last executing test programs: 19.634688318s ago: executing program 3 (id=2300): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 17.63968626s ago: executing program 3 (id=2307): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) 17.374859384s ago: executing program 3 (id=2310): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)='c', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000500)="0b268a927f3db01635ffcb37fa1241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a942ac9628c61913a956c3331f88e202ff5425a3a07e758044ab4ea6f7", 0x20c8, 0x11, 0x0, 0xfd02) 17.221460859s ago: executing program 3 (id=2312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "d300e6d60200000000000000000000000140000100008000"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 16.749163425s ago: executing program 3 (id=2315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.343496986s ago: executing program 1 (id=2327): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eb2, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 13.194821604s ago: executing program 3 (id=2329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="db74d1033d2a8c28df7cb46a4870b207dab5c04bbb499b5cfdae2b7ef2fda3d8", 0x20) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 12.863312752s ago: executing program 1 (id=2331): socket(0x10, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0xef6a}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xf0}}, {{&(0x7f0000000780)=@llc={0x1a, 0x101, 0x40, 0x4, 0xaf, 0x6}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)="600d0b748aa16bbc90209027b5c9f47714b78f94609d5d8fc7af2f5d2c923c75e200e6f747fb2342aa6f53735019b98603aa53c8343bdc3ab7037446b5923b48e895e027e7b8efb7bf2e87dcb83fffb54c00b727acdf9e362e3ed3a21e914c305fe2f476c6d1b28cf2083e2f4995a34a2a5321f3f592ab40ae933e0e82cd327486f49f64f01c9c957c48c80445cd74e5d7b7683877f47d69ba04ca3a9971c9686e162b04be27940c2ed12ac315eab3c347dfe7e74fe7717e2d8a39d8adbb0cecb335a0b40caa93d12e2b9b5a87f5f752c51ef19adeec2e13d2c1", 0xda}, {&(0x7f0000000900)="e40e6a9e23bcff30bf3aaa15e697bf52d6c7af8a1721c27f4b4a67a4f672e8feca32a690760216bfe5593a6e3d46339e116713873195d8088224e461a4cb63b9c735a69a397a2ff2cb824ad12ca141e33efd24b84a4ee76cce18c82b49755051f15b42d8979021f3ef4cc07f34438ededcab774a8b689603d8185ca23597484d8cf02fc67099b2813997f29c0a6b3ef1b326cecd66b5a259a8", 0x99}, {&(0x7f00000009c0)="135807c3529983e1ddea7d5f34f29d525abc68598aff7def33b3277da01caa30cb40295a9c8c2919e08863cbed6b1e83a73f47ac6cbeba949c4ac2182f0664725a9c55fc8d1397a8374869967808747c20552b750af35c7e47517b18190bcb3d170656087c127640bc5310ffffc902f2be6ebe1fcdf1c77e67a96ff5048580c02b3318819613165ae2bdff38ebdf914308d29afaeb32c77d2319a70f66a488b61382e000b973973718237a1051f31db0e52bd4def0f09601f606c300b95707c5156ae571f756da4371de", 0xca}], 0x3}}, {{&(0x7f0000001b00)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x9, 0x59, "48258c93b3f5b3fe8fd8f38b78939a9f4daea357006c84bddade90eb7a0ab833fc17d9c858e89ef547da7d7825b72e00cfa05de379c7c381241c7f66bf97a1", 0x40000023}, 0x80, &(0x7f0000002000)=[{0x0}, {&(0x7f0000001c00)="792ee76b91b7f7a7dace77a090bcc2da0bd5f77448f20c62429957a022e7625c98c135c62833490240fcbd96d3b62fdaafa9d2aeb2a8790a534d1c6171648ab6282e0bd7fcb0f8b977e3cb6290bde08edaa9266ffc70fbcbaa3fa30a498f46f1b810bc8f196956bdebccf00cbf2582a212f980ba72934bb5730189fc008ddf212e0f7e6ea94aa3a19de01d0946", 0x8d}, {&(0x7f0000001cc0)="1b19642b6b4bec55c583a7fa58dc0a78d36c85fa5b00823e0fffce6eacd204c4a20ec4b368ea6aec751a06e77eb6752e8c1d036f45262bb00871f26df9e68c47cc33eca2e8cbefefa06c211578f6243db01b0ebc021920d81f1cc57dca6263aa013feb03d8516a53a54e42c6b22fb04360902787c77533882268a78d1999d96e4b636ae089e33cbe9eb9e21e7fc0f0cde941b2acda4d1a86", 0x98}, {&(0x7f0000001d80)="940ad412698f98247d466d4d9379e743139a78f1c94f34fe0216bdbe94f4ef03fa984dbad33cd933dd5e1d1e1a3bad2997b3c93ca0bde1ad108ff6fefd190d4d73adfbb937ad6bb4f4ee59d2db990211bfe348156ebd29325cb3e74dd33e84f73498ccf542630c4a9d6b5f26c96809d07785a7b016714a3489430a29f5dde3a7bf4dfbd4609ba8f18fc2bb7da92dd3b0b478cb86b70cc79a57675e9e697b4d0d915f1251147c3bc05a70b2aae88ae601dde8049fbf43e30cb4fbd169e4367ae9993b3025250d5078f236cadca1fc3c9b2c3c62037124", 0xd6}, {0x0}, {&(0x7f0000001f40)="22c4178fd8e5042d", 0x8}, {&(0x7f0000001f80)="4d64189dac336c603466358bbf98ba31fa3ed5d33480eef14f94ed8c7157370bf9187868761ee070dafa6d99b18d820deab213126a054a0e1f3f337f24fba96aa513", 0x42}], 0x7}}, {{&(0x7f0000002080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x3, 0x3, {0xa, 0x4e22, 0x401, @mcast1, 0x3}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)="45a8f891934bd3f2b908eca1cbaa47fe4126a57fe86bd272421b44040ce06c5191e4fb6cb8d0373cdb3a37dbdd525f4f6a905513", 0x34}], 0x1, &(0x7f00000021c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xa4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xf9}}], 0x60}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002240)="4a76cad5fa1b6a325d67dc72f91692efa2c2c2e68f24567eb753f6bff7a44c42636c7e544ad5cb1f2a7006f26c6ca84927f93ceee181f39bec09cc9af8264c2564cbf4126a87ddc3b8ef682bc3e4e935f4378552976239e2da1482978b6e9815c9cbdcbc529a1f74ef3a440e050e31538229dd04", 0x74}, {&(0x7f00000022c0)="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", 0xfbe}, {&(0x7f00000032c0)="692bcb908446cbea330466bb363247cb3f9ea44d175a4de3f37c00510c0027cce793985f28d67cd0d49727e14ae5989cb57a40cd1555656eba022887e08ecf3c198eaf0d74f2f0fcd473b93d588d2fc472e655f5d3f7c1b8d637c3dc7b2f10bd33071de32fad2caa2f01cc5d3269ba6c62fad1a84fd86fe0c20f38499ca39ac7f31c212a4849d568bea98a4434e505403534515683462d80abfcaa4318528300adb615435e409ae27733d813ddef171276a471c5dbd4d543e508793b4be074542f248538566bc9bed6e0366c58a842ffb3b162eae0faa29819a1e9b9640313a7007ed5f7ccbccf", 0xe7}, {&(0x7f00000033c0)="f515c5098af1293744d13434cc6e19957fe569e4288e542b02ce132ae47151cafa95b62511e18adf5b", 0x29}, {&(0x7f0000003400)="9455681c053ad7dd76b928ecffd8a8e5b7d593ee1d8b2e3cbe75949ea08b72443c3c7715c8cf618f814ef13ee43a4c38affe6844a2480711e36edacc576171f48dacbc534f0c9aa977d36d47493dc14214fffa71abd08e47d165f0af3a7dc618dc88925916b937e1cf0a28c4abb7eeb969c271f5f0b92efd61cf121be55de943493d54925a15472d73850d77a5e102a15b48f68758987c5b7a2b6bc6f5638cad222c9fbe54b2e41e096a8deafaab70710911", 0xb2}, {&(0x7f00000034c0)="4e2bb97c4c6f242d8042b1cdedc72821acaa43035b832a5af52f5b5a1a0a681039276146f42ce6c60f12cfede9f9ab405bf2bfa96deffaa2f06d8631400da003e5c63b9cb7e9230e72cc5208900896f3d5aeb372c93c9db61d5e20f6be6393b4287ef896c3974d8c23b365d45bb0eb03190a1fac1b64a2d3497899f1a40604e9bc0f7729fb6f8272", 0x88}, {&(0x7f0000003580)="46d6ae8f10e64235f94d99a65cdca83cdec0b1230f863fe175b67111946098", 0x1f}, {&(0x7f00000035c0)="7bfbc3b8d0b513", 0x7}, {&(0x7f0000003600)="0e625342e8b1200300619fd07e84856992c00d542824c5997dd048fe1eb10ed0b3a276f2e66b626d79d9c459317fba64d4c78c18ad3289a92510b957522d6b1c871c9f8b6b645e924a84e051cc202bde24f1c6806f68904f7dc917198c97516c5592af84388fd481dd3b5ddb0516", 0x6e}], 0x9, &(0x7f0000000b00)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x97}}], 0x60}}], 0x5, 0x40040d0) ppoll(&(0x7f0000000280)=[{r3, 0x9004}], 0x10, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 11.715781642s ago: executing program 1 (id=2335): ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) syz_emit_vhci(0x0, 0x21) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000414000000b7030000000000008500000083000018bf09000000000000550901000000d724277400009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000018000000000f0ffffffb702000008000000182300009edc06be30a37cdfe2bac70ef19bcec61f000000cd7c434b00e67901bb742a98d003212963479e7e1f468d0e01f6c9eb457286a93af1bae658edb1a39708214b601e7ba70c3dfb1be96ec1b429b9f300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000bb000000bf91000000000000b70200000000000085000000a0000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xb4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x8, 0xa}, {0x101, 0x6, 0xb0, 0x100, 0x8}}}}, 0x17) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x7) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x293) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) 11.536343535s ago: executing program 0 (id=2337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) r3 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, &(0x7f0000000180)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) syz_usb_connect(0x0, 0x33, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x9f, 0x9, 0xa0, 0x8, 0x471, 0x311, 0x81d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xea, 0xf5, 0x1f, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x6, 0x5, "da640076"}]}}]}}]}}]}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235000800000f300fe095a6520000b8010000000f01d9c402d53b9e0700000026f047ff4d14f30fc775ddb9c5090000b86c000000ba000000000f300f08450f01cb4a0fc72b", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) splice(r9, 0x0, r8, 0x0, 0x4, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c90012000e00050017f90a000600680eb5"], 0x17) 7.638589738s ago: executing program 1 (id=2346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0x100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 7.324233267s ago: executing program 1 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 6.593090907s ago: executing program 0 (id=2350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000440)=0x808, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000002180), 0x4) sendto$inet(r4, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) 5.117009577s ago: executing program 4 (id=2352): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) r2 = eventfd(0x8040001) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500240001000000", @ANYRES64=r0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 4.953148264s ago: executing program 1 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c0005001901070000000800"], 0x398}}, 0x0) memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) unshare(0x68040200) pipe(0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200020000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x9411, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r9, &(0x7f0000001740), 0x0}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r10, &(0x7f0000000400)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/244, 0xf4}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/50, 0x32}], 0x3, &(0x7f00000003c0)=""/22, 0x16}, 0x40000020) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000100037040000000000000000000000cd", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010005000000080002"], 0x4c}}, 0x0) 4.886451847s ago: executing program 2 (id=2354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x6}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0837f2", 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8a}}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.595867835s ago: executing program 0 (id=2355): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$eJzs3M9rI+UbAPAn7XZ/f/dbRNDbDixCC5uw6XYXvVXdxR/Ypfjj4EnTZBqym2RKk6a1Jw8exYP/iSh48ujf4MGzt8WD4k1QMjPRrSgITRu7/Xxg8sz75s0zz5tD4ZkpCeDMWkx++akS1+JSRMxHxNWI/LxSHrm1IjwfEdcjYu6Jo1LO/zFxPiIuR8S1cfIiZ6V86/Oboxt3fnzz52++u3Duyhdffz+7XQOz9kJE9LaL871eEbN2ER+W841RJ4+91VEZizd6j8pxVsS9dDPPsNeYrGvk8Xa7WJ9t7w7GcavbaI5ju7OVz2/3iwsORu1JnvwDDxs7+biVbuaxM8jy2D4o6to/KP62HQyGRZ5Wme+jPH0Mh5NYzKf7abGf7Ud5bPaH5XyRN2ul++M4KmN5uWhm3VZex+ZRvun/trc6/d39ZJTuDDpZP7lTq79Yq9+t1neyVjpMV6uNXuvuarLU7o6XVYdpo7fWzrJ2N601s95ystRuNqv1erJ0L93sNPpJvV67XbtVvbNcnt1MXnvwXtJtJUvj+EqnvzvsdAfJVraTFJ9YTlZqt19aTm7Uk3fWN5KNt+/fX99494N77z94ef2NV8tFh8t6nK4mSyu3Vlaq9VvVlfryGdr/J2XRU9w/HEll1gUAnD76f2AWTnv/H/r/qThV/e+krLPa/x/D/uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWDwtfvp6fLBbjK+X8/8qpZ8pxJSLmIuK3vzEf5w/lnC/zLPzD+oW/1PBtJfIM42tcKI/LEbFWHr/+/7i/BQAAAHh6ffXx9c+Kbr14WZx1QZyk4qbN3NUPp5SvEhELi4+nlG1u/PLslJLFcxFxLvanlC2/gXVxSsmKW27nppXtX5k/FC4+ESpFmDvRcgAAgBNxuBM42S4EAACAk/TprAtgNioxeZQ5eRac/+f9nw8ELx0aAQAAAKdQZdYFAAAAAMcu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535yUoeiOACfFvoe74+RGOduxRkswyU4dGhYgJtgCbgFN8AacOYSDBjaEq3BxKS3bSTfl7SX25Afp4TJuZcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvRcrOaP91cPbXO2u3bS3A0AAABwzKZYzcsX02r+r75+Vl+6qOdZROQRcax3H8WvRuaozim+eH/xqYaniDJh/xm/6+NvRFzXx+t5198CAAAAnK71YjmruvXqNB26IPpULdrk/28S5WURUUxfEqXl+9NlorDy9z2Ou0Rp5QLWJFFYteQ2TpX2LaPGMPkwZNWQ91oOAADQi2Yn0G8XAgAAQJ9uhy6AYWRx2Mo87AWX/7x/3xD805gBAAAAP1A2dAEAAABA58r+3/P/AAAA4LRVz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS5tiNV8vlrO2OdtdO2nuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6viGmUPEVHwoBe73dbWXj0owYN/ghDSbY1u/dHmYEsRcvEmOfciehQRlHjr/9BzC73UWw57iCAeI/MrmfwAt4TMbJLPB9687w6bed83CSHfeS8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZfLATJ9mhV8Rxee7R5r2lrH+8p888WHsyn7UsjppM+nh4vf4i6reXCAAAAKdHUtX3IYSn6fpC1se9vP5Pq/dkNf9PLxZxVc/vrfurvqr9s/bnHxuvbg/UK8bJLnp9eTy6sD+VztHNckb8u1XYc/ql//3CTn7n82cvSf4NiT9efWWS5vcz+uHhww+7eXjmqBIHAA7rfNWXQfX3UNYP20wMgFOjUyu8q/o/6bWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATJqvh+SqOQgjznZ0483jz3tJB/YO1J/NVu3L//lr9mtkl0hDC9eXx6EKDc5l1t+/c/WJxPB7daj54I4TQ3uhl8OkU7wmhzQwFhw3i8md9VvI5HkHLv5gAADhx0rJldf3TdH0hOxfNhbD18+76/+1aHKas/zc+u/KoPla9/h82NsPZN1i5+fXg9p277y7fXLwxujH68r2Lw/eHl65evnx1kD8rGXhiAgAAwOF0y1av/+O5/ev/52pxmLL+/+bH4Xf1sRL1/4F2Fv3azgQAAOB0e/nNf/6ODjgfdbvh28WVlVvD4rj9+mJxbCHVZ3ambPX6P5lrOysAAACgCZPVaNf6/7VaHKZc/3/hl9d+q18zCSGcLdf/zy99Nb7W3HRmWhP/Ttz2HAEAAGjX2bLV1//TfP9/vL3lIQ4hvPNWEZcfAzhV/Z989P2v9bHq+/8vNTfFmRT3i/uR9/0QOv22MwIAAOAke65sWbH/V7q+8Pnv5z7p2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LT/AgAA//8Yl0ni") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r2}, 0x10) write$cgroup_type(r1, &(0x7f0000000180), 0xf000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4004f506, &(0x7f0000000100)) 3.652127462s ago: executing program 2 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38020000", @ANYRES16, @ANYBLOB="070600000000000000002d00", @ANYRES32, @ANYBLOB="08002f000000000005002b00010000000c0005000000000000000000"], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r10, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xe, 0x34, @random="a86471f57f417456459f"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0x2c}, @mesh_chsw={0x76, 0x6, {0xca, 0xe6, 0x2c, 0x7f}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x4811}, 0x401) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) 3.114625875s ago: executing program 4 (id=2357): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800710, &(0x7f0000000000)={[{@dioread_nolock}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@noauto_da_alloc}, {@prjquota}, {@nodiscard}]}, 0xfe, 0x43a, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6611, 0x0) 2.670850699s ago: executing program 4 (id=2358): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.259958321s ago: executing program 0 (id=2359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x1b8, 0x0, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x18f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @random="90e488f9971a", {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x21, "2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130e"}, {0xdd, 0x48, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602f"}, {0xdd, 0x67, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe41"}, {0xdd, 0x65, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cfb9ac7bd9e7642c"}, {0xdd, 0x6, "83534cd40fda"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1b8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 1.145896197s ago: executing program 2 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 1.07142099s ago: executing program 0 (id=2361): epoll_create1(0x0) r0 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f00000005c0)=ANY=[], 0x5, 0x2e3, &(0x7f0000000280)="$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") bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRES32, @ANYBLOB="0000000000027f000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0xe8c0}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) r6 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x3a7) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080d04"], 0xd) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 1.048889793s ago: executing program 4 (id=2362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 891.045882ms ago: executing program 2 (id=2363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="db74d1033d2a8c28df7cb46a4870b207dab5c04bbb499b5cfdae2b7ef2fda3d8", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 751.192795ms ago: executing program 0 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000440)=0x808, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000002180), 0x4) sendto$inet(r4, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) 714.06598ms ago: executing program 4 (id=2365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x298, 0x0, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x278, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @random="90e488f9971a", {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x3b, "2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f254203300027902dd1fa777e6282b58e524"}, {0xdd, 0x32, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde"}, {0xdd, 0xe4, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111340a6d895801f8d51908b9bdd47762550f4ee51c8a3f64cfe2f8b701e79d393a957fa4e3e620099b226f683280ec0f5d85f9c59d29d9159126c9f114d0e08f17f96e4757dd81825d8f432246cdb8ab571fcf"}, {0xdd, 0x5e, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cf"}, {0xdd, 0x75, "83534cd40fda26eabadf3814f88fa9c5d39124ac6ffcf2583cbdd58fa0969b3e6783c46ed2318e977c080347f36fa8d773079f6224521c4c8b10e4a9454bece9457b66b239a7eaff140a8d9131349399c804bb1a81f829c6ab11af5cfe8df9f59ec093d26c17fe50bb0550d71068d1627631bb2db9"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x298}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 521.727775ms ago: executing program 2 (id=2366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0xa, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3f8000", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 130.878276ms ago: executing program 2 (id=2367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(&(0x7f0000000080), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410) 0s ago: executing program 4 (id=2368): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r2}, 0x10) write$cgroup_type(r1, &(0x7f0000000180), 0xf000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4004f506, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 67295 uid=0 gid=0 ses=4294967295 subj=_ pid=11516 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 510.098808][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1800'. [ 510.154665][ T29] audit: type=1326 audit(1719351991.513:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11516 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 510.172220][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1800'. [ 510.215905][T11331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.228893][ T29] audit: type=1326 audit(1719351991.513:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11516 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 510.305266][ T29] audit: type=1326 audit(1719351991.513:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11516 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 510.360741][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 510.391985][ T29] audit: type=1326 audit(1719351991.543:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11516 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 510.553049][T11536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1804'. [ 510.729768][T11331] veth0_vlan: entered promiscuous mode [ 510.779301][T11536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1804'. [ 510.974789][T11331] veth1_vlan: entered promiscuous mode [ 511.626210][ T9] vhci_hcd: vhci_device speed not set [ 511.694288][T11331] veth0_macvtap: entered promiscuous mode [ 511.716891][T11331] veth1_macvtap: entered promiscuous mode [ 511.747003][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.771862][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.792420][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.810739][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.829598][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.841892][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.856456][T11331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.880048][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.898469][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.916813][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.929841][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.934707][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 511.942253][T11331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.963612][T11331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.981736][T11331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.002523][T11331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.021567][T11331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.030400][T11331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.044272][T11331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.158234][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 512.188573][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.220969][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 512.254558][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 512.301817][ T8] usb 1-1: SerialNumber: syz [ 512.327535][ T8] usb 1-1: config 0 descriptor?? [ 512.378017][ T8] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 512.395872][ T8] usb 1-1: No valid video chain found. [ 512.407578][T11561] __nla_validate_parse: 3 callbacks suppressed [ 512.407601][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'. [ 512.468680][ T2473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.500762][ T2473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.520213][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'. [ 512.605633][ T5092] usb 1-1: USB disconnect, device number 24 [ 512.689389][ T6681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.704583][ T6681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.882975][T11573] loop3: detected capacity change from 0 to 128 [ 512.942982][T11573] udf: Unknown parameter '' [ 513.083767][T11573] loop3: detected capacity change from 0 to 512 [ 513.107907][T11573] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 513.297712][T11573] EXT4-fs (loop3): 1 truncate cleaned up [ 513.351882][T11573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.526611][ T5094] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 513.562349][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1819'. [ 513.576748][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1819'. [ 513.591860][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1819'. [ 514.070189][ T7933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.362170][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 514.701819][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 514.944696][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 515.152108][T11619] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 515.171273][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 515.205349][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.216913][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.227381][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 515.256333][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 515.268081][ T8] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 515.284992][ T8] usb 3-1: Manufacturer: syz [ 515.303861][T11620] loop4: detected capacity change from 0 to 2048 [ 515.314328][T11620] nilfs2: Unknown parameter '/dev/hwrng' [ 515.335806][ T8] usb 3-1: config 0 descriptor?? [ 515.474929][T11620] loop4: detected capacity change from 0 to 256 [ 515.645091][T11620] FAT-fs (loop4): codepage cp946 not found [ 515.744228][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 515.780289][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 515.803440][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 515.826947][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 515.850502][ T8] usb 3-1: USB disconnect, device number 15 [ 515.921571][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 515.921592][ T29] audit: type=1326 audit(1719351997.553:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11616 comm="syz.4.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 516.024792][ T29] audit: type=1326 audit(1719351997.593:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11616 comm="syz.4.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 516.184903][ T29] audit: type=1326 audit(1719351997.813:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11616 comm="syz.4.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 516.708027][ T29] audit: type=1326 audit(1719351998.343:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11646 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 516.784956][ T29] audit: type=1326 audit(1719351998.343:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11646 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 516.848244][ T29] audit: type=1326 audit(1719351998.383:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11646 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 516.923406][ T29] audit: type=1326 audit(1719351998.383:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11646 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 517.001740][ T29] audit: type=1326 audit(1719351998.383:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11646 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 517.084680][T11651] libceph: resolve '. [ 517.084680][T11651] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 517.084680][T11651] ' (ret=-3): failed [ 517.091279][ T29] audit: type=1326 audit(1719351998.403:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11646 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 517.191755][ T29] audit: type=1326 audit(1719351998.403:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11646 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 517.462004][T11651] Restarting kernel threads ... done. [ 517.605129][ T5094] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 517.615554][ T5094] Bluetooth: hci2: Injecting HCI hardware error event [ 517.625594][ T5094] Bluetooth: hci2: hardware error 0x00 [ 517.633049][T11632] loop1: detected capacity change from 0 to 40427 [ 517.716773][T11632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 517.788709][T11632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 517.822109][T11632] syz.1.1836: attempt to access beyond end of device [ 517.822109][T11632] loop1: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 517.931777][T11331] syz-executor: attempt to access beyond end of device [ 517.931777][T11331] loop1: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 518.074594][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 518.094797][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 518.421814][T11673] loop4: detected capacity change from 0 to 2048 [ 518.432207][T11673] nilfs2: Unknown parameter '/dev/hwrng' [ 518.447655][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 518.701687][T11673] loop4: detected capacity change from 0 to 256 [ 518.874270][T11673] FAT-fs (loop4): codepage cp946 not found [ 519.406336][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 519.674791][ T5094] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 520.665343][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 521.198668][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 521.198715][ T29] audit: type=1800 audit(1719352002.833:1117): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1860" name=".log" dev="sda1" ino=1988 res=0 errno=0 [ 522.099992][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 522.239905][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 522.240485][T11715] loop4: detected capacity change from 0 to 2048 [ 522.289544][T11715] nilfs2: Unknown parameter '/dev/hwrng' [ 522.357660][T11702] loop3: detected capacity change from 0 to 40427 [ 522.449715][T11702] F2FS-fs (loop3): Found nat_bits in checkpoint [ 522.476313][T11715] loop4: detected capacity change from 0 to 256 [ 522.962375][ T29] audit: type=1326 audit(1719352004.593:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.091584][T11715] FAT-fs (loop4): codepage cp946 not found [ 523.106871][ T29] audit: type=1326 audit(1719352004.723:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.142359][ T29] audit: type=1326 audit(1719352004.723:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.230844][T11702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 523.244837][ T29] audit: type=1326 audit(1719352004.823:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.455794][ T29] audit: type=1326 audit(1719352004.823:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.523694][T11738] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 523.614818][ T29] audit: type=1326 audit(1719352004.823:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.668071][ T29] audit: type=1326 audit(1719352004.823:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.713676][ T29] audit: type=1326 audit(1719352004.843:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 523.808876][ T29] audit: type=1326 audit(1719352004.843:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11729 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 524.007321][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 524.024774][ T5192] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 524.214767][ T5192] usb 2-1: Using ep0 maxpacket: 8 [ 524.223877][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.239796][ T5094] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 524.255895][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 524.283974][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.313299][ T5192] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 524.322915][ T5192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.331114][ T5192] usb 2-1: Product: syz [ 524.335537][ T5192] usb 2-1: Manufacturer: syz [ 524.345414][ T5192] usb 2-1: SerialNumber: syz [ 524.353996][ T5192] usb 2-1: config 0 descriptor?? [ 524.360307][T11759] libceph: resolve '. [ 524.360307][T11759] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 524.360307][T11759] ' (ret=-3): failed [ 524.382922][ T5192] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 524.597967][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 524.726635][T11765] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1871'. [ 524.751314][T11744] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1871'. [ 524.836270][ T5192] pwc: Failed to set LED on/off time (-71) [ 524.843969][ T5192] pwc: send_video_command error -71 [ 524.864457][ T5192] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 524.888874][ T5192] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 525.079070][ T5192] usb 2-1: USB disconnect, device number 20 [ 525.852459][T11775] loop3: detected capacity change from 0 to 2048 [ 525.898516][T11775] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 526.049950][T11778] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.109446][T11775] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 526.135210][T11775] Remounting filesystem read-only [ 526.142724][T11775] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 526.154003][T11775] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 526.566803][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 526.660219][T11788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.684990][T11788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.700349][T11788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.816035][T11788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.881273][T11788] batadv0: left allmulticast mode [ 526.933861][T11788] batadv0: left promiscuous mode [ 527.171204][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'. [ 527.428112][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 527.479064][T11796] team0: entered promiscuous mode [ 527.484170][T11796] team_slave_1: entered promiscuous mode [ 527.566235][T11795] team0: left promiscuous mode [ 527.591001][T11795] team_slave_1: left promiscuous mode [ 527.608657][T11805] loop4: detected capacity change from 0 to 128 [ 527.630418][T11805] udf: Unknown parameter '' [ 527.677732][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 527.750778][T11800] loop4: detected capacity change from 0 to 512 [ 527.776262][T11800] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 527.790679][T11781] loop1: detected capacity change from 0 to 40427 [ 527.835235][T11800] EXT4-fs (loop4): 1 truncate cleaned up [ 527.851575][T11781] F2FS-fs (loop1): Found nat_bits in checkpoint [ 527.867051][T11800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.916602][ T5094] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 527.949516][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 527.949539][ T29] audit: type=1326 audit(1719352009.583:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 527.980345][T11781] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 528.003657][T11781] syz.1.1880: attempt to access beyond end of device [ 528.003657][T11781] loop1: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 528.085130][T11331] syz-executor: attempt to access beyond end of device [ 528.085130][T11331] loop1: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 528.107895][ T29] audit: type=1326 audit(1719352009.583:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.140049][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 528.163361][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 528.170897][ T29] audit: type=1326 audit(1719352009.583:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.203873][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 528.270320][T11829] team0: entered promiscuous mode [ 528.305142][T11829] team_slave_0: entered promiscuous mode [ 528.324780][ T29] audit: type=1326 audit(1719352009.583:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.364123][T11829] team_slave_1: entered promiscuous mode [ 528.444974][ T29] audit: type=1326 audit(1719352009.583:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.446076][T11831] team_slave_0: entered allmulticast mode [ 528.524724][ T8869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.544089][ T29] audit: type=1326 audit(1719352009.583:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.616949][ T29] audit: type=1326 audit(1719352009.583:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.674824][T11831] team0: Port device team_slave_0 removed [ 528.675273][ T29] audit: type=1326 audit(1719352009.583:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.731981][T11820] team0: left promiscuous mode [ 528.749942][T11820] team_slave_1: left promiscuous mode [ 528.759364][ T29] audit: type=1326 audit(1719352009.593:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11819 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 528.811603][ T29] audit: type=1326 audit(1719352009.593:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.0.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ea99a7ac5 code=0x7ffc0000 [ 528.851896][T11838] loop4: detected capacity change from 0 to 512 [ 528.940296][T11838] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1897: corrupted in-inode xattr: e_value out of bounds [ 529.021742][T11838] EXT4-fs (loop4): Remounting filesystem read-only [ 529.076231][T11838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.157351][T11848] libceph: resolve '. [ 529.157351][T11848] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 529.157351][T11848] ' (ret=-3): failed [ 529.265085][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 529.280121][ T8869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.948460][ T5192] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 530.176593][ T5192] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 530.204457][ T5192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.245438][ T5139] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 530.247987][ T5192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.273559][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 530.340666][ T5192] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 530.365408][ T5192] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 530.388292][ T5192] usb 2-1: Manufacturer: syz [ 530.418765][ T5192] usb 2-1: config 0 descriptor?? [ 530.464728][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 530.482973][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.516325][ T5139] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 530.535969][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 530.552353][ T5139] usb 1-1: SerialNumber: syz [ 530.574109][ T5139] usb 1-1: config 0 descriptor?? [ 530.610453][ T5139] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 530.618276][ T5139] usb 1-1: No valid video chain found. [ 530.676462][ T5192] usbhid 2-1:0.0: can't add hid device: -71 [ 530.693986][ T5192] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 530.728584][ T5192] usb 2-1: USB disconnect, device number 21 [ 530.811832][ T45] usb 1-1: USB disconnect, device number 25 [ 531.190281][T11867] loop4: detected capacity change from 0 to 40427 [ 531.245741][T11867] F2FS-fs (loop4): Found nat_bits in checkpoint [ 531.449680][T11867] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 531.461304][T11884] loop1: detected capacity change from 0 to 128 [ 531.471202][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 531.503772][T11884] udf: Unknown parameter '' [ 531.518434][T11882] team0: entered promiscuous mode [ 531.524346][T11867] syz.4.1905: attempt to access beyond end of device [ 531.524346][T11867] loop4: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 531.533950][T11882] team_slave_1: entered promiscuous mode [ 531.557603][T11881] team0: left promiscuous mode [ 531.562578][T11881] team_slave_1: left promiscuous mode [ 531.584083][T11884] loop1: detected capacity change from 0 to 512 [ 531.626117][T11884] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 531.656013][ T8869] syz-executor: attempt to access beyond end of device [ 531.656013][ T8869] loop4: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 531.683807][T11884] EXT4-fs (loop1): 1 truncate cleaned up [ 531.691942][T11884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.735305][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 531.779536][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 531.938285][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 531.995083][ T5094] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 532.006433][ T5094] Bluetooth: hci3: Injecting HCI hardware error event [ 532.016226][ T5083] Bluetooth: hci3: hardware error 0x00 [ 532.173757][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 532.193178][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1914'. [ 532.372843][T11331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.589984][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 532.637217][T11912] team0: entered promiscuous mode [ 532.654800][T11912] team_slave_1: entered promiscuous mode [ 532.690286][T11908] team0: left promiscuous mode [ 532.705124][T11908] team_slave_1: left promiscuous mode [ 532.829341][ T5092] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 533.021289][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 533.021310][ T29] audit: type=1326 audit(1719352014.653:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 533.150383][ T29] audit: type=1326 audit(1719352014.653:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 533.256153][ T29] audit: type=1326 audit(1719352014.683:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 533.358912][T11938] loop4: detected capacity change from 0 to 128 [ 533.380873][T11938] udf: Unknown parameter '' [ 533.397348][ T29] audit: type=1326 audit(1719352014.683:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 533.506432][T11938] loop4: detected capacity change from 0 to 512 [ 533.533150][ T29] audit: type=1326 audit(1719352014.683:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 533.583295][T11938] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 533.657180][ T29] audit: type=1326 audit(1719352014.693:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 533.710943][T11938] EXT4-fs (loop4): 1 truncate cleaned up [ 533.738771][T11938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.804022][ T29] audit: type=1326 audit(1719352014.693:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 533.847399][ T5094] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 533.897810][ T29] audit: type=1326 audit(1719352014.693:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f565996cb67 code=0x7ffc0000 [ 534.634803][ T5092] usb 3-1: Using ep0 maxpacket: 8 [ 534.644743][ T5083] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 534.692291][ T29] audit: type=1326 audit(1719352014.693:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5659911529 code=0x7ffc0000 [ 534.726812][ T29] audit: type=1326 audit(1719352014.693:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 534.745301][ T5092] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.804781][ T5192] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 534.830463][ T5092] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 534.869380][ T5092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 534.898080][ T5092] usb 3-1: SerialNumber: syz [ 534.925756][ T5092] usb 3-1: config 0 descriptor?? [ 534.929394][T11947] loop3: detected capacity change from 0 to 2048 [ 535.034642][ T5192] usb 1-1: Using ep0 maxpacket: 8 [ 535.195438][ T5092] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 535.202554][ T5192] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 535.667118][T11951] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.804815][ T8869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.834176][T11947] syz.3.1933: attempt to access beyond end of device [ 535.834176][T11947] loop3: rw=0, sector=343245196361800, nr_sectors = 2 limit=2048 [ 535.874814][ T5083] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 535.884071][ T5083] Bluetooth: hci0: Injecting HCI hardware error event [ 535.894954][ T5094] Bluetooth: hci0: hardware error 0x00 [ 535.960743][T11947] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 536.003562][ T5092] usb 3-1: No valid video chain found. [ 536.009226][ T5192] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 536.023932][ T5092] usb 3-1: USB disconnect, device number 16 [ 536.029968][ T5192] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.115243][ T5192] usb 1-1: string descriptor 0 read error: -71 [ 536.121651][ T5192] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 536.179227][ T5192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.223067][ T5192] usb 1-1: config 0 descriptor?? [ 536.239954][ T5192] usb 1-1: can't set config #0, error -71 [ 536.246712][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'. [ 536.250593][ T5192] usb 1-1: USB disconnect, device number 26 [ 536.412645][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 536.444213][T11966] team0: entered promiscuous mode [ 536.464537][T11966] team_slave_1: entered promiscuous mode [ 536.500898][T11965] team0: left promiscuous mode [ 536.515541][T11965] team_slave_1: left promiscuous mode [ 536.541914][T11972] team0: entered promiscuous mode [ 536.564645][T11972] team_slave_1: entered promiscuous mode [ 536.699376][T11971] team0: left promiscuous mode [ 536.723023][T11971] team_slave_1: left promiscuous mode [ 537.224730][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 537.592121][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 537.600127][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.623135][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 537.632332][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 537.640835][ T45] usb 1-1: SerialNumber: syz [ 537.650484][T11964] loop4: detected capacity change from 0 to 32768 [ 537.658151][ T45] usb 1-1: config 0 descriptor?? [ 538.506243][ T5094] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 538.525431][ T45] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 538.557621][ T45] usb 1-1: No valid video chain found. [ 538.816042][ T45] usb 1-1: USB disconnect, device number 27 [ 539.034007][T11964] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 539.066794][T11983] loop1: detected capacity change from 0 to 8192 [ 539.083553][T11964] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 539.170381][T11964] bcachefs (loop4): alloc_read... done [ 539.193731][T11964] bcachefs (loop4): stripes_read... done [ 539.200243][T11964] bcachefs (loop4): snapshots_read... done [ 539.227547][T11964] bcachefs (loop4): journal_replay... done [ 539.233495][T11964] bcachefs (loop4): resume_logged_ops... done [ 539.282770][T11964] bcachefs (loop4): going read-write [ 539.293111][T11964] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 539.312248][T11964] bcachefs (loop4): error starting copygc thread [ 539.334587][T11964] bcachefs (loop4): going read-only [ 539.339875][T11964] bcachefs (loop4): finished waiting for writes to stop [ 539.384982][T11964] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 539.403693][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 539.405183][T11964] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 539.468648][T11964] bcachefs (loop4): shutdown complete, journal seq 11 [ 539.495796][T11964] bcachefs (loop4): marking filesystem clean [ 539.545448][T11964] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 539.556127][T11964] bcachefs (loop4): shutting down [ 539.650344][T11964] bcachefs (loop4): shutdown complete [ 539.656296][T12015] loop3: detected capacity change from 0 to 512 [ 539.771955][T12015] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1955: corrupted in-inode xattr: e_value out of bounds [ 539.873326][T12015] EXT4-fs (loop3): Remounting filesystem read-only [ 539.891775][T12015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.016321][ T7933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.158383][ T29] audit: type=1326 audit(1719352022.793:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12024 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 541.406564][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 541.529433][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'. [ 541.627419][T12040] team0: entered promiscuous mode [ 541.661967][T12040] team_slave_1: entered promiscuous mode [ 541.752689][T12037] team0: left promiscuous mode [ 541.760452][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 541.775025][T12037] team_slave_1: left promiscuous mode [ 541.964654][ T5136] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 541.990693][T12055] loop4: detected capacity change from 0 to 128 [ 542.187694][ T5136] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.233450][ T5136] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.265992][ T5136] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.280484][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.304868][ T5136] usb 4-1: SerialNumber: syz [ 542.365281][ T5192] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 542.539427][ T5136] usb 4-1: invalid UAC_HEADER (v1) [ 542.567764][ T5192] usb 3-1: Using ep0 maxpacket: 8 [ 542.587817][ T5192] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.607304][ T5136] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 542.614947][ T5192] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 542.656309][ T5136] usb 4-1: USB disconnect, device number 25 [ 542.672769][ T5192] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.719842][ T5192] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 542.740291][ T5192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.751018][ T5192] usb 3-1: Product: syz [ 542.761527][ T5192] usb 3-1: Manufacturer: syz [ 542.768016][ T5192] usb 3-1: SerialNumber: syz [ 542.815922][ T5192] usb 3-1: config 0 descriptor?? [ 542.899363][ T5192] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 543.015167][T12066] loop4: detected capacity change from 0 to 2048 [ 543.022473][T12066] nilfs2: Unknown parameter '/dev/hwrng' [ 543.250485][T12077] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1970'. [ 543.280515][T12066] loop4: detected capacity change from 0 to 256 [ 543.281453][T12057] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1970'. [ 543.364732][ T5192] pwc: Failed to set LED on/off time (-71) [ 543.394298][ T5192] pwc: send_video_command error -71 [ 543.416627][ T5192] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 543.424307][ T5192] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 543.468777][T12066] FAT-fs (loop4): codepage cp946 not found [ 543.474138][ T5192] usb 3-1: USB disconnect, device number 17 [ 543.751022][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 543.764737][ T5137] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 543.834264][ T29] audit: type=1326 audit(1719352025.463:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12064 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 543.924931][ T29] audit: type=1326 audit(1719352025.463:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12064 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 543.983983][ T5137] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 544.014998][ T5137] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 544.040799][ T29] audit: type=1326 audit(1719352025.463:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12064 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 544.069905][ T5137] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 544.094559][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.119258][ T5137] usb 2-1: invalid MIDI out EP 0 [ 544.125746][ T29] audit: type=1326 audit(1719352025.463:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12064 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 544.217389][ T29] audit: type=1326 audit(1719352025.463:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12064 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 544.244392][T12088] loop4: detected capacity change from 0 to 2048 [ 544.257583][T12088] nilfs2: Unknown parameter '/dev/hwrng' [ 544.263636][ T29] audit: type=1326 audit(1719352025.463:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12064 comm="syz.4.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 544.340847][T12088] loop4: detected capacity change from 0 to 256 [ 544.350432][ T5137] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 544.364308][T12092] loop3: detected capacity change from 0 to 128 [ 544.412657][ T5137] usb 2-1: USB disconnect, device number 22 [ 544.443189][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 544.462921][T12088] FAT-fs (loop4): codepage cp946 not found [ 544.526981][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 544.668244][ T29] audit: type=1326 audit(1719352026.303:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12085 comm="syz.4.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 544.764721][ T29] audit: type=1326 audit(1719352026.303:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12085 comm="syz.4.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 544.889710][ T29] audit: type=1326 audit(1719352026.523:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12085 comm="syz.4.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 545.553485][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 545.576744][T12123] loop4: detected capacity change from 0 to 2048 [ 545.589051][T12123] nilfs2: Unknown parameter '/dev/hwrng' [ 545.610120][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 545.720225][T12123] loop4: detected capacity change from 0 to 256 [ 545.734600][ T5192] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 545.859735][T12123] FAT-fs (loop4): codepage cp946 not found [ 545.923982][T12136] loop3: detected capacity change from 0 to 16 [ 545.930493][ T5192] usb 2-1: Using ep0 maxpacket: 8 [ 545.940329][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 545.995177][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 546.031249][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.050065][T12136] erofs: (device loop3): mounted with root inode @ nid 36. [ 546.087555][ T5192] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 546.096917][ T5192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.120055][ T5192] usb 2-1: Product: syz [ 546.128258][ T5192] usb 2-1: Manufacturer: syz [ 546.142876][ T5094] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 546.144428][ T5192] usb 2-1: SerialNumber: syz [ 546.172573][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 546.172594][ T29] audit: type=1326 audit(1719352027.803:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.201209][ T29] audit: type=1326 audit(1719352027.833:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.224801][ T29] audit: type=1326 audit(1719352027.833:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.246797][T12136] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 546.256920][ T29] audit: type=1326 audit(1719352027.833:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.325663][ T5192] usb 2-1: config 0 descriptor?? [ 546.359209][ T29] audit: type=1326 audit(1719352027.833:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.418754][ T5192] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 546.428819][ T29] audit: type=1326 audit(1719352027.833:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.474155][ T29] audit: type=1326 audit(1719352027.833:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.526872][ T29] audit: type=1326 audit(1719352027.833:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.590800][ T29] audit: type=1326 audit(1719352027.833:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.691941][ T29] audit: type=1326 audit(1719352027.833:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12115 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7fc00000 [ 546.772107][T12145] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2001'. [ 546.795325][T12143] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1993'. [ 546.816545][T12121] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1993'. [ 548.002618][ T5192] pwc: Failed to set LED on/off time (-71) [ 548.012124][ T5192] pwc: send_video_command error -71 [ 548.032765][ T5192] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 548.080388][ T5192] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 548.129591][ T5192] usb 2-1: USB disconnect, device number 23 [ 548.428065][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2004'. [ 548.847831][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 548.902965][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 550.140740][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 550.300725][T12187] No such timeout policy "syz0" [ 550.439456][T12193] loop4: detected capacity change from 0 to 256 [ 551.639383][T12204] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2022'. [ 551.656136][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 551.656159][ T29] audit: type=1326 audit(1719352033.293:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 551.713300][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 551.732364][ T29] audit: type=1326 audit(1719352033.323:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 551.794658][ T29] audit: type=1326 audit(1719352033.323:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 551.845374][ T29] audit: type=1326 audit(1719352033.323:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 551.887732][ T29] audit: type=1326 audit(1719352033.323:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 551.919722][ T5139] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 551.970024][T12212] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2023'. [ 551.974901][ T29] audit: type=1326 audit(1719352033.323:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 552.034577][ T29] audit: type=1326 audit(1719352033.323:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 552.096000][ T29] audit: type=1326 audit(1719352033.323:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 552.160542][ T29] audit: type=1326 audit(1719352033.633:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.4.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 552.199213][ T5139] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 552.212860][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.233584][ T5139] usb 2-1: Product: syz [ 552.240256][ T29] audit: type=1326 audit(1719352033.633:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12211 comm="syz.4.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5659975ae9 code=0x7ffc0000 [ 552.284024][ T5139] usb 2-1: Manufacturer: syz [ 552.288843][ T5139] usb 2-1: SerialNumber: syz [ 552.307702][ T5139] usb 2-1: config 0 descriptor?? [ 552.326699][ T5139] ch341 2-1:0.0: ch341-uart converter detected [ 552.529597][ T5139] usb 2-1: failed to receive control message: -32 [ 552.536661][ T5139] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 553.275442][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 553.723176][T12236] loop4: detected capacity change from 0 to 256 [ 555.898683][ T5094] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 556.059527][ T8] usb 2-1: USB disconnect, device number 24 [ 556.076461][ T8] ch341 2-1:0.0: device disconnected [ 556.101422][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 556.273521][T12256] loop4: detected capacity change from 0 to 16 [ 556.338224][T12258] loop1: detected capacity change from 0 to 2048 [ 556.346861][T12258] nilfs2: Unknown parameter '/dev/hwrng' [ 556.370160][T12256] erofs: (device loop4): mounted with root inode @ nid 36. [ 556.396549][ T5094] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 556.400408][T12261] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2035'. [ 556.439279][T12251] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 556.468459][T12258] loop1: detected capacity change from 0 to 256 [ 556.644776][T12258] FAT-fs (loop1): codepage cp946 not found [ 557.040124][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 557.040146][ T29] audit: type=1326 audit(1719352038.673:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.119339][ T29] audit: type=1326 audit(1719352038.673:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.190653][T12266] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2039'. [ 557.202611][ T29] audit: type=1326 audit(1719352038.673:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.257226][ T29] audit: type=1326 audit(1719352038.673:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.330520][ T29] audit: type=1326 audit(1719352038.673:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.397372][ T29] audit: type=1326 audit(1719352038.673:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.462598][ T29] audit: type=1326 audit(1719352038.673:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.544922][ T29] audit: type=1326 audit(1719352038.673:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.648755][ T29] audit: type=1326 audit(1719352038.673:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.711133][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 557.735767][ T29] audit: type=1326 audit(1719352038.673:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12253 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7fc00000 [ 557.757976][T12271] bridge_slave_1: left allmulticast mode [ 557.763670][T12271] bridge_slave_1: left promiscuous mode [ 557.804983][T12271] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.854599][T12271] bridge_slave_0: left allmulticast mode [ 557.860469][T12271] bridge_slave_0: left promiscuous mode [ 557.874964][T12271] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.026885][T12259] loop3: detected capacity change from 0 to 32768 [ 558.313661][T12283] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 558.387051][T12259] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 558.442613][T12259] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 558.558293][T12259] bcachefs (loop3): alloc_read... done [ 558.563842][T12259] bcachefs (loop3): stripes_read... done [ 558.580642][T12259] bcachefs (loop3): snapshots_read... done [ 558.617354][T12259] bcachefs (loop3): going read-write [ 558.660340][T12259] bcachefs (loop3): journal_replay... done [ 558.732510][T12259] bcachefs (loop3): resume_logged_ops... done [ 558.742473][T12259] bcachefs (loop3): delete_dead_inodes... done [ 558.814753][T12259] bcachefs (loop3): done starting filesystem [ 558.987491][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 559.080421][ T7933] bcachefs (loop3): shutting down [ 559.134571][ T7933] bcachefs (loop3): going read-only [ 559.151639][T12300] loop1: detected capacity change from 0 to 128 [ 559.160290][ T7933] bcachefs (loop3): finished waiting for writes to stop [ 559.172071][T12300] udf: Unknown parameter '' [ 559.212455][ T7933] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 559.220137][T12272] loop4: detected capacity change from 0 to 40427 [ 559.248678][ T7933] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 559.283466][T12300] loop1: detected capacity change from 0 to 512 [ 559.298593][T12305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2048'. [ 559.311701][T12305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2048'. [ 559.336302][T12272] F2FS-fs (loop4): Found nat_bits in checkpoint [ 559.345211][ T7933] bcachefs (loop3): shutdown complete, journal seq 12 [ 559.353034][T12305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2048'. [ 559.363282][ T7933] bcachefs (loop3): marking filesystem clean [ 559.364717][T12300] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 559.397345][T12300] EXT4-fs (loop1): 1 truncate cleaned up [ 559.406496][T12300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.494936][ T7933] bcachefs (loop3): shutdown complete [ 559.686742][T12272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 559.796150][T12272] syz.4.2040: attempt to access beyond end of device [ 559.796150][T12272] loop4: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 559.974237][ T8869] syz-executor: attempt to access beyond end of device [ 559.974237][ T8869] loop4: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 560.025056][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 560.032030][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 560.088783][T11331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.147261][T12315] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 560.208455][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 560.531953][T12324] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2055'. [ 561.018361][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 561.028944][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2059'. [ 562.194708][ T5137] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 562.241794][T12344] loop4: detected capacity change from 0 to 40427 [ 562.282231][T12344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 562.399822][ T5137] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 562.427720][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.438078][T12372] __nla_validate_parse: 4 callbacks suppressed [ 562.438101][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 562.451371][ T5137] usb 2-1: Product: syz [ 562.469162][T12344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 562.474703][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 562.482320][ T5137] usb 2-1: Manufacturer: syz [ 562.505964][ T5137] usb 2-1: SerialNumber: syz [ 562.537857][ T5137] usb 2-1: config 0 descriptor?? [ 562.559729][ T5137] ch341 2-1:0.0: ch341-uart converter detected [ 562.570482][T12344] syz.4.2061: attempt to access beyond end of device [ 562.570482][T12344] loop4: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 562.638297][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 562.670846][ T8869] syz-executor: attempt to access beyond end of device [ 562.670846][ T8869] loop4: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 562.695567][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 562.727857][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 563.368080][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.369189][T12384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.387453][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.491664][T12384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.492802][T12385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.545951][T12386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.594139][T12384] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(7) [ 563.600760][T12384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 563.614319][ T5137] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 563.627192][T12385] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(14) [ 563.633840][T12385] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 563.647454][T12384] vhci_hcd vhci_hcd.0: Device attached [ 563.676623][T12384] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(13) [ 563.683261][T12384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 563.737456][T12385] vhci_hcd vhci_hcd.0: Device attached [ 563.745015][T12384] vhci_hcd vhci_hcd.0: Device attached [ 563.783736][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 563.783753][ T29] audit: type=1326 audit(1719352045.413:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 563.819697][ T5137] usb 2-1: USB disconnect, device number 25 [ 563.846817][ T29] audit: type=1326 audit(1719352045.453:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 563.855232][ T5137] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 563.880271][T12387] vhci_hcd: connection closed [ 563.880336][ T9] vhci_hcd: vhci_device speed not set [ 563.890914][T12389] vhci_hcd: connection closed [ 563.893259][T12391] vhci_hcd: connection closed [ 563.905094][ T5137] ch341 2-1:0.0: device disconnected [ 563.914890][ T1096] vhci_hcd: stop threads [ 563.919520][ T1096] vhci_hcd: release socket [ 563.943837][ T1096] vhci_hcd: disconnect device [ 563.967111][ T1096] vhci_hcd: stop threads [ 563.981584][ T29] audit: type=1326 audit(1719352045.453:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 564.003947][ T1096] vhci_hcd: release socket [ 564.013206][ T1096] vhci_hcd: disconnect device [ 564.018753][ T9] usb 9-5: new full-speed USB device number 2 using vhci_hcd [ 564.050486][ T9] usb 9-5: enqueue for inactive port 4 [ 564.057977][ T1096] vhci_hcd: stop threads [ 564.062561][ T1096] vhci_hcd: release socket [ 564.078559][ T1096] vhci_hcd: disconnect device [ 564.083886][ T29] audit: type=1326 audit(1719352045.453:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 564.118624][ T29] audit: type=1326 audit(1719352045.453:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 564.146193][ T29] audit: type=1326 audit(1719352045.453:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 564.175089][ T9] vhci_hcd: vhci_device speed not set [ 564.199148][ T29] audit: type=1326 audit(1719352045.473:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 564.426662][ T29] audit: type=1326 audit(1719352045.473:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 564.961078][ T29] audit: type=1326 audit(1719352045.473:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 565.145645][ T29] audit: type=1326 audit(1719352045.473:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7ffc0000 [ 566.258389][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 566.684608][T12421] libceph: resolve '. [ 566.684608][T12421] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 566.684608][T12421] ' (ret=-3): failed [ 566.811113][T12406] loop1: detected capacity change from 0 to 32768 [ 566.902731][T12406] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 567.049039][T12406] XFS (loop1): Ending clean mount [ 567.077246][T12406] XFS (loop1): Quotacheck needed: Please wait. [ 567.126993][T12408] loop4: detected capacity change from 0 to 40427 [ 567.242135][T12408] F2FS-fs (loop4): Found nat_bits in checkpoint [ 567.254126][T12406] XFS (loop1): Quotacheck: Done. [ 567.545726][T12408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 567.710880][T12408] syz.4.2082: attempt to access beyond end of device [ 567.710880][T12408] loop4: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 568.068490][ T8869] syz-executor: attempt to access beyond end of device [ 568.068490][ T8869] loop4: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 568.133891][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 568.160616][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 568.264668][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 568.466157][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 568.491800][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.568442][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 568.604737][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 568.623401][ T8] usb 3-1: SerialNumber: syz [ 568.638785][ T8] usb 3-1: config 0 descriptor?? [ 568.668997][ T8] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 568.694749][ T8] usb 3-1: No valid video chain found. [ 568.901696][ T8] usb 3-1: USB disconnect, device number 18 [ 569.472001][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 569.624375][T12456] loop3: detected capacity change from 0 to 1024 [ 569.655782][T12458] 9pnet_virtio: no channels available for device syz [ 569.700880][T12456] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 569.753059][T12456] System zones: 0-1, 3-12 [ 569.816488][T12456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.845421][T11331] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 569.883462][T12456] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 569.971261][ T7933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.139931][T12467] loop4: detected capacity change from 0 to 4096 [ 570.236090][T12473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2101'. [ 570.465839][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2105'. [ 570.503015][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 570.504184][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 570.504204][ T29] audit: type=1800 audit(1719352052.133:1589): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2098" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 570.526940][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 570.623183][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 570.711770][T12489] bridge1: port 1(vlan2) entered blocking state [ 570.741733][T12489] bridge1: port 1(vlan2) entered disabled state [ 570.754934][T12489] vlan2: entered allmulticast mode [ 570.788385][T12489] vlan2: left allmulticast mode [ 571.135287][ T5139] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 571.203843][T12502] loop4: detected capacity change from 0 to 512 [ 571.222478][T12502] EXT4-fs: Ignoring removed i_version option [ 571.234787][T12502] EXT4-fs: Ignoring removed nobh option [ 571.254667][T12502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 571.346727][ T5139] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 571.348933][T12502] EXT4-fs (loop4): 1 truncate cleaned up [ 571.356242][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.398339][ T5139] usb 4-1: config 0 descriptor?? [ 571.403707][T12502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.618272][ T29] audit: type=1326 audit(1719352053.253:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12499 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 571.643905][ T5139] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 571.669156][ T5139] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 571.674218][ T29] audit: type=1326 audit(1719352053.283:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12499 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 571.687210][ T8869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.779955][ T5139] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 571.791367][ T5139] [drm] Initialized udl on minor 2 [ 571.871730][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 572.019240][ T29] audit: type=1326 audit(1719352053.653:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12499 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 572.058541][ T5139] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 572.098473][ T5139] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 572.119127][ T29] audit: type=1326 audit(1719352053.653:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12499 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 572.140489][ T5136] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 572.156525][ T5139] usb 4-1: USB disconnect, device number 26 [ 572.178838][ T5136] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 572.192975][ T29] audit: type=1326 audit(1719352053.683:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12499 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 572.264744][ T29] audit: type=1326 audit(1719352053.683:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12499 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 572.304697][ T29] audit: type=1326 audit(1719352053.703:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12499 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x7fc00000 [ 572.431954][T12525] loop1: detected capacity change from 0 to 4096 [ 572.454593][ T5137] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 572.541108][ T29] audit: type=1800 audit(1719352054.173:1597): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2121" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 572.600872][T12531] Bluetooth: hci3: invalid len left 7, exp >= 116 [ 572.659131][ T5137] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 572.677979][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.704556][ T5137] usb 1-1: Product: syz [ 572.708798][ T5137] usb 1-1: Manufacturer: syz [ 572.713705][ T5137] usb 1-1: SerialNumber: syz [ 572.743095][ T5137] usb 1-1: config 0 descriptor?? [ 572.749369][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 572.766685][ T5137] ch341 1-1:0.0: ch341-uart converter detected [ 573.042554][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 573.095545][T12544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2127'. [ 573.182491][T12546] team0: entered promiscuous mode [ 573.196883][T12546] team_slave_1: entered promiscuous mode [ 573.210592][T12545] team0: left promiscuous mode [ 573.215724][T12545] team_slave_1: left promiscuous mode [ 573.458199][T12554] geneve2: entered promiscuous mode [ 573.480716][T12554] geneve2: entered allmulticast mode [ 573.733153][T12563] team_slave_0: entered promiscuous mode [ 573.753218][T12563] team_slave_0: entered allmulticast mode [ 573.821825][ T5137] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 573.849045][T12563] team0: Port device team_slave_0 removed [ 574.026807][ T5133] usb 1-1: USB disconnect, device number 28 [ 574.053722][ T5133] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 574.083003][ T5133] ch341 1-1:0.0: device disconnected [ 574.145024][ T5136] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 574.374655][ T5136] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 574.399061][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.427455][ T5136] usb 3-1: config 0 descriptor?? [ 574.634533][T12583] __nla_validate_parse: 4 callbacks suppressed [ 574.634585][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 574.674441][ T5136] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 574.688769][ T5136] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 574.759489][ T5136] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 574.802042][ T5136] [drm] Initialized udl on minor 2 [ 574.887590][ T5094] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 575.053799][ T5136] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 575.055155][T12595] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 575.098880][T12595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2146'. [ 575.125504][T12595] caif0: entered promiscuous mode [ 575.135102][T12595] caif0: entered allmulticast mode [ 575.147950][T12595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.310581][ T5136] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 575.322295][ T5137] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 575.332365][ T5136] usb 3-1: USB disconnect, device number 19 [ 575.338484][ T5137] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 576.211691][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 576.445162][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 576.502314][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'. [ 576.565275][T12612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2153'. [ 576.627957][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 577.084572][ T5137] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 577.324563][ T5137] usb 3-1: Using ep0 maxpacket: 32 [ 577.352634][ T5137] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 577.372051][ T5137] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 577.404521][ T5137] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 577.424120][ T29] audit: type=1800 audit(1719352059.053:1598): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2162" name="file0" dev="sda1" ino=2014 res=0 errno=0 [ 577.434730][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.469443][T12631] loop3: detected capacity change from 0 to 32768 [ 577.491273][ T5137] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 577.501288][T12631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2159 (12631) [ 577.524715][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 577.547331][ T5137] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 577.564554][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.586455][T12631] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 577.597940][ T5137] usb 3-1: config 0 descriptor?? [ 577.626532][T12631] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 577.656807][T12631] BTRFS info (device loop3): using free-space-tree [ 577.826435][T12631] BTRFS info (device loop3): checking UUID tree [ 577.843161][ T5137] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 577.958736][ T5137] usb 3-1: USB disconnect, device number 20 [ 578.021688][ T5137] usblp0: removed [ 578.072928][T12631] BTRFS info (device loop3): space_info DATA+METADATA has 851968 free, is not full [ 578.083237][T12631] BTRFS info (device loop3): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=2359296, readonly=0 zone_unusable=0 [ 578.097536][T12631] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 578.107425][T12631] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 578.115415][T12631] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 578.123066][T12631] BTRFS info (device loop3): delayed_block_rsv: size 131072 reserved 131072 [ 578.132103][T12631] BTRFS info (device loop3): delayed_refs_rsv: size 786432 reserved 786432 [ 578.147820][T12631] BTRFS info (device loop3): space_info DATA+METADATA has 851968 free, is not full [ 578.157367][T12631] BTRFS info (device loop3): space_info total=3276800, used=53248, pinned=0, reserved=16384, may_use=2355200, readonly=0 zone_unusable=0 [ 578.172811][T12631] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 578.181690][T12631] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 578.189398][T12631] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 578.197140][T12631] BTRFS info (device loop3): delayed_block_rsv: size 65536 reserved 65536 [ 578.205705][T12631] BTRFS info (device loop3): delayed_refs_rsv: size 786432 reserved 786432 [ 578.632900][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 578.664845][ T5137] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 578.744142][ T7933] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 578.764549][ T5139] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 578.886104][ T5137] usb 3-1: Using ep0 maxpacket: 32 [ 578.927495][ T5137] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 578.954805][ T5137] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 578.974902][ T5137] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 579.021897][ T5139] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 579.043136][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.065413][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.084565][ T5137] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 579.097322][ T5139] usb 5-1: config 0 descriptor?? [ 579.125224][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 579.164596][ T5137] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 579.173963][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.222575][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 579.247256][ T5137] usb 3-1: config 0 descriptor?? [ 579.309457][ T5139] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 579.324538][ T5139] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 579.378248][ T5139] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 579.396829][ T5139] [drm] Initialized udl on minor 2 [ 579.478540][ T5137] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 579.506937][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 579.537295][T12687] team0: entered promiscuous mode [ 579.554626][T12687] team_slave_1: entered promiscuous mode [ 579.560587][ T5139] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 579.575762][ T5139] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 579.595303][T12686] team0: left promiscuous mode [ 579.600374][T12686] team_slave_1: left promiscuous mode [ 579.608627][ T5137] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 579.617097][ T5139] usb 5-1: USB disconnect, device number 22 [ 579.636269][ T5137] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 579.907769][ T5092] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 580.108269][ T5092] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 580.128841][ T5092] usb 4-1: config 1 has no interface number 0 [ 580.145775][ T5092] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.173615][ T5092] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 580.196589][ T5092] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 580.226031][ T5092] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.237669][ T5092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.257982][ T5092] usb 4-1: Product: syz [ 580.266931][ T5092] usb 4-1: Manufacturer: syz [ 580.276199][ T5092] usb 4-1: SerialNumber: syz [ 580.338179][ T29] audit: type=1800 audit(1719352061.973:1599): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2178" name="file0" dev="sda1" ino=1988 res=0 errno=0 [ 580.788141][T12693] loop1: detected capacity change from 0 to 40427 [ 580.850860][T12693] F2FS-fs (loop1): Found nat_bits in checkpoint [ 581.002634][ T9] usb 3-1: USB disconnect, device number 21 [ 581.098891][ T5092] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 581.136637][ T9] usblp0: removed [ 581.152215][ T5092] cdc_ncm 4-1:1.1: bind() failure [ 581.190749][ T5092] usb 4-1: USB disconnect, device number 27 [ 581.194402][T12693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 581.268936][T12711] netlink: 'syz.4.2179': attribute type 4 has an invalid length. [ 581.274013][T12693] syz.1.2175: attempt to access beyond end of device [ 581.274013][T12693] loop1: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 581.984795][T11331] syz-executor: attempt to access beyond end of device [ 581.984795][T11331] loop1: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 582.020887][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 582.034663][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 582.310053][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 582.615354][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 582.650086][T12721] team0: entered promiscuous mode [ 582.670025][T12721] team_slave_1: entered promiscuous mode [ 582.702320][T12720] team0: left promiscuous mode [ 582.723428][T12720] team_slave_1: left promiscuous mode [ 583.361715][T12734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2187'. [ 583.384834][T12734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2187'. [ 583.428348][T12734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2187'. [ 583.494804][ T29] audit: type=1800 audit(1719352065.133:1600): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2190" name="file0" dev="sda1" ino=2019 res=0 errno=0 [ 583.807898][ T29] audit: type=1326 audit(1719352065.443:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 583.886203][ T29] audit: type=1326 audit(1719352065.443:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 583.949216][ T29] audit: type=1326 audit(1719352065.443:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 584.018180][ T29] audit: type=1326 audit(1719352065.443:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 584.062501][T12746] loop3: detected capacity change from 0 to 2048 [ 584.071162][T12746] nilfs2: Unknown parameter '/dev/hwrng' [ 584.089118][ T29] audit: type=1326 audit(1719352065.443:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 584.164436][ T29] audit: type=1326 audit(1719352065.483:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 584.341791][ T29] audit: type=1326 audit(1719352065.483:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 584.409348][T12746] loop3: detected capacity change from 0 to 256 [ 584.420938][ T29] audit: type=1326 audit(1719352065.503:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 584.484858][ T29] audit: type=1326 audit(1719352065.503:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12744 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9975ae9 code=0x7ffc0000 [ 584.636069][T12737] loop1: detected capacity change from 0 to 32768 [ 584.688962][T12737] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 584.743083][T12746] FAT-fs (loop3): codepage cp946 not found [ 584.984094][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 585.014625][T12737] XFS (loop1): Ending clean mount [ 585.226190][ T5139] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 585.585126][ T5139] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.612597][ T5139] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 585.640357][ T5139] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.674734][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.720841][ T5139] usb 5-1: invalid MIDI out EP 0 [ 585.807474][ T5139] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 585.982521][ T5139] usb 5-1: USB disconnect, device number 23 [ 586.260775][T11331] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 586.280780][T12782] capability: warning: `syz.0.2202' uses deprecated v2 capabilities in a way that may be insecure [ 586.319570][T12781] netlink: 'syz.2.2199': attribute type 4 has an invalid length. [ 586.387487][T12772] loop3: detected capacity change from 0 to 32768 [ 586.477650][T12772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2198 (12772) [ 586.576137][T12772] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 586.621727][T12772] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 586.642948][T12772] BTRFS info (device loop3): using free-space-tree [ 586.791051][T12772] BTRFS info (device loop3): checking UUID tree [ 586.797758][ T5192] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 586.896984][ T5137] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 586.990867][ T5192] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 587.013033][ T5192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.038002][ T5192] usb 1-1: Product: syz [ 587.048789][ T5192] usb 1-1: Manufacturer: syz [ 587.063664][ T5192] usb 1-1: SerialNumber: syz [ 587.076270][ T5192] usb 1-1: config 0 descriptor?? [ 587.084710][ T5137] usb 2-1: Using ep0 maxpacket: 32 [ 587.093077][ T5192] ch341 1-1:0.0: ch341-uart converter detected [ 587.098950][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 587.123195][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 587.135602][ T5137] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 587.152585][ T7933] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 587.163619][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.177499][ T5137] usb 2-1: config 0 descriptor?? [ 587.192764][T12788] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 587.205048][ T5137] hub 2-1:0.0: USB hub found [ 587.426599][ T5137] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 587.669499][ T5137] usbhid 2-1:0.0: can't add hid device: -71 [ 587.686791][ T5137] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 587.717028][T12811] loop3: detected capacity change from 0 to 128 [ 587.735629][ T5137] usb 2-1: USB disconnect, device number 26 [ 587.761657][T12811] udf: Unknown parameter '' [ 587.841286][T12811] loop3: detected capacity change from 0 to 512 [ 587.863398][T12811] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 587.896170][T12811] EXT4-fs (loop3): 1 truncate cleaned up [ 587.921800][T12811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.153099][ T5192] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 588.186254][T12819] loop4: detected capacity change from 0 to 2048 [ 588.199608][T12819] nilfs2: Unknown parameter '/dev/hwrng' [ 588.383767][ T5092] usb 1-1: USB disconnect, device number 29 [ 588.391865][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 588.422235][T12819] loop4: detected capacity change from 0 to 256 [ 588.432443][ T5092] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 588.459915][ T5092] ch341 1-1:0.0: device disconnected [ 588.624892][T12819] FAT-fs (loop4): codepage cp946 not found [ 588.635630][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 588.635651][ T29] audit: type=1326 audit(1719352070.273:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 588.673675][ T7933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.696128][ T29] audit: type=1326 audit(1719352070.303:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 588.789462][ T29] audit: type=1326 audit(1719352070.303:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 588.860908][ T29] audit: type=1326 audit(1719352070.303:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 588.903499][ T29] audit: type=1326 audit(1719352070.303:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 588.942263][ T29] audit: type=1326 audit(1719352070.303:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 588.969558][ T29] audit: type=1326 audit(1719352070.303:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 589.010349][ T29] audit: type=1326 audit(1719352070.303:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 589.138442][ T29] audit: type=1326 audit(1719352070.303:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 589.200605][ T29] audit: type=1326 audit(1719352070.303:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12823 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa775ae9 code=0x7ffc0000 [ 590.034046][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 590.472905][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 590.825075][T12859] netlink: 'syz.4.2221': attribute type 4 has an invalid length. [ 590.845098][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 590.892659][T12860] team0: entered promiscuous mode [ 590.913832][T12860] team_slave_1: entered promiscuous mode [ 590.947279][T12857] team0: left promiscuous mode [ 590.965829][T12857] team_slave_1: left promiscuous mode [ 591.387547][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2227'. [ 591.405982][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2227'. [ 591.416755][ T5192] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 591.445896][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2227'. [ 591.569663][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 591.611256][T12872] team0: entered promiscuous mode [ 591.620091][T12872] team_slave_1: entered promiscuous mode [ 591.639570][ T5192] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 591.668092][ T5192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.688887][T12871] team0: left promiscuous mode [ 591.704020][ T5192] usb 4-1: Product: syz [ 591.708669][ T5192] usb 4-1: Manufacturer: syz [ 591.714142][ T5192] usb 4-1: SerialNumber: syz [ 591.726110][ T5192] usb 4-1: config 0 descriptor?? [ 591.741642][T12871] team_slave_1: left promiscuous mode [ 591.750723][ T5192] ch341 4-1:0.0: ch341-uart converter detected [ 592.074738][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 592.319167][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'. [ 592.389129][T12889] team0: entered promiscuous mode [ 592.404854][T12889] team_slave_1: entered promiscuous mode [ 592.451842][T12888] team0: left promiscuous mode [ 592.461702][T12888] team_slave_1: left promiscuous mode [ 592.790982][ T5192] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 593.012043][ T5136] usb 4-1: USB disconnect, device number 28 [ 593.021426][ T5136] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 593.067518][ T5136] ch341 4-1:0.0: device disconnected [ 593.276313][T12906] team0: entered promiscuous mode [ 593.282437][T12906] team_slave_1: entered promiscuous mode [ 593.305788][T12905] team0: left promiscuous mode [ 593.320500][T12905] team_slave_1: left promiscuous mode [ 593.693069][T12915] __nla_validate_parse: 4 callbacks suppressed [ 593.693092][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 593.948712][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 594.604865][T12927] netlink: 'syz.0.2247': attribute type 4 has an invalid length. [ 594.697101][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 594.697123][ T29] audit: type=1326 audit(1719352076.333:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 594.834630][ T29] audit: type=1326 audit(1719352076.333:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 594.864647][ T5137] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 594.922031][T12904] loop1: detected capacity change from 0 to 32768 [ 594.947720][ T29] audit: type=1326 audit(1719352076.333:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.039365][ T29] audit: type=1326 audit(1719352076.333:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.094585][ T5137] usb 5-1: Using ep0 maxpacket: 32 [ 595.104184][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 595.120987][T12904] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 595.125791][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 595.168394][ T29] audit: type=1326 audit(1719352076.333:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.214520][ T5137] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 595.258078][ T29] audit: type=1326 audit(1719352076.373:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.266154][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.315957][T12904] XFS (loop1): Ending clean mount [ 595.334704][ T29] audit: type=1326 audit(1719352076.373:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.338767][T12904] XFS (loop1): Quotacheck needed: Please wait. [ 595.382953][ T29] audit: type=1326 audit(1719352076.383:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.385884][ T5137] usb 5-1: config 0 descriptor?? [ 595.418905][T12928] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 595.427998][ T5137] hub 5-1:0.0: USB hub found [ 595.435264][ T29] audit: type=1326 audit(1719352076.383:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.460211][ T29] audit: type=1326 audit(1719352076.383:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12929 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5825f75ae9 code=0x7ffc0000 [ 595.645672][T12904] XFS (loop1): Quotacheck: Done. [ 595.662247][ T5137] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 595.907715][ T5137] usbhid 5-1:0.0: can't add hid device: -71 [ 595.915229][ T5137] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 595.976283][ T5137] usb 5-1: USB disconnect, device number 24 [ 596.090561][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 596.545807][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'. [ 596.577079][T12952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2256'. [ 596.598868][T12952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2256'. [ 596.692804][T12952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2256'. [ 596.720342][T12955] loop4: detected capacity change from 0 to 256 [ 597.256463][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 597.484818][T11331] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 597.497122][ T5092] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 597.737380][ T5092] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 597.756455][ T5092] usb 3-1: config 1 has no interface number 0 [ 597.772985][ T5092] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.798266][ T5092] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 597.807869][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 597.824568][ T5092] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 597.851777][ T5092] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.861284][ T5092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.881562][ T5092] usb 3-1: Product: syz [ 597.889352][ T5092] usb 3-1: Manufacturer: syz [ 597.912085][ T5092] usb 3-1: SerialNumber: syz [ 598.044656][ T5137] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 598.384557][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 598.396004][ T5137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 598.411907][ T5137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 598.423303][ T5137] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 598.442443][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.458424][ T5137] usb 1-1: config 0 descriptor?? [ 598.475123][T12977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 598.487123][ T5137] hub 1-1:0.0: USB hub found [ 598.733779][ T5137] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 598.776922][ T5092] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 598.815045][T12984] netlink: 'syz.3.2268': attribute type 4 has an invalid length. [ 598.833160][ T5092] cdc_ncm 3-1:1.1: bind() failure [ 598.854841][ T5092] usb 3-1: USB disconnect, device number 22 [ 598.970049][ T5137] usbhid 1-1:0.0: can't add hid device: -71 [ 598.988033][ T5137] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 599.065617][ T5137] usb 1-1: USB disconnect, device number 30 [ 599.317244][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 599.397877][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2269'. [ 599.859622][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 600.528364][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 600.593003][T13012] loop3: detected capacity change from 0 to 256 [ 600.671224][T12994] loop4: detected capacity change from 0 to 32768 [ 600.890941][T12994] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2272 (12994) [ 600.957635][T12994] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 601.022715][T12994] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 601.049521][T12994] BTRFS info (device loop4): using free-space-tree [ 601.091913][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 601.180913][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2280'. [ 601.645074][ T5092] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 601.962659][ T5092] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 602.007425][ T5092] usb 1-1: config 1 has no interface number 0 [ 602.013634][ T5092] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.096520][ T5092] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 602.144577][ T5092] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 602.225528][ T5092] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.247397][ T8869] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 602.278796][ T5092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.319664][ T5092] usb 1-1: Product: syz [ 602.324020][ T5092] usb 1-1: Manufacturer: syz [ 602.354529][ T5092] usb 1-1: SerialNumber: syz [ 602.675044][T13039] loop1: detected capacity change from 0 to 40427 [ 602.741606][T13039] F2FS-fs (loop1): Found nat_bits in checkpoint [ 602.905198][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 602.905221][ T29] audit: type=1326 audit(1719352084.533:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13050 comm="syz.2.2287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1db75ae9 code=0x0 [ 602.954629][T13039] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 602.992393][T13039] syz.1.2283: attempt to access beyond end of device [ 602.992393][T13039] loop1: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 603.009479][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'. [ 603.029391][ T5092] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 603.050869][ T5092] cdc_ncm 1-1:1.1: bind() failure [ 603.090015][ T5092] usb 1-1: USB disconnect, device number 31 [ 603.314588][ T5136] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 603.376087][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 603.526937][ T5136] usb 2-1: config 0 has no interfaces? [ 603.532758][ T5136] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 603.568223][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.598095][ T5136] usb 2-1: config 0 descriptor?? [ 603.743072][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2294'. [ 603.901686][ T29] audit: type=1804 audit(1719352085.533:1738): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2283" name="/root/syzkaller.BeXfjt/82/file0/cgroup.controllers" dev="loop1" ino=17 res=1 errno=0 [ 603.928837][T13076] syz.1.2283: attempt to access beyond end of device [ 603.928837][T13076] loop1: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 605.037223][ T5136] usb 2-1: string descriptor 0 read error: -71 [ 605.054590][ T5136] usb 2-1: USB disconnect, device number 27 [ 605.066280][T11331] syz-executor: attempt to access beyond end of device [ 605.066280][T11331] loop1: rw=2049, sector=45224, nr_sectors = 24 limit=40427 [ 605.114654][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 605.121739][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 605.169040][T11331] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 605.234585][ T5092] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 605.427174][ T5092] usb 4-1: Using ep0 maxpacket: 32 [ 605.453645][ T5092] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 605.482168][ T5092] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 605.527276][ T5092] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 605.550737][ T5092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.583425][ T5092] usb 4-1: config 0 descriptor?? [ 605.604952][T13088] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 605.636201][ T5092] hub 4-1:0.0: USB hub found [ 605.854212][ T5092] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 606.085915][ T5092] usbhid 4-1:0.0: can't add hid device: -71 [ 606.101970][ T5092] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 606.136433][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 606.149553][ T5136] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 606.356322][ T5136] usb 1-1: Using ep0 maxpacket: 8 [ 606.373477][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2306'. [ 606.375864][ T5136] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 606.382757][T13100] bridge_slave_1: left allmulticast mode [ 606.400831][ T5092] usb 4-1: USB disconnect, device number 29 [ 606.425147][T13100] bridge_slave_1: left promiscuous mode [ 606.432376][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.611749][T13100] bridge_slave_0: left allmulticast mode [ 606.642324][T13100] bridge_slave_0: left promiscuous mode [ 606.674405][T13101] loop1: detected capacity change from 0 to 512 [ 606.684914][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.736480][T13101] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2305: corrupted in-inode xattr: e_value out of bounds [ 606.814269][T13101] EXT4-fs (loop1): Remounting filesystem read-only [ 606.856447][T13101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.017314][ T5136] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 607.027824][ T5136] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.039782][ T5136] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.052980][ T5136] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.059417][T11331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.063227][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.292977][ T5136] usb 1-1: GET_CAPABILITIES returned 0 [ 607.314566][ T5136] usbtmc 1-1:16.0: can't read capabilities [ 607.349614][T13117] loop3: detected capacity change from 0 to 512 [ 607.378112][T13117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 607.415341][T13117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 607.423456][T13117] System zones: 1-12 [ 607.468461][T13117] EXT4-fs (loop3): 1 truncate cleaned up [ 607.486035][T13117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.515756][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 607.523839][ T5092] usb 1-1: USB disconnect, device number 32 [ 607.717191][ T8] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 607.743403][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.768066][ T7933] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.r3BO0h/363/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 607.798794][ T8] usb 5-1: config 0 descriptor?? [ 607.819910][ T7933] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 607.856986][ T7933] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.r3BO0h/363/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 607.898705][ T7933] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 607.932981][ T7933] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.r3BO0h/363/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 607.965612][ T7933] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 607.974325][T13122] loop1: detected capacity change from 0 to 32768 [ 607.995995][ T7933] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.r3BO0h/363/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 608.024074][ T8] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 608.042649][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 608.082572][T13122] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 608.090244][ T7933] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 608.125242][ T7933] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.r3BO0h/363/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 608.185129][ T7933] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 608.270373][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 608.282680][T13122] XFS (loop1): Ending clean mount [ 608.324203][T13122] XFS (loop1): Quotacheck needed: Please wait. [ 608.337542][ T8] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 608.371912][ T8] [drm] Initialized udl on minor 2 [ 608.379901][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 608.391898][ T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 608.400127][ T5092] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 608.410215][ T8] usb 5-1: USB disconnect, device number 25 [ 608.416527][ T5092] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 608.546964][T13122] XFS (loop1): Quotacheck: Done. [ 609.618881][T11331] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 609.742021][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2319'. [ 610.287160][T13152] loop4: detected capacity change from 0 to 512 [ 610.478325][T13152] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.2323: corrupted in-inode xattr: e_value out of bounds [ 610.600899][T13152] EXT4-fs (loop4): Remounting filesystem read-only [ 610.651764][T13152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.891646][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2321'. [ 610.903419][ T7933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.966461][ T8869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.212964][ T2451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.520640][ T2451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.722197][ T2451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.928533][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'. [ 612.902201][ T2451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.941738][T13187] libceph: resolve '. [ 612.941738][T13187] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 612.941738][T13187] ' (ret=-3): failed [ 613.160254][ T5083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.179004][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.192109][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.205657][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.221930][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.231149][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.392785][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 613.411665][ T2451] bridge_slave_1: left allmulticast mode [ 613.422278][ T2451] bridge_slave_1: left promiscuous mode [ 613.437299][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.444792][ T5136] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 613.485464][ T2451] bridge_slave_0: left allmulticast mode [ 613.501757][ T2451] bridge_slave_0: left promiscuous mode [ 614.747494][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.814826][ T5136] usb 1-1: Using ep0 maxpacket: 8 [ 614.871575][ T5136] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.908103][ T5136] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 614.960174][ T5136] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.999115][ T5136] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 615.013247][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.031750][ T5136] usb 1-1: Product: syz [ 615.044625][ T5136] usb 1-1: Manufacturer: syz [ 615.062598][ T5136] usb 1-1: SerialNumber: syz [ 615.095476][ T5136] usb 1-1: config 0 descriptor?? [ 615.124364][ T5136] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 615.275182][ T5083] Bluetooth: hci2: command tx timeout [ 616.329623][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.380419][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.411466][ T2451] bond0 (unregistering): Released all slaves [ 616.488519][T13198] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2337'. [ 616.517194][T13195] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2337'. [ 616.815831][ T5136] pwc: Failed to set LED on/off time (-71) [ 616.839181][ T5136] pwc: send_video_command error -71 [ 616.847384][ T5136] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 616.856822][ T5136] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 616.876453][ T5136] usb 1-1: USB disconnect, device number 33 [ 616.900777][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2345'. [ 617.354690][ T5083] Bluetooth: hci2: command tx timeout [ 617.956172][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 617.981269][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'. [ 617.991098][T13234] bridge_slave_1: left allmulticast mode [ 618.001588][T13234] bridge_slave_1: left promiscuous mode [ 618.008191][T13234] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.019611][T13234] bridge_slave_0: left allmulticast mode [ 618.025884][T13234] bridge_slave_0: left promiscuous mode [ 618.032039][T13234] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.434647][ T5083] Bluetooth: hci2: command tx timeout [ 619.569952][ T2451] hsr_slave_0: left promiscuous mode [ 619.595322][ T2451] hsr_slave_1: left promiscuous mode [ 619.629230][T13247] netlink: 860 bytes leftover after parsing attributes in process `syz.1.2353'. [ 619.783323][ T2451] veth1_macvtap: left promiscuous mode [ 619.840807][ T2451] veth0_macvtap: left promiscuous mode [ 619.901391][ T2451] veth1_vlan: left promiscuous mode [ 619.920807][ T2451] veth0_vlan: left promiscuous mode [ 620.988038][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'. [ 621.472611][T13265] loop4: detected capacity change from 0 to 512 [ 621.486430][T13265] EXT4-fs: Ignoring removed mblk_io_submit option [ 621.516237][ T5083] Bluetooth: hci2: command tx timeout [ 621.524078][T13265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a065e01c, mo2=0102] [ 621.540318][T13265] System zones: 1-12 [ 621.558260][T13265] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.2357: casefold flag without casefold feature [ 621.592657][T13265] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2357: couldn't read orphan inode 15 (err -117) [ 621.659202][T13265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.823747][ T8869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.311983][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 622.335027][T13277] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2359'. [ 623.243160][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 623.287220][T13281] team0: entered promiscuous mode [ 623.292329][T13281] team_slave_1: entered promiscuous mode [ 623.315213][T13281] team0: left promiscuous mode [ 623.321238][T13281] team_slave_1: left promiscuous mode [ 623.386037][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 623.560405][ T5083] Bluetooth: hci1: unexpected event for opcode 0x040d [ 623.682945][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 623.707316][T13194] chnl_net:caif_netlink_parms(): no params data found [ 623.976227][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 624.201714][T13304] team0: entered promiscuous mode [ 624.218580][T13304] team_slave_1: entered promiscuous mode [ 624.309906][T13303] team0: left promiscuous mode [ 624.333886][T13303] team_slave_1: left promiscuous mode [ 624.373304][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.410564][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.450495][T13194] bridge_slave_0: entered allmulticast mode [ 624.497918][T13194] bridge_slave_0: entered promiscuous mode [ 624.554267][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.605476][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.651371][T13194] bridge_slave_1: entered allmulticast mode [ 624.688334][T13194] bridge_slave_1: entered promiscuous mode [ 624.800856][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.807332][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.724735][ T30] INFO: task syz.2.1653:11023 blocked for more than 143 seconds. [ 625.732526][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 625.784621][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.798399][ T30] task:syz.2.1653 state:D stack:22744 pid:11023 tgid:11018 ppid:6093 flags:0x00000004 [ 625.837126][ T30] Call Trace: [ 625.862239][ T30] [ 625.886532][ T30] __schedule+0x1796/0x49d0 [ 625.905853][ T30] ? __pfx___schedule+0x10/0x10 [ 625.933158][ T30] ? __pfx_lock_release+0x10/0x10 [ 625.965065][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 625.991692][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 626.010846][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 626.020732][ T30] ? schedule+0x90/0x320 [ 626.032284][ T30] schedule+0x14b/0x320 [ 626.041364][ T30] ? down_read+0x6a5/0xa40 [ 626.053829][ T30] schedule_preempt_disabled+0x13/0x30 [ 626.061015][ T30] down_read+0x705/0xa40 [ 626.069067][ T30] ? __pfx_down_read+0x10/0x10 [ 626.074091][ T30] ? __d_lookup+0x85/0x7e0 [ 626.092386][ T30] lookup_slow+0x45/0x70 [ 626.097282][ T30] walk_component+0x2e1/0x410 [ 626.102247][ T30] path_lookupat+0x16f/0x450 [ 626.111848][ T30] filename_lookup+0x256/0x610 [ 626.116992][ T30] ? __pfx_filename_lookup+0x10/0x10 [ 626.122554][ T30] ? strncpy_from_user+0x1a4/0x2f0 [ 626.129182][ T30] ? getname_flags+0x1fe/0x4f0 [ 626.138003][ T30] user_path_at_empty+0x42/0x60 [ 626.143055][ T30] __se_sys_mount+0x29a/0x3c0 [ 626.149349][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 626.158970][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 626.164896][ T30] ? do_syscall_64+0x100/0x230 [ 626.169885][ T30] ? __x64_sys_mount+0x20/0xc0 [ 626.187485][ T30] do_syscall_64+0xf3/0x230 [ 626.201817][ T30] ? clear_bhb_loop+0x35/0x90 [ 626.214758][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.224220][ T30] RIP: 0033:0x7fc252975ae9 [ 626.234663][ T30] RSP: 002b:00007fc2536e0048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 626.253521][ T30] RAX: ffffffffffffffda RBX: 00007fc252b04070 RCX: 00007fc252975ae9 [ 626.274855][ T30] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000380 [ 626.282909][ T30] RBP: 00007fc2529f6746 R08: 0000000000000000 R09: 0000000000000000 [ 626.314850][ T30] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000000 [ 626.322929][ T30] R13: 000000000000006e R14: 00007fc252b04070 R15: 00007ffe1ee18558 [ 626.344561][ T30] [ 626.347706][ T30] INFO: task syz.2.1653:11033 blocked for more than 144 seconds. [ 626.364520][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 626.372237][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.404757][ T30] task:syz.2.1653 state:D stack:27392 pid:11033 tgid:11018 ppid:6093 flags:0x00000004 [ 626.424523][ T30] Call Trace: [ 626.427903][ T30] [ 626.430879][ T30] __schedule+0x1796/0x49d0 [ 626.444559][ T30] ? __pfx___schedule+0x10/0x10 [ 626.449519][ T30] ? __pfx_lock_release+0x10/0x10 [ 626.464542][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 626.470665][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 626.494550][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 626.499858][ T30] ? schedule+0x90/0x320 [ 626.504259][ T30] schedule+0x14b/0x320 [ 626.526739][ T30] schedule_preempt_disabled+0x13/0x30 [ 626.532294][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 626.544524][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 626.550568][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 626.561999][T13314] loop4: detected capacity change from 0 to 40427 [ 626.571004][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 626.582284][ T30] __down_write_common+0x1af/0x200 [ 626.587802][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 626.593364][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 626.606633][ T30] ? __pfx___down_write_common+0x10/0x10 [ 626.612618][ T30] path_openat+0x7d3/0x3280 [ 626.620044][ T30] ? mark_lock+0x9a/0x350 [ 626.627475][T13314] F2FS-fs (loop4): Found nat_bits in checkpoint [ 626.627555][ T30] ? mark_lock+0x9a/0x350 [ 626.641277][ T30] ? __pfx_path_openat+0x10/0x10 [ 626.649046][ T30] do_filp_open+0x235/0x490 [ 626.653718][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 626.661523][ T30] ? _raw_spin_unlock+0x28/0x50 [ 626.669002][ T30] ? alloc_fd+0x5a1/0x640 [ 626.673606][ T30] do_sys_openat2+0x13e/0x1d0 [ 626.681066][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 626.689276][ T30] __x64_sys_openat+0x247/0x2a0 [ 626.694272][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 626.705285][ T30] ? exc_page_fault+0x590/0x8c0 [ 626.710299][ T30] ? do_syscall_64+0xb6/0x230 [ 626.721216][ T30] do_syscall_64+0xf3/0x230 [ 626.727396][ T30] ? clear_bhb_loop+0x35/0x90 [ 626.732219][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.742354][ T30] RIP: 0033:0x7fc252975ae9 [ 626.748209][ T30] RSP: 002b:00007fc25369e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 626.760140][ T30] RAX: ffffffffffffffda RBX: 00007fc252b04210 RCX: 00007fc252975ae9 [ 626.769812][ T30] RDX: 0000000000105042 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 626.781734][ T30] RBP: 00007fc2529f6746 R08: 0000000000000000 R09: 0000000000000000 [ 626.781793][T13314] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 626.791447][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.814566][ T30] R13: 000000000000006e R14: 00007fc252b04210 R15: 00007ffe1ee18558 [ 626.822798][ T30] [ 626.849278][T13194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.867107][ T30] [ 626.867107][ T30] Showing all locks held in the system: [ 626.877877][T13314] syz.4.2368: attempt to access beyond end of device [ 626.877877][T13314] loop4: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 626.890757][ T30] 1 lock held by khungtaskd/30: [ 626.909816][T13194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.919710][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 626.941327][ T30] 3 locks held by kworker/u8:9/2451: [ 626.952548][ T30] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 626.965904][ T30] #1: ffffc90008f7fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 626.979538][ T30] #2: ffffffff8e339240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 626.989729][ T30] 2 locks held by getty/4843: [ 626.994608][ T30] #0: ffff88802b6130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 627.010160][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 627.020585][ T30] 1 lock held by syz-executor/8869: [ 627.026049][ T30] #0: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 627.037611][ T30] 3 locks held by syz.2.1653/11019: [ 627.043202][ T30] 1 lock held by syz.2.1653/11023: [ 627.053086][ T30] #0: ffff88806a18b600 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 627.063329][ T30] 2 locks held by syz.2.1653/11033: [ 627.073827][ T30] #0: ffff88802a540420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 627.083315][ T30] #1: ffff88806a18b600 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x7d3/0x3280 [ 627.098924][ T30] 2 locks held by syz-executor/13194: [ 627.104599][ T30] #0: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 627.116640][ T30] #1: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 627.140234][ T8869] syz-executor: attempt to access beyond end of device [ 627.140234][ T8869] loop4: rw=2049, sector=45216, nr_sectors = 16 limit=40427 [ 627.157177][ T30] [ 627.159561][ T30] ============================================= [ 627.159561][ T30] [ 627.179362][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 627.188475][T13194] team0: Port device team_slave_0 added [ 627.195244][ T30] NMI backtrace for cpu 1 [ 627.199625][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 627.209557][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 627.219662][ T30] Call Trace: [ 627.223070][ T30] [ 627.226034][ T30] dump_stack_lvl+0x241/0x360 [ 627.230771][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.234791][ T8869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 627.236001][ T30] ? __pfx__printk+0x10/0x10 [ 627.236035][ T30] ? vprintk_emit+0x631/0x770 [ 627.252239][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 627.257319][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 627.262301][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 627.267799][ T30] ? _printk+0xd5/0x120 [ 627.271971][ T30] ? __pfx__printk+0x10/0x10 [ 627.276595][ T30] ? __wake_up_klogd+0xcc/0x110 [ 627.282184][ T30] ? __pfx__printk+0x10/0x10 [ 627.286811][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 627.291870][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 627.297934][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 627.304024][ T30] watchdog+0xfde/0x1020 [ 627.308288][ T30] ? watchdog+0x1ea/0x1020 [ 627.312729][ T30] ? __pfx_watchdog+0x10/0x10 [ 627.317422][ T30] kthread+0x2f0/0x390 [ 627.321507][ T30] ? __pfx_watchdog+0x10/0x10 [ 627.326286][ T30] ? __pfx_kthread+0x10/0x10 [ 627.330918][ T30] ret_from_fork+0x4b/0x80 [ 627.335366][ T30] ? __pfx_kthread+0x10/0x10 [ 627.339978][ T30] ret_from_fork_asm+0x1a/0x30 [ 627.344776][ T30] [ 627.349258][ T30] Sending NMI from CPU 1 to CPUs 0: [ 627.355426][ C0] NMI backtrace for cpu 0 [ 627.355441][ C0] CPU: 0 PID: 5192 Comm: kworker/0:7 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 627.355461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 627.355472][ C0] Workqueue: events nsim_dev_trap_report_work [ 627.355506][ C0] RIP: 0010:filter_irq_stacks+0x59/0xa0 [ 627.355527][ C0] Code: ff c7 48 83 c3 08 4d 39 fc 74 4f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 27 99 76 00 <4b> 8b 04 fe 48 39 e8 72 0c 48 c7 c1 70 16 a0 8b 48 39 c8 72 11 4c [ 627.355543][ C0] RSP: 0018:ffffc900043cf778 EFLAGS: 00000246 [ 627.355557][ C0] RAX: 1ffff92000879f0c RBX: ffffc900043cf860 RCX: dffffc0000000000 [ 627.355572][ C0] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffc900043cf810 [ 627.355583][ C0] RBP: ffffffff8ba00230 R08: ffffffff81410b73 R09: ffffffff8140f6b2 [ 627.355597][ C0] R10: 0000000000000002 R11: ffff888027673c00 R12: 000000000000000b [ 627.355609][ C0] R13: ffffffff8b882130 R14: ffffc900043cf810 R15: 000000000000000a [ 627.355622][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 627.355637][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.355650][ C0] CR2: 00007ffafa8d0ab8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 627.355666][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 627.355677][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 627.355689][ C0] Call Trace: [ 627.355695][ C0] [ 627.355704][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 627.355724][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 627.355745][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 627.355765][ C0] ? nmi_handle+0x2a/0x5a0 [ 627.355801][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 627.355822][ C0] ? nmi_handle+0x14f/0x5a0 [ 627.355848][ C0] ? nmi_handle+0x2a/0x5a0 [ 627.355875][ C0] ? filter_irq_stacks+0x59/0xa0 [ 627.355893][ C0] ? default_do_nmi+0x63/0x160 [ 627.355913][ C0] ? exc_nmi+0x123/0x1f0 [ 627.355932][ C0] ? end_repeat_nmi+0xf/0x53 [ 627.355959][ C0] ? __lock_text_end+0x6/0x6 [ 627.355976][ C0] ? xen_error_entry+0x60/0x60 [ 627.356000][ C0] ? unwind_next_frame+0x6c2/0x2a00 [ 627.356023][ C0] ? unwind_next_frame+0x1b83/0x2a00 [ 627.356049][ C0] ? filter_irq_stacks+0x59/0xa0 [ 627.356067][ C0] ? filter_irq_stacks+0x59/0xa0 [ 627.356086][ C0] ? filter_irq_stacks+0x59/0xa0 [ 627.356103][ C0] [ 627.356109][ C0] [ 627.356118][ C0] stack_depot_save_flags+0x29/0x830 [ 627.356155][ C0] kasan_save_track+0x51/0x80 [ 627.356181][ C0] ? kasan_save_track+0x3f/0x80 [ 627.356204][ C0] ? kasan_save_free_info+0x40/0x50 [ 627.356225][ C0] ? poison_slab_object+0xe0/0x150 [ 627.356250][ C0] ? __kasan_slab_free+0x37/0x60 [ 627.356275][ C0] ? kmem_cache_free+0x145/0x350 [ 627.356296][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 627.356321][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 627.356339][ C0] ? worker_thread+0x86d/0xd70 [ 627.356356][ C0] ? kthread+0x2f0/0x390 [ 627.356375][ C0] ? ret_from_fork+0x4b/0x80 [ 627.356398][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 627.356450][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 627.356475][ C0] kasan_save_free_info+0x40/0x50 [ 627.356497][ C0] poison_slab_object+0xe0/0x150 [ 627.356523][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 627.356549][ C0] __kasan_slab_free+0x37/0x60 [ 627.356575][ C0] kmem_cache_free+0x145/0x350 [ 627.356600][ C0] nsim_dev_trap_report_work+0x765/0xaa0 [ 627.356636][ C0] ? process_scheduled_works+0x945/0x1830 [ 627.356653][ C0] process_scheduled_works+0xa2c/0x1830 [ 627.356687][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 627.356710][ C0] ? assign_work+0x364/0x3d0 [ 627.356731][ C0] worker_thread+0x86d/0xd70 [ 627.356758][ C0] ? __kthread_parkme+0x169/0x1d0 [ 627.356779][ C0] ? __pfx_worker_thread+0x10/0x10 [ 627.356798][ C0] kthread+0x2f0/0x390 [ 627.356818][ C0] ? __pfx_worker_thread+0x10/0x10 [ 627.356836][ C0] ? __pfx_kthread+0x10/0x10 [ 627.356857][ C0] ret_from_fork+0x4b/0x80 [ 627.356879][ C0] ? __pfx_kthread+0x10/0x10 [ 627.356902][ C0] ret_from_fork_asm+0x1a/0x30 [ 627.356936][ C0] [ 627.363204][T13194] team0: Port device team_slave_1 added [ 627.381431][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 627.381452][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 627.381481][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 627.381496][ T30] Call Trace: [ 627.381506][ T30] [ 627.381517][ T30] dump_stack_lvl+0x241/0x360 [ 627.381562][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.381598][ T30] ? __pfx__printk+0x10/0x10 [ 627.381628][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 627.381664][ T30] ? vscnprintf+0x5d/0x90 [ 627.381692][ T30] panic+0x349/0x860 [ 627.381726][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 627.381757][ T30] ? __pfx_panic+0x10/0x10 [ 627.381786][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 627.381823][ T30] ? __irq_work_queue_local+0x137/0x410 [ 627.381850][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 627.381879][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 627.381905][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 627.381935][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 627.381967][ T30] watchdog+0x101d/0x1020 [ 627.381997][ T30] ? watchdog+0x1ea/0x1020 [ 627.382032][ T30] ? __pfx_watchdog+0x10/0x10 [ 627.382059][ T30] kthread+0x2f0/0x390 [ 627.382090][ T30] ? __pfx_watchdog+0x10/0x10 [ 627.382117][ T30] ? __pfx_kthread+0x10/0x10 [ 627.382154][ T30] ret_from_fork+0x4b/0x80 [ 627.382189][ T30] ? __pfx_kthread+0x10/0x10 [ 627.382219][ T30] ret_from_fork_asm+0x1a/0x30 [ 627.382271][ T30] [ 627.388201][ T30] Kernel Offset: disabled