last executing test programs: 18m25.334629266s ago: executing program 32 (id=145): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x118e) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2c, 0x3, 0x0) socket(0x9, 0x80000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000200)={[{@dyn}, {@flock_local}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ac1414bbe00000010000000000000018a51ccc9acf27b49f486544a317e8534c9a4d000000000000000094babecf5e4ee76904ed871914628754d2fc5ae323f212e9d6b0400aa3fdd37a29a8510ffc4c"], 0x10) 18m17.779236079s ago: executing program 33 (id=165): syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e0408090502010002"], 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x9, 0x0, 0xc7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@extension_unit={0xc, 0x24, 0x8, 0x6, 0x7ff, 0x0, "cfd0ddaca2"}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x7, 0x9, 'IW'}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x6, 0x2, 0x2}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x7, "46dd5be565ad"}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x1, 0x6, "cbc81ea277"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x4, 0x6, "0a6302253c"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0xe, '|'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xb, 0xa6, {0x7, 0x25, 0x1, 0x81, 0x7, 0x3c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xbe5, 0x1, 0xd}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x84, 0x7, "be3dbf"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xf3, 0x4, 0xfe, 0x0, "0391839b"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6c, 0x4, 0x2, 0x6, "f89d9a9d9e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0xf8, "4281b3ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7f, 0x7, 0x0, {0x7, 0x25, 0x1, 0x81, 0x10, 0x2}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xff, 0x3, 0xe, 0x20, 0x5}, 0x4e, &(0x7f0000000140)={0x5, 0xf, 0x4e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "8837d7604a97cc3ff9b6c85abb53b86c"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x200, 0xf01e, 0xfff8, [0xffff0f, 0xc0cf]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x7, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xef}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xff00, 0x3, [0xc000]}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xfab78875d908b2a7}}]}) 17m11.88987088s ago: executing program 34 (id=314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc1105511, &(0x7f0000000280)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ptrace(0x10, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='!$?/#\x00', &(0x7f0000000380)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000003c0)='}]^\x00', &(0x7f0000000400)='\x00', 0x0, &(0x7f00000004c0)='ct\x00']}, &(0x7f00000005c0)={[&(0x7f0000000540)='ct\x00', &(0x7f0000000580)='ife\x00']}) close_range(r6, 0xffffffffffffffff, 0x0) 16m51.259111653s ago: executing program 35 (id=369): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000020000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x20000400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200900, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) fcntl$setflags(r1, 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f00000000c0)=r8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16m29.615631868s ago: executing program 36 (id=427): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x118e) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = socket(0x9, 0x80000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x1}}) socket$inet_icmp(0x2, 0x2, 0x1) 15m12.840369527s ago: executing program 37 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x50, 0x0, 0x0, &(0x7f00000001c0)="92") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"/536], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14m49.793092631s ago: executing program 38 (id=691): io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) 13m32.008005775s ago: executing program 39 (id=854): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x198280, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x2050, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xff00) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x2, "a449"}, &(0x7f0000000100)=0xa) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 13m15.589290783s ago: executing program 40 (id=860): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x3, 0xfffffff7, 0x4, 0xe31d, 0x2]}, &(0x7f0000000000)=0x54) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 12m41.10169848s ago: executing program 41 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xfbff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') read$char_usb(r1, &(0x7f00000003c0)=""/164, 0xa4) 11m57.484782371s ago: executing program 42 (id=1079): r0 = socket$key(0xf, 0x3, 0x2) copy_file_range(r0, &(0x7f0000000140)=0xa60c, r0, &(0x7f00000005c0)=0x4, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0xfffffffffffffdd5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="37f90fd3dde6ec3120226ef16b209c64a2e1732a53399491297b79e7064b53120c201281fdb2380bb01e23c0267f0e9b2430a6aceed6bf72", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x20048844) ppoll(&(0x7f0000000180)=[{r2, 0x110}], 0x1, 0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x5, {0x0, 0x80, 0x2}}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa001c0000000000008901780000000400"/31], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabb08004500001c0000002000029078000000e0907800"/36], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x3ff) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, "fe941600"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x6, 0x8, 0x2, 0x6, 0x12, "ffc1e3ef5516d43fb75aae7bdddde7915be089"}) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0xa, r5, 0x1, r10}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 10m17.731689404s ago: executing program 43 (id=1334): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f00000000c0)="1a00000002000000", 0x8) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES64=r2], 0x30}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='order=strict,errors=continue,\x00'], 0x1, 0xa1c, &(0x7f0000001740)="$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") r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000040)="01bb", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x8010, 0x3, 0x10000, r7}, 0x10) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'nilfs2\x00'}], 0xa, "126bc61bfa5c1308ccf734e57ceb042cfe015863e5dabe7001dd90abbbca31c069692df92af775838d2ebbefc6cc03516c01a591e142feaaae4d029685b917a38df002c691aa0287723a16aa7f37af82a960b304a753fb64c5180e45f3bca4e03af45f0dbc71d4443f61406dfc095b4985cfbec969fa0f60f64ee8f46d4618f162bbdf31d0ebf4f12f78af016afd5b06c65400826a84a16977c46d82104ceb7d3b9e16d6cf7238372b"}, 0xbc) 9m2.267396018s ago: executing program 44 (id=1531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 9m2.21172484s ago: executing program 3 (id=1537): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") sync_file_range(0xffffffffffffffff, 0x8, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1401000033000100000000000000000003"], 0x114}], 0x1, 0x0, 0x0, 0x4084}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 9m1.066975418s ago: executing program 3 (id=1540): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x198280, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x2050, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvbDZONi2pmyZtQJVqNRIgIhI7lgvmQkAI+VChqhw4W4nTWNmkxXYrt0LU4fXaQ/+AcvAFcULiHqlw4AK33pC5VULi0gvmtGjGs+v1+iXrtvE65fOJZp9n5pnnmd/zm53ZFyvaAP+35i6n+SBF5i6/vFqub6xPtzfWp+9260lOJVlLmkkaSYr/dDqdD5PrSdEbphgod3l/cfbVjz7Z+HhrrVkv1f6Ng/oNqPdbG9i81t02keREXX4GO8a78ZnHK3qRX09yqS5h5E4m6ezw078+2Wvp09qr9+kjiRF4tIqt183Ur8c948mZ+kIv3wd0X3kbRx/hcE4Nud/gOwgAAAB43AzzGfipzWxmtTh7BOEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF8La9u//F/XS6NYnUnR//3+s3pa6fry8cLjdHzyqOAAAAAAAAADgSPyzenxhM5tZzdnu1k5R/c3/xWrlfPX4RN7MchaylCtZzXxWspKlTCUZ7xtubHV+ZWVpaoie1/bsee0h4Z6qy9bnMXcAAAAAAAAA+ML5Rea2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHQZGc2CpS3O/bPJ5GM8npJGPlhrXk79364+zBqAMAAACAI/DUZjazmrPd9U6R80merb4DOJ03cy8rWcxK2lnIzep7ga1P/Y2N9en2xvr03XLZPe73/n2oMKoRs/Xdw95Hvljt0cqtt7p9buT1tHMzjapn6WIdT3ePgbjulzEV360NGdnNuixn/l5d7vLuoSa7n0N+mTJeZeRkbmWxytFkHVuZjae7Z2bvM3TIszN4pKk0esGeHzjSwCQ+Vc7P1GU5n9/sl/ORGMzEtb5n37MH5zz52p/+8JPJun58pjScE3XZqR5buzMx3ZeJ54bJxO32vTu3by1fftwysctklYkLvfW5/DA/zuVM5JUsZTFvZT4rWchEflDV5uuTX/Rd8vtk6vqOtVceFslY/QzdOlmHi+nFqu/ZLOZHeT03s5CXqn/XMpVvZSYzme07wxcOPsPVVd/Y56rvfGnP4C99va60kvy2Lve0b8OjUub16b689t9zx6u2/i3bWTo3RJYOeW9sfqWulMf4ZV0eD4OZmOrLxDMHZ+J31W1luX3vztLt+TeGO9y59+pKeR39+ljdUsvny7nyZFVrO58dZdszvT135qtsO9/r19jVdqHXVl2pRXPfK3Wsfg+3e6RrVdtze7ZNV20X+9pavbYrvfdbABx7Z75xZqz1r9bfWh+0ftW63Xr59PdPffvU82M5+eeT32lOnvhq4/nij/kgP9/+/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx6y2+/c2e+3V5YGqh0Op1392k66krzIaHuqmTiH0+UHbpbOuk1dX/O7Ahn8eUnk5HncOSV/3Y6nXpLsc8+v//LsUlUp3YsUjeiyujuScDRuLpy942ry2+/883Fu/OvLby2cG92ZmZ2cnbmpemrtxbbC5Nbj6OOEngUtl/0Rx0JAAAAAAAAAAAAMKyj+O8Eo54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hibu5zmgxSZmrwyWa5vrE+3y6Vb396zmaSRpPhZUnyYXM/WkvG+4Yr9jvP+4uyrH32y8fH2WM3u/o2D+g1nrV4ykeTEVnn/8xrvRl0eqDhoCkVvhmXCLnUTB6P2vwAAAP//pfYHBg==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xff00) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x2, "a449"}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={r7, 0x6f, "7e18f0a4704fa32289b1536e3ed7b4c1acbfa37b7849fedf7b97d83d9dcb51fa423a3a191e1993813201c9ff206450c437407ce8203d6738dce08a1986c7e385547a1aac27506d3ce929ddff1d52c6a7bfa15806def2c097574e32da92542a20d8b1960dcfa02c6bacce0977a47518"}, &(0x7f0000000200)=0x77) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 8m59.149790238s ago: executing program 3 (id=1545): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) msgctl$IPC_SET(0x0, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000040000010000000000000001"]) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) mincore(&(0x7f0000275000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/187) 8m56.542666098s ago: executing program 3 (id=1552): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x414, &(0x7f0000000380)=ANY=[], 0x1, 0x14e1, &(0x7f0000003fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xe4142, 0x1ff) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) 8m54.744751011s ago: executing program 3 (id=1556): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x8, 'X'}, @global=@item_012={0x2, 0x1, 0x4, '1x'}]}}, 0x0}, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000240)={0x3, 0x5, &(0x7f00000000c0)=[0x3, 0x8000, 0x50, 0x3, 0x200], &(0x7f0000000180)=[0x9, 0x570, 0x4, 0x0, 0x0, 0x9], &(0x7f00000001c0)=[0x1], &(0x7f0000000200)=[0x1]}) r3 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000100)=@userptr={0x8000, 0x8, 0x4, 0x0, 0x6, {0x77359400}, {0x4, 0x1, 0xb9, 0xa6, 0xfc, 0x80, "5450cd7f"}, 0x9, 0x2, {0x0}, 0x4}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000034c0)=@filter={'filter\x00', 0xe, 0x5, 0x90, [0x0, 0x200000002d00, 0x200000002e86, 0x20000000325a], 0x0, 0x0, &(0x7f0000002d00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x108) 8m51.700753027s ago: executing program 3 (id=1567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640100001f00010027bd7000fcdbdf25fe880000000000000000000000000101000004d602006c007f000001000000000000000000000000040000000735000056001400626c616b6532732d3235362d61726d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000006000000096a29e2281c25c71107a00000a00100001000000000000002400090025020000000000001de1000000000000080000000000000005000000000000000c0015"], 0x164}}, 0x4008000) (async) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0x1, 0x3}) (async) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[], 0x1, 0x5906, &(0x7f0000000540)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJJBIKAEF1wowEJLS1E/oIXUotGiClaJlMjLJqyiFKtLbSG1uot+8CnkISWQh7J8nKdm+p5Oz52+c3t6ekICv18lc/ucvv0/5957+vb9n+6ZDgAAALwm7Ll+275zjvrAr744/NI1H/7ZpmtDb3m8vhpX6EuXV7xSPeRA6q4sGV9mx8WbrvrBnwcuft8v7+75/su71x27/vfvP+zi+z9z5q7bvv3Qi/Pv/eczRXHjeDpxfzl5Lgmh+vO9X//S7seOHKtLQgjlpG9HCIuSxQ8tSjIhBv8eQliXFpZk7rznpVPWjy2vval7Qv3CzHrG+2tbNR1n2/ddflL4w3vXXPebpT/+UdfOZ3fsXyWpNoynEBZc2Pj4rhDC3PT/mDja4niMg3Z1CKGn4XFnFPTruBb7vyKnfHS6nJMuewvixPuXZcqlzHrZctSVWfYUtDdTef1od70i8zLl7MlopvL6GesXpcufpssTpxm/HP8noZSESr37G5P9YyQ0HLckJOPHslovl+rHNqTbnyknmXIpUy53ZbZrvN10oJWTZGJ9XC9TH0/HlbT+2MZzdRPn5tS/Pl1W0yfqy7EcsjdqeifdqG/XuNivvVP05UAoNZyDmtXXD3x6MHrTut5k8aTHjDYR79u95ubl5bUP7+nL6Udyd5LGT9qKv/3Xi+Z96oc3XpZ9Xa/Hv7CUxi+1Ff+PZz3+/Pk3fu9bufFvjfHLbcU/+YGe58565Ppluftnb9w/lbbiDz3z6C1LD79oZ27/b4/xq23FX7Xr8e75+x54MLf/g3H/zG0r/tPv/OCf7nryvmdz44cYv6et+Gt3bflyd/++E3LjPxj3T2974+eFnac/1d//l4G8+E/E+PPbin/njtveccfCm87MPb6r4/7payv+2cfff928ffcdk3fuTG7v1CsnwGvTYek11g1pud08c6Ya8oVvDlRq13zz0v/zO9lQ5uJzrJ0FnYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGEI076nx/6/x/ve66SlrvTG0+XastYPyeEZG4IYdvI0NaRDZsvGfjMpZdt3Ty0cWBoZGB488jWKwdOfcvA1uEtG4euHLt38K2n1B63OCS1ZXLMpLa7R0dHS30T62J7/+n4nX9Yfsa//DWEwSN+11/J7f+K2zbdcXiTnxnJqtH3bLrsnN+d9t10u/rSfvU16dfo6OhoyOnXv573jzu+uvfPJ4Qw+Lqp+vXo0+/+xYQOjVfsj5MqdYdah7qTnqb9qPc67U/cX5X1GzYOD069f8ceX87Zjv981bN/X3/FV/5R27/V3O1ocf/OXTW6sfSNNWf/+zeurlUU9euVOu5F+ztuRexf3H/VdH8vSLdrQc52VXK26/rfPPjkz4+68cUdYbDywtLJbRdtV1c6ALqS17fUbmyhJ1k0ob6arh+PeHzcipFNW1Zsu3L7WzdsGrpk+JLhzW9feerK0wdPO/20FeNbvqLD2x/bf2OL239gxtPCz+34afzZ2ngq6lfR/hjrV/H+aOxR3vOv59wvfe3ttz1yTq2iaJzHtevnk3TZM3acV4aG8TZ5XzXbrqL9EEIYaLYfnn/xzHDk/9lwXdF5qPHINP7MSFaNPrbsb9894ztL3lWrOCDn+cYOtXmer/d6f3/G91c1PR6jB+n+7Q7ldLt6m/Zr5WOPdN2856+fr/dvzpxwxdDIyNaVtZ/z0p7OS45u2q9sbdyupeM/yyHdLaE+TJuM1zFdoda/7Pkzrp7dq73pfb3J4qbblRXv273m5uXltQ/vydvTyd21FueG+bVl8oacNTdmHliud7hZ+wfr869ofPR/6Dv3fvzen5w6aXycXPtZtF1Jznb9+Mk7v/b9r/zXn3Ruuz707sf7/vZ/P728VnGonFfqvU77kzSeV04Ooej5tzQ0347c51+p+fYUPf+y7exfv3m8gUy5N5Tber6e/EDPc2c9cv2y3Ofr3lafr1dPKJULnq8Hy/jJPr+SysR+zN7za8JASVaN/vKGw3Y8dM3qo2oVReO6vnazcX1KC/lHznb94vyn+i8d+C//u3PnjR+85Z4Lfj+06gu1ivaPe+xLZ457Nd2/1Zz9W+91zDsb9+/bLr5047pa/cF7/ZsuC/KfeCrZduX2zw5t3Di8dVtr29Xq62lsJ7uX2309jWe3xQXbVZq0XbN3o5X91erzLfZ/Xdv7a+LzrTckbb0ubP/1onmf+uGNl/VNelTa0IWlNH6prfh/POvx58+/8Xvfyo1/a4xfaSv+0DOP3rL08It25sa/PUnjV9uKv2rX493z9z3wYG78wdj/uW3Ff/qdH/zTXU/e92xu/BDj97a3/1/YefpT/f1/yY3/RJK2M3aNFMI9L52yvlZOQlf6fIv96JrQr5AtJ5lyKVMuN5ZLtbnWegPlJJlYH9dL649t6Eszn8ipj1dh1SW15cuxHLI3pq4/2JQazv3N6ouuUwEAXu3i+//xGjS+/z+cXijlzzTAfjPNw5bkxI152P75nDkT7l+Sxo+Pj/OA/W8Lg2PLawdqF/rTfR8hPh+y85yxnROOmxij3XnOovn3ZZly7FdtvrzSkIemJuc1ldDC/Pvkdqaef89sfvH8+MANk7o10DBvlT1+XemMWbPPO2T6WxmLkDc+svNi8fMc/QvC6vH2Whwf2c/RxOOQ/RxNbOeozImz3c/RzHR8xG5PMT7Gu1z8/sbk4xem2L/7j1/zaNnjN43jXR1bf7bfn+3AvGHTU9qBmzec3ffDzEvmxE+fYAf7vGGsj9tRaXE+8eM59Z2aT4yni9ivvVP05UAwnwi8WsX8P75GjOX/Yxfg/5ZZr+g6NHvVGOPlfk6o3Lw/RXnH5M/p9bT1Or5215Yvd/fvOyH3OufBlj73Uwlhy4SKnoLP/RTtx+WZcuF+zJmgKcr3su0U7ffs5zJ6w/y29vudO257xx0Lbzozd7+vrr2QFucjX5tQml+w3w+BfKF5fPnCayJfmO35s1csH0k/+DRb+cjHcuqnm4/0TLpR365xh1w+0nVg+wUAHDpi/l9//yzN//9fXCG9jijKW0/MlGO83Lw15/okL2/9SLq8IrN+b/obFdO9bj77+Puvm7fvvmNy85bbW81D/9uEUl9hHjqzvDk3j1jdmc+L5+YR9TxrZnlibv/reeLM8vTc+PU8fWZ5dO7+qefRM5sHyI1fnwc41PPcgvm6TGOx2Op83as2j05/fXa28uhzc+qnm0f3TrpR365x8mgAgFdWzP/jZVzM/x/JrDfT99lz84IOXbdn/x5IPf4TByqvnO28b7bz1tnO62d7XuJQz4tne15odufJXvN5cdqovBgAgINZzP/npuX8/H9m+Umz/K1rQn4iP28aX35+kOTnh/r8l/zf++LF5P8AAK9uMf+Pv/YY//7f/0jL2b9bL0/PiS9Pl6dPNX5aztM7P88WfA7glZ0HmLt/ffMAAAC8ErrGM6XJv2f/yXSZ/T37vN/LPz9n/VZV0svji0a2Dg9fcNmWdUMjwxdsvnTd8LYLLt+6YWRkeHNtvZnmjbl5S5o3doVKuj+ar5fN2xamfw9hYc7fQ8iuH8MePX5j8t9DyDY7t+DvCOw/fq31N+/4laZYv9n4yDveefE/kbN+VD/+F3/65AvWb7tgw+YNIxuGNm7YPty4Ru17M3um8b2ZcbdM6/tSMz8mKU3/+zs704/SpH50pfsj7/vZk0w/FqU9WZT3/Qc5/f7V//rq544f/cddIQweUX7DjPZfsmr0v583/JGRPb/bMtb/0pT9r6+Z9qvo+0qz68ftqWy8dNvISesvvWxz9hsl2xPnM0r18izNZ6RP/3KL8xNrc+qn+zmF8qQbB6eW5ycAAJggvv8fr2fj+4dfSS+gYn3refrM3j/OzdMHW8vTs99LVpSnZ9eP29tqnl6dYZ6ebb8oT2+2frM8PS/vzov/sZz1p6v1cTKzz3nkjpMLWxsn2e8zKBon2fWnO06SGY6TbPtF46TZ+s3GSd5xz4v/0Zz187Q+Hmb2uZzc8XBra+PhzZly0XjIrj/d8VCa4XjItl80Hpqt32w85B3fvPjn5KzfqonjY2xgjI+L4Qsuv3TrZxvWm+3vv5h5/2b3+z/a1Xr/Z/dzX7Pf/9n9XNns939mnyvL7f8TM5sJa73/s/v9Lu06YPO16YfNij5/VjSPuyanfrrzuHMm3Tg4mceFV07M/+PbPTH/vylddvptoEP/e9J8j1nT+B36HrOi6xiv51M0dhDweg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmu7KkvHlnuu37TvnqA/86ovDL13z4Z9tuvZNV/3gzwMXv++Xd/d8/+Xd645d//v3H3bx/Z85c9dt337oxfn3/vOZwsB94z8rJ6bFagjJc0kI1Z/v/fqXdj925FhdEkIoJ307QliULH5oUZKJMPj3EMK6ej8n3nnPS6esH1tee1P3hPqFmSDZ7Qq95difxn6GcEXhFnEIqqbjbPu+y08Kf3jvmut+s/THP+ra+eyO/ask1YbxFMKCCxsf3xVCmJv+HxNH25L44HS5OoTQ0/C4Mwr6dVyL/V+RUz46Xc5Jl70FceL9yzLlUma9bDnqyix7Ctqbqbx+tLtekXmZcvZkNFN5/Yz1i9LlT9PlidOMX47/k1BKQqXe/Y3J/jESGo5bEpLxY1mtl0v1YxvS7c+Uk0y5lCmXuzLbNd5uOtDKSTKxPq6XqY+n40paf2zjubqJc3PqX58uq+kT9eVYDtkbNb2TbtS3a1zs194p+nIglBrOQc3q6wc+PRi9aV1vsnjSY0abiPftXnPz8vLah/f05fQjuTtJ4ydtxd/+60XzPvXDGy9bkhf/wlIav9RW/D+e9fjz59/4vW/lxr81xi+3Ff/kB3qeO+uR65fl7p+9cf9U2oo/9Myjtyw9/KKduf2/PcavthV/1a7Hu+fve+DB3P4Pxv0zt634T7/zg3+668n7ns2NH2L8nrbir9215cvd/ftOyI3/YNw/ve2Nnxd2nv5Uf/9fBvLiPxHjz28r/p07bnvHHQtvOjP3+K6O+6evrfhnH3//dfP23XdM3rkzub1Tr5wAr02HpddYN6TldvPMmWrIF745UKld881L/8/vZEMZY+0smMX4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8Ov326lM/ed57PrqmkoSQ5Kwz2kS8rzxn1aqBNtodeubRW5YeftHOxrolbcQBAAAAisU8vFSvqYYl4fJkbji66fpxjuDoWEom1mfnEGKc7BxBu3FKHYpT7lCcSofidHUozpwOxenuUJxqQZxqaC3O3CniVMZGRYv96ZmyP63H6e1QnHkdijO/Q3EWdCjOwg7F6ZsyTuvjcFGH4izuUJzDOhTn8A7FOaJDcV7XoThHdihOdk55uuNwfrrmUXlxxm+UC+NUknL9jmbz6Uem7Rwzw3Z6C9qZX/R63GI7c1ts57jM40rTbKfaYjtvnGE7SYvtvHmG7ZQK2onj9ops/2I7sdTi+L+yQ3G2dyjOVR2Kc3WH4ny+Q3G+0KE418wwDkCrYv6/P9/rC92Vd4We9IyTnQWI+e7S8Z+TX+/yTkgx3hsy9XOK4mUT9Uy8pdPtX3YCIRNvWaa+a0K8Sj0fmSJetTHe8sydhdubnVDI9O/ETH13UbzsxAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzKLfXn3qJ897z0fXhCSM/WtqtIl4X3nOqlUDbbS7e83Ny8trH97TWNddaSMQAAAAUCjm4V31mmrorqwM3cmcCetV03mAalou99WW/QvC6rFlMlAaL/cki6Z8XCV93IqRTVtWbLty+1s3bBq6ZPiS4c1vX3nqytMHTzv9tBXrN2wcHqz9DKG7IF4IYXz6YduV2z87tHHj8NZttcps/5ekj1uSlpP0cf1vC4Njy2vT/i8uaK80qb3Zu1F89AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/oNduwuR86r/AH6emdmZ6bb5Z//0bRqazZCXErVoEreSauk+IFhok5ClILPVtQSbYHHThDYpsY5twLYmKEJLIERyYSQWW4s3fbFF7AuBSI0G3BikLdoLvVBaraQlF5Iykt05szOzM5l1LE0bP5+LeWbO+Z3ze85cLHyfHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhgTVVHJiqjY+ODSQhJl5paB3Eum0/Tch99v/z89u8Xhk+vbB4r5PrYCAAAAOgp5vCBxkgxFHLZkA1XTX9aGpomwmzuBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/vdMVUcmKqNj4xcnISRdamodxLlsPk3LffR9450nP/Pq8PBfm8dKfewDAAAA9BZzeKYxUgylsCwMJFe11MVnA4va1rfXxX0Wz7Ou/dlBt7pl86y7Zp51H+tRt6F+3RUAAADgoy/m/1xjZCgUcgu65v9euT7WLWmry9av/fxWAAAAAPjvxPxfaIyUQiFXauT1+eb9pW11cX2v/9vH9Su6rO/1//z19av/0wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR8dUdWSiMjo2nk1CSLrU1DqIc9l8mpb76LvmhcG/33LkoaXNY4VcHxsBAAAAPcUcPhu9i6GQGwwD4eLp3D9808Gnv/j0syMhhJmYn8+HXZt27Lh7zcxrrFt97MjA946+9a05datnXs/bAQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPfNVHVkojI6Nn5REkLSpabWQZzL5tO03Eff1z/3hT8/fvK5N5vHSn3sAwAAAPQWc/hs9i+GUsiHfLhi+lNz1j8r07a+2zMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MJxzzfu+/qmycnNd3vjjTfeNN6c779MAADA+21JSELtP3TlxvN91wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIfBVHVkojI6Nl5MQki61NQ6iHPZfJqW++ibPn+8sOD0Cy81j5X62AcAAADoLebw2exfDKUwEAbC5dOfOj0TmM7/Qx/gTQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfKlPVkYnK6Nj4giSEpEtNrYM4l82nabmPvo/tPvDZwwu/e3PzWCHXx0YAAABATzGH5xsjxVDIfTwUwtX1z5OtC5Js/dr5ucDsuu0tywbnva7asi4773V72k6Wq59mZl0x7jc0c22sK89dV25aVwqN9uWWdWFfy6oFPe4zAAAAwHkU83+hMTIUCrlCU879SUv9kJwLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHQxVR2ZqIyOjSdJCEmXmloHcS6bT9NyH33v+83/X/KVn+7d2TxW6mMfAAAAoLeYw2ezfzGUwuLwf2HxdO4PQ631se4flTOHH/3nX1aGsOqKE8O59m1/GN/86vUbX2x/CSHTWp0JYWG9X9Kl369/9+i9y2tnHg9h1eXZq+f0C+fu17plWnumsnn9jqMntvf4cgAAAOACEfP/QGNkKBRyd3XN/zF598j/DdMBfOG9u39+Wf21nsjbVmSG6v0yXfp9fvmTf1qx9m9vnc3/5+r3qQNbD1/W0nBmpE2S1ka37txw4rpDmXjqmf7Ztv7xe/nSN9/815Zdj5yZ6V8Mxfr4olyn/nNf21yU1iYz+8fXvbe/2to/1+X8D/32pZO/XLT33bP931ky2Oh/zTnOf+7+g7c+vO/6A0c2tPYPIZQ79X/73ZvDlX+488H28w+2bdz8zTe/tknS2rGlpw6tPVi6obV/0tY/fv8/O/nYvh8/8p1nY//4W5GVy+bbP9PW/5U9l+5++YGNi1r7Z7qc/8XbXh3eVv7279vPf0fLrrmudzH3/E9c+9Ttr21K72+fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLBMVUcmKqNj45kkhKRLTa2DOJfNp2m5j75v3HL87dv2/ugHzWOlPvYBAAAAeos5fDb7F0Mp5EM+DE7n/mcqm9fvOHpiexiamU3q19zktnt2fGLLtp133XGe7hwAAACYr5j/c42RoVDILQ8D9fw/unXnhhPXHcrE/J+J+X/LnZObV4VG3St7Lt398gMbFzWeE4Qw/bOA4tm6T8/W3XTj8aFTf/zaio51a2brji09dWjtwdINsS40160OjecTT1z71O2vbUrvb9xfc90nv7ptsv54Iu47eOvD+64/cGRD4xz162B931g3mdk/vu69/dVYl61fi/VzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTVVHJiqjY+MhG0LSpabWQZzL5tO03Effdct/8eAlp59b3DxWyPWxEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZgcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgr79RMaR9nHAfx5dpM322zSJu0LRsU0rYpSDxYFEb2oqEgrUvBUKVJt7UEUBBGlHkylFUtVvAhWL0VUUKMUFGwsllZJxX/FiwcVFKoHoRQD2qV4UMnuM9vNdMfVSRXUzweGJ88zM9/5zTzPzmYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lEG+saa7eEd9zduOeeGjx6968QjN71z77aLHn71u4lN1324d/ClkzObV2z58vplm/bfvWZ69/OHfhp+65ejPYMfajWrUrcWQjweQ6i9O/vMYzMfnzU3FkMI1TgyGcJoXHpoNOYSVv8cQtjcrnP+zjdPXL5lrt22a2De+JJcSP6+Qr2a1dMyMr9e/l1qaZ1tbTx4Sfj62vXbP13+xuv9U8cmTx0Sax3rKYTFGzvP7w8hLErbnGy1jWUnp3ZdCGGw47wre9R1/h+s/9KC/rmp/V9q6z1ysv0rc/1K7rh8P9Ofawd7XG+hiuooe1wvQ7l+/mW0UEV1ZuOjqX07tav+ZH4122KoxNDXLv+eeGqNhI55iyE257LW7lfacxvS/ef6Mdev5PrV/tx9Na+bFlo1xvnj2XG58ex13JfGV3S+q7u4tWD87NTW0gf1ZNYP+T9a6qf90b6vpqyu2d+p5e9Q6XgHdRtvT3yajHoaq8elp53zaxfZvpn1T1xY3fDe4ZGCOuLemPJjqfytn4wO3f7azgfGivI3VlJ+pVT+N2uP/HDbzheeK8x/Osuvlsq/7MDg8bXv71hZ+Hxms+fTVyr/jqMfPLn8/3dOdZvrZv6eLL9WKv+a6SMDw40DBwvrX509n0Wl8r+6+sZvX/l837HC/JDlD5bK3zB931MD442LC/MPtj4K9eYKLbF+fpy64ovx8e8nivI/y57/cJf82DP/5cndV724ZNeawvW5Lns+I6Xqv/mC/duHGvvOK3p3xj1n6psT4L9pWfof6/HUL/s7c6E6fi88O9HX+gYaStvwmbxQztx1Fv+F+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MYOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVAAD///7iKE0=") prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x5) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x80, 0x40000, 0x900000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000001440)=0x80000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x2000000001) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@ieee802154={0x24, @short={0x2, 0x3, 0xffff}}, 0x80, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x348}, 0x0, 0x800, 0x1}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x81, 0xffffffff, 0x8}) (async) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) 8m36.550885572s ago: executing program 45 (id=1567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640100001f00010027bd7000fcdbdf25fe880000000000000000000000000101000004d602006c007f000001000000000000000000000000040000000735000056001400626c616b6532732d3235362d61726d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000006000000096a29e2281c25c71107a00000a00100001000000000000002400090025020000000000001de1000000000000080000000000000005000000000000000c0015"], 0x164}}, 0x4008000) (async) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0x1, 0x3}) (async) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[], 0x1, 0x5906, &(0x7f0000000540)="$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") prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x5) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x80, 0x40000, 0x900000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000001440)=0x80000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x2000000001) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@ieee802154={0x24, @short={0x2, 0x3, 0xffff}}, 0x80, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x348}, 0x0, 0x800, 0x1}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x81, 0xffffffff, 0x8}) (async) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) 8m12.679417583s ago: executing program 0 (id=1654): setitimer(0x2, &(0x7f0000000180)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r2], 0x24}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303130308f050000ca91725f69643d00000000000000", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000000009,blksize=0x0000000000000600,appraise_type=imasig,measure,silent,smackfsroot={,\x00'], 0x0, 0x0, &(0x7f00000001c0)="bb96e7996459c5f2d13a988ce72fec8eda90e186b4e4d3688be2984a8eead2bb69ec4ca76d679bab4e9795665b") utimensat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0xea60}}, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x13}]}, 0x24}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x0, 0x6a4, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x0, 0x9, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7800, 0x78a0}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x80, 0x0, 0xcb, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @rand_addr=' \x01\x00'}}) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r8], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000000c0)={'nicvf0\x00', @random="72e6680ae937"}) 8m7.73333995s ago: executing program 0 (id=1667): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x14d002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) eventfd(0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8m5.204616671s ago: executing program 0 (id=1671): setitimer(0x2, &(0x7f0000000180)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r2], 0x24}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303130308f050000ca91725f69643d00000000000000", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000000009,blksize=0x0000000000000600,appraise_type=imasig,measure,silent,smackfsroot={,\x00'], 0x0, 0x0, &(0x7f00000001c0)="bb96e7996459c5f2d13a988ce72fec8eda90e186b4e4d3688be2984a8eead2bb69ec4ca76d679bab4e9795665b") utimensat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0xea60}}, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x13}]}, 0x24}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x0, 0x6a4, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r2], 0x24}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303130308f050000ca91725f69643d00000000000000", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000000009,blksize=0x0000000000000600,appraise_type=imasig,measure,silent,smackfsroot={,\x00'], 0x0, 0x0, &(0x7f00000001c0)="bb96e7996459c5f2d13a988ce72fec8eda90e186b4e4d3688be2984a8eead2bb69ec4ca76d679bab4e9795665b") utimensat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0xea60}}, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r2], 0x24}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303130308f050000ca91725f69643d00000000000000", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000000009,blksize=0x0000000000000600,appraise_type=imasig,measure,silent,smackfsroot={,\x00'], 0x0, 0x0, &(0x7f00000001c0)="bb96e7996459c5f2d13a988ce72fec8eda90e186b4e4d3688be2984a8eead2bb69ec4ca76d679bab4e9795665b") utimensat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0xea60}}, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(r1, 0xb, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc) chroot(&(0x7f0000000040)='./file1\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0xc0bc5310, &(0x7f0000000000)={0x80, 0x800007, 0x6, 0xfffffffe}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x2004e070) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 7m18.171310258s ago: executing program 4 (id=1773): syz_usb_connect(0x2, 0x36, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0x84, 0x7b, 0xb, 0x10, 0xeb1a, 0x5051, 0xd001, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc, 0x9, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0xba, 0x9d, 0x2a, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0x4ea495e7c073fdbe, 0x3, 0xc0, 0x93, 0x72, 0x8}}]}}]}}]}}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0}) 7m15.258712422s ago: executing program 4 (id=1777): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x10d000, 0x170}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@dmask}, {@discard}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000fc0)={0x29, 0x6, 0x0, {0x1, 0x2}}, 0x29) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(r6, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x500) accept4(r2, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x84, &(0x7f0000000f00)={[{@index_on}, {@index_on}, {@uuid_off}, {@uuid_auto}, {@redirect_dir_off}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@obj_type={'obj_type', 0x3d, '+*$$\xc5]{-,-()-]!{'}}, {@permit_directio}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) utimensat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000e40)={{r8, r9/1000+60000}, {0x0, 0xea60}}, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x104, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r10, 0x1}}, 0x18) 7m12.380603975s ago: executing program 4 (id=1783): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000034c0)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x200000000000, 0x200000000030, 0x200000000324], 0x0, 0x0, &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) 7m11.466886354s ago: executing program 4 (id=1785): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") sync_file_range(0xffffffffffffffff, 0x8, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 7m10.819672356s ago: executing program 47 (id=1785): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") sync_file_range(0xffffffffffffffff, 0x8, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 3m20.175525151s ago: executing program 2 (id=2331): modify_ldt$write(0x1, &(0x7f0000000000)={0x3, 0x1800, 0x1000}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$TCSETS(r1, 0x5402, &(0x7f00000023c0)={0x87, 0xffff8000, 0x4, 0x10000, 0x1b, "5a7178fd4d203286bc790c9f3c137885015a14"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002a00)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000df42f25e9c36fbf002820800000000611214000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m18.519698607s ago: executing program 2 (id=2333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) 3m17.988375945s ago: executing program 2 (id=2337): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909e2, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xd}, 0x8) connect$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000006000000000000000056751608e83d000000000000008094b0fea952b6cb5107101d78c44a341232d47ae5ce8ac08e5219228061cf56cd03c653269e4eb588395e8e580e9bba9b2ae871663b49e6df3e892ca4116a8049569b6d250c6ef482f1ec76b8645f9d4fee0bc46cc57342339285718402626678fac8b4e2aacd6bfb969da94a6e51d0222fa5619643fbb1d251ed4d096f4c03b6e67aa78bfa7935b36b04845245299fe628e4f9e4da1cb1ea803e0352490e47eda9e606bba42db31c740abc7604de7dddca223881f378f56b4ff66ac7cdc4446d59121ccf2410e142c9285e7adb1786f874315058eee27bbe4ae0bcd82edef4c660402b24580c97"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 3m15.845224332s ago: executing program 2 (id=2339): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x1008001, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x1000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e, 0x3e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 3m14.297408413s ago: executing program 2 (id=2344): open(0x0, 0x64842, 0x86) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], 0x1, 0x495, &(0x7f0000000a40)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0xb, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc) chroot(&(0x7f0000000040)='./file1\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0xc0bc5310, &(0x7f0000000000)={0x80, 0x800007, 0x6, 0xfffffffe}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x2004e070) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1m38.302132015s ago: executing program 2 (id=2352): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0xa0000) r3 = dup(r2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@my=0x0}) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000740)={0x2020}, 0x2020) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@secondary) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x3) 1m38.301124888s ago: executing program 48 (id=2352): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0xa0000) r3 = dup(r2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@my=0x0}) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000740)={0x2020}, 0x2020) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@secondary) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x3) 51.545067182s ago: executing program 7 (id=2544): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e19, @multicast1=0xe0000002}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}, 0x0) 51.272228587s ago: executing program 7 (id=2549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f0892f1bff88fbffff4000632c77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 50.727846028s ago: executing program 7 (id=2556): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c048400d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) 50.462545589s ago: executing program 7 (id=2560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000a000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 50.199388543s ago: executing program 7 (id=2562): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0) 49.885451676s ago: executing program 7 (id=2566): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 45.180680209s ago: executing program 1 (id=2596): socket$inet6(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 44.511336971s ago: executing program 9 (id=2602): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r1, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000000)=""/133, 0x85}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}], 0x4}, 0x5}], 0x1, 0x100, 0x0) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x45, 0x0, 0x2, 0xfffffffd}, {0x1}, {0x7, 0xf9, 0x8}]}) 41.32069247s ago: executing program 5 (id=2620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x1, 0x88, 0x0, @empty}, {0x0, 0x0, 0x20, 0x0, @opaque="48dbea7a3b5317093db165629db9eb33eba9b0897cc75488"}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$isdn(0x22, 0x2, 0x11) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xc8, &(0x7f0000010140), &(0x7f00000001c0)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000042c0)={0x0, 0x2, 0xc}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 40.991181157s ago: executing program 6 (id=2622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8918, &(0x7f0000000000)={r3}) 40.803986717s ago: executing program 1 (id=2624): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 40.6200102s ago: executing program 9 (id=2625): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.328159457s ago: executing program 5 (id=2626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1184, r2, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x0, 0xeb, 0x9}]}, 0x1184}, 0x1, 0x0, 0x0, 0x24040080}, 0xc0c4) 40.194197861s ago: executing program 9 (id=2627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008001500c7020b0007e80700e00000020a000100aa"], 0x54}}, 0x0) 40.037276125s ago: executing program 6 (id=2629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 39.796073317s ago: executing program 1 (id=2630): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x1, 0xffff8001, 0x0, @mcast2, @private1, 0x40, 0x700, 0x2, 0x6}}) 39.482390307s ago: executing program 9 (id=2631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 39.370603955s ago: executing program 6 (id=2632): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_sctp(0x2, 0xa, 0x84) socket$packet(0x11, 0x2, 0x300) socket(0x2b, 0x80801, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e1) socket(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 39.179969888s ago: executing program 1 (id=2633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 39.169598437s ago: executing program 5 (id=2634): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000400)="b9ffddc1ddc8cdde752dfe443b1b5e000000000000895abe5707888e", 0x0, 0x601, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 38.888028091s ago: executing program 9 (id=2635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(r0) 38.729526861s ago: executing program 5 (id=2636): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xa, 0x6, 0x7}]}, 0x10) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff2e40df5cd3d680000b00000c010000"], 0x0) 38.357487922s ago: executing program 5 (id=2638): getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002800)={0x2, 'dummy0\x00', 0x1}, 0x18) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 37.934939069s ago: executing program 8 (id=2640): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x200000000003, 0x87) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x24, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030bb0000bc2b0000000000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 37.650483232s ago: executing program 8 (id=2641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8918, &(0x7f0000000000)={r3}) 36.375712336s ago: executing program 1 (id=2642): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 36.347700178s ago: executing program 5 (id=2643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 36.131061897s ago: executing program 8 (id=2644): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 35.923293394s ago: executing program 1 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 35.734972969s ago: executing program 8 (id=2646): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r1, 0x29, 0x80, 0x1, 0xffff8001, 0x0, @mcast2, @private1, 0x40, 0x700, 0x2, 0x6}}) 35.415956593s ago: executing program 8 (id=2647): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0xff10}], 0x1) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}, "911e20f8a4d40108"}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x55bf, 0x6d30, 0x4}, &(0x7f0000000380)=0x10) bind$alg(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000080)) 34.897506377s ago: executing program 6 (id=2648): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000400)="b9ffddc1ddc8cdde752dfe443b1b5e000000000000895abe5707888e", 0x0, 0x601, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 34.753218279s ago: executing program 49 (id=2566): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 34.51040229s ago: executing program 6 (id=2650): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008001500c7020b0007e80700e00000020a000100aa"], 0x54}}, 0x0) 34.148529359s ago: executing program 6 (id=2651): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket(0x2, 0x3, 0x100000001) setsockopt(r2, 0xff, 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 34.097202519s ago: executing program 8 (id=2652): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x14) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000003c0)={'gre0\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x5, 0x0, 0x4) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) listen(r4, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) 27.944804448s ago: executing program 9 (id=2653): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 50 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) kernel console output (not intermixed with test programs): o-write": -EINTR [ 947.153061][T15878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 947.162739][T15880] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 947.172579][T15878] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 947.182884][T15880] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 947.191943][T15878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 947.201942][T15880] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 947.211733][T15878] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 947.221695][T15880] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 947.231825][T15878] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 947.241811][T15878] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 947.251805][T15878] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 947.641587][T15878] BTRFS error (device loop6): open_ctree failed: -12 [ 947.645958][T15880] BTRFS error (device loop5): open_ctree failed: -12 [ 947.693103][ T5930] usb 2-1: Cannot retrieve CPort count: -110 [ 947.771717][ T5930] usb 2-1: Cannot retrieve CPort count: -110 [ 948.013857][ T5930] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 948.163329][ T5930] usb 2-1: USB disconnect, device number 46 [ 948.997910][T15927] trusted_key: encrypted_key: insufficient parameters specified [ 949.202939][T15921] Process accounting resumed [ 950.923112][T15884] Process accounting resumed [ 951.125924][T15945] loop6: detected capacity change from 0 to 1024 [ 951.332534][T15948] loop5: detected capacity change from 0 to 1024 [ 951.347937][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 951.378938][T15945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.412531][ T5896] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 951.454712][T15945] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.536280][T15961] loop9: detected capacity change from 0 to 1024 [ 951.587726][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 951.596092][ T5896] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.634009][T15961] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.657640][ T29] audit: type=1800 audit(1738754491.277:347): pid=15945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2028" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 951.657896][ T5896] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.697621][T15961] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.738748][ T5930] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 951.819272][ T5896] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 951.826603][ T29] audit: type=1800 audit(1738754491.417:348): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2031" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 951.865773][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.973444][ T5896] hub 2-1:4.0: USB hub found [ 951.976790][ T5930] usb 9-1: Using ep0 maxpacket: 16 [ 952.001527][ T5930] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 952.030199][ T5930] usb 9-1: config 0 has no interface number 0 [ 952.076160][ T5930] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 952.096069][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.119136][ T5930] usb 9-1: Product: syz [ 952.123394][ T5930] usb 9-1: Manufacturer: syz [ 952.164400][ T5930] usb 9-1: SerialNumber: syz [ 952.185344][ T5896] hub 2-1:4.0: 2 ports detected [ 952.185638][T14760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.199921][ T5930] usb 9-1: config 0 descriptor?? [ 952.216415][ T5896] usb 2-1: selecting invalid altsetting 1 [ 952.226300][ T5930] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 952.243790][ T5896] hub 2-1:4.0: Using single TT (err -22) [ 952.250262][T10802] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 952.282765][T10716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.391030][ T5896] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 952.421052][ T5930] gspca_spca1528: reg_w err -71 [ 952.437932][T10802] usb 6-1: Using ep0 maxpacket: 16 [ 952.443273][ T5896] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 952.456860][ T5930] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 952.458073][T10802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.533339][T10802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.538141][ T5930] usb 9-1: USB disconnect, device number 24 [ 952.612338][T10802] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 952.624717][T15985] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2036'. [ 952.826448][T15987] vim2m vim2m.0: vidioc_s_fmt queue busy [ 953.673811][ T5896] usb 2-1: USB disconnect, device number 47 [ 953.701154][T15988] loop9: detected capacity change from 0 to 2048 [ 953.709223][T15988] nilfs2: Unknown parameter 'dXscard' [ 953.836683][T10802] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 953.845823][T10802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.972119][T15987] loop2: detected capacity change from 0 to 32768 [ 953.994894][T15987] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2037 (15987) [ 954.030320][T15987] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 954.040675][T15987] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 954.046748][T10802] usb 6-1: config 0 descriptor?? [ 954.049160][T15987] BTRFS info (device loop2): using free-space-tree [ 954.086456][T15985] loop9: detected capacity change from 0 to 256 [ 954.281791][T16000] FAULT_INJECTION: forcing a failure. [ 954.281791][T16000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.326373][T15985] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 954.372452][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.6.2038 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 954.372490][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 954.372507][T16000] Call Trace: [ 954.372518][T16000] [ 954.372529][T16000] dump_stack_lvl+0x241/0x360 [ 954.372571][T16000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.372600][T16000] ? __pfx__printk+0x10/0x10 [ 954.372650][T16000] ? snprintf+0xda/0x120 [ 954.372683][T16000] should_fail_ex+0x40a/0x550 [ 954.372722][T16000] _copy_to_user+0x31/0xb0 [ 954.372753][T16000] simple_read_from_buffer+0xca/0x150 [ 954.372801][T16000] proc_fail_nth_read+0x1e9/0x250 [ 954.372849][T16000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.372894][T16000] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.372937][T16000] ? rw_verify_area+0x243/0x630 [ 954.372971][T16000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.373016][T16000] vfs_read+0x1fa/0xb40 [ 954.373052][T16000] ? fdget_pos+0x254/0x320 [ 954.373084][T16000] ? __pfx___mutex_lock+0x10/0x10 [ 954.373121][T16000] ? __pfx_vfs_read+0x10/0x10 [ 954.373153][T16000] ? do_sys_openat2+0x17a/0x1d0 [ 954.373187][T16000] ? __fget_files+0x2a/0x410 [ 954.373217][T16000] ? __fget_files+0x395/0x410 [ 954.373244][T16000] ? __fget_files+0x2a/0x410 [ 954.373286][T16000] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.373332][T16000] ksys_read+0x18f/0x2b0 [ 954.373369][T16000] ? __pfx_ksys_read+0x10/0x10 [ 954.373406][T16000] ? do_syscall_64+0x100/0x230 [ 954.373453][T16000] ? do_syscall_64+0xb6/0x230 [ 954.373492][T16000] do_syscall_64+0xf3/0x230 [ 954.373534][T16000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.373570][T16000] RIP: 0033:0x7ff699d8b7fc [ 954.373594][T16000] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 954.373617][T16000] RSP: 002b:00007ff69ab12030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.373645][T16000] RAX: ffffffffffffffda RBX: 00007ff699fa5fa0 RCX: 00007ff699d8b7fc [ 954.373665][T16000] RDX: 000000000000000f RSI: 00007ff69ab120a0 RDI: 0000000000000004 [ 954.373682][T16000] RBP: 00007ff69ab12090 R08: 0000000000000000 R09: 0000000000000000 [ 954.373699][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.373716][T16000] R13: 0000000000000000 R14: 00007ff699fa5fa0 R15: 00007ffc80b2c9f8 [ 954.373754][T16000] [ 954.560196][T15985] exFAT-fs (loop9): error, invalid access to FAT free cluster (entry 0x00000008) [ 954.846724][T15969] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2033'. [ 955.763531][T15987] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 955.763845][T15987] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 955.887713][T15987] BTRFS error (device loop2): open_ctree failed: -12 [ 956.408660][T16024] loop8: detected capacity change from 0 to 1024 [ 956.474769][T16029] FAULT_INJECTION: forcing a failure. [ 956.474769][T16029] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 956.488718][T16029] CPU: 1 UID: 0 PID: 16029 Comm: syz.2.2043 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 956.488754][T16029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 956.488771][T16029] Call Trace: [ 956.488782][T16029] [ 956.488794][T16029] dump_stack_lvl+0x241/0x360 [ 956.488831][T16029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.488860][T16029] ? __pfx__printk+0x10/0x10 [ 956.488902][T16029] ? rcu_is_watching+0x15/0xb0 [ 956.488930][T16029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.488972][T16029] ? trace_contention_end+0x3c/0x120 [ 956.489005][T16029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.489044][T16029] ? __mutex_lock+0x397/0x1010 [ 956.489088][T16029] should_fail_ex+0x40a/0x550 [ 956.489125][T16029] iommufd_get_object+0x79/0x670 [ 956.489160][T16029] ? __pfx___mutex_lock+0x10/0x10 [ 956.489196][T16029] ? __pfx_iommufd_get_object+0x10/0x10 [ 956.489233][T16029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.489272][T16029] ? __raw_spin_lock_init+0x45/0x100 [ 956.489309][T16029] iommufd_access_change_ioas_id+0x4a/0x160 [ 956.489358][T16029] iommufd_access_attach+0x5c/0x90 [ 956.489398][T16029] iommufd_test+0x24f8/0x4270 [ 956.489453][T16029] ? __pfx_iommufd_test+0x10/0x10 [ 956.489494][T16029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.489540][T16029] ? __pfx___might_resched+0x10/0x10 [ 956.489573][T16029] ? __might_fault+0xaa/0x120 [ 956.489608][T16029] ? __pfx_lock_release+0x10/0x10 [ 956.489655][T16029] ? __might_fault+0xaa/0x120 [ 956.489688][T16029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.489740][T16029] iommufd_fops_ioctl+0x4d8/0x5a0 [ 956.489777][T16029] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 956.489826][T16029] ? __fget_files+0x2a/0x410 [ 956.489861][T16029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.489900][T16029] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 956.489937][T16029] __se_sys_ioctl+0xf7/0x170 [ 956.489976][T16029] do_syscall_64+0xf3/0x230 [ 956.490017][T16029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.490061][T16029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.490097][T16029] RIP: 0033:0x7f967758cde9 [ 956.490119][T16029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.490143][T16029] RSP: 002b:00007f967836a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.490170][T16029] RAX: ffffffffffffffda RBX: 00007f96777a6080 RCX: 00007f967758cde9 [ 956.490191][T16029] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 956.490209][T16029] RBP: 00007f967836a090 R08: 0000000000000000 R09: 0000000000000000 [ 956.490225][T16029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.490243][T16029] R13: 0000000000000000 R14: 00007f96777a6080 R15: 00007ffcd3f6dc88 [ 956.490280][T16029] [ 956.637075][T16024] EXT4-fs: Mount option(s) incompatible with ext3 [ 956.698642][ T1163] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 956.959751][T16037] loop9: detected capacity change from 0 to 128 [ 956.966729][ T1163] usb 7-1: Using ep0 maxpacket: 8 [ 957.021064][ T1163] usb 7-1: unable to get BOS descriptor or descriptor too short [ 957.037506][T16042] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 957.047249][T16037] IPVS: stopping backup sync thread 16042 ... [ 957.053471][ T1163] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 957.092079][ T1163] usb 7-1: can't read configurations, error -71 [ 957.832155][T10802] usbhid 6-1:0.0: can't add hid device: -71 [ 957.844057][T16050] loop1: detected capacity change from 0 to 512 [ 957.870933][T10802] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 957.908821][T16050] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 957.958640][T10802] usb 6-1: USB disconnect, device number 12 [ 958.003275][T16054] loop8: detected capacity change from 0 to 512 [ 958.032851][T16054] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 958.118335][T16056] loop6: detected capacity change from 0 to 2048 [ 958.509973][T10802] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 958.977221][T13939] Bluetooth: hci1: command 0x0406 tx timeout [ 959.598544][T10802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.616685][T10802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.684595][T10802] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 959.714153][T10802] usb 6-1: New USB device strings: Mfr=129, Product=0, SerialNumber=0 [ 959.764848][T10802] usb 6-1: Manufacturer: syz [ 959.776655][T10802] usb 6-1: config 0 descriptor?? [ 960.046221][T16075] loop2: detected capacity change from 0 to 1024 [ 960.134472][T16069] loop8: detected capacity change from 0 to 8192 [ 960.306184][T16084] vim2m vim2m.0: vidioc_s_fmt queue busy [ 960.349464][T10802] steelseries 0003:1038:1410.000D: not enough fields in HID_OUTPUT_REPORT 0 [ 960.515459][T10802] usb 6-1: USB disconnect, device number 13 [ 960.753629][T16090] loop1: detected capacity change from 0 to 128 [ 960.778052][T16084] loop6: detected capacity change from 0 to 32768 [ 960.786950][T16084] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2056 (16084) [ 960.801660][T16090] udf: Unknown parameter '0x0000000000000000' [ 960.832445][T16084] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 960.842752][T16084] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 960.854142][T16084] BTRFS info (device loop6): using free-space-tree [ 961.934744][ T5985] hfsplus: b-tree write err: -5, ino 4 [ 962.195749][T16084] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 962.799310][T16127] loop5: detected capacity change from 0 to 256 [ 962.871228][T16129] IPVS: stopping backup sync thread 16131 ... [ 962.877589][T16131] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 963.016945][T10802] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 963.568501][ T29] audit: type=1800 audit(1738754503.187:349): pid=16127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2063" name="file1" dev="loop5" ino=257 res=0 errno=0 [ 963.599180][T16133] loop1: detected capacity change from 0 to 512 [ 963.649734][T16133] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 963.677115][T10802] usb 10-1: Using ep0 maxpacket: 8 [ 963.716392][T16133] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 963.724886][ T29] audit: type=1804 audit(1738754503.337:350): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2063" name="/newroot/25/file0/file1" dev="loop5" ino=257 res=1 errno=0 [ 963.728952][T10802] usb 10-1: unable to get BOS descriptor or descriptor too short [ 963.773188][T16138] loop2: detected capacity change from 0 to 256 [ 963.812234][T16127] syz.5.2063: attempt to access beyond end of device [ 963.812234][T16127] loop5: rw=2049, sector=256, nr_sectors = 8 limit=256 [ 963.826244][ T29] audit: type=1800 audit(1738754503.387:351): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2063" name="file1" dev="loop5" ino=257 res=0 errno=0 [ 963.891267][T16138] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 964.014515][T10802] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 964.022587][T10802] usb 10-1: can't read configurations, error -71 [ 964.124042][T16133] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 964.239153][T16133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 964.964005][T16133] System zones: 0-2, 18-18, 34-34 [ 965.223322][T16133] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 965.742840][ T29] audit: type=1326 audit(1738754505.347:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855d38cde9 code=0x7fc00000 [ 965.807729][T16133] EXT4-fs (loop1): 1 truncate cleaned up [ 965.890328][T16133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.916118][T16156] loop5: detected capacity change from 0 to 47 [ 965.924189][T16153] loop6: detected capacity change from 0 to 1024 [ 966.005055][T16153] hfsplus: failed to load root directory [ 967.527674][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.687646][T16178] FAULT_INJECTION: forcing a failure. [ 968.687646][T16178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.700928][T16178] CPU: 1 UID: 0 PID: 16178 Comm: syz.9.2074 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 968.700962][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 968.700979][T16178] Call Trace: [ 968.700989][T16178] [ 968.701001][T16178] dump_stack_lvl+0x241/0x360 [ 968.701038][T16178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 968.701066][T16178] ? __pfx__printk+0x10/0x10 [ 968.701111][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.701152][T16178] ? shmem_allowable_huge_orders+0x1fe/0x420 [ 968.701200][T16178] should_fail_ex+0x40a/0x550 [ 968.701241][T16178] copy_page_from_iter_atomic+0x301/0x1e30 [ 968.701294][T16178] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 968.701344][T16178] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 968.701385][T16178] ? shmem_write_begin+0x1e9/0x350 [ 968.701429][T16178] ? __pfx_shmem_write_begin+0x10/0x10 [ 968.701467][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.701513][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.701552][T16178] ? fault_in_iov_iter_readable+0x229/0x280 [ 968.701596][T16178] generic_perform_write+0x675/0x990 [ 968.701647][T16178] ? __pfx_generic_perform_write+0x10/0x10 [ 968.701682][T16178] ? _raw_spin_unlock+0x28/0x50 [ 968.701712][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.701752][T16178] ? preempt_count_add+0x93/0x190 [ 968.701781][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.701821][T16178] ? mnt_put_write_access_file+0xb8/0x100 [ 968.701859][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.701898][T16178] ? file_update_time+0x3dd/0x450 [ 968.701938][T16178] shmem_file_write_iter+0xf9/0x120 [ 968.701981][T16178] vfs_write+0xad1/0xd10 [ 968.702021][T16178] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 968.702064][T16178] ? __pfx_vfs_write+0x10/0x10 [ 968.702103][T16178] ? __fget_files+0x2a/0x410 [ 968.702135][T16178] ? __fget_files+0x2a/0x410 [ 968.702168][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.702213][T16178] ksys_write+0x18f/0x2b0 [ 968.702261][T16178] ? __pfx_ksys_write+0x10/0x10 [ 968.702296][T16178] ? exc_page_fault+0x590/0x8b0 [ 968.702328][T16178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 968.702372][T16178] ? do_syscall_64+0xb6/0x230 [ 968.702412][T16178] do_syscall_64+0xf3/0x230 [ 968.702453][T16178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.702489][T16178] RIP: 0033:0x7f9d0fd8b89f [ 968.702511][T16178] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 968.702534][T16178] RSP: 002b:00007f9d10b2ddf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 968.702563][T16178] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f9d0fd8b89f [ 968.702583][T16178] RDX: 0000000000040000 RSI: 00007f9d05600000 RDI: 0000000000000005 [ 968.702600][T16178] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002cf [ 968.702617][T16178] R10: 00000000000001de R11: 0000000000000293 R12: 0000000000000005 [ 968.702634][T16178] R13: 00007f9d10b2def0 R14: 00007f9d10b2deb0 R15: 00007f9d05600000 [ 968.702671][T16178] [ 969.050603][T16178] loop9: detected capacity change from 0 to 512 [ 969.057681][T16181] loop2: detected capacity change from 0 to 512 [ 969.253877][T16187] vim2m vim2m.0: vidioc_s_fmt queue busy [ 969.983932][T16181] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 970.000105][T16182] loop6: detected capacity change from 0 to 128 [ 970.119168][T13939] Bluetooth: hci5: command 0x0406 tx timeout [ 970.182896][T16182] udf: Unknown parameter '0x0000000000000000' [ 970.201050][T16187] loop1: detected capacity change from 0 to 32768 [ 970.218271][T16187] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2072 (16187) [ 970.263015][T16187] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 970.273319][T16187] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 970.281865][T16187] BTRFS info (device loop1): using free-space-tree [ 970.608894][T16197] vim2m vim2m.0: vidioc_s_fmt queue busy [ 970.890136][T16197] loop8: detected capacity change from 0 to 32768 [ 971.147150][T16197] BTRFS: device /dev/loop8 (7:8) using temp-fsid 8b11d807-c728-47ca-a5f0-537e90d4a3e2 [ 971.156878][T16197] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2077 (16197) [ 971.202175][T16197] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 971.212509][T16197] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 971.222167][T16197] BTRFS info (device loop8): using free-space-tree [ 971.298877][T16218] loop2: detected capacity change from 0 to 128 [ 971.345759][T16216] loop9: detected capacity change from 0 to 256 [ 971.387647][T16187] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 971.481526][T16216] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 971.515541][T16237] loop5: detected capacity change from 0 to 128 [ 971.554083][T16218] IPVS: stopping backup sync thread 16238 ... [ 971.554940][T16238] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 971.586151][T16237] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 971.669194][T16197] BTRFS info (device loop8): last unmount of filesystem 8b11d807-c728-47ca-a5f0-537e90d4a3e2 [ 971.889004][T14835] sysv_free_block: flc_count > flc_size [ 971.969382][T14835] sysv_free_block: flc_count > flc_size [ 972.076438][T14835] sysv_free_block: flc_count > flc_size [ 972.086600][T14835] sysv_free_block: flc_count > flc_size [ 972.092167][T14835] sysv_free_block: flc_count > flc_size [ 972.319915][T14835] sysv_free_block: flc_count > flc_size [ 972.453503][T14835] sysv_free_block: flc_count > flc_size [ 972.551762][T14835] sysv_free_block: flc_count > flc_size [ 972.616795][T14835] sysv_free_block: flc_count > flc_size [ 972.622409][T14835] sysv_free_block: flc_count > flc_size [ 972.701605][T14835] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 973.656432][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 973.824858][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.909171][T16253] bridge_slave_1: left allmulticast mode [ 973.914896][T16253] bridge_slave_1: left promiscuous mode [ 974.023989][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.208440][ T47] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 974.271367][T16264] loop9: detected capacity change from 0 to 1024 [ 974.436763][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 974.461980][ T47] usb 6-1: unable to get BOS descriptor or descriptor too short [ 974.471469][ T47] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 974.482636][ T47] usb 6-1: can't read configurations, error -71 [ 975.301021][T16276] loop8: detected capacity change from 0 to 512 [ 975.397059][T16276] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 975.878554][ T12] hfsplus: b-tree write err: -5, ino 4 [ 978.640581][T16287] loop5: detected capacity change from 0 to 8192 [ 979.439024][T16316] vim2m vim2m.0: vidioc_s_fmt queue busy [ 980.359273][T16319] loop8: detected capacity change from 0 to 1024 [ 980.447818][T16316] loop9: detected capacity change from 0 to 32768 [ 980.452205][T16319] hfsplus: failed to load root directory [ 980.474152][T16316] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2096 (16316) [ 980.496938][T16316] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 980.507505][T16316] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 980.515969][T16316] BTRFS info (device loop9): using free-space-tree [ 980.803763][T16311] loop5: detected capacity change from 0 to 8192 [ 981.663191][T16318] loop1: detected capacity change from 0 to 8192 [ 981.820870][T16316] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 985.084600][T16378] loop6: detected capacity change from 0 to 4096 [ 985.117774][T16378] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 985.894040][T16396] loop5: detected capacity change from 0 to 128 [ 985.967372][T16378] ntfs3(loop6): Failed to load $Extend (-22). [ 985.967484][T16396] udf: Unknown parameter '0x0000000000000000' [ 985.996946][T16378] ntfs3(loop6): Failed to initialize $Extend. [ 986.411482][T16398] loop9: detected capacity change from 0 to 8192 [ 986.631309][T16417] vim2m vim2m.0: vidioc_s_fmt queue busy [ 987.664268][T16417] loop8: detected capacity change from 0 to 32768 [ 987.672197][T16417] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2116 (16417) [ 987.729177][T16417] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 987.739611][T16417] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 987.748122][T16417] BTRFS info (device loop8): using free-space-tree [ 988.969391][T16417] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 989.900379][T16422] loop6: detected capacity change from 0 to 8192 [ 991.526917][ T5930] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 991.677738][T16470] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2125'. [ 991.713585][T16470] loop1: detected capacity change from 0 to 256 [ 991.760065][T16470] vfat: Unknown parameter 'nnonumtail' [ 991.790759][ T5930] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 991.802130][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.812023][ T5930] usb 9-1: Product: syz [ 991.816225][ T5930] usb 9-1: Manufacturer: syz [ 991.821080][ T5930] usb 9-1: SerialNumber: syz [ 992.065661][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 992.120390][T16480] netlink: 'syz.2.2127': attribute type 8 has an invalid length. [ 993.047080][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.654786][ T5930] cdc_ncm 9-1:1.0: bind() failure [ 993.668176][ T5930] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 993.675724][ T5930] cdc_ncm 9-1:1.1: bind() failure [ 993.686894][ T5930] usb 9-1: USB disconnect, device number 25 [ 993.788972][T16492] loop6: detected capacity change from 0 to 4096 [ 993.800485][T16492] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 993.836095][T16494] loop2: detected capacity change from 0 to 1768 [ 993.972414][T16498] loop1: detected capacity change from 0 to 128 [ 994.044667][T16498] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 994.189040][T16492] ntfs3(loop6): Failed to load $Extend (-22). [ 994.365721][T16492] ntfs3(loop6): Failed to initialize $Extend. [ 995.293163][ T5830] sysv_free_block: flc_count > flc_size [ 995.339845][ T5830] sysv_free_block: flc_count > flc_size [ 995.345455][ T5830] sysv_free_block: flc_count > flc_size [ 995.413640][ T5830] sysv_free_block: flc_count > flc_size [ 995.419940][ T5830] sysv_free_block: flc_count > flc_size [ 995.425513][ T5830] sysv_free_block: flc_count > flc_size [ 995.431167][ T5830] sysv_free_block: flc_count > flc_size [ 995.436766][ T5830] sysv_free_block: flc_count > flc_size [ 995.442323][ T5830] sysv_free_block: flc_count > flc_size [ 995.447919][ T5830] sysv_free_block: flc_count > flc_size [ 995.454238][ T5830] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 996.964226][T16518] loop9: detected capacity change from 0 to 256 [ 997.054631][T16518] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 997.182049][T16523] loop1: detected capacity change from 0 to 1024 [ 997.273157][T16523] hfsplus: failed to load root directory [ 998.370281][T16529] loop6: detected capacity change from 0 to 4096 [ 998.388104][T16529] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 998.403753][T16538] loop5: detected capacity change from 0 to 256 [ 998.440816][T16529] ntfs3(loop6): Failed to load $Extend (-22). [ 998.455986][T16529] ntfs3(loop6): Failed to initialize $Extend. [ 998.480036][T16538] FAULT_INJECTION: forcing a failure. [ 998.480036][T16538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.514531][T16538] CPU: 1 UID: 0 PID: 16538 Comm: syz.5.2141 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 998.514573][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 998.514590][T16538] Call Trace: [ 998.514601][T16538] [ 998.514612][T16538] dump_stack_lvl+0x241/0x360 [ 998.514651][T16538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.514681][T16538] ? __pfx__printk+0x10/0x10 [ 998.514733][T16538] should_fail_ex+0x40a/0x550 [ 998.514769][T16538] strncpy_from_user+0x36/0x270 [ 998.514801][T16538] getname_flags+0xf1/0x540 [ 998.514827][T16538] ? __fget_files+0x2a/0x410 [ 998.514858][T16538] user_path_at+0x24/0x60 [ 998.514890][T16538] do_fchownat+0xed/0x240 [ 998.514914][T16538] ? srso_alias_return_thunk+0x5/0xfbef5 [ 998.514956][T16538] ? __pfx_do_fchownat+0x10/0x10 [ 998.514980][T16538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 998.515017][T16538] ? do_syscall_64+0x100/0x230 [ 998.515057][T16538] __x64_sys_lchown+0x85/0xa0 [ 998.515082][T16538] do_syscall_64+0xf3/0x230 [ 998.515120][T16538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.515154][T16538] RIP: 0033:0x7f226dd8cde9 [ 998.515174][T16538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.515195][T16538] RSP: 002b:00007f226eb8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 998.515221][T16538] RAX: ffffffffffffffda RBX: 00007f226dfa5fa0 RCX: 00007f226dd8cde9 [ 998.515240][T16538] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000200000000380 [ 998.515261][T16538] RBP: 00007f226eb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 998.515277][T16538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.515292][T16538] R13: 0000000000000000 R14: 00007f226dfa5fa0 R15: 00007fff0f2fd3e8 [ 998.515325][T16538] [ 999.872281][T16552] loop8: detected capacity change from 0 to 1024 [ 1000.518647][T16552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.585614][T16552] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.000023][T16568] netlink: 187320 bytes leftover after parsing attributes in process `syz.9.2146'. [ 1001.009951][T16568] netlink: zone id is out of range [ 1001.015438][T16568] netlink: zone id is out of range [ 1001.021688][T16568] netlink: zone id is out of range [ 1001.799749][T16549] Process accounting resumed [ 1001.822372][ T29] audit: type=1800 audit(1738754541.437:353): pid=16552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2145" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1003.487783][T16585] loop6: detected capacity change from 0 to 128 [ 1003.529547][T16590] loop9: detected capacity change from 0 to 128 [ 1003.585967][T16590] udf: Unknown parameter '0x0000000000000000' [ 1004.046958][T16596] IPVS: stopping backup sync thread 16598 ... [ 1004.122339][T12610] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.697725][T16606] loop5: detected capacity change from 0 to 8192 [ 1006.007546][T16622] loop6: detected capacity change from 0 to 8192 [ 1006.071949][T16624] loop8: detected capacity change from 0 to 8192 [ 1007.768561][T16641] tmpfs: Bad value for 'mpol' [ 1007.790752][T16641] loop1: detected capacity change from 0 to 512 [ 1007.816659][T16641] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1007.915073][T16641] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2163: bad orphan inode 2 [ 1007.989403][T16641] EXT4-fs (loop1): Remounting filesystem read-only [ 1008.250179][T16641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.270951][T16641] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 1009.828579][ T968] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1009.896738][ T5896] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1010.058853][ T968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1010.720252][ T968] usb 3-1: not running at top speed; connect to a high speed hub [ 1010.729956][ T968] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1010.749130][ T968] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1010.761852][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.776003][ T968] usb 3-1: Product: syz [ 1010.796593][ T968] usb 3-1: Manufacturer: syz [ 1010.806589][ T968] usb 3-1: SerialNumber: syz [ 1011.060406][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.120754][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.139215][ T968] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input55 [ 1011.175567][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.213616][ T968] usb 3-1: USB disconnect, device number 32 [ 1011.219766][ T5187] bcm5974 3-1:1.0: could not read from device [ 1011.260047][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1011.476848][ T8] usb 6-1: device descriptor read/64, error -71 [ 1011.490473][T16685] nfs4: Unknown parameter '$ÚKêí)´Úÿ¤3Jr‘ÁK¨Éaµ–i] Fy¯›Èé;%÷™g/¯S ´AB¡†ã·Ç£Å†V&¼Â^œê'œQgÙ´ŒÀsÛÍòMÜ@EºdqÚùÅ1¢ŸÝå%ðŸU*âòè|m•¡'zÖIâ4K^ÿTkáÒ&¦£$' [ 1011.602900][T16685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2170'. [ 1011.643662][T16685] loop1: detected capacity change from 0 to 256 [ 1011.716660][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1011.752167][T16685] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1011.915515][T16685] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 1011.916824][ T8] usb 6-1: device descriptor read/64, error -71 [ 1012.067005][ T8] usb usb6-port1: attempt power cycle [ 1012.318461][T16706] loop8: detected capacity change from 0 to 47 [ 1012.391473][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2176'. [ 1012.404547][T16712] loop2: detected capacity change from 0 to 128 [ 1012.444347][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.498274][T16712] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1012.592889][T16712] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.616606][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1013.232574][T16715] loop6: detected capacity change from 0 to 1024 [ 1013.242504][ T8] usb 6-1: device descriptor read/8, error -71 [ 1013.292802][T16715] hfsplus: Unknown parameter ''' [ 1013.304723][T16706] bridge_slave_1 (unregistering): left allmulticast mode [ 1013.372313][T16706] bridge_slave_1 (unregistering): left promiscuous mode [ 1013.427990][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.517421][ T8] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1013.599033][T16723] loop1: detected capacity change from 0 to 128 [ 1013.624964][ T8] usb 6-1: device descriptor read/8, error -71 [ 1013.726694][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2177'. [ 1013.746951][ T8] usb usb6-port1: unable to enumerate USB device [ 1013.760133][T16727] IPVS: stopping backup sync thread 16728 ... [ 1013.768822][T16728] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1014.437043][T13796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1014.446692][T16691] loop9: detected capacity change from 0 to 32768 [ 1014.571186][ T29] audit: type=1800 audit(1738754554.157:354): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2172" name="bus" dev="loop9" ino=7 res=0 errno=0 [ 1014.699091][T16735] loop8: detected capacity change from 0 to 256 [ 1014.775068][T16735] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1015.090106][ T5896] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1015.216729][ T5930] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1015.406127][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1015.466378][ T5930] usb 6-1: not running at top speed; connect to a high speed hub [ 1015.562005][T16752] loop6: detected capacity change from 0 to 1024 [ 1015.589231][ T5930] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1015.623641][ T5930] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1015.666642][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.695375][ T5930] usb 6-1: Product: syz [ 1015.715777][ T5930] usb 6-1: Manufacturer: syz [ 1015.724424][ T5930] usb 6-1: SerialNumber: syz [ 1015.932702][T16756] loop9: detected capacity change from 0 to 128 [ 1015.939104][T16752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.939216][T16752] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1015.965762][T16739] netem: change failed [ 1016.038001][T16756] udf: Unknown parameter '0x0000000000000000' [ 1016.044797][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.071104][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.081285][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.094217][ T5896] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1016.099514][ T5930] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input56 [ 1016.103359][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.127763][ T29] audit: type=1800 audit(1738754555.737:355): pid=16752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2187" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1016.216771][ T5896] usb 2-1: config 0 descriptor?? [ 1016.233241][ T5187] bcm5974 6-1:1.0: could not read from device [ 1016.240050][ T5930] usb 6-1: USB disconnect, device number 20 [ 1016.533117][T16773] FAULT_INJECTION: forcing a failure. [ 1016.533117][T16773] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.552862][T16766] loop8: detected capacity change from 0 to 8192 [ 1016.575345][T14760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.605457][T16773] CPU: 0 UID: 0 PID: 16773 Comm: syz.2.2191 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1016.605497][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1016.605518][T16773] Call Trace: [ 1016.605528][T16773] [ 1016.605539][T16773] dump_stack_lvl+0x241/0x360 [ 1016.605578][T16773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.605606][T16773] ? __pfx__printk+0x10/0x10 [ 1016.605650][T16773] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1016.605681][T16773] ? __pfx___might_resched+0x10/0x10 [ 1016.605720][T16773] should_fail_ex+0x40a/0x550 [ 1016.605757][T16773] should_failslab+0xac/0x100 [ 1016.605786][T16773] ? __kernfs_new_node+0xd8/0x870 [ 1016.605811][T16773] kmem_cache_alloc_noprof+0x70/0x380 [ 1016.605846][T16773] __kernfs_new_node+0xd8/0x870 [ 1016.605878][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.605920][T16773] ? up_write+0x1a9/0x590 [ 1016.605947][T16773] ? __pfx___kernfs_new_node+0x10/0x10 [ 1016.605977][T16773] ? __pfx_up_write+0x10/0x10 [ 1016.606005][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.606054][T16773] kernfs_new_node+0x137/0x240 [ 1016.606086][T16773] __kernfs_create_file+0x49/0x2e0 [ 1016.606121][T16773] sysfs_add_file_mode_ns+0x24a/0x310 [ 1016.606163][T16773] internal_create_group+0x782/0x12d0 [ 1016.606217][T16773] ? __pfx_up_write+0x10/0x10 [ 1016.606244][T16773] ? __pfx_internal_create_group+0x10/0x10 [ 1016.606290][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.606340][T16773] sysfs_create_groups+0x56/0x120 [ 1016.606381][T16773] device_add_attrs+0x137/0x600 [ 1016.606406][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.606450][T16773] ? __pfx_device_add_attrs+0x10/0x10 [ 1016.606476][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.606521][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.606565][T16773] device_add+0x576/0xbf0 [ 1016.606597][T16773] input_register_device+0xa53/0x1130 [ 1016.606636][T16773] uinput_create_device+0x40e/0x630 [ 1016.606683][T16773] uinput_ioctl_handler+0x488/0x1770 [ 1016.606723][T16773] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1016.606773][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.606822][T16773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.606861][T16773] ? __pfx_uinput_ioctl+0x10/0x10 [ 1016.606899][T16773] __se_sys_ioctl+0xf7/0x170 [ 1016.606939][T16773] do_syscall_64+0xf3/0x230 [ 1016.606982][T16773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.607017][T16773] RIP: 0033:0x7f967758cde9 [ 1016.607040][T16773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.607063][T16773] RSP: 002b:00007f967838b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.607091][T16773] RAX: ffffffffffffffda RBX: 00007f96777a5fa0 RCX: 00007f967758cde9 [ 1016.607111][T16773] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1016.607128][T16773] RBP: 00007f967838b090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.607145][T16773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.607161][T16773] R13: 0000000000000000 R14: 00007f96777a5fa0 R15: 00007ffcd3f6dc88 [ 1016.607196][T16773] [ 1017.233021][ T5896] elecom 0003:056E:011C.000E: item fetching failed at offset 0/2 [ 1017.241855][ T5896] elecom 0003:056E:011C.000E: probe with driver elecom failed with error -22 [ 1018.229898][T16742] loop1: detected capacity change from 0 to 8 [ 1018.343890][T16742] SQUASHFS error: Failed to read block 0x8f: -5 [ 1018.585871][T16742] SQUASHFS error: Failed to read block 0x8f: -5 [ 1019.573210][ T29] audit: type=1800 audit(1738754559.187:356): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2183" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1020.168050][T16791] loop2: detected capacity change from 0 to 47 [ 1020.297986][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'. [ 1020.314507][ T5930] usb 2-1: USB disconnect, device number 49 [ 1020.401114][T16799] loop6: detected capacity change from 0 to 128 [ 1021.253499][T16804] netlink: 'syz.1.2197': attribute type 11 has an invalid length. [ 1021.317200][ T968] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1021.342668][T16804] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2197'. [ 1021.460169][T16815] loop9: detected capacity change from 0 to 256 [ 1021.506631][ T968] usb 6-1: Using ep0 maxpacket: 16 [ 1021.514429][T16815] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1021.554965][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.596568][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.640830][ T968] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1021.708974][ T968] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1021.775077][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.844593][ T968] usb 6-1: config 0 descriptor?? [ 1022.396353][T16831] loop8: detected capacity change from 0 to 47 [ 1024.616929][T16803] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2198'. [ 1024.732699][ T968] usbhid 6-1:0.0: can't add hid device: -71 [ 1024.750829][ T968] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1025.024959][ T968] usb 6-1: USB disconnect, device number 21 [ 1025.540402][T16862] loop6: detected capacity change from 0 to 128 [ 1025.604506][T16862] udf: Unknown parameter '0x0000000000000000' [ 1026.285200][T16872] loop9: detected capacity change from 0 to 47 [ 1027.330814][T16882] loop5: detected capacity change from 0 to 1024 [ 1027.403951][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2215'. [ 1027.492210][T16882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.516988][T16882] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.686637][ T29] audit: type=1800 audit(1738754567.297:357): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2216" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1028.255883][T14835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.391576][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.270172][T16917] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.2222'. [ 1030.279702][T16917] netlink: zone id is out of range [ 1030.284863][T16917] netlink: zone id is out of range [ 1030.290330][T16917] netlink: zone id is out of range [ 1032.035629][T16931] netlink: 187320 bytes leftover after parsing attributes in process `syz.5.2224'. [ 1032.045170][T16931] netlink: zone id is out of range [ 1032.050449][T16931] netlink: zone id is out of range [ 1032.055679][T16931] netlink: zone id is out of range [ 1032.179727][T16934] loop9: detected capacity change from 0 to 256 [ 1033.226813][ T5930] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1033.416882][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 1033.453239][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.550486][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.615653][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1033.862850][ T5930] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1034.054870][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.129466][ T5930] usb 3-1: config 0 descriptor?? [ 1034.152987][T16952] loop1: detected capacity change from 0 to 1024 [ 1034.828875][T16952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.950870][T16952] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.973557][T16932] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2226'. [ 1035.006285][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 1035.025533][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1035.042667][ T5930] usb 3-1: USB disconnect, device number 33 [ 1035.063262][ T29] audit: type=1800 audit(1738754574.677:358): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2231" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1035.264978][T16965] loop6: detected capacity change from 0 to 128 [ 1035.292852][T16965] udf: Unknown parameter '0x0000000000000000' [ 1035.399970][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.495885][T16962] loop9: detected capacity change from 0 to 8192 [ 1035.598053][T16971] loop5: detected capacity change from 0 to 1024 [ 1035.690983][T16971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.712847][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2236'. [ 1035.726844][ T5838] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1035.810722][T16971] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.910655][ T29] audit: type=1800 audit(1738754575.527:359): pid=16971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2235" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1036.663615][T16976] bridge_slave_1 (unregistering): left allmulticast mode [ 1036.675574][T16994] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2239'. [ 1036.718690][T16976] bridge_slave_1 (unregistering): left promiscuous mode [ 1036.739718][T16994] loop2: detected capacity change from 0 to 256 [ 1036.766356][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.774652][T16994] vfat: Unknown parameter 'nnonumtail' [ 1036.799696][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2240'. [ 1036.892608][T17002] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2240'. [ 1036.908891][T14835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.126556][ T5894] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1037.146560][ T5896] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1037.507163][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1037.512471][ T5896] usb 9-1: Using ep0 maxpacket: 32 [ 1037.534205][ T5894] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 1037.555644][ T5896] usb 9-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 1037.572212][ T5894] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.588067][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.605200][ T5894] usb 3-1: config 8 has no interface number 0 [ 1037.619144][ T5896] usb 9-1: Product: syz [ 1037.637133][ T5896] usb 9-1: Manufacturer: syz [ 1037.641796][ T5894] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1037.661302][ T5896] usb 9-1: SerialNumber: syz [ 1037.687637][ T5896] usb 9-1: config 0 descriptor?? [ 1037.693682][ T5894] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1037.720486][T17009] loop1: detected capacity change from 0 to 128 [ 1037.756931][ T5894] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1037.769423][ T5896] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 1037.849347][ T5894] usb 3-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1037.936673][ T5894] usb 3-1: config 8 interface 206 has no altsetting 0 [ 1037.963950][ T5896] gspca_sunplus: reg_w_riv err -71 [ 1037.981101][ T5896] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 1038.010674][ T5894] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1038.040444][ T5896] usb 9-1: USB disconnect, device number 26 [ 1038.046513][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.054517][ T5894] usb 3-1: Product: syz [ 1038.087151][ T5894] usb 3-1: Manufacturer: syz [ 1038.105958][ T5894] usb 3-1: SerialNumber: syz [ 1038.357006][ T5894] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 1038.387675][ T5894] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1038.415539][ T5894] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1038.445855][ T5894] usb 3-1: USB disconnect, device number 34 [ 1038.460806][ T5894] garmin_gps 3-1:8.206: device disconnected [ 1038.675134][ T5896] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1039.250612][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 1039.280053][ T5896] usb 7-1: config 0 has an invalid interface number: 37 but max is 1 [ 1039.306738][ T5896] usb 7-1: config 0 has no interface number 1 [ 1039.349458][ T5896] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1039.386312][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.429593][ T5896] usb 7-1: Product: syz [ 1039.448619][ T5896] usb 7-1: Manufacturer: syz [ 1039.470645][ T5896] usb 7-1: SerialNumber: syz [ 1039.517027][ T8] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1039.806742][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1040.014845][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.121018][ T5896] usb 7-1: config 0 descriptor?? [ 1040.140735][T17051] loop5: detected capacity change from 0 to 256 [ 1040.149319][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.177979][T17041] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 1040.216354][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.219301][T17051] FAULT_INJECTION: forcing a failure. [ 1040.219301][T17051] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.304225][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1040.344091][T17051] CPU: 1 UID: 0 PID: 17051 Comm: syz.5.2253 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1040.344132][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1040.344149][T17051] Call Trace: [ 1040.344159][T17051] [ 1040.344170][T17051] dump_stack_lvl+0x241/0x360 [ 1040.344209][T17051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.344238][T17051] ? __pfx__printk+0x10/0x10 [ 1040.344282][T17051] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 1040.344313][T17051] ? __pfx___might_resched+0x10/0x10 [ 1040.344351][T17051] should_fail_ex+0x40a/0x550 [ 1040.344387][T17051] should_failslab+0xac/0x100 [ 1040.344415][T17051] ? __d_alloc+0x31/0x670 [ 1040.344445][T17051] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 1040.344480][T17051] __d_alloc+0x31/0x670 [ 1040.344518][T17051] d_alloc_parallel+0xdf/0x1630 [ 1040.344558][T17051] ? __asan_memset+0x23/0x50 [ 1040.344594][T17051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.344635][T17051] ? __asan_memset+0x23/0x50 [ 1040.344667][T17051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.344706][T17051] ? lockdep_init_map_type+0xa1/0x910 [ 1040.344745][T17051] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1040.344781][T17051] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1040.344821][T17051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.344864][T17051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.344903][T17051] ? __init_waitqueue_head+0xae/0x150 [ 1040.344944][T17051] __lookup_slow+0x117/0x400 [ 1040.344986][T17051] ? __pfx___lookup_slow+0x10/0x10 [ 1040.345032][T17051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.345070][T17051] ? lookup_fast+0x18c/0x590 [ 1040.345105][T17051] lookup_slow+0x53/0x70 [ 1040.345137][T17051] walk_component+0x2e1/0x410 [ 1040.345169][T17051] path_lookupat+0x16f/0x450 [ 1040.345209][T17051] filename_lookup+0x2a3/0x670 [ 1040.345238][T17051] ? __virt_addr_valid+0x183/0x530 [ 1040.345287][T17051] ? __pfx_filename_lookup+0x10/0x10 [ 1040.345343][T17051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.345381][T17051] ? strncpy_from_user+0x146/0x270 [ 1040.345415][T17051] ? getname_flags+0x1e3/0x540 [ 1040.345441][T17051] ? __fget_files+0x2a/0x410 [ 1040.345473][T17051] user_path_at+0x3a/0x60 [ 1040.345506][T17051] do_fchownat+0xed/0x240 [ 1040.345530][T17051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.345572][T17051] ? __pfx_do_fchownat+0x10/0x10 [ 1040.345597][T17051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.345635][T17051] ? do_syscall_64+0x100/0x230 [ 1040.345677][T17051] __x64_sys_lchown+0x85/0xa0 [ 1040.345704][T17051] do_syscall_64+0xf3/0x230 [ 1040.345744][T17051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.345778][T17051] RIP: 0033:0x7f226dd8cde9 [ 1040.345800][T17051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.345822][T17051] RSP: 002b:00007f226eb8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1040.345850][T17051] RAX: ffffffffffffffda RBX: 00007f226dfa5fa0 RCX: 00007f226dd8cde9 [ 1040.345870][T17051] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000200000000380 [ 1040.345886][T17051] RBP: 00007f226eb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.345903][T17051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.345917][T17051] R13: 0000000000000000 R14: 00007f226dfa5fa0 R15: 00007fff0f2fd3e8 [ 1040.345953][T17051] [ 1040.345976][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.691129][ T5896] usb 7-1: Could not set interface, error -71 [ 1040.725868][ T5896] usb 7-1: USB disconnect, device number 9 [ 1040.922492][T17063] loop9: detected capacity change from 0 to 128 [ 1040.947185][T17068] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2257'. [ 1040.953856][T17063] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1040.984018][T17069] loop5: detected capacity change from 0 to 128 [ 1040.992094][ T8] usb 2-1: config 0 descriptor?? [ 1041.006795][T17069] udf: Unknown parameter '0x0000000000000000' [ 1041.044318][T17063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1041.420178][T17038] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1041.438706][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 1041.457002][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1041.513875][T17080] loop6: detected capacity change from 0 to 2048 [ 1041.514496][ T8] usb 2-1: USB disconnect, device number 50 [ 1041.633462][T17086] fuse: Unknown parameter 'ð‘|0x0000000000000004' [ 1041.647489][T17084] loop2: detected capacity change from 0 to 1024 [ 1041.669573][T17086] loop8: detected capacity change from 0 to 256 [ 1041.702138][T17086] exfat: Unknown parameter '' [ 1041.933625][T10716] UDF-fs: warning (device loop9): udf_evict_inode: Inode 105 (mode 100755) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 1041.986973][ T5934] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1042.187049][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 1042.195221][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1042.233451][T17098] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2265'. [ 1042.247318][ T5934] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1042.273422][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.304775][T17102] loop9: detected capacity change from 0 to 256 [ 1042.313901][ T5934] usb 3-1: Product: syz [ 1042.334163][ T5934] usb 3-1: Manufacturer: syz [ 1042.350775][ T5934] usb 3-1: SerialNumber: syz [ 1042.365030][T17095] loop1: detected capacity change from 0 to 8192 [ 1042.377397][T17102] vfat: Unknown parameter 'nnonumtail' [ 1042.417766][ T5934] usb 3-1: config 0 descriptor?? [ 1042.443602][T17084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1042.460440][ T5934] hub 3-1:0.0: bad descriptor, ignoring hub [ 1042.496804][ T5934] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1042.542299][ T5934] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input61 [ 1042.919037][ T5934] usb 3-1: USB disconnect, device number 35 [ 1042.919112][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1044.115640][ T5985] hfsplus: b-tree write err: -5, ino 4 [ 1044.145483][T17090] loop8: detected capacity change from 0 to 32768 [ 1045.655272][T17132] loop2: detected capacity change from 0 to 128 [ 1045.921390][T17132] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1046.079005][T17132] ext4 filesystem being mounted at mnt:[4026534386] supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.219906][T17132] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.261888][T17140] loop1: detected capacity change from 0 to 256 [ 1046.365428][T17132] loop2: detected capacity change from 0 to 512 [ 1046.722168][T17154] dccp_v6_rcv: dropped packet with invalid checksum [ 1046.774567][T17157] netlink: 'syz.2.2278': attribute type 11 has an invalid length. [ 1046.816753][ T47] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1046.882294][T17161] loop6: detected capacity change from 0 to 128 [ 1046.894413][T17163] loop5: detected capacity change from 0 to 8 [ 1047.026555][ T47] usb 9-1: Using ep0 maxpacket: 32 [ 1047.047937][ T47] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1047.058193][T17169] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2281'. [ 1047.086877][ T47] usb 9-1: config 7 has an invalid interface number: 187 but max is 0 [ 1047.122672][ T47] usb 9-1: config 7 has no interface number 0 [ 1047.148994][T17169] loop9: detected capacity change from 0 to 256 [ 1047.165578][ T47] usb 9-1: config 7 interface 187 has no altsetting 0 [ 1047.199375][T17169] vfat: Unknown parameter 'nnonumtail' [ 1047.230047][T17172] input: syz0 as /devices/virtual/input/input62 [ 1047.239387][ T47] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1047.258435][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.286574][ T47] usb 9-1: Product: syz [ 1047.299154][ T47] usb 9-1: Manufacturer: syz [ 1047.303840][ T47] usb 9-1: SerialNumber: syz [ 1047.312097][T17167] syz.6.2279: attempt to access beyond end of device [ 1047.312097][T17167] loop6: rw=2049, sector=937, nr_sectors = 104 limit=128 [ 1047.573847][ T47] usb 9-1: Limiting number of CPorts to U8_MAX [ 1047.597794][ T5930] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1047.627030][ T47] usb 9-1: Not enough endpoints found in device, aborting! [ 1047.777989][T17149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.797072][T17149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.808767][ T5930] usb 10-1: Using ep0 maxpacket: 16 [ 1047.816003][ T5930] usb 10-1: config 8 has an invalid interface number: 206 but max is 0 [ 1047.825049][ T5930] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.828012][ T5896] usb 9-1: USB disconnect, device number 27 [ 1047.835426][ T5930] usb 10-1: config 8 has no interface number 0 [ 1047.847736][ T5930] usb 10-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1047.860809][ T5930] usb 10-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1047.874863][ T5930] usb 10-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1047.886834][ T5930] usb 10-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1047.932127][ T5930] usb 10-1: config 8 interface 206 has no altsetting 0 [ 1047.955292][ T5930] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1047.985090][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.026548][ T5930] usb 10-1: Product: syz [ 1048.036644][ T5930] usb 10-1: Manufacturer: syz [ 1048.051734][ T5930] usb 10-1: SerialNumber: syz [ 1048.077181][T17188] FAULT_INJECTION: forcing a failure. [ 1048.077181][T17188] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.130287][T17188] CPU: 0 UID: 0 PID: 17188 Comm: syz.5.2284 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1048.130330][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1048.130347][T17188] Call Trace: [ 1048.130357][T17188] [ 1048.130369][T17188] dump_stack_lvl+0x241/0x360 [ 1048.130407][T17188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.130435][T17188] ? __pfx__printk+0x10/0x10 [ 1048.130477][T17188] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1048.130507][T17188] ? __pfx___might_resched+0x10/0x10 [ 1048.130544][T17188] should_fail_ex+0x40a/0x550 [ 1048.130579][T17188] should_failslab+0xac/0x100 [ 1048.130613][T17188] ? getname_flags+0xb7/0x540 [ 1048.130639][T17188] kmem_cache_alloc_noprof+0x70/0x380 [ 1048.130673][T17188] getname_flags+0xb7/0x540 [ 1048.130704][T17188] do_sys_openat2+0xd2/0x1d0 [ 1048.130735][T17188] ? __pfx_do_sys_openat2+0x10/0x10 [ 1048.130778][T17188] __x64_sys_openat+0x247/0x2a0 [ 1048.130809][T17188] ? __pfx___x64_sys_openat+0x10/0x10 [ 1048.130841][T17188] ? exc_page_fault+0x590/0x8b0 [ 1048.130874][T17188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1048.130918][T17188] ? do_syscall_64+0xb6/0x230 [ 1048.130956][T17188] do_syscall_64+0xf3/0x230 [ 1048.130996][T17188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.131038][T17188] RIP: 0033:0x7f226dd8b750 [ 1048.131059][T17188] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1048.131080][T17188] RSP: 002b:00007f226eb87ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1048.131108][T17188] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f226dd8b750 [ 1048.131126][T17188] RDX: 0000000000000002 RSI: 00007f226de0df84 RDI: 00000000ffffff9c [ 1048.131144][T17188] RBP: 00007f226de0df84 R08: 0000000000000000 R09: 0000000000000000 [ 1048.131161][T17188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1048.131177][T17188] R13: 0000000000000024 R14: 0000200000000800 R15: 00007fff0f2fd3e8 [ 1048.131212][T17188] [ 1048.342036][ T5930] garmin_gps 10-1:8.206: Garmin GPS usb/tty converter detected [ 1048.353123][ T5930] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1048.363783][ T5930] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1048.376795][ T5930] usb 10-1: USB disconnect, device number 25 [ 1048.384343][ T5930] garmin_gps 10-1:8.206: device disconnected [ 1048.421023][T14760] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1048.430284][T14760] FAT-fs (loop6): Filesystem has been set read-only [ 1050.171529][T17217] loop6: detected capacity change from 0 to 128 [ 1050.238328][T17217] udf: Unknown parameter '0x0000000000000000' [ 1051.695711][T17241] loop9: detected capacity change from 0 to 47 [ 1053.105504][T17250] loop5: detected capacity change from 0 to 4096 [ 1053.176561][T17250] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1053.377168][T17250] ntfs3(loop5): Failed to load $Extend (-22). [ 1053.406842][T17250] ntfs3(loop5): Failed to initialize $Extend. [ 1053.909027][T17271] syz.1.2303 uses obsolete (PF_INET,SOCK_PACKET) [ 1054.019067][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.139853][T17276] loop5: detected capacity change from 0 to 1024 [ 1054.199468][T17276] hfsplus: failed to load root directory [ 1054.265624][T10306] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1054.476706][T10306] usb 2-1: Using ep0 maxpacket: 32 [ 1054.528713][T10306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1054.631402][T10306] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1054.701847][T10306] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.815919][T10306] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1054.933442][T10306] usb 2-1: config 128 has no interface number 0 [ 1054.968732][T10306] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1055.026566][T10306] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1055.076706][T17288] loop2: detected capacity change from 0 to 128 [ 1055.129993][T17288] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 1055.168072][T10306] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1055.238535][T10306] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1055.315144][T10306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.458620][T13796] sysv_free_block: flc_count > flc_size [ 1055.464315][T10306] usb 2-1: Product: syz [ 1055.464341][T10306] usb 2-1: Manufacturer: syz [ 1055.486600][T10306] usb 2-1: SerialNumber: syz [ 1055.498172][T13796] sysv_free_block: flc_count > flc_size [ 1055.503868][T13796] sysv_free_block: flc_count > flc_size [ 1055.547072][T13796] sysv_free_block: flc_count > flc_size [ 1055.552793][T13796] sysv_free_block: flc_count > flc_size [ 1055.623490][T13796] sysv_free_block: flc_count > flc_size [ 1055.646568][T13796] sysv_free_block: flc_count > flc_size [ 1055.652449][T13796] sysv_free_block: flc_count > flc_size [ 1055.712182][T13796] sysv_free_block: flc_count > flc_size [ 1055.756635][T13796] sysv_free_block: flc_count > flc_size [ 1055.793347][T13796] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1056.893325][T10306] usb 2-1: USB disconnect, device number 51 [ 1057.067914][T17298] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2307'. [ 1057.160978][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.328245][T17298] loop2: detected capacity change from 0 to 256 [ 1057.403510][T17298] vfat: Unknown parameter 'nnonumtail' [ 1059.388424][T17336] loop9: detected capacity change from 0 to 512 [ 1059.449846][T17329] loop8: detected capacity change from 0 to 8192 [ 1059.515588][T17336] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.587554][T17336] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.884842][T10716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.608519][T17352] loop2: detected capacity change from 0 to 256 [ 1060.686813][T17352] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1060.805891][T17360] netlink: 'syz.9.2322': attribute type 4 has an invalid length. [ 1062.521047][T17382] FAULT_INJECTION: forcing a failure. [ 1062.521047][T17382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.522890][T17381] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2324'. [ 1062.595357][T17382] CPU: 0 UID: 0 PID: 17382 Comm: syz.6.2325 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1062.595396][T17382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1062.595413][T17382] Call Trace: [ 1062.595422][T17382] [ 1062.595433][T17382] dump_stack_lvl+0x241/0x360 [ 1062.595472][T17382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1062.595500][T17382] ? __pfx__printk+0x10/0x10 [ 1062.595555][T17382] should_fail_ex+0x40a/0x550 [ 1062.595593][T17382] strncpy_from_user+0x36/0x270 [ 1062.595626][T17382] getname_flags+0xf1/0x540 [ 1062.595659][T17382] do_sys_openat2+0xd2/0x1d0 [ 1062.595691][T17382] ? __pfx_do_sys_openat2+0x10/0x10 [ 1062.595734][T17382] __x64_sys_openat+0x247/0x2a0 [ 1062.595766][T17382] ? __pfx___x64_sys_openat+0x10/0x10 [ 1062.595799][T17382] ? exc_page_fault+0x590/0x8b0 [ 1062.595832][T17382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1062.595877][T17382] ? do_syscall_64+0xb6/0x230 [ 1062.595917][T17382] do_syscall_64+0xf3/0x230 [ 1062.595958][T17382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.595994][T17382] RIP: 0033:0x7ff699d8b750 [ 1062.596016][T17382] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1062.596038][T17382] RSP: 002b:00007ff69ab0fef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1062.596066][T17382] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff699d8b750 [ 1062.596085][T17382] RDX: 0000000000000002 RSI: 00007ff699e0df84 RDI: 00000000ffffff9c [ 1062.596103][T17382] RBP: 00007ff699e0df84 R08: 0000000000000000 R09: 0000000000000000 [ 1062.596120][T17382] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1062.596136][T17382] R13: 0000000000000024 R14: 0000200000000800 R15: 00007ffc80b2c9f8 [ 1062.596172][T17382] [ 1062.783210][T17381] loop2: detected capacity change from 0 to 256 [ 1062.803765][T17381] vfat: Unknown parameter 'nnonumtail' [ 1064.683363][T17386] loop9: detected capacity change from 0 to 32768 [ 1065.498205][T17410] loop1: detected capacity change from 0 to 16 [ 1065.526615][T17410] erofs (device loop1): mounted with root inode @ nid 36. [ 1065.561622][T17386] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1065.590986][T17410] overlayfs: failed to get redirect (-117) [ 1065.606053][T17418] loop6: detected capacity change from 0 to 47 [ 1065.765704][T17386] XFS (loop9): Ending clean mount [ 1065.785304][T17386] XFS (loop9): Quotacheck needed: Please wait. [ 1065.838069][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2332'. [ 1065.915788][T17386] XFS (loop9): Quotacheck: Done. [ 1065.978163][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.992469][T10716] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1066.365624][T17434] loop8: detected capacity change from 0 to 256 [ 1066.410962][T17434] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1066.447814][T17418] bridge_slave_1 (unregistering): left allmulticast mode [ 1066.447848][T17418] bridge_slave_1 (unregistering): left promiscuous mode [ 1066.447919][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.131501][T17457] loop2: detected capacity change from 0 to 128 [ 1069.208904][T17457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1069.253525][T17446] Process accounting resumed [ 1069.292137][T17457] System zones: 1-3, 19-19, 35-36 [ 1069.315596][T17457] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1069.327973][T17449] loop8: detected capacity change from 0 to 8192 [ 1069.340054][T17457] netlink: 'syz.2.2339': attribute type 10 has an invalid length. [ 1069.520032][T17457] team0: Port device netdevsim0 added [ 1069.858190][T17355] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1070.156794][T17355] usb 6-1: Using ep0 maxpacket: 16 [ 1070.168567][T17469] loop9: detected capacity change from 0 to 8192 [ 1070.175827][T17355] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1070.208397][T17355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.365051][T17355] usb 6-1: Product: syz [ 1070.617716][T17355] usb 6-1: Manufacturer: syz [ 1070.622392][T17355] usb 6-1: SerialNumber: syz [ 1070.672164][T17355] usb 6-1: config 0 descriptor?? [ 1071.696312][T17465] loop5: detected capacity change from 0 to 4096 [ 1071.729523][T17465] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1072.180931][T10306] usb 6-1: USB disconnect, device number 22 [ 1072.263975][T17494] loop8: detected capacity change from 0 to 256 [ 1072.284041][T17496] 9pnet_fd: Insufficient options for proto=fd [ 1072.423802][T17496] loop1: detected capacity change from 0 to 2048 [ 1072.441647][T17496] nilfs2: Unknown parameter '' [ 1073.230635][T17466] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1073.249222][T17482] loop6: detected capacity change from 0 to 32768 [ 1073.333997][T17482] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1073.816695][T17482] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop6": -EINTR [ 1073.827518][T17482] XFS (loop6): log mount failed [ 1074.513660][T17527] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1075.529697][T17527] loop5: detected capacity change from 0 to 32768 [ 1075.690673][T17527] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2351 (17527) [ 1076.190638][T17527] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1076.201522][T17527] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1076.210235][T17527] BTRFS info (device loop5): using free-space-tree [ 1076.545125][T17527] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1077.361527][T17551] Process accounting resumed [ 1077.508327][T17562] loop6: detected capacity change from 0 to 1024 [ 1077.675901][T17562] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2358'. [ 1077.943388][T17578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1077.961690][T17578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1077.973956][T17578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1078.001911][T17578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1078.045207][T17578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1078.069548][T17578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1078.110172][ T1138] hfsplus: b-tree write err: -5, ino 4 [ 1078.452746][T17577] chnl_net:caif_netlink_parms(): no params data found [ 1078.586159][T17577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.593882][T17577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.602567][T17577] bridge_slave_0: entered allmulticast mode [ 1078.611873][T17577] bridge_slave_0: entered promiscuous mode [ 1078.620349][T17577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.628045][T17577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.635214][T17577] bridge_slave_1: entered allmulticast mode [ 1078.643014][T17577] bridge_slave_1: entered promiscuous mode [ 1078.678565][T17577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.691275][T17577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.729630][T17577] team0: Port device team_slave_0 added [ 1078.740411][T17577] team0: Port device team_slave_1 added [ 1078.783667][T17577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.796581][T17577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.823271][T17577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.848836][T17577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.855843][T17577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.882590][T17577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.933280][T17577] hsr_slave_0: entered promiscuous mode [ 1078.940406][T17577] hsr_slave_1: entered promiscuous mode [ 1079.149563][T17577] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.266381][T17577] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.350842][T17577] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.438344][T17577] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.619163][T17577] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1079.640377][T17577] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1079.660544][T17577] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1079.686745][T17577] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1079.771910][T17577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.798801][T17577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.811205][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.818390][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.858120][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.865299][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.921841][T17577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1079.946509][T17577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1080.177822][ T5838] Bluetooth: hci3: command tx timeout [ 1080.204459][T17577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.494170][T17577] veth0_vlan: entered promiscuous mode [ 1080.508795][T17577] veth1_vlan: entered promiscuous mode [ 1080.535626][T17577] veth0_macvtap: entered promiscuous mode [ 1080.545708][T17577] veth1_macvtap: entered promiscuous mode [ 1080.566764][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.596544][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.606397][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.617111][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.634258][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.644989][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.655148][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.666129][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.675972][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.686700][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.696645][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.707171][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.717080][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.727623][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.739747][T17577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.775924][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.795386][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.811190][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.821903][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.832025][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.842661][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.852863][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.863632][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.873794][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.884339][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.894425][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.905669][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.915864][T17577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.926792][T17577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.938140][T17577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.963123][T17577] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.972500][T17577] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.981632][T17577] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.990705][T17577] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.168639][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.177998][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.249676][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.268374][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.256723][ T5838] Bluetooth: hci3: command tx timeout [ 1084.347485][ T5838] Bluetooth: hci3: command tx timeout [ 1086.416663][ T5838] Bluetooth: hci3: command tx timeout [ 1115.459779][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1166.131903][T19498] loop5: detected capacity change from 0 to 128 [ 1166.153664][T19498] udf: Unknown parameter '0x0000000000000000' [ 1166.184125][T19500] loop9: detected capacity change from 0 to 512 [ 1166.202148][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1166.304452][T19500] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1166.408038][T19500] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.2362: bad orphan inode 2 [ 1166.455865][T19500] EXT4-fs (loop9): Remounting filesystem read-only [ 1166.469090][T19496] loop1: detected capacity change from 0 to 8192 [ 1166.469433][T19503] loop8: detected capacity change from 0 to 8192 [ 1166.535342][T19500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.631463][T19514] loop7: detected capacity change from 0 to 512 [ 1166.653646][T19514] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 1166.808829][T10716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.022059][T19519] loop7: detected capacity change from 0 to 256 [ 1167.486259][T19526] loop9: detected capacity change from 0 to 2048 [ 1169.054610][T19529] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1169.054722][T19526] NILFS (loop9): error -2 reading inode: ino=2 [ 1169.071841][T19526] NILFS (loop9): error -2 getting root inode [ 1170.206563][T10802] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1170.416983][T10802] usb 8-1: Using ep0 maxpacket: 8 [ 1170.569501][T10802] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1170.591886][T10802] usb 8-1: config 9 has an invalid interface number: 112 but max is 0 [ 1170.606909][T19547] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.2378'. [ 1170.617105][T19547] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.2378'. [ 1171.346580][T10802] usb 8-1: config 9 has no interface number 0 [ 1171.356346][T10802] usb 8-1: config 9 interface 112 has no altsetting 0 [ 1171.380189][T10802] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 1171.416941][T10802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.486556][T10802] usb 8-1: Product: syz [ 1171.506626][T10802] usb 8-1: Manufacturer: syz [ 1171.515070][T10802] usb 8-1: SerialNumber: syz [ 1171.566885][T10802] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1171.637422][T19552] loop5: detected capacity change from 0 to 512 [ 1171.733562][T19552] loop5: detected capacity change from 0 to 128 [ 1171.814009][T19552] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1171.817561][T10802] r8152 8-1:9.112: Expected endpoints are not found [ 1171.849821][T19552] sysv_free_block: trying to free block not in datazone [ 1171.871444][T10802] r8152-cfgselector 8-1: USB disconnect, device number 17 [ 1171.902742][T19559] loop8: detected capacity change from 0 to 512 [ 1171.934956][T19552] sysv_free_block: trying to free block not in datazone [ 1171.957865][T19559] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 1171.991357][T19552] sysv_free_block: getblk() failed [ 1172.036782][T19552] sysv_free_block: getblk() failed [ 1172.042249][T19552] sysv_free_block: getblk() failed [ 1172.095765][T19561] loop6: detected capacity change from 0 to 128 [ 1172.096029][T19552] sysv_free_block: getblk() failed [ 1172.146550][T19552] sysv_free_block: getblk() failed [ 1172.154988][T19552] sysv_free_block: getblk() failed [ 1172.176664][T19552] sysv_free_block: getblk() failed [ 1172.181884][T19552] sysv_free_block: getblk() failed [ 1172.224245][T19552] sysv_free_block: getblk() failed [ 1172.229842][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2385'. [ 1172.248699][T19552] sysv_free_block: getblk() failed [ 1172.272988][T19552] sysv_free_block: getblk() failed [ 1172.282983][T19552] sysv_free_block: getblk() failed [ 1172.293415][T19566] i2c i2c-0: Invalid block write size 253 [ 1172.298365][T19552] sysv_free_block: getblk() failed [ 1172.300853][T19566] dccp_v6_rcv: dropped packet with invalid checksum [ 1172.321291][T19552] sysv_free_block: getblk() failed [ 1172.324412][T17443] kernel write not supported for file [eventfd] (pid: 17443 comm: kworker/1:3) [ 1172.361693][T19552] sysv_free_block: getblk() failed [ 1172.387076][ T5930] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1172.395129][T19552] sysv_free_block: getblk() failed [ 1172.410632][T19552] sysv_free_block: getblk() failed [ 1172.426193][T19552] sysv_free_block: getblk() failed [ 1172.431802][T19552] sysv_free_block: getblk() failed [ 1172.472207][T19552] sysv_free_block: getblk() failed [ 1172.488210][T19552] sysv_free_block: getblk() failed [ 1172.494367][T19552] sysv_free_block: getblk() failed [ 1172.500901][T19552] sysv_free_block: getblk() failed [ 1172.508939][T19552] sysv_free_block: getblk() failed [ 1172.546921][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 1172.570692][ T5930] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1172.586877][ T25] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1172.592166][T19552] sysv_free_block: getblk() failed [ 1172.597697][ T5930] usb 7-1: config 9 has an invalid interface number: 112 but max is 0 [ 1172.620740][ T5930] usb 7-1: config 9 has no interface number 0 [ 1172.674211][ T5930] usb 7-1: config 9 interface 112 has no altsetting 0 [ 1172.684276][T19552] sysv_free_block: getblk() failed [ 1172.783217][T19552] sysv_free_block: getblk() failed [ 1172.783828][ T25] usb 9-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1172.796555][T19552] sysv_free_block: getblk() failed [ 1172.815226][ T5930] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 1172.825114][ T25] usb 9-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1172.825400][T19552] sysv_free_block: getblk() failed [ 1172.845582][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.863214][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.897746][ T5930] usb 7-1: Product: syz [ 1172.948608][T19552] sysv_free_block: getblk() failed [ 1172.960859][ T5930] usb 7-1: Manufacturer: syz [ 1172.968889][T19552] sysv_free_block: getblk() failed [ 1172.991897][ T25] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1172.996571][T19552] sysv_free_block: getblk() failed [ 1173.006643][ T5930] usb 7-1: SerialNumber: syz [ 1173.017067][T19552] sysv_free_block: getblk() failed [ 1173.026869][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.074025][T19552] sysv_free_block: getblk() failed [ 1173.107551][ T25] usb 9-1: Product: syz [ 1173.113558][ T25] usb 9-1: Manufacturer: syz [ 1173.118882][ T5930] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1173.121873][T19552] sysv_free_block: getblk() failed [ 1173.125561][ T25] usb 9-1: SerialNumber: syz [ 1173.194998][ T25] usb 9-1: config 0 descriptor?? [ 1173.260870][T19552] sysv_free_block: getblk() failed [ 1173.288057][ T25] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected [ 1173.299637][T19552] sysv_free_block: getblk() failed [ 1173.318603][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 1173.395593][T19552] sysv_free_block: getblk() failed [ 1173.398953][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 1173.437281][T19552] sysv_free_block: trying to free block not in datazone [ 1173.446985][ T5930] r8152 7-1:9.112: Expected endpoints are not found [ 1173.475179][T19552] sysv_free_block: trying to free block not in datazone [ 1173.482548][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 1173.507961][ T5930] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 1173.515619][T19552] sysv_free_block: trying to free block not in datazone [ 1173.537239][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 1173.544884][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85 [ 1173.595081][T19552] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1173.615926][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5 [ 1173.656311][ T25] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1173.690574][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83 [ 1173.712715][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3 [ 1173.743329][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4 [ 1173.785859][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86 [ 1173.812824][ T25] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6 [ 1173.814806][T19574] loop7: detected capacity change from 0 to 47 [ 1173.852244][ T25] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1173.896991][ T25] usb 9-1: USB disconnect, device number 28 [ 1173.930922][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2387'. [ 1173.934092][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1174.006072][T19574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.061363][T19579] FAULT_INJECTION: forcing a failure. [ 1174.061363][T19579] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.061516][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1174.111971][ T25] keyspan 9-1:0.0: device disconnected [ 1174.118007][T19579] CPU: 1 UID: 0 PID: 19579 Comm: syz.1.2389 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1174.118039][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1174.118056][T19579] Call Trace: [ 1174.118065][T19579] [ 1174.118075][T19579] dump_stack_lvl+0x241/0x360 [ 1174.118114][T19579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.118142][T19579] ? __pfx__printk+0x10/0x10 [ 1174.118185][T19579] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1174.118216][T19579] ? __pfx___might_resched+0x10/0x10 [ 1174.118253][T19579] should_fail_ex+0x40a/0x550 [ 1174.118288][T19579] should_failslab+0xac/0x100 [ 1174.118316][T19579] ? security_file_alloc+0x32/0x310 [ 1174.118352][T19579] kmem_cache_alloc_noprof+0x70/0x380 [ 1174.118384][T19579] security_file_alloc+0x32/0x310 [ 1174.118416][T19579] init_file+0x91/0x280 [ 1174.118446][T19579] alloc_empty_file+0xb8/0x1d0 [ 1174.118476][T19579] alloc_file_pseudo+0x1fc/0x2e0 [ 1174.118504][T19579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.118545][T19579] ? inode_init_owner+0x1d2/0x360 [ 1174.118584][T19579] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1174.118615][T19579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.118657][T19579] ? alloc_fd+0x61a/0x690 [ 1174.118686][T19579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.118730][T19579] __shmem_file_setup+0x237/0x2c0 [ 1174.118772][T19579] __se_sys_memfd_create+0x328/0x7d0 [ 1174.118807][T19579] do_syscall_64+0xf3/0x230 [ 1174.118850][T19579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.118885][T19579] RIP: 0033:0x7f855d38cde9 [ 1174.118940][T19579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.118968][T19579] RSP: 002b:00007f855e278d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1174.119008][T19579] RAX: ffffffffffffffda RBX: 00000000000005f7 RCX: 00007f855d38cde9 [ 1174.119052][T19579] RDX: 00007f855e278dec RSI: 0000000000000000 RDI: 00007f855d40ec51 [ 1174.119071][T19579] RBP: 0000200000000000 R08: 00007f855e278b07 R09: 0000000000000000 [ 1174.119088][T19579] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 1174.119104][T19579] R13: 00007f855e278dec R14: 00007f855e278df0 R15: 00007ffd83a80058 [ 1174.119140][T19579] [ 1174.653646][T19574] bridge_slave_1 (unregistering): left allmulticast mode [ 1174.677228][T19574] bridge_slave_1 (unregistering): left promiscuous mode [ 1174.712528][T19581] loop8: detected capacity change from 0 to 1024 [ 1174.719769][T19574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.743107][T19577] loop5: detected capacity change from 0 to 8192 [ 1174.821737][T19581] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.831401][T19585] loop1: detected capacity change from 0 to 8192 [ 1174.868402][T19581] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.896956][ T29] audit: type=1800 audit(1738754714.517:360): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2392" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1176.087516][T12610] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.469155][T10802] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1176.660091][T19605] loop7: detected capacity change from 0 to 512 [ 1176.720928][T19605] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 1176.952532][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.966519][T10802] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1177.164684][T10802] usb 10-1: not running at top speed; connect to a high speed hub [ 1177.357002][T10802] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1177.397146][T10802] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1177.426571][T10802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.477857][T10802] usb 10-1: Product: syz [ 1177.496927][T10802] usb 10-1: Manufacturer: syz [ 1177.517039][T10802] usb 10-1: SerialNumber: syz [ 1177.861123][T19602] netem: change failed [ 1177.870257][ T5896] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1177.933844][T10802] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input63 [ 1177.964086][ T5187] bcm5974 10-1:1.0: could not read from device [ 1177.996157][ T5187] bcm5974 10-1:1.0: could not read from device [ 1178.001495][T10802] usb 10-1: USB disconnect, device number 26 [ 1178.042173][ T5187] bcm5974 10-1:1.0: could not read from device [ 1178.072491][ T5896] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1178.092097][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.127900][ T5896] usb 8-1: config 0 descriptor?? [ 1178.140253][ T5896] cp210x 8-1:0.0: cp210x converter detected [ 1178.379098][ T5896] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1178.415068][ T5896] cp210x 8-1:0.0: querying part number failed [ 1179.330779][ T5896] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1179.450599][ T5930] usb 8-1: USB disconnect, device number 18 [ 1179.493116][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1179.531657][T19644] loop1: detected capacity change from 0 to 1024 [ 1179.591987][ T5930] cp210x 8-1:0.0: device disconnected [ 1179.720828][T19649] loop7: detected capacity change from 0 to 512 [ 1179.757440][T19649] EXT4-fs: inline encryption not supported [ 1179.862091][T19649] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1179.917830][ T5987] hfsplus: b-tree write err: -5, ino 4 [ 1179.932526][T19649] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 1179.942893][T19649] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2407: Corrupt directory, running e2fsck is recommended [ 1180.012757][T19649] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1180.031989][T10802] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1180.054571][T19614] loop6: detected capacity change from 0 to 32768 [ 1180.083190][T19649] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.2407: corrupted in-inode xattr: invalid ea_ino [ 1180.129923][T19649] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2407: couldn't read orphan inode 15 (err -117) [ 1180.200475][T19649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.237699][T10802] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.257725][T19658] loop1: detected capacity change from 0 to 1024 [ 1180.274462][T10802] usb 10-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1180.331833][T19649] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1180.355380][T10802] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1180.374069][T19658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.387357][T10802] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 1180.387393][T10802] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.388331][T19649] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 1180.388415][T19649] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2407: Corrupt directory, running e2fsck is recommended [ 1180.388878][T19658] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.390792][T10802] usb 10-1: config 0 descriptor?? [ 1180.394241][T10802] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1180.477523][ T29] audit: type=1800 audit(1738754720.037:361): pid=19658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2408" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1180.509040][T19649] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1180.533812][T19649] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 1180.544750][T19649] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2407: Corrupt directory, running e2fsck is recommended [ 1181.041652][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.846926][T19677] loop1: detected capacity change from 0 to 512 [ 1182.879957][T19677] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1182.899893][T17577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.904662][T10802] usb 10-1: USB disconnect, device number 27 [ 1183.411632][ T25] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 1183.590981][T19693] loop1: detected capacity change from 0 to 47 [ 1183.606724][ T25] usb 8-1: Invalid ep0 maxpacket: 32 [ 1183.709442][T19689] loop6: detected capacity change from 0 to 8192 [ 1183.748491][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1183.757601][ T25] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 1183.914883][T19699] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1184.827584][ T25] usb 8-1: Invalid ep0 maxpacket: 32 [ 1184.837691][ T25] usb usb8-port1: attempt power cycle [ 1184.930524][T19699] loop9: detected capacity change from 0 to 32768 [ 1184.939395][T19699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2420 (19699) [ 1184.976848][T19699] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1184.987142][T19699] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 1184.995610][T19699] BTRFS info (device loop9): using free-space-tree [ 1185.165657][T19699] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1185.324093][ T25] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 1186.014693][T19718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.047275][ T25] usb 8-1: Invalid ep0 maxpacket: 32 [ 1186.297396][T19722] loop1: detected capacity change from 0 to 16 [ 1186.329531][T19722] cramfs: Unknown parameter '' [ 1186.606991][ T25] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1186.727355][ T25] usb 8-1: device descriptor read/8, error -71 [ 1186.925405][T19726] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1187.772654][ T25] usb usb8-port1: unable to enumerate USB device [ 1188.383507][T19728] loop7: detected capacity change from 0 to 1024 [ 1188.628003][T19728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.741254][T19728] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1189.696181][ T29] audit: type=1800 audit(1738754729.307:362): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2423" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1189.843367][T19744] loop9: detected capacity change from 0 to 512 [ 1189.886112][T19746] loop1: detected capacity change from 0 to 256 [ 1189.926196][T19744] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 1189.985001][T19746] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1190.884735][T17577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.585604][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1191.692040][T19753] loop8: detected capacity change from 0 to 8192 [ 1192.644118][T19765] loop7: detected capacity change from 0 to 1768 [ 1193.957407][ T47] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1194.386484][ T47] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1194.822306][ T47] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1194.940411][T19785] loop8: detected capacity change from 0 to 1024 [ 1194.986663][ T47] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1195.046483][ T47] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1195.178521][T19785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.201208][ T47] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1195.226438][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1195.226518][T19785] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.235024][ T47] usb 10-1: SerialNumber: syz [ 1195.253177][T19773] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1195.260750][T19773] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1195.269978][ T47] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 1195.324400][T19795] loop1: detected capacity change from 0 to 512 [ 1195.347984][ T29] audit: type=1800 audit(1738754734.967:363): pid=19785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2442" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1195.391961][T19795] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1195.576093][T19801] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1196.423350][ T47] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1196.577822][T19801] loop7: detected capacity change from 0 to 32768 [ 1196.586703][T19801] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2447 (19801) [ 1196.607120][T19801] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1196.617382][T19801] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 1196.625926][T19801] BTRFS info (device loop7): using free-space-tree [ 1196.645482][ T47] usb 10-1: USB disconnect, device number 28 [ 1196.764390][T12610] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.122710][T19801] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1198.589727][T19845] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1199.567750][T19845] loop8: detected capacity change from 0 to 32768 [ 1199.576590][T19845] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2454 (19845) [ 1199.605625][T19845] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1199.615976][T19845] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 1199.624709][T19845] BTRFS info (device loop8): using free-space-tree [ 1199.728275][T19847] loop5: detected capacity change from 0 to 512 [ 1199.784429][T19847] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 1200.029438][T19855] loop1: detected capacity change from 0 to 8192 [ 1201.322780][T19867] loop5: detected capacity change from 0 to 32768 [ 1201.330651][T19845] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1201.333462][T19867] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2456 (19867) [ 1201.365893][T19867] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1201.376631][T19867] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1201.386078][T19867] BTRFS info (device loop5): using free-space-tree [ 1202.252958][T19889] loop9: detected capacity change from 0 to 512 [ 1202.380380][T19889] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1202.411252][T14835] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1202.487384][T19889] EXT4-fs (loop9): inodes count not valid: 1 vs 32 [ 1202.645881][T19896] loop7: detected capacity change from 0 to 1024 [ 1202.732493][T19896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1202.806989][T19896] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.881244][ T29] audit: type=1800 audit(1738754742.477:364): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2462" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1203.547280][T19911] loop1: detected capacity change from 0 to 128 [ 1204.876681][T17578] Bluetooth: hci3: command 0x0406 tx timeout [ 1204.936823][ T5894] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1205.447794][T17577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.465842][T19906] loop9: detected capacity change from 0 to 8192 [ 1205.492742][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1205.989929][T19917] loop5: detected capacity change from 0 to 4096 [ 1206.014745][T19925] loop1: detected capacity change from 0 to 1024 [ 1206.063109][T19917] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1206.144183][T19925] hfsplus: failed to load root directory [ 1206.220660][T19917] ntfs3(loop5): ino=19, mi_enum_attr [ 1206.226036][T19917] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1206.326658][T19917] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1206.826821][T19917] ntfs3(loop5): ino=18, mi_enum_attr [ 1206.853142][T19917] ntfs3(loop5): Failed to load root (-22). [ 1206.921359][T19917] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1207.123528][T19936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.638620][T19917] tmpfs: Bad value for 'mpol' [ 1207.922100][T19952] FAULT_INJECTION: forcing a failure. [ 1207.922100][T19952] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.954268][T19952] CPU: 1 UID: 0 PID: 19952 Comm: syz.8.2478 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1207.954317][T19952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1207.954334][T19952] Call Trace: [ 1207.954345][T19952] [ 1207.954364][T19952] dump_stack_lvl+0x241/0x360 [ 1207.954408][T19952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1207.954437][T19952] ? __pfx__printk+0x10/0x10 [ 1207.954485][T19952] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 1207.954519][T19952] ? __pfx___might_resched+0x10/0x10 [ 1207.954551][T19952] ? lockdep_init_map_type+0xa1/0x910 [ 1207.954594][T19952] should_fail_ex+0x40a/0x550 [ 1207.954632][T19952] should_failslab+0xac/0x100 [ 1207.954661][T19952] ? __d_alloc+0x31/0x670 [ 1207.954693][T19952] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 1207.954730][T19952] __d_alloc+0x31/0x670 [ 1207.954769][T19952] d_alloc_pseudo+0x1f/0xb0 [ 1207.954803][T19952] alloc_file_pseudo+0x139/0x2e0 [ 1207.954835][T19952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.954879][T19952] ? inode_init_owner+0x1d2/0x360 [ 1207.954919][T19952] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1207.954953][T19952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.954995][T19952] ? shmem_get_inode+0xc37/0xf20 [ 1207.955023][T19952] ? alloc_fd+0x61a/0x690 [ 1207.955052][T19952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.955100][T19952] __shmem_file_setup+0x237/0x2c0 [ 1207.955143][T19952] __se_sys_memfd_create+0x328/0x7d0 [ 1207.955180][T19952] do_syscall_64+0xf3/0x230 [ 1207.955225][T19952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.955263][T19952] RIP: 0033:0x7f17c058cde9 [ 1207.955285][T19952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.955307][T19952] RSP: 002b:00007f17c130fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1207.955335][T19952] RAX: ffffffffffffffda RBX: 000000000000045e RCX: 00007f17c058cde9 [ 1207.955353][T19952] RDX: 00007f17c130fef0 RSI: 0000000000000000 RDI: 00007f17c060ec51 [ 1207.955378][T19952] RBP: 00002000000011c0 R08: 00007f17c130fbb7 R09: 00007f17c130fe40 [ 1207.955398][T19952] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 1207.955415][T19952] R13: 00007f17c130fef0 R14: 00007f17c130feb0 R15: 0000200000000380 [ 1207.955453][T19952] [ 1208.802784][T19972] netlink: 4272 bytes leftover after parsing attributes in process `syz.8.2485'. [ 1208.946822][T19978] netlink: 'syz.5.2488': attribute type 10 has an invalid length. [ 1209.018588][T19979] netlink: 'syz.5.2488': attribute type 10 has an invalid length. [ 1209.079558][T19981] netlink: 'syz.9.2490': attribute type 10 has an invalid length. [ 1209.092529][T19981] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2490'. [ 1209.121763][T19978] team0: Port device netdevsim0 added [ 1209.168064][T19981] veth0_vlan: entered allmulticast mode [ 1209.185413][T19981] bridge0: port 2(veth0_vlan) entered blocking state [ 1209.204775][T19981] bridge0: port 2(veth0_vlan) entered disabled state [ 1209.223729][T19981] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1209.321822][T19954] loop7: detected capacity change from 0 to 32768 [ 1209.346806][T19954] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section members_v1: device 0: bucket size 0 smaller than block size 8 [ 1209.346806][T19954] members_v1 (size 64): [ 1209.346806][T19954] Device: 0 [ 1209.346806][T19954] Label: (none) [ 1209.346806][T19954] UUID: 7af6772b-00de-4159-84cd-1faead05aceb [ 1209.346806][T19954] Size: 0 [ 1209.346806][T19954] read errors: 0 [ 1209.346806][T19954] write errors: 0 [ 1209.346806][T19954] checksum errors: 0 [ 1209.346806][T19954] seqread iops: 0 [ 1209.346806][T19954] seqwrite iops: 0 [ 1209.346806][T19954] randread iops: 0 [ 1209.346806][T19954] randwrite iops: 0 [ 1209.346806][T19954] Bucket size: 0 [ 1209.346806][T19954] First bucket: 0 [ 1209.346806][T19954] Buckets: 128 [ 1209.346806][T19954] Last mount: 1714681267 [ 1209.346806][T19954] Last superblock write: 0 [ 1209.346806][T19954] State: rw [ 1209.346806][T19954] Data allowed: journal,btree,user [ 1209.346806][T19954] Has data: (none) [ 1209.346806][T19954] Btree allocated bitmap blocksize:256 [ 1209.346806][T19954] Btree allocated bitmap: 0000000000000000000000000000000000000000000000000000000000000000 [ 1209.346806][T19954] Durability: [ 1209.346989][T19954] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 1209.605278][T19979] team0: Port device netdevsim0 removed [ 1209.699795][T19979] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1209.761115][T19992] netlink: 'syz.9.2494': attribute type 2 has an invalid length. [ 1209.770703][T19992] netlink: 'syz.9.2494': attribute type 4 has an invalid length. [ 1209.993861][T19954] loop7: detected capacity change from 0 to 256 [ 1210.041427][ T29] audit: type=1800 audit(1738754749.647:365): pid=19954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2477" name="file1" dev="loop7" ino=367 res=0 errno=0 [ 1210.390015][T20015] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.2503'. [ 1210.463693][T20013] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.2503'. [ 1210.857069][T20027] netlink: 'syz.5.2509': attribute type 3 has an invalid length. [ 1210.886725][T20027] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2509'. [ 1211.377783][T20042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2516'. [ 1211.436875][T20042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2516'. [ 1211.488731][T20042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2516'. [ 1211.821282][T20057] netlink: 'syz.6.2524': attribute type 29 has an invalid length. [ 1211.873703][T20057] netlink: 'syz.6.2524': attribute type 29 has an invalid length. [ 1211.940685][T20057] netlink: 'syz.6.2524': attribute type 29 has an invalid length. [ 1212.017181][T20063] netlink: 'syz.6.2524': attribute type 29 has an invalid length. [ 1212.446302][T20083] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2536'. [ 1212.561794][T20085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1213.253653][T20106] : entered promiscuous mode [ 1214.192200][T20151] dummy0: entered promiscuous mode [ 1214.250464][T20151] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1214.298407][T20155] x_tables: duplicate entry at hook 3 [ 1214.464212][ T25] IPVS: starting estimator thread 0... [ 1214.471119][T20155] validate_nla: 5 callbacks suppressed [ 1214.471141][T20155] netlink: 'syz.9.2563': attribute type 39 has an invalid length. [ 1214.601416][T20159] IPVS: using max 23 ests per chain, 55200 per kthread [ 1214.859961][T20170] netlink: del zone limit has 4 unknown bytes [ 1217.252097][T20210] __nla_validate_parse: 4 callbacks suppressed [ 1217.252122][T20210] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2583'. [ 1217.443156][T20212] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2584'. [ 1217.610566][T20215] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2584'. [ 1218.824121][T20228] lo: entered promiscuous mode [ 1218.831167][T20227] lo: left promiscuous mode [ 1219.091311][T20234] Driver unsupported XDP return value 0 on prog (id 524) dev N/A, expect packet loss! [ 1219.203476][T20235] hsr0: entered promiscuous mode [ 1219.287392][T20232] hsr0: left promiscuous mode [ 1221.164196][ C1] sched: DL replenish lagged too much [ 1222.778045][T20286] netlink: 'syz.8.2617': attribute type 3 has an invalid length. [ 1222.805823][T20286] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2617'. [ 1223.323379][T20295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2620'. [ 1223.406853][T20295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2620'. [ 1223.509084][T20295] batadv0: entered promiscuous mode [ 1223.569195][T20295] syz_tun: entered promiscuous mode [ 1223.730593][T20293] delete_channel: no stack [ 1223.856919][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 1223.964441][T20305] netlink: 'syz.1.2624': attribute type 10 has an invalid length. [ 1224.127308][T20305] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1224.444634][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2627'. [ 1225.337747][T20328] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2632'. [ 1225.428647][T20331] netlink: 'syz.1.2633': attribute type 3 has an invalid length. [ 1225.449881][T20328] bridge0: entered promiscuous mode [ 1225.502308][T20331] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2633'. [ 1225.518802][T20328] bridge0: left promiscuous mode [ 1227.798656][T20351] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 1238.449882][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.886506][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.329435][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1387.605930][ T30] INFO: task syz.8.2652:20377 blocked for more than 146 seconds. [ 1388.672213][ T30] Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1388.789891][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1388.996593][ T30] task:syz.8.2652 state:D stack:27392 pid:20377 tgid:20373 ppid:12610 task_flags:0x400040 flags:0x00000004 [ 1389.205686][ T30] Call Trace: [ 1389.236509][ T30] [ 1389.239508][ T30] __schedule+0x190e/0x4c90 [ 1389.244072][ T30] ? __pfx___schedule+0x10/0x10 [ 1389.317308][ T30] ? __pfx_lock_release+0x10/0x10 [ 1389.322451][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1389.427630][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.433383][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.508916][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1389.514909][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1389.636731][ T30] ? schedule+0x90/0x320 [ 1389.641091][ T30] schedule+0x14b/0x320 [ 1389.645343][ T30] schedule_preempt_disabled+0x13/0x30 [ 1389.756708][ T30] __mutex_lock+0x817/0x1010 [ 1389.761450][ T30] ? __mutex_lock+0x602/0x1010 [ 1389.766266][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 1389.842528][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1389.907011][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 1389.912122][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1389.996591][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1390.002385][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1390.066799][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1390.072029][ T30] __se_sys_ioctl+0xf7/0x170 [ 1390.157172][ T30] do_syscall_64+0xf3/0x230 [ 1390.161828][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.256722][ T30] RIP: 0033:0x7f17c058cde9 [ 1390.261231][ T30] RSP: 002b:00007f17be3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.336639][ T30] RAX: ffffffffffffffda RBX: 00007f17c07a6080 RCX: 00007f17c058cde9 [ 1390.344870][ T30] RDX: 00002000000003c0 RSI: 00000000800454d2 RDI: 0000000000000008 [ 1390.459849][ T30] RBP: 00007f17c060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.506535][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.514588][ T30] R13: 0000000000000000 R14: 00007f17c07a6080 R15: 00007ffcabad6b18 [ 1390.596538][ T30] [ 1390.707042][ T30] [ 1390.707042][ T30] Showing all locks held in the system: [ 1390.714856][ T30] 1 lock held by khungtaskd/30: [ 1390.866691][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1391.001948][ T30] 3 locks held by kworker/1:1/47: [ 1391.289111][ T30] #0: ffff88801ac79d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1391.456728][ T30] #1: ffffc90000b77c60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1391.586732][ T30] #2: ffffffff8fcc0148 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 [ 1391.756772][ T30] 3 locks held by kworker/0:2/968: [ 1391.761979][ T30] #0: ffff88801ac78d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1391.982344][ T30] #1: ffffc90003e4fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1392.136566][ T30] #2: ffffffff8e93dcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1392.236761][ T30] 3 locks held by kworker/R-ipv6_/3161: [ 1392.242682][ T30] #0: ffff88802fec3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1392.376487][ T30] #1: ffffc9000cac7be0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1392.494054][ T30] #2: ffffffff8fcc0148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1392.566634][ T30] 3 locks held by kworker/u8:6/3514: [ 1392.572109][ T30] 1 lock held by syslogd/5184: [ 1392.636405][ T30] 3 locks held by udevd/5202: [ 1392.641228][ T30] 1 lock held by dhcpcd/5495: [ 1392.645927][ T30] 2 locks held by dhcpcd/5496: [ 1392.736748][ T30] 2 locks held by getty/5591: [ 1392.741509][ T30] #0: ffff8880275e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1392.846515][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1392.926561][ T30] 2 locks held by syz-executor/5818: [ 1392.931944][ T30] 1 lock held by syz-executor/10716: [ 1393.006561][ T30] 3 locks held by kworker/0:7/10802: [ 1393.011931][ T30] #0: ffff88801ac78d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1393.116388][ T30] #1: ffffc90002f37c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1393.196426][ T30] #2: ffffffff8fcc0148 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1393.286498][ T30] 2 locks held by syz-executor/14760: [ 1393.291966][ T30] 2 locks held by syz-executor/14835: [ 1393.346504][ T30] #0: ffff88805d8bcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 1393.406638][ T30] #1: ffff88805d8bc078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 1393.476568][ T30] 2 locks held by kworker/0:1/17355: [ 1393.481944][ T30] 2 locks held by syz.1.2645/20358: [ 1393.546421][ T30] #0: ffffffff8fcc0148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1393.555558][ T30] #1: ffffffff8e93dcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1393.666471][ T30] 5 locks held by syz-executor/20368: [ 1393.671937][ T30] 1 lock held by syz.8.2652/20377: [ 1393.723059][ T30] #0: ffffffff8fcc0148 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x48c/0x2400 [ 1393.796528][ T30] 1 lock held by syz-executor/20384: [ 1393.801909][ T30] 1 lock held by syz-executor/20389: [ 1393.866551][ T30] [ 1393.868947][ T30] ============================================= [ 1393.868947][ T30] [ 1393.976444][ T30] NMI backtrace for cpu 0 [ 1393.976468][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1393.976495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1393.976511][ T30] Call Trace: [ 1393.976521][ T30] [ 1393.976531][ T30] dump_stack_lvl+0x241/0x360 [ 1393.976568][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1393.976595][ T30] ? __pfx__printk+0x10/0x10 [ 1393.976647][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1393.976682][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1393.976708][ T30] ? _printk+0xd5/0x120 [ 1393.976743][ T30] ? __pfx__printk+0x10/0x10 [ 1393.976781][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1393.976813][ T30] ? __pfx__printk+0x10/0x10 [ 1393.976852][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.976891][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1393.976925][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1393.976958][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1393.976989][ T30] watchdog+0x1058/0x10a0 [ 1393.977025][ T30] ? watchdog+0x1ea/0x10a0 [ 1393.977063][ T30] ? __pfx_watchdog+0x10/0x10 [ 1393.977095][ T30] kthread+0x7ab/0x920 [ 1393.977128][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.977165][ T30] ? __pfx_watchdog+0x10/0x10 [ 1393.977199][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.977242][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.977280][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.977311][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1393.977339][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.977376][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1393.977409][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.977444][ T30] ret_from_fork+0x4d/0x80 [ 1393.977477][ T30] ? __pfx_kthread+0x10/0x10 [ 1393.977511][ T30] ret_from_fork_asm+0x1a/0x30 [ 1393.977557][ T30] [ 1393.977567][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1394.188090][ C1] NMI backtrace for cpu 1 [ 1394.188109][ C1] CPU: 1 UID: 0 PID: 3514 Comm: kworker/u8:6 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1394.188135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1394.188152][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1394.188187][ C1] RIP: 0010:__kasan_slab_free+0x51/0x70 [ 1394.188226][ C1] Code: 5b 41 5e e9 6c 7f ea fe 84 c9 75 26 41 8b 76 1c ff ce 83 ce 07 ff c6 0f b6 ca 48 89 df ba fb 00 00 00 e8 02 39 00 00 4c 89 f7 <48> 89 de e8 37 2d 00 00 4c 89 f7 48 89 de 5b 41 5e e9 09 41 00 00 [ 1394.188247][ C1] RSP: 0018:ffffc9000cdf7928 EFLAGS: 00000207 [ 1394.188266][ C1] RAX: ffffed10143e3000 RBX: ffff8880a1f18000 RCX: 0000000000000000 [ 1394.188284][ C1] RDX: 0000000000000200 RSI: 00000000000000fb RDI: ffff88801ac42140 [ 1394.188300][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10143e3000 [ 1394.188317][ C1] R10: dffffc0000000000 R11: fffffbfff285f328 R12: ffff88801ac42140 [ 1394.188336][ C1] R13: ffff8880a1f18000 R14: ffff88801ac42140 R15: ffffea000287c600 [ 1394.188358][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1394.188378][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1394.188395][ C1] CR2: 0000200000e23030 CR3: 00000000a3d6e000 CR4: 0000000000350ef0 [ 1394.188414][ C1] Call Trace: [ 1394.188422][ C1] [ 1394.188432][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1394.188464][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1394.188501][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1394.188526][ C1] ? nmi_handle+0x2a/0x5a0 [ 1394.188573][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1394.188602][ C1] ? nmi_handle+0x151/0x5a0 [ 1394.188638][ C1] ? nmi_handle+0x2a/0x5a0 [ 1394.188674][ C1] ? __kasan_slab_free+0x51/0x70 [ 1394.188708][ C1] ? default_do_nmi+0x63/0x160 [ 1394.188733][ C1] ? exc_nmi+0x123/0x1f0 [ 1394.188756][ C1] ? end_repeat_nmi+0xf/0x53 [ 1394.188799][ C1] ? __kasan_slab_free+0x51/0x70 [ 1394.188834][ C1] ? __kasan_slab_free+0x51/0x70 [ 1394.188870][ C1] ? __kasan_slab_free+0x51/0x70 [ 1394.188906][ C1] [ 1394.188914][ C1] [ 1394.188923][ C1] ? skb_release_data+0x6a0/0x8a0 [ 1394.188946][ C1] kfree+0x196/0x430 [ 1394.188969][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1394.188993][ C1] ? skb_release_data+0x6a0/0x8a0 [ 1394.189018][ C1] skb_release_data+0x6a0/0x8a0 [ 1394.189049][ C1] consume_skb+0x9f/0xf0 [ 1394.189084][ C1] nsim_dev_trap_report_work+0x7cc/0xb50 [ 1394.189122][ C1] ? process_scheduled_works+0x976/0x1840 [ 1394.189151][ C1] process_scheduled_works+0xa68/0x1840 [ 1394.189198][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1394.189233][ C1] ? assign_work+0x364/0x3d0 [ 1394.189262][ C1] worker_thread+0x870/0xd30 [ 1394.189301][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1394.189334][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1394.189363][ C1] kthread+0x7ab/0x920 [ 1394.189394][ C1] ? __pfx_kthread+0x10/0x10 [ 1394.189428][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1394.189465][ C1] ? __pfx_kthread+0x10/0x10 [ 1394.189496][ C1] ? __pfx_kthread+0x10/0x10 [ 1394.189532][ C1] ? __pfx_kthread+0x10/0x10 [ 1394.189564][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1394.189591][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1394.189627][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1394.189656][ C1] ? __pfx_kthread+0x10/0x10 [ 1394.189690][ C1] ret_from_fork+0x4d/0x80 [ 1394.189720][ C1] ? __pfx_kthread+0x10/0x10 [ 1394.189754][ C1] ret_from_fork_asm+0x1a/0x30 [ 1394.189793][ C1] [ 1395.116928][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1395.123936][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 1395.134453][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1395.144533][ T30] Call Trace: [ 1395.147833][ T30] [ 1395.150784][ T30] dump_stack_lvl+0x241/0x360 [ 1395.155488][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1395.160711][ T30] ? __pfx__printk+0x10/0x10 [ 1395.165336][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1395.171443][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1395.177112][ T30] ? vscnprintf+0x5d/0x90 [ 1395.181485][ T30] panic+0x349/0x880 [ 1395.185442][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1395.191111][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1395.197288][ T30] ? __pfx_panic+0x10/0x10 [ 1395.201732][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1395.207123][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1395.212787][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1395.218364][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1395.224022][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1395.229424][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1395.235597][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1395.241774][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1395.247531][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1395.253812][ T30] watchdog+0x1097/0x10a0 [ 1395.258180][ T30] ? watchdog+0x1ea/0x10a0 [ 1395.262638][ T30] ? __pfx_watchdog+0x10/0x10 [ 1395.267353][ T30] kthread+0x7ab/0x920 [ 1395.271451][ T30] ? __pfx_kthread+0x10/0x10 [ 1395.276073][ T30] ? __pfx_watchdog+0x10/0x10 [ 1395.280781][ T30] ? __pfx_kthread+0x10/0x10 [ 1395.285408][ T30] ? __pfx_kthread+0x10/0x10 [ 1395.290031][ T30] ? __pfx_kthread+0x10/0x10 [ 1395.294652][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1395.299875][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1395.305544][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1395.310772][ T30] ? __pfx_kthread+0x10/0x10 [ 1395.315392][ T30] ret_from_fork+0x4d/0x80 [ 1395.319832][ T30] ? __pfx_kthread+0x10/0x10 [ 1395.324450][ T30] ret_from_fork_asm+0x1a/0x30 [ 1395.329255][ T30] [ 1395.332531][ T30] Kernel Offset: disabled [ 1395.336856][ T30] Rebooting in 86400 seconds..