C1] __mm_populate+0x27a/0x460 [ 1184.080291][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1184.085407][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.091042][ C1] vm_mmap_pgoff+0x2c3/0x3d0 [ 1184.095629][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1184.100734][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1184.107073][ C1] ? do_syscall_64+0x100/0x230 [ 1184.112099][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 1184.116959][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.122586][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1184.127441][ C1] do_syscall_64+0xf3/0x230 [ 1184.131954][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.137934][ C1] RIP: 0033:0x7f0252975bd9 [ 1184.142343][ C1] RSP: 002b:00007f0253735048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1184.150838][ C1] RAX: ffffffffffffffda RBX: 00007f0252b03f60 RCX: 00007f0252975bd9 [ 1184.158802][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 1184.166768][ C1] RBP: 00007f02529e4aa1 R08: ffffffffffffffff R09: 0000000000000000 [ 1184.174736][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1184.182785][ C1] R13: 000000000000000b R14: 00007f0252b03f60 R15: 00007ffd54207cf8 [ 1184.190768][ C1] [ 1184.193787][ C1] rcu: rcu_preempt kthread starved for 10449 jiffies! g136713 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1184.205234][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1184.215196][ C1] rcu: RCU grace-period kthread stack dump: [ 1184.221183][ C1] task:rcu_preempt state:R running task stack:25560 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1184.233097][ C1] Call Trace: [ 1184.236374][ C1] [ 1184.239307][ C1] __schedule+0x17e8/0x4a20 [ 1184.243870][ C1] ? __pfx___schedule+0x10/0x10 [ 1184.248781][ C1] ? __pfx_lock_release+0x10/0x10 [ 1184.253835][ C1] ? __asan_memset+0x23/0x50 [ 1184.258447][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1184.264304][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1184.270761][ C1] ? schedule+0x90/0x320 [ 1184.275048][ C1] schedule+0x14b/0x320 [ 1184.279341][ C1] schedule_timeout+0x1be/0x310 [ 1184.284238][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1184.289647][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1184.294945][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.300586][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 1184.306138][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1184.311033][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 1184.317108][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1184.322395][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1184.328294][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.333926][ C1] ? finish_swait+0xd4/0x1e0 [ 1184.338540][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1184.343136][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1184.348418][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1184.354416][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.360057][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1184.365122][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1184.370321][ C1] kthread+0x2f2/0x390 [ 1184.374411][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1184.379607][ C1] ? __pfx_kthread+0x10/0x10 [ 1184.384198][ C1] ret_from_fork+0x4d/0x80 [ 1184.388617][ C1] ? __pfx_kthread+0x10/0x10 [ 1184.393209][ C1] ret_from_fork_asm+0x1a/0x30 [ 1184.398000][ C1] [ 1184.401008][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1184.407318][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1184.412529][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30