last executing test programs: 3m15.246383298s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) 3m14.562663143s ago: executing program 0 (id=10): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 3m14.050674896s ago: executing program 32 (id=9): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/254, 0xfe, 0x22, 0x0, 0x0) 3m13.922343599s ago: executing program 0 (id=12): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x689, 0xa}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x4}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4710c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m13.299652655s ago: executing program 33 (id=12): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x689, 0xa}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x4}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4710c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m4.584163296s ago: executing program 4 (id=42): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 3m3.920495983s ago: executing program 4 (id=45): socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 3m3.547602168s ago: executing program 4 (id=47): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 3m3.341576982s ago: executing program 4 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") 3m2.55997137s ago: executing program 4 (id=52): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setreuid(0xee00, 0x0) r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) r1 = getuid() fchown(r0, r1, 0xffffffffffffffff) setreuid(0x0, r1) fchdir(r0) 3m1.62086499s ago: executing program 4 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 3m0.90141014s ago: executing program 34 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 2m31.319797143s ago: executing program 7 (id=13): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x40044) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x6, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_nat={0x54, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x7, 0x10000000, 0x1000, 0x6}, @empty, @local, 0xffffffff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x5c840}, 0x20008005) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m30.877663319s ago: executing program 7 (id=148): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m27.014113106s ago: executing program 7 (id=164): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$eJzs3MtrY1UcB/CTPqbzciziwt1cGIQWJqHpY9Bd1Rl8YIfiY+FK0yQNmUlyS5OmtSsFl+LC/0QUXLn0b3Dh2p24UNwJSu45lamOoDRt7PTzgdvvvSc3v/s7obScm5AAXFjz2a8/l8KNcCWEMB1CuB5CsV9KW2E9xnMhhJshhKlHtlIa/3PgUgjhagjhxqh4rFlKD31+e3hr7ac3fvnmu7mZa198/f3kZg1M2vMhhO5O3N/vxsxbMR+k8dqwXWR3dZgyPtB9mI7zmPvNraLCfu3ovFqRK614fr6z1x/ldqdWH2WrvV2M7/TiBfvD1lGd4gkParvFcaO5VWS7nxfZOox9HRzGv22H/UGs00j1PizKh8HgKON486AZ57PzsMh6b5DGY9280TwY5TBlulyo551G0cfWSV7p/7c32729g2zY3O238162Vqm+UKneKVd380Zz0Fwt17qNO6vZQqszOq08aNa66608b3WalXreXcwWWvV6uVrNFu42t9q1XlatVlYqS+W1xbR3O3v1/rtZp5EtjPLldm9v0O70s+18N4vPWMyWKysvLma3qtnbG5vZ5lv37m1svvP+3ffuv7Tx+ivppL+1lS0sLy0vl6tL5eXq4vmd/+h//X+a/yep6THOH06kNOkGAM4f639gEs77+j9Y/4+F9f/Fnj+ciPU/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCF9cPsl68VO/Px+FoafyoNPZOOSyGEqRDC748xHS4dqzmd6sz+w/mzf+nh21IoKoyuMZe2qyGE9bT99vRpvwoAAADw5Prqo5ufxdV6/DE/6YY4S/GmzdT1D8ZUrxRCmJ3/cQxVQrrZFJ49eVfR6Pd7JhyMqVpxA+vymIrFW24z46r2r0wfi8uPRCnG1OOf9/GZdAcAAJyO4yuBs12FAAAAcJY+nXQDTEbxTmv6LH76AP9cjPSG4JVjRwAAAMA5VJp0AwAAAMCpK9b/vv8PAAAAnmzx+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3buJyd1KIoD8Gmh7/H+GIlx7lacwTJcgkOHhgW4CZaAW3ADrAFnLsGAoS3RGkxMettG8n1Je7kN+XFKmJx7SQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC49F6v54/3VQ9uc7a6dNHcDAAAAHLMpVvPyxbSa/6uvn9WXLup5FhF5RBzr3Ufxq5E5qnOKL95ffKrhKaJM2H/G7/r4GxHX9fF63vW3AAAAAKdrvVjOqm69Ok2HLog+VYs2+f+bRHlZRBTTl0Rp+f50mSis/H2P4y5RWrmANUkUVi25jVOlfcuoMUw+DFk15L2WAwAA9KLZCfTbhQAAANCn26ELYBhZHLYyD3vB5T/v3zcE/zRmAAAAwA+UDV0AAAAA0Lmy//f8PwAAADht1fP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NKmWM3Xi+Wsbc52106auwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf25xwFQyCMAWj+xa2TOYb3P6AExNLW5j0YCAlTfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDkc73jbn5t9iT/JN+GqfVIMndqWDo1rJ0btn4Yb14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzV7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X2kBcQR0QxACiQEWer2Wlq4MoIiBPwEpSq8lcOVHm4FWFVIWNpS5C4IRISRQ2Po/dG6lLmXrcEORmBhA9tnJ6xGJgyj2Jfl8pOf3tWX5fZ8TRfn6+Q4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqE3e2Y2zYtObxml17N7jW2tFf3+mL9zZerBctCJOmkz6cHg53kn67SUCAADA8ZHV9X0I4WG+vVL0aa+s//P6nKLm/+7ZaVzX87N1f93XtX/Rfv3l0Ys7A/Wm4xQXvbw+Hp35Zyqdg5vlYnvuX8/olHe+fPaSlT+Q9P3NFyZ5eT+Tb+7efbdbhieayBYA+D9O130V1P8PFf2wzcQAODY6UeFd1/9Zr92cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrQ3QxP13ESQlju7MaF+49vrZX9zP6drQfLdbtw+/ZWfM3iEnkI4fL6eHSmqYkcAtdv3PxkdTweXWs+eCWE0N7oVfDhHOeE0GaGgv0GafW7vij5HI6g5T9MAAAcOXnVirr+Yb69UhxLlkL46/sn6//XozjE9f9MH9f/jz66cC8eK67/h43NcPENNq5+Prh+4+ab61dXr4yujD596+zw7eG5i+fPXxyUz0oGnpgAAACwP92qxfV/uhTCZGb9/1QUhznr/y++HX4Vj5Wp//e0u+jXdiYAAADH2/Ov/vF7ssfxpNsNX65ubFwbTrc7+2en2xZS/c9OVC2u/7OltrMCAAAAmjDZTJ5Y/78UxWHO9f9nfnjpp/iaWQjhZLX+f3rts/Gl5qbTkj/nOquJjxMf+FQBAABYaCerFq//5+X7/+nOKw9pCOGN16Zx9TWAc9X/2Xtf/xiPFb//f665KS6ktD+9H2XfD6HTbzsjAAAAjrKnqlYU+7/l2ysf/3zqg673/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9ncAAAD//99iPvs=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x100003) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x5, 0x100000001, 0x6}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x18b27e, 0x20) write$FUSE_LSEEK(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0xf47}}, 0x18) 2m22.940773359s ago: executing program 7 (id=177): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES16, @ANYBLOB="2c747970653d0b3cbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2ef127e38e0aa2229f9cf6a850300"/71, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 2m20.989754207s ago: executing program 7 (id=183): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 2m19.184803762s ago: executing program 7 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m18.023791871s ago: executing program 35 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m53.513571799s ago: executing program 6 (id=302): socket$kcm(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000100)={0x0, 0xfffffffd, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 1m52.888456755s ago: executing program 6 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1m52.281081436s ago: executing program 6 (id=307): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r0, 0x0, 0x8}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 1m51.864005043s ago: executing program 6 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r1, &(0x7f0000000240)=""/48, 0x30) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000480)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") getdents(r1, 0x0, 0x0) 1m50.3341446s ago: executing program 6 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xe, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 1m48.832903925s ago: executing program 6 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m47.817707897s ago: executing program 36 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 53.208337854s ago: executing program 9 (id=592): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) 51.857474055s ago: executing program 9 (id=601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0) 50.376105266s ago: executing program 9 (id=605): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) 49.869460762s ago: executing program 9 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 49.147891068s ago: executing program 9 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.639907809s ago: executing program 2 (id=707): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 14.610726152s ago: executing program 2 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x803, &(0x7f00000007c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@namecase}, {@discard}, {@errors_continue}, {@discard}, {@dmask={'dmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fmask={'fmask', 0x3d, 0x7}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@errors_remount}, {@codepage={'codepage', 0x3d, 'macturkish'}}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@utf8}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x117f6a13}}, {@measure}, {@audit}, {@obj_type={'obj_type', 0x3d, 'discard'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}, 0x5, 0x1522, &(0x7f00000037c0)="$eJzs3Au4TdX6MPD3HWPMbZO02sllM8Z4Jyu5DDtJckkqlyRJkiS3xE7ayZGExCa3pE0SkssmuWxCctmx03a/369JkiRJQnJLxvds8alT5zvf+Z/+Oc/Z7+955rPmu8Z6x3znetdlzvmsZ33baXCNRjXvakBE8G/BX26SASAWAPoDwDUAEABAubhycVnjOSUm/3sbYX+uh9OudAXsSuL+Z2/c/+yN+5+9cf+zN+5/9sb9z964/9kb95+x7Gzj1ILX8pJ9F77+n53x9/9/DwGlR3+5uvT1nf+FHO5/9sb9/68V/P88iPufvXH/szfuf/bG/c8OcvzDEe5/9sb9Zyw7u9LXn/9uiYErX8OFJcd/QA1/xXKlX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKH0/4yBQBZt5ErXRRjjDHGGGOMMcb+VD7Hla6AMcYYY4wxxhhj//sQBEhQEEAM5IBYyAm5QADA1ZAHroEIXAtxcB3kheshH+SHAlAQ4qEQFAYNBiwQhFAEikIUboBicCMUhxJQEkqBg9KQADdBGbgZysItUA5uhfJwG1SAilAJKsPtUAXugKpwJ9wFd0M1qA41oCbcA7XgXqgN90EduB/qwgNQDx6E+vAQNICHoSE8Ao3gUWgMj0ETaArNoDm0+B/lvwjd4CXoDj0gGXpCL3gZekMf6Av9oD+8AgPgVRgIr0EKDILB8DoMgTdgKLwJw2A4jIC3YCS8DaNgNIyBsZAK42A8vAMT4F2YCJNgMkyBNJgK0+A9mA4zYCa8D7PgA5gNc2AuzIN0+BDmwwLIgI9gIXwMmbAIFsMSWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCttgO+yAnfAJ7IJPYTd8Bnvg838x/9Tf5XdGQECBAhUqjMEYjMVYzIW5MDfmxjyYByMYwTiMw7yYF/NhPiyABTAe47EwFkaDBgkJi2ARjGIUi2ExLI7FsSSWRIcOEzABy+DNWBbLYjksh+WxPFbAilgRK2NlrIJVsCpWxbvwLqyG1bAG1sB78B7sibWxNtbBOlgX6166PIUNsAE2xIbYCBthY2yMTbAJNsNm2AJbYEtsia2wFSZiIrbBNtgW22ISJmE7bIftsT12wA7YETtiJ+yEnbELdsEXcwC+hC9hD6wmemIv7IW9MSVHX+yH/fAVHICv4qv4GqbgIByMr+Pr+AYOxZM4DIfjCByBVcTbOApHI4mxmIqpOB7H4wScgBNxEk7CKZiGU3EaTsPpOANn4Ps4Cz/AD3AOzsF5mI7pOB8XYAZm4EI8hZm4CBfjElyKy3AprsCVuAJX4xpcjetwHW7ADbgJN+EW3ILbcBvuQAWAn+Cn+Cmm4B7cg3txL+7Dfbgf9+MBPIAH8SAewkN4GA/jETyCR/EYHsdjeAJP4Ek8hafxNJ7Fs3gOn4//uuGOEqtSQGRRQokYESNiRazIJXKJ3CK3yCPyiIiIiDgRJ/KKvCKfyCcKiAIiXsSLwqKwMMIIEmEMAIioiIpiopgoLoqLkqKkcMKJBJEgyogyoqwoK8qJW0V5cZuoICqK1q6yqCyqiERXVdwp7hJ3iWqiuqghaoqaopaoJWqL2qKOqCPqirqinnhQ1Bc9sS8+LLI600gMwsZiMDYRTYW8+AnWUgzFVqK1SBRPiuE4DNuKli5JPCPaiVHYXvxNjMbnREcxFjuJF0Rn0UV0FS+KbqKV6y56iInYU/QSU7C36CP6in5iOlYX7+OsnDXEayJFDBKDxetiHr4hhoo3xTAxXIwQb4mR4m0xSowWY8RYkSrGifHiHTFBvCsmiklispgi0sRUMU28J6aLGWKmeF/MEh+I2WKOmCvmiXTxoZgvFogM8ZFYKD4WmWKRWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIneITsUt8KnaLz8Qe8bnYK74Q+8SXYr/4ShwQX4uD4htxSHwrDovvxBHxvTgqjonj4gdxQvwoTopT4rQ4I86Kn8Q58bM4L7wAiVJIKZUMZIzMIWNlTplLXiVzy+Dis3utjJPXybzyeplP5pcFZEEZLwvJwlJLI60kGcoisqiMyhtkMXmjLC5LyJKylHSytEyQN8ky8mZZVt4iy8lbZXl5m6wgK8pKsrK8XVaRd0i4+FOzarK6rCFryntkLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTWRT2Uw2ly3k47KlfEK2kq1lonxStpFPybbyaZkkn5HtpL/4EnlOdpTPy07yBdlZdpFd5c/yvPSyu+whAXrKXvJl2Vv2kX1lP9lfviIHyFflQPmaTJGD5GD5uhwi35BD5ZtymBwuR8i35Ej5thwlR8sxcqxMlePkePmOnCDflRPlJDlZTpFpcqrse3GmmVL+0/x3/iB/4IWtb5Ab5Sa5WW6RW+U2uV3ukDvlTrlL7pK75W65R+6Re+VeuU/uk/vlfnlAHpAH5UF5SB6Sh+VheUQekUflMXlG/iBPyB/lSXlKnpJn5Fl5Vp67+ByAQiWUVEoFKkblULEqp8qlrlK51dUqj7pGRdS1Kk5dp/Kq61U+lV8VUAVVvCqkCiutjLKKVKiKqKIqqm7Aiy8YVVKVUk6VVgnqpn8lXxVTN6riqsRv8i/Vl/wP6muhWqiWqqVqpVqpRJWo2qg2qq1qq5JUkmqn2qn2qr3qoDqojqqj6qQ6qc6qs+qquqpuqpvqrrqrZJWseqmXVW/VR/VV/VR/9YoaoAaogWqgSlEparAarIaoIWqoGqqGqWFqhBqhRqqRapQapcaoMSpVparxaryaoCaoiWqimqwmqzSVpqapaWq6mq5mqplqlpqlZqvZaq6aq9JVupqv5qsMlaEWqoUqUy1Si9QStUQtU8vUCrVCrVKr1Bq1Rq1T61Sm2qg2qs1qs9qqtqrtarvaqXaqXWqX2q12qz1qj9qr9qp9ap/ar/arA+qAOqgOqkPqkDqsDqsj6og6qo6q4+q4OqFOqJPqpDqtTquz6qw6p86p8+p81mFfIAIRqEAFMUFMEBvEBrmCXEHuIHeQJ8gTRIJIEBfEBXmD64N8Qf6gQFAwiA8KBYUDHZjABuJi06PBDUGx4MageFAiKBmUClxQOkgIbgrKBDcHZYNbgnLBrUH54LagQlAxqBRUDm4PqgR3BFWDO4O7gruDakH1oEZQM7gnqBXcG9QO7gvqBPcHdYMHgnrBg0H94KGgQfBw0DB4JGgUPBo0Dh4LmgRNg2ZB86DFnzq/9yfzP+G66x46WffUvfTLurfuo/vqfrq/fkUP0K/qgfo1naIH6cH6dT1Ev6GH6jf1MD1cj9Bv6ZH6bT1Kj9Zj9Fidqsfp8fodPUG/qyfqSXqynqLT9FQ9Tb+np+sZeqZ+X8/SH+jZeo6eq+fpdP2hnq8X6Az9kV6oP9aZepFerJfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+id+hO9S3+qd+vP9B79ud6rv9D79Jd6v/5KH9Bf64P6G31If6sP6+/0Ef29PqqP6eP6B31C/6hP6lP6tD6jz+qf9Dn9sz6vfdbBfdbXu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXO7ud3cYe4wd5o7zd3mblPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mokm0bQxbUxb09YkmSTTzrQz7U1708F0MB1NR9PJdDKdTWfT1XQ13Uw30910N8km2fQyvUxv09v0NX1Nf9PfDDADzEAz0KSYFDPYDDZDzBAz1Aw1w8xwMyLrQNW8bUaZ0WaMGWtSTaoZb8abCWaCmWgmmslmskkzaWaamWamm+lmpplpZplZZraZbeaauSbdpJv5Zr7JMBlmoVloMk2mWWwWm6VmqVlulpuVZqVZbVabtbDWrDfrzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+wxe8xes9fsM/vMfrPfHDAHzEFz0Bwyh8xhc9gcMUfMUXPUHDfHzQlzwpw0J81pc9qcNfkvfl96E2tz2lz2KpvbXm3z2Gvs38cFbEEbbwvZwlbbfDb/b2JjrS1uS9iStpR1trRNsDf9Lq5gK9pKtrK93Vaxd9iqv4tr2XttbXufrWPvtzXtPb+J69oHbD37qK2PCGCb2oa2uW1kH7WN7WO2iW1qm9nmto19yra1T9sk+4xtZ5/9XTzfLrAr7Sq72q6xu+yn9rQ9Yw/Zb+1Z+5PtbnvY/vYVO8C+agfa12yKHfS7eIR9y460b9tRdrQdY8f+Lp5sp9g0O9VOs+/Z6XbG7+J0+6GdZTPsbDvHzrXzLsRZNWXYj+xC+7HNtIvsYrvELrXL7HK74v/WusSus+vtBrvTfmI32y12q91mt9sdF+Ks/dhtP7N77Of2oP3G7rNf2v32sD1gv74QZ+3fYfudPWK/t0ftMXvc/mBP2B/tSXvqwv5n7fsP9md73noLhAQkSVFAMZSDYikn5aKrKDddTXnoGorQtRRH11Feup7yUX4qQAUpngpRYdJkyBJRSEWoKEXpBrp0nF6SSpGj0pRAN1EZupnK0i1Ujm6l8nQbVaCKVIkq0+1Uhe6gqnQn3UV3UzWqTjWoJt1Dteheqk33UR26n+rSA1SPHqT69BA1oIepIT1CjehRakyPURNqSs2oObWgx6klPUGtqDUl0pPUhp6itvQ0JdEz1I6epfb0N+pAz1FHep460QvUmbpQV3qRutFL1J16UDL1pF70MvWmPtSX+lF/eoUG0Ks0kF6jFBpEg+l1GkJv0FB6k4bRcBpBb9FIeptG0WgaQ2MplcbReHqHJtC7NJEm0WSaQmk0labRezSdZtBMep9m0Qc0m+bQXJpH6fQhzacFlEEf0UL6mDJpES2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQTvpE9pFn9Ju+oz20Oe0l76gffQl7aev6AB9TQfpGzpE39Jh+s73oO/pKB2j4/QDnaAf6SSdotN0hs7ST3SOfqbz5AlCDEUoQxUGYUyYI4wNc4a5wqvC3OHVYZ7wmjASXhvGhdeFecPrw3xh/rBAWDCMDwuFhUMdmtCGFIZhkbBoGA1vCIuFN4bFwxJhybBU6MLSYUJ4U1gmvDksG94SlgtvDcuHt4UVworho/dXDm8Pq4R3hFXDO8PE8O6wWlg9rBHWDO8Ja4X3hrXD+8I64f1h2fCBsF74YFg/fChsED4cNgwfCRuFj4aNw8fCJmHTsFnYPGwRPh62DJ8IW4Wtw8TwybBN+FTYNnw6TAqfCduFz14Yf2DBhXGEPxhPDnuGvcKXw5dD7++Tc6PzounRD6PzowuiGdGPogujH0czo4uii6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbot7XzAEOnXDSKRe4GJfDxbqcLpe7yuV2V7s87hoXcde6OHedy+uud/lcflfAFXTxrpAr7LQzzjpyoSviirqou8EVcze64q6EK+lKOedKuwTX3LVwLVxL94Rr5Vq7RPeke9I95Z5yT7un3TOunXvWtXd/cx3cc66je949715wnV0X19W96Lq5cXl+eU8mu16ul+vteru+rq/r7/q7AW6AG+gGuhSX4ga7wW6IG+KGuqFumBvmRrgRbqQb6Ua5UW6MG+NSXaob78a7CW6Cm+gmuslusktzaW6am+amu+muyoxftjLbzXZz3VyX7tLdfJd1zJjhFrqFLtNlusVusVvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul3+ml8mdXvcXrfX7XP73H73lTvgvnYH3TfukPvWHXbfuSPue3fUHXPH3Q/uhPvRnXSn3Gl3xp11P7lz7md33nmXGhkXGR95JzIh8m5kYmRSZHJkSiQtMjUyLfJeZHpkRmRm5P3IrMgHkdmROZG5kXmR9MiHkfmRBZGMyEeRhZGPI5mRRZHFkSWRpZFlEe8LbQ59EV/UR/0Nvpi/0Rf3JXxJX8o7X9on+Jt8GX+zL+tv8eX8rb68v81X8BV9Jf+Yb+Kb+ma+uW/hH/ct/RO+lW/tE/2Tvo1/yrf1T/sk/4xv55/17f3ffAf/nO/on/ed/Au+s+/iu/oXfTf/ku/ue/hk39P38i/73r6P7+v7+f7+FT/Av+oH+td8ih/kB/vX/RD/hh/q3/TD/HA/IuYtP/LSKTKM9al+nB/v3/ET/Lt+op/kJ/spPs1P9dP8e366n+Fn+vf9LP+Bn+3n+Ll+nk/3H/r5foHP8B/5hf5jn+kXXbqo7Jf7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x1+p//E7/Kf+t3+M7/Hf+73+i/8Pv+l3++/8gf81/6g/8Yf8t/6w/47f8R/74/6Y/64/8Gf8D/6k/6UP+3P+LP+J3/O/+zPe+//9EvjjDHGGGP/hcZdXhV/NJ78B/eJXz24FwBcvaXggV+PZx1Rrs33y3ofEd8mAgDP9Oj08KWlWrXk5EvzZkoIis4BgF/96UAMXI4XQSI8BUnQGsr8Yf19RJez9E/mj94KkOtXObFwOb48/xf/YP7Hnxwxv3x4Ou7/Mf8cgOJFL+fkhMvxIkhUWbetoew/mD9/y39Sf84vUwFa/SonN1yOL9efAE/As5D0m0cyxhhjjDHGGGO/6CMqdbh0/nnpF59/dH4ery7n5IDL8T87P2eMMcYYY4wxxtiV91yXrk8/npTUusO/vlL1f5TFK/+pK94DXLpHAcC/OSHAX74Xm/6SbaVcfOv8/dDSMz6A/4xW/hkrV/iDiTHGGGOMMfanu3zQ/9v71ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4b+ir8Tu9L7yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjF1p/ycAAP//hIYHWw==") 14.407449271s ago: executing program 9 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.516695842s ago: executing program 3 (id=725): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 12.079506384s ago: executing program 2 (id=728): socket$inet6(0xa, 0x3, 0x6) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 10.848655039s ago: executing program 8 (id=730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r3}, 0x10) 9.79223268s ago: executing program 3 (id=732): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES64], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 9.780299921s ago: executing program 2 (id=733): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) 7.8838124s ago: executing program 5 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 7.880727847s ago: executing program 8 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401870cb, &(0x7f0000000040)) 7.712817037s ago: executing program 3 (id=735): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) socket$key(0xf, 0x3, 0x2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.871469126s ago: executing program 8 (id=736): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 6.798221235s ago: executing program 2 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x74a, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 6.582640044s ago: executing program 5 (id=738): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, &(0x7f0000000100)=""/47}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 6.004524797s ago: executing program 3 (id=740): pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 6.004164631s ago: executing program 8 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 4.78990871s ago: executing program 1 (id=743): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x13, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 4.285342109s ago: executing program 1 (id=745): memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 3.433363659s ago: executing program 1 (id=746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) 3.29846773s ago: executing program 1 (id=748): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfdfe, @random="aa9f2d7f37b6", 'geneve1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) dup2(r1, r3) close(r2) 3.230523305s ago: executing program 5 (id=749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getresgid(0x0, &(0x7f0000002d00), &(0x7f0000002d40)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x2200004, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1a6, &(0x7f0000000b00)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2005012, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80a053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 3.113287648s ago: executing program 1 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x12, &(0x7f0000000000)=ANY=[], 0xff, 0x5a53, &(0x7f0000007f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') 2.157619221s ago: executing program 1 (id=751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x6}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.157365139s ago: executing program 5 (id=752): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x8, 0x13, r2, 0x80000000) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.070591084s ago: executing program 3 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1.070330369s ago: executing program 8 (id=754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 1.070097784s ago: executing program 5 (id=755): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0xfffffffd}}, 0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 688.677253ms ago: executing program 5 (id=756): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x2fc}], 0x1}}], 0x3, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 686.180443ms ago: executing program 2 (id=768): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') stat(&(0x7f0000000480)='mnt\x00', 0x0) 103.836656ms ago: executing program 3 (id=757): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 0s ago: executing program 8 (id=758): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) kernel console output (not intermixed with test programs): an active interface with an up link [ 129.578659][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.094552][ T5923] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 130.212699][ T5998] team0: Port device team_slave_0 added [ 130.267407][ T5996] team0: Port device team_slave_0 added [ 130.313881][ T1139] bridge_slave_1: left allmulticast mode [ 130.319907][ T1139] bridge_slave_1: left promiscuous mode [ 130.332859][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.432236][ T1139] bridge_slave_0: left allmulticast mode [ 130.447654][ T1139] bridge_slave_0: left promiscuous mode [ 130.474239][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.741456][ T5923] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 130.771041][ T5923] em28xx 6-1:0.0: board has no eeprom [ 130.860361][ T5923] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 130.889533][ T5923] em28xx 6-1:0.0: dvb set to bulk mode. [ 130.910836][ T5825] em28xx 6-1:0.0: Binding DVB extension [ 130.963309][ T5923] usb 6-1: USB disconnect, device number 2 [ 130.988803][ T5923] em28xx 6-1:0.0: Disconnecting em28xx [ 131.152723][ T5825] em28xx 6-1:0.0: Registering input extension [ 131.168413][ T5923] em28xx 6-1:0.0: Closing input extension [ 131.243370][ T5923] em28xx 6-1:0.0: Freeing device [ 131.800736][ T5945] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.970525][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 131.986264][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.996832][ T5945] usb 2-1: config 0 has an invalid interface number: 54 but max is 0 [ 132.005408][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.019033][ T5945] usb 2-1: config 0 has no interface number 0 [ 132.028003][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.035205][ T5945] usb 2-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 132.046874][ T5945] usb 2-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 132.057316][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.064463][ T5945] usb 2-1: config 0 interface 54 has no altsetting 0 [ 132.083095][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.092590][ T5945] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 132.105530][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.125984][ T5945] usb 2-1: Product: syz [ 132.130518][ T5945] usb 2-1: Manufacturer: syz [ 132.135190][ T5945] usb 2-1: SerialNumber: syz [ 132.145824][ T5945] usb 2-1: config 0 descriptor?? [ 132.174896][ T6216] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.185525][ T6216] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.185920][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.251876][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.281704][ T1139] bond0 (unregistering): Released all slaves [ 132.376157][ T5998] team0: Port device team_slave_1 added [ 132.444679][ T5945] ums_eneub6250 2-1:0.54: USB Mass Storage device detected [ 132.465240][ T5996] team0: Port device team_slave_1 added [ 132.505637][ T5945] scsi host1: usb-storage 2-1:0.54 [ 132.591286][ T5825] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.704245][ T5945] ums_eneub6250 2-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 132.719915][ T5945] usb 2-1: USB disconnect, device number 3 [ 132.780397][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 132.826638][ T5825] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.848952][ T5825] usb 6-1: config 0 has no interface number 0 [ 132.869777][ T5825] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 132.910547][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.918632][ T5825] usb 6-1: Product: syz [ 132.927362][ T5825] usb 6-1: Manufacturer: syz [ 132.935114][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.942808][ T5825] usb 6-1: SerialNumber: syz [ 132.949533][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.978022][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.982091][ T5825] usb 6-1: config 0 descriptor?? [ 133.042175][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.054711][ T5825] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 133.061123][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.061221][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.065252][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.122382][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.204456][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.228904][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.236806][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.276089][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.950425][ T1139] hsr_slave_0: left promiscuous mode [ 133.990469][ T1139] hsr_slave_1: left promiscuous mode [ 133.996725][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.035698][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.071032][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.090496][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.150707][ T5160] Bluetooth: hci4: command tx timeout [ 134.177535][ T1139] veth1_macvtap: left promiscuous mode [ 134.205574][ T1139] veth0_macvtap: left promiscuous mode [ 134.217636][ T1139] veth1_vlan: left promiscuous mode [ 134.235256][ T1139] veth0_vlan: left promiscuous mode [ 134.450488][ T5944] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.634293][ T5944] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.670485][ T5944] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.691716][ T5944] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.712289][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.725633][ T5825] gspca_spca1528: reg_r err -71 [ 134.731023][ T5825] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 134.767368][ T5825] usb 6-1: USB disconnect, device number 3 [ 134.803128][ T6261] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.851665][ T5944] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.203285][ T5944] usb 3-1: USB disconnect, device number 2 [ 135.270007][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 135.341239][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 136.007708][ T5998] hsr_slave_0: entered promiscuous mode [ 136.019177][ T5998] hsr_slave_1: entered promiscuous mode [ 136.231881][ T5160] Bluetooth: hci4: command tx timeout [ 136.264766][ T5996] hsr_slave_0: entered promiscuous mode [ 136.278088][ T5996] hsr_slave_1: entered promiscuous mode [ 136.286905][ T5996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.295609][ T5996] Cannot create hsr debugfs directory [ 136.689083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 137.394812][ T6303] netlink: 156 bytes leftover after parsing attributes in process `syz.1.85'. [ 137.781358][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 138.098384][ T6311] loop1: detected capacity change from 0 to 32768 [ 138.296931][ T6311] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 138.296983][ T6311] allowing incompatible features above 0.0: (unknown version) [ 138.297004][ T6311] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 138.346353][ T6311] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 138.351110][ T5160] Bluetooth: hci4: command tx timeout [ 138.354750][ T6311] bcachefs (loop1): initializing new filesystem [ 138.375761][ T6311] bcachefs (loop1): going read-write [ 138.413472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 138.449197][ T6311] bcachefs (loop1): marking superblocks [ 138.474930][ T6311] bcachefs (loop1): initializing freespace [ 138.487843][ T6311] bcachefs (loop1): done initializing freespace [ 138.500133][ T6311] bcachefs (loop1): reading snapshots table [ 138.506400][ T6311] bcachefs (loop1): reading snapshots done [ 138.535444][ T6311] bcachefs (loop1): done starting filesystem [ 138.734002][ T6311] syz.1.88 (6311) used greatest stack depth: 17640 bytes left [ 138.779605][ T5847] bcachefs (loop1): shutting down [ 138.789852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 138.810600][ T5847] bcachefs (loop1): going read-only [ 138.816466][ T5847] bcachefs (loop1): finished waiting for writes to stop [ 138.985583][ T5847] bcachefs (loop1): flushing journal and stopping allocators, journal seq 5 [ 139.261255][ T5847] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 139.339276][ T5847] bcachefs (loop1): clean shutdown complete, journal seq 11 [ 139.350059][ T5847] bcachefs (loop1): marking filesystem clean [ 139.523798][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 139.570423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.749592][ T5847] bcachefs (loop1): shutdown complete [ 139.825177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 139.937359][ T1139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.276183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 140.328664][ T1139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.401030][ T51] Bluetooth: hci4: command tx timeout [ 140.612781][ T5998] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 140.741102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 140.795416][ T1139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.934318][ T5998] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 141.066216][ T5998] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 141.139305][ T1139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.362762][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.382673][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.422018][ T6225] bridge_slave_0: entered allmulticast mode [ 141.462080][ T6225] bridge_slave_0: entered promiscuous mode [ 141.545682][ T5998] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 141.610028][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.625276][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.636031][ T6225] bridge_slave_1: entered allmulticast mode [ 141.644975][ T6225] bridge_slave_1: entered promiscuous mode [ 141.990987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.105623][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.106675][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.99'. [ 142.194574][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.378153][ T5996] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 142.398518][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.421632][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.450638][ T6225] team0: Port device team_slave_0 added [ 142.467900][ T5996] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.523677][ T6225] team0: Port device team_slave_1 added [ 142.599906][ T5996] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.662871][ T5996] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.955049][ T6383] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.112558][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.119564][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.173380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.243513][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.292057][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.325676][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.392776][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.632018][ T6400] evm: overlay not supported [ 143.844555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.978024][ T1139] bridge_slave_1: left allmulticast mode [ 143.990584][ T1139] bridge_slave_1: left promiscuous mode [ 144.064296][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.128977][ T1139] bridge_slave_0: left allmulticast mode [ 144.140458][ T1139] bridge_slave_0: left promiscuous mode [ 144.166745][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.407787][ T6410] loop5: detected capacity change from 0 to 32768 [ 144.691536][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 144.691587][ T6410] allowing incompatible features above 0.0: (unknown version) [ 144.691608][ T6410] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 144.691638][ T6410] with devices loop5 [ 144.741972][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 144.753032][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem [ 144.769513][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write [ 144.831415][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks [ 144.851531][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace [ 144.866117][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace [ 144.880673][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table [ 144.889419][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done [ 144.962171][ T6410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem [ 145.451350][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 145.470641][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only [ 145.478639][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop [ 145.611405][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3 [ 145.735426][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 4 [ 145.859640][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 5 [ 145.895319][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean [ 146.107267][ T5857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 146.169057][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.244282][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.272791][ T1139] bond0 (unregistering): Released all slaves [ 146.336452][ T6225] hsr_slave_0: entered promiscuous mode [ 146.361203][ T6225] hsr_slave_1: entered promiscuous mode [ 146.394370][ T6225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.412959][ T6225] Cannot create hsr debugfs directory [ 146.480048][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 146.544322][ T6435] loop2: detected capacity change from 0 to 128 [ 146.625192][ T6435] EXT4-fs (loop2): Test dummy encryption mode enabled [ 146.696215][ T6435] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.734467][ T6435] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.909011][ T6435] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 147.042664][ T5853] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.181669][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 147.271017][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 147.471844][ T1139] hsr_slave_0: left promiscuous mode [ 147.512101][ T1139] hsr_slave_1: left promiscuous mode [ 147.522813][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.550560][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.689759][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.730490][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.809493][ T1139] veth1_macvtap: left promiscuous mode [ 147.830968][ T1139] veth0_macvtap: left promiscuous mode [ 147.836688][ T1139] veth1_vlan: left promiscuous mode [ 147.891983][ T1139] veth0_vlan: left promiscuous mode [ 149.705929][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 149.895656][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 150.445679][ T6480] overlayfs: statfs failed on './file0' [ 152.018613][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.227669][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.266927][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.274116][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.338164][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.345486][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.403213][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.635488][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.677134][ T6225] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 152.774394][ T6225] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 152.874250][ T6225] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 153.000107][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.007330][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.124791][ T6225] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 153.204125][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 153.212954][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 153.222444][ T51] Bluetooth: hci3: hardware error 0x00 [ 153.290595][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.297771][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.956754][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.373090][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.476497][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.483777][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.562588][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.569843][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.164514][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.352489][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 155.439855][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.682341][ T6545] loop5: detected capacity change from 0 to 8 [ 155.791730][ T6545] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.800033][ T6545] SQUASHFS error: Failed to read block 0x9b: -5 [ 155.891263][ T6545] SQUASHFS error: Unable to read metadata cache entry [99] [ 155.898576][ T6545] SQUASHFS error: Unable to read inode 0x127 [ 156.254565][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.657567][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 157.100612][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 157.301593][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 157.320096][ T5944] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.370519][ T5944] usb 6-1: config 0 has no interface number 0 [ 157.374588][ T5996] veth0_vlan: entered promiscuous mode [ 157.405808][ T5944] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 157.420600][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.438775][ T5996] veth1_vlan: entered promiscuous mode [ 157.454884][ T5944] usb 6-1: Product: syz [ 157.459135][ T5944] usb 6-1: Manufacturer: syz [ 157.519492][ T5944] usb 6-1: SerialNumber: syz [ 157.552594][ T5944] usb 6-1: config 0 descriptor?? [ 157.584745][ T5944] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 157.635697][ T5998] veth0_vlan: entered promiscuous mode [ 157.738809][ T5998] veth1_vlan: entered promiscuous mode [ 157.955879][ T5996] veth0_macvtap: entered promiscuous mode [ 158.032518][ T5996] veth1_macvtap: entered promiscuous mode [ 158.094837][ T5998] veth0_macvtap: entered promiscuous mode [ 158.168036][ T5998] veth1_macvtap: entered promiscuous mode [ 158.421360][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.558198][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.659081][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.714584][ T5996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.770463][ T5996] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.816972][ T5996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.850481][ T5996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.884008][ T6225] veth0_vlan: entered promiscuous mode [ 158.942062][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.985399][ T5998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.014644][ T5998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.050617][ T5998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.067885][ T5998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.243412][ T6225] veth1_vlan: entered promiscuous mode [ 159.412636][ T5944] gspca_spca1528: reg_r err -71 [ 159.417645][ T5944] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 159.502000][ T5944] usb 6-1: USB disconnect, device number 4 [ 159.751426][ T6225] veth0_macvtap: entered promiscuous mode [ 159.769965][ T6205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.808978][ T6205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.924409][ T6225] veth1_macvtap: entered promiscuous mode [ 160.004101][ T6610] loop2: detected capacity change from 0 to 64 [ 160.017757][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.056597][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.094190][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.158103][ T6205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.175981][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.206300][ T6205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.286200][ T6225] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.334854][ T6225] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.363913][ T6225] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.379729][ T6225] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.501734][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.514201][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.617678][ T5938] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 160.626680][ T6615] loop2: detected capacity change from 0 to 16 [ 160.766499][ T6615] erofs (device loop2): mounted with root inode @ nid 36. [ 160.824532][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 160.853699][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.885544][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.897265][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.927584][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.947198][ T5938] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 161.007643][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.018630][ T6619] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 161.058411][ T6606] loop1: detected capacity change from 0 to 32768 [ 161.095475][ T5938] usb 6-1: config 0 descriptor?? [ 161.100884][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.108735][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.164762][ T6619] erofs (device loop2): failed to decompress -44 in[46, 4050] out[1851] [ 161.199236][ T6619] erofs (device loop2): read error -117 @ 43 of nid 36 [ 161.279484][ T6615] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 161.305813][ T6606] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.350003][ T6615] erofs (device loop2): failed to decompress -44 in[46, 4050] out[1851] [ 161.477737][ T6606] XFS (loop1): Ending clean mount [ 161.491024][ T6615] erofs (device loop2): read error -117 @ 43 of nid 36 [ 161.569215][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 161.721225][ T5938] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 161.743795][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 161.766096][ T10] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 161.787874][ T6637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.799270][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.835415][ T10] usb 8-1: config 0 descriptor?? [ 161.906303][ T5938] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 162.102526][ T5938] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 162.114269][ T5847] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.304814][ T5938] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 162.706134][ T5923] usb 6-1: USB disconnect, device number 5 [ 164.011626][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 164.090871][ T10] asix 8-1:0.0: probe with driver asix failed with error -71 [ 164.160874][ T10] usb 8-1: USB disconnect, device number 2 [ 164.478746][ T6674] tipc: Started in network mode [ 164.518505][ T6674] tipc: Node identity 4, cluster identity 4711 [ 164.550840][ T6674] tipc: Node number set to 4 [ 165.956452][ T30] audit: type=1326 audit(1751759445.155:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.8.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e9f8e929 code=0x0 [ 166.435823][ T51] Bluetooth: hci5: unknown advertising packet type: 0x14 [ 166.435884][ T51] Bluetooth: hci5: unknown advertising packet type: 0xbb [ 166.444922][ T51] Bluetooth: hci5: unknown advertising packet type: 0x72 [ 168.024310][ T6690] loop7: detected capacity change from 0 to 40427 [ 169.388692][ T6738] loop7: detected capacity change from 0 to 1024 [ 169.407903][ T6740] loop8: detected capacity change from 0 to 512 [ 169.548705][ T6740] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 169.656904][ T6740] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 170.036225][ T6740] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.146482][ T6740] EXT4-fs (loop8): 1 truncate cleaned up [ 170.288163][ T6740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.863044][ T5998] hfsplus: bad catalog entry type [ 170.911880][ T5998] hfsplus: bad catalog entry type [ 171.635343][ T6664] hfsplus: b-tree write err: -5, ino 4 [ 171.989757][ T6225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.457576][ T6776] tipc: Failed to remove unknown binding: 66,1,1/0:2876160480/2876160482 [ 172.970723][ T6791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.098258][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.453792][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.639118][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.872562][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.142508][ T6780] loop2: detected capacity change from 0 to 32768 [ 174.243129][ T6780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.189 (6780) [ 174.635464][ T6780] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.747394][ T6780] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 174.823807][ T6780] BTRFS info (device loop2): using free-space-tree [ 174.979621][ T49] bridge_slave_1: left allmulticast mode [ 175.000535][ T49] bridge_slave_1: left promiscuous mode [ 175.007429][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.136233][ T49] bridge_slave_0: left allmulticast mode [ 175.194937][ T49] bridge_slave_0: left promiscuous mode [ 175.237793][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.852960][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.895032][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.917566][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.937029][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.953952][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.474604][ T30] audit: type=1326 audit(1751759456.685:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.5.205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27de38e929 code=0x0 [ 177.492102][ T6854] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 177.521859][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.077966][ T51] Bluetooth: hci2: command tx timeout [ 178.577329][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.632101][ T6871] loop6: detected capacity change from 0 to 2048 [ 178.662480][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.698023][ T6871] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.721064][ T49] bond0 (unregistering): Released all slaves [ 178.841585][ T5896] udevd[5896]: incorrect nilfs2 checksum on /dev/loop6 [ 178.893778][ T6878] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.956308][ T6854] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 178.960089][ T6856] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 179.873098][ T30] audit: type=1800 audit(1751759459.075:5): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.219" name="file1" dev="overlay" ino=108 res=0 errno=0 [ 179.997984][ T30] audit: type=1804 audit(1751759459.205:6): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.221" name="/newroot/70/file0" dev="tmpfs" ino=382 res=1 errno=0 [ 180.155339][ T51] Bluetooth: hci2: command tx timeout [ 180.269632][ T6904] loop1: detected capacity change from 0 to 2048 [ 180.396673][ T6904] Alternate GPT is invalid, using primary GPT. [ 180.422100][ T6904] loop1: p1 p2 p3 [ 182.230708][ T51] Bluetooth: hci2: command tx timeout [ 182.450624][ T49] hsr_slave_0: left promiscuous mode [ 182.544989][ T49] hsr_slave_1: left promiscuous mode [ 182.562839][ T5902] udevd[5902]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 182.566613][ T6684] udevd[6684]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 182.604302][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 182.615055][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.658861][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.721913][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.754769][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.018743][ T49] veth1_macvtap: left promiscuous mode [ 183.047411][ T49] veth0_macvtap: left promiscuous mode [ 183.088442][ T49] veth1_vlan: left promiscuous mode [ 183.135327][ T49] veth0_vlan: left promiscuous mode [ 184.310665][ T51] Bluetooth: hci2: command tx timeout [ 184.856102][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 185.048697][ T6960] loop1: detected capacity change from 0 to 32768 [ 185.129315][ T6960] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.307179][ T6960] XFS (loop1): Ending clean mount [ 185.332572][ T6960] XFS (loop1): Quotacheck needed: Please wait. [ 185.345895][ T5944] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 185.437418][ T6960] XFS (loop1): Quotacheck: Done. [ 185.447551][ T49] team0 (unregistering): Port device team_slave_1 removed [ 185.480320][ T30] audit: type=1800 audit(1751759464.685:7): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 185.507198][ T49] team0 (unregistering): Port device team_slave_0 removed [ 185.520748][ T5944] usb 7-1: Using ep0 maxpacket: 32 [ 185.554546][ T5944] usb 7-1: unable to get BOS descriptor or descriptor too short [ 185.576153][ T5944] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 185.592618][ T5944] usb 7-1: can't read configurations, error -71 [ 185.633136][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.982297][ T7024] loop2: detected capacity change from 0 to 512 [ 188.017857][ T7024] EXT4-fs: Ignoring removed orlov option [ 188.130249][ T6838] chnl_net:caif_netlink_parms(): no params data found [ 188.304296][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.373352][ T7024] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.109021][ T7024] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.260: corrupted inode contents [ 189.148246][ T7024] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.260: mark_inode_dirty error [ 189.224143][ T7024] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.260: corrupted inode contents [ 189.303770][ T7041] loop8: detected capacity change from 0 to 256 [ 189.321111][ T7024] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.260: mark_inode_dirty error [ 189.439297][ T7041] exfat: Deprecated parameter 'utf8' [ 189.450371][ T7041] exfat: Deprecated parameter 'utf8' [ 189.458501][ T7043] loop6: detected capacity change from 0 to 512 [ 189.485591][ T7041] exfat: Deprecated parameter 'utf8' [ 189.491738][ T7043] EXT4-fs: Ignoring removed orlov option [ 189.580027][ T7041] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 189.706663][ T7043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.780616][ T7043] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.864037][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.900727][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.931821][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.957977][ T6838] bridge_slave_0: entered allmulticast mode [ 189.973887][ T6838] bridge_slave_0: entered promiscuous mode [ 190.025246][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.060039][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.090859][ T6838] bridge_slave_1: entered allmulticast mode [ 190.119479][ T6838] bridge_slave_1: entered promiscuous mode [ 190.432117][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.512598][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.513337][ T5996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.600535][ T55] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.820449][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 190.834774][ T55] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 190.855017][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.881385][ T6838] team0: Port device team_slave_0 added [ 190.904168][ T55] usb 3-1: config 0 descriptor?? [ 190.904710][ T6838] team0: Port device team_slave_1 added [ 191.021969][ T30] audit: type=1326 audit(1751759470.235:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.6.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7569d8e929 code=0x7fc00000 [ 191.183564][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.228020][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.352785][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.439993][ T7085] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 191.447547][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.466187][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.525778][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.604436][ T30] audit: type=1326 audit(1751759470.815:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.6.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7569d8e929 code=0x7fc00000 [ 192.029264][ T6838] hsr_slave_0: entered promiscuous mode [ 192.047916][ T6838] hsr_slave_1: entered promiscuous mode [ 192.080711][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 192.280456][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 192.302935][ T24] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.346071][ T24] usb 9-1: config 179 has no interface number 0 [ 192.380609][ T24] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 192.424452][ T7110] loop6: detected capacity change from 0 to 2048 [ 192.579171][ T55] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 192.600418][ T7112] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.618436][ T24] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 192.630521][ T55] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 192.630819][ T55] asix 3-1:0.0: probe with driver asix failed with error -71 [ 192.667151][ T55] usb 3-1: USB disconnect, device number 3 [ 192.699242][ T30] audit: type=1800 audit(1751759471.905:10): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.282" name="file1" dev="loop6" ino=16 res=0 errno=0 [ 192.704366][ T7110] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 192.775794][ T7110] Remounting filesystem read-only [ 192.782004][ T24] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.841579][ T24] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 192.918036][ T24] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.984668][ T24] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 193.030431][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.084359][ T7099] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 193.320894][ T5923] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.454280][ T6838] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 193.544370][ T6838] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 193.577289][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.631545][ T5923] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 193.641077][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input6 [ 193.662375][ T6838] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 193.677555][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.742439][ T6838] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 193.777753][ T5923] usb 6-1: config 0 descriptor?? [ 193.835190][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 194.098458][ T7099] loop8: detected capacity change from 0 to 512 [ 194.198632][ T7137] hfsplus: unable to find HFS+ superblock [ 194.292595][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 194.491776][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.526845][ T7099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.563095][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 194.797483][ T5923] pwc: recv_control_msg error -32 req 04 val 1300 [ 194.885774][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 194.905723][ T5923] pwc: recv_control_msg error -71 req 02 val 2000 [ 194.943878][ T5923] pwc: recv_control_msg error -71 req 02 val 2100 [ 195.146484][ T5923] pwc: recv_control_msg error -71 req 04 val 1500 [ 195.247157][ T5923] pwc: recv_control_msg error -71 req 02 val 2500 [ 195.269464][ T5923] pwc: recv_control_msg error -71 req 02 val 2400 [ 195.300927][ T5923] pwc: recv_control_msg error -71 req 02 val 2600 [ 195.350511][ T5923] pwc: recv_control_msg error -71 req 02 val 2900 [ 195.402073][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 195.460328][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 195.503366][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 195.564481][ T6838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.594921][ T5923] pwc: Registered as video103. [ 195.602622][ T6225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.666568][ T7140] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 195.673323][ T7140] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.695376][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 195.775073][ T6838] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.824732][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.832005][ T6965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.895820][ T7140] vhci_hcd vhci_hcd.0: Device attached [ 195.910350][ T7146] vhci_hcd: connection closed [ 195.935198][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.935981][ T55] usb 9-1: USB disconnect, device number 2 [ 195.941235][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 195.978864][ T12] vhci_hcd: stop threads [ 196.000126][ T12] vhci_hcd: release socket [ 196.043739][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.050986][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.065963][ T12] vhci_hcd: disconnect device [ 196.128594][ T5923] usb 6-1: USB disconnect, device number 6 [ 196.174830][ T7156] loop5: detected capacity change from 0 to 128 [ 196.241822][ T7155] warning: `syz.8.291' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.297059][ T7156] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.397660][ T7156] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.991489][ T7156] fscrypt: Error allocating hmac(sha512): -2 [ 197.114945][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.191289][ T7174] batadv_slave_0: entered promiscuous mode [ 197.228981][ T5857] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.257139][ T7177] loop1: detected capacity change from 0 to 2048 [ 197.343631][ T7177] EXT4-fs: Ignoring removed nobh option [ 197.404706][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.456202][ T7177] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.539336][ T6838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.547924][ T7202] capability: warning: `syz.8.301' uses deprecated v2 capabilities in a way that may be insecure [ 199.326989][ T7217] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 199.552591][ T6838] veth0_vlan: entered promiscuous mode [ 199.622299][ T6838] veth1_vlan: entered promiscuous mode [ 199.828505][ T6838] veth0_macvtap: entered promiscuous mode [ 199.884200][ T6838] veth1_macvtap: entered promiscuous mode [ 199.989293][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.092638][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.155083][ T6838] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.183724][ T6838] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.222229][ T7236] IPv4: Oversized IP packet from 127.202.26.0 [ 200.232413][ T6838] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.288363][ T6838] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.353803][ T7238] loop6: detected capacity change from 0 to 512 [ 200.530036][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.949400][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.972072][ T7238] EXT4-fs (loop6): Test dummy encryption mode enabled [ 200.979586][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.088938][ T7238] EXT4-fs error (device loop6): __ext4_iget:5379: inode #11: block 1: comm syz.6.311: invalid block [ 201.165833][ T7238] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.311: couldn't read orphan inode 11 (err -117) [ 201.217842][ T7238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.286988][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.331975][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.560061][ T5996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.953043][ T7240] loop2: detected capacity change from 0 to 32768 [ 202.128569][ T7266] loop1: detected capacity change from 0 to 32768 [ 202.130691][ T7240] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.152445][ T7266] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.318 (7266) [ 202.200605][ T7266] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.211062][ T7266] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 202.219937][ T7266] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 202.235242][ T7266] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 202.311276][ T7266] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 202.341860][ T7266] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 202.380694][ T7266] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 202.398599][ T7240] XFS (loop2): Ending clean mount [ 202.403890][ T7266] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 202.435884][ T7266] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 202.472307][ T7240] XFS (loop2): Quotacheck needed: Please wait. [ 202.644799][ T7266] BTRFS info (device loop1): rebuilding free space tree [ 202.667431][ T7266] BTRFS info (device loop1): disabling free space tree [ 202.674445][ T7266] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.684363][ T7266] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.797616][ T7240] XFS (loop2): Quotacheck: Done. [ 202.898826][ T7266] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 2048 [ 202.910633][ T7266] BTRFS info (device loop1): scrub: started on devid 1 [ 202.959829][ T7266] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 203.602014][ T5847] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 203.835880][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.853067][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.896734][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.362658][ T7316] netlink: 'syz.5.330': attribute type 280 has an invalid length. [ 204.376890][ T30] audit: type=1326 audit(1751759483.555:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.8.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9f8e929 code=0x7ffc0000 [ 204.481193][ T30] audit: type=1326 audit(1751759483.565:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.8.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9f8e929 code=0x7ffc0000 [ 204.550642][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.560372][ T5859] Bluetooth: hci0: command 0x1003 tx timeout [ 204.570337][ T30] audit: type=1326 audit(1751759483.565:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.8.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f93e9f8e929 code=0x7ffc0000 [ 204.780546][ T30] audit: type=1326 audit(1751759483.565:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.8.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9f8e929 code=0x7ffc0000 [ 204.926240][ T30] audit: type=1326 audit(1751759483.565:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.8.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9f8e929 code=0x7ffc0000 [ 205.012809][ T30] audit: type=1326 audit(1751759483.565:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.8.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f93e9f8e929 code=0x7ffc0000 [ 205.145662][ T30] audit: type=1326 audit(1751759483.585:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.8.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9f8e929 code=0x7ffc0000 [ 205.568743][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.579234][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.588849][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.605344][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.615767][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.695665][ T7352] syz_tun: entered allmulticast mode [ 205.828050][ T7352] dvmrp8: entered allmulticast mode [ 206.519403][ T7351] syz_tun: left allmulticast mode [ 206.528637][ T7366] loop9: detected capacity change from 0 to 512 [ 206.840047][ T7366] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.895659][ T7366] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 207.094091][ T7366] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.340: iget: bad extended attribute block 1 [ 207.154745][ T7366] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.340: couldn't read orphan inode 15 (err -117) [ 207.339406][ T7366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.576492][ T7366] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 207.673240][ T51] Bluetooth: hci0: command tx timeout [ 208.397526][ T6838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.463834][ T7345] chnl_net:caif_netlink_parms(): no params data found [ 209.300448][ T1204] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 209.867678][ T51] Bluetooth: hci0: command tx timeout [ 209.994840][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.009595][ T1204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 210.142242][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.149411][ T1204] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 210.216069][ T7345] bridge_slave_0: entered allmulticast mode [ 210.235311][ T1204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.263512][ T7345] bridge_slave_0: entered promiscuous mode [ 210.277618][ T1204] usb 6-1: config 0 descriptor?? [ 210.320907][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.328068][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.380961][ T7391] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 210.410617][ T7345] bridge_slave_1: entered allmulticast mode [ 210.488975][ T7345] bridge_slave_1: entered promiscuous mode [ 210.705400][ T1204] usbhid 6-1:0.0: can't add hid device: -71 [ 210.772197][ T1204] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 210.836449][ T1204] usb 6-1: USB disconnect, device number 7 [ 211.026230][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.255672][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.611626][ T7345] team0: Port device team_slave_0 added [ 211.686701][ T7345] team0: Port device team_slave_1 added [ 211.740454][ T1204] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 211.910399][ T51] Bluetooth: hci0: command tx timeout [ 211.961215][ T1204] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 212.012886][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.019850][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.070992][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.090973][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.109368][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.126382][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.141159][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.163375][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.177869][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.189114][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.198341][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.239301][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.257225][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.289481][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.298314][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.315987][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.326152][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.357282][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.382986][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.427182][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.482306][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.519250][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.568154][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.626067][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.642014][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.676891][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.734496][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.754636][ T1204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.784915][ T1204] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.836053][ T7345] hsr_slave_0: entered promiscuous mode [ 212.841854][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.866853][ T7412] loop1: detected capacity change from 0 to 32768 [ 212.881726][ T7345] hsr_slave_1: entered promiscuous mode [ 212.895604][ T1204] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.926807][ T7345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.946392][ T1204] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.971856][ T7345] Cannot create hsr debugfs directory [ 212.979158][ T1204] usb 3-1: Product: syz [ 213.000434][ T1204] usb 3-1: Manufacturer: syz [ 213.005128][ T1204] usb 3-1: SerialNumber: syz [ 213.010324][ T7412] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.032144][ T1204] usb 3-1: config 0 descriptor?? [ 213.055255][ T1204] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 213.372704][ T7412] XFS (loop1): Ending clean mount [ 213.452220][ T55] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 213.473376][ T7412] XFS (loop1): Quotacheck needed: Please wait. [ 213.615894][ T7412] XFS (loop1): Quotacheck: Done. [ 213.700637][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 213.757890][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.824709][ T55] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 213.856776][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.922763][ T55] usb 6-1: config 0 descriptor?? [ 213.949158][ T30] audit: type=1800 audit(1751759493.155:18): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.351" name="file2" dev="loop1" ino=9287 res=0 errno=0 [ 213.982197][ T7448] netlink: 'syz.8.360': attribute type 1 has an invalid length. [ 213.989955][ T7448] netlink: 'syz.8.360': attribute type 4 has an invalid length. [ 214.004161][ T51] Bluetooth: hci0: command tx timeout [ 214.065758][ T5945] usb 3-1: USB disconnect, device number 4 [ 214.133889][ T7451] netlink: 'syz.8.360': attribute type 1 has an invalid length. [ 214.142207][ T7448] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.360'. [ 214.192215][ T7451] netlink: 'syz.8.360': attribute type 4 has an invalid length. [ 214.270460][ T7451] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.360'. [ 214.378876][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.400354][ T55] elo 0003:04E7:0030.0002: unknown main item tag 0x1 [ 214.419719][ T55] elo 0003:04E7:0030.0002: item fetching failed at offset 2/3 [ 214.439024][ T55] elo 0003:04E7:0030.0002: parse failed [ 214.450014][ T55] elo 0003:04E7:0030.0002: probe with driver elo failed with error -22 [ 214.831073][ T55] usb 6-1: USB disconnect, device number 8 [ 215.381009][ T5825] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 215.585297][ T5825] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.595853][ T5945] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 215.603346][ T7466] netlink: 'syz.1.365': attribute type 9 has an invalid length. [ 215.614908][ T5825] usb 10-1: config 0 has no interface number 0 [ 215.627690][ T5825] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.655482][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 215.664306][ T5825] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.664352][ T5825] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.664424][ T5825] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 215.707523][ T5825] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.768425][ T5825] usb 10-1: config 0 descriptor?? [ 215.848301][ T7466] team_slave_0: entered promiscuous mode [ 215.854311][ T7466] team_slave_1: entered promiscuous mode [ 215.894537][ T7466] macvlan2: entered promiscuous mode [ 215.905203][ T7466] team0: entered promiscuous mode [ 215.919722][ T7466] macvlan2: entered allmulticast mode [ 215.945492][ T7466] team0: entered allmulticast mode [ 215.961317][ T7466] team_slave_0: entered allmulticast mode [ 215.969164][ T7466] team_slave_1: entered allmulticast mode [ 215.994356][ T7466] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.116250][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 216.332729][ T5923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.361478][ T5923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.405893][ T5923] usb 6-1: config 1 has no interface number 0 [ 216.434406][ T5923] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.451285][ T5825] input: HID 28bd:0042 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.0003/input/input8 [ 216.492351][ T5923] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 216.529742][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.551884][ T7474] bridge_slave_0: left allmulticast mode [ 216.557716][ T7474] bridge_slave_0: left promiscuous mode [ 216.567923][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.588507][ T5923] usb 6-1: Product: syz [ 216.616064][ T5923] usb 6-1: Manufacturer: syz [ 216.635155][ T5923] usb 6-1: SerialNumber: syz [ 216.651873][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.688542][ T5825] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1 [ 216.714837][ T7474] bridge_slave_1: left allmulticast mode [ 216.720815][ T7474] bridge_slave_1: left promiscuous mode [ 216.727325][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.780939][ T7474] bond0: (slave bond_slave_0): Releasing backup interface [ 216.801236][ T5825] usb 10-1: USB disconnect, device number 2 [ 216.858490][ T7474] bond0: (slave bond_slave_1): Releasing backup interface [ 216.911454][ T7474] team_slave_0: left allmulticast mode [ 216.980160][ T7474] team_slave_0: left promiscuous mode [ 217.062351][ T7474] team0: Port device team_slave_0 removed [ 217.088444][ T7474] team_slave_1: left allmulticast mode [ 217.113545][ T7474] team_slave_1: left promiscuous mode [ 217.122157][ T7479] fido_id[7479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 217.149638][ T7474] team0: Port device team_slave_1 removed [ 217.189647][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.222374][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.247290][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.296150][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.658525][ T7483] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.773318][ T5825] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 217.818533][ T5923] cdc_ncm 6-1:1.1: bind() failure [ 217.844181][ T7345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.881199][ T5923] usb 6-1: USB disconnect, device number 9 [ 217.898960][ T5825] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.202492][ T7345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.377554][ T7345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.435047][ T7345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.789164][ T7502] loop9: detected capacity change from 0 to 1024 [ 218.843051][ T7502] EXT4-fs: Ignoring removed nobh option [ 218.880658][ T7502] EXT4-fs: Ignoring removed oldalloc option [ 218.886636][ T7502] EXT4-fs: Ignoring removed bh option [ 218.985151][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.055305][ T7502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 219.086362][ T7345] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.142785][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.150099][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.239878][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.247103][ T6965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.526680][ T6838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 221.322701][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.201606][ T7345] veth0_vlan: entered promiscuous mode [ 222.468766][ T7345] veth1_vlan: entered promiscuous mode [ 222.756125][ T7345] veth0_macvtap: entered promiscuous mode [ 222.827792][ T7345] veth1_macvtap: entered promiscuous mode [ 223.049812][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.098782][ T7560] loop1: detected capacity change from 0 to 128 [ 223.139770][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.162237][ T7558] netlink: 186232 bytes leftover after parsing attributes in process `syz.9.395'. [ 223.187994][ T7560] EXT4-fs (loop1): Test dummy encryption mode enabled [ 223.235919][ T7345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.262620][ T7560] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.291052][ T7345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.316044][ T7560] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.332187][ T7345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.389902][ T7345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.067833][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.109869][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.112750][ T5847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.366840][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.398203][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.185906][ T7580] netlink: 48 bytes leftover after parsing attributes in process `syz.8.403'. [ 225.290451][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 225.488462][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.550033][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.841213][ T5923] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 225.883407][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.930111][ T5923] usb 4-1: config 0 descriptor?? [ 226.154888][ T7607] loop9: detected capacity change from 0 to 16 [ 226.156557][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 226.188444][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 226.198332][ T51] Bluetooth: hci4: hardware error 0x00 [ 226.344034][ T7607] erofs (device loop9): mounted with root inode @ nid 36. [ 226.422765][ T5923] ntrig 0003:1B96:000F.0005: unknown main item tag 0x0 [ 226.457294][ T5923] ntrig 0003:1B96:000F.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.3-1/input0 [ 226.624461][ T5923] ntrig 0003:1B96:000F.0005: Firmware version: 5.10.12.37.6 (a9eb a68c) [ 227.016465][ T1204] usb 4-1: USB disconnect, device number 2 [ 227.350561][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 227.530391][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 227.556045][ T5923] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 227.593473][ T5923] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 227.676097][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 227.757289][ T5923] usb 2-1: config 1 has no interface number 0 [ 227.798731][ T5923] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.883243][ T5923] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 227.962806][ T5923] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 228.038053][ T5923] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 228.100450][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.119469][ T5859] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 228.151356][ T7630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.164513][ T5923] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 228.435555][ T7630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.452569][ T7655] loop9: detected capacity change from 0 to 1024 [ 228.471868][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 228.507620][ T5923] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 228.873067][ T7655] hfsplus: xattr searching failed [ 228.974221][ T7662] hfsplus: xattr searching failed [ 229.007959][ T5938] usb 2-1: USB disconnect, device number 4 [ 229.062837][ T5938] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 229.876246][ T7643] loop5: detected capacity change from 0 to 32768 [ 229.926353][ T7643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.420 (7643) [ 230.032574][ T7643] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.087639][ T7643] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 230.117878][ T7643] BTRFS info (device loop5): using free-space-tree [ 230.141278][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.181411][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.204117][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.270859][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.289137][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.617469][ T7710] loop3: detected capacity change from 0 to 32768 [ 230.627061][ T7710] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.434 (7710) [ 230.645788][ T7710] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.656055][ T7710] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 230.664960][ T7710] BTRFS info (device loop3): disk space caching is enabled [ 230.672250][ T7710] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 230.696761][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.717128][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.730496][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.737992][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.780609][ T30] audit: type=1800 audit(1751759509.975:19): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.420" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 230.816165][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.851787][ T5938] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 230.940558][ T5938] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 231.033143][ T7710] BTRFS info (device loop3): rebuilding free space tree [ 231.089822][ T7710] BTRFS info (device loop3): disabling free space tree [ 231.099826][ T7710] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.111002][ T7710] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.295366][ T7643] BTRFS warning (device loop5): failed to trim 3 block group(s), last error -512 [ 231.394900][ T30] audit: type=1800 audit(1751759510.595:20): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.434" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 231.522300][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 231.528433][ T5160] Bluetooth: hci1: command 0x0406 tx timeout [ 231.642080][ T7733] fido_id[7733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.750454][ T5938] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 231.886994][ T7643] BTRFS warning (device loop5): failed to trim 1 device(s), last error -512 [ 231.930494][ T5938] usb 10-1: Using ep0 maxpacket: 32 [ 231.982911][ T5938] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 232.013559][ T5938] usb 10-1: config 0 has no interface number 0 [ 232.019834][ T5938] usb 10-1: config 0 interface 184 has no altsetting 0 [ 232.087646][ T7345] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.164955][ T5857] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.199030][ T5938] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.237752][ T5938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.287021][ T5938] usb 10-1: Product: syz [ 232.320363][ T5938] usb 10-1: Manufacturer: syz [ 232.325139][ T5938] usb 10-1: SerialNumber: syz [ 232.423717][ T5938] usb 10-1: config 0 descriptor?? [ 232.472517][ T5938] smsc75xx v1.0.0 [ 233.144115][ T5938] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 233.234104][ T5938] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.643551][ T7780] loop1: detected capacity change from 0 to 1024 [ 233.711544][ T7780] EXT4-fs: Ignoring removed nobh option [ 233.728409][ T5938] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 233.734767][ T7780] EXT4-fs: Ignoring removed bh option [ 233.799750][ T5938] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 233.930890][ T5938] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 233.943769][ T7780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.039320][ T5938] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 234.746258][ T5938] usb 10-1: USB disconnect, device number 3 [ 234.944890][ T7780] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4112: comm syz.1.448: Allocating blocks 497-513 which overlap fs metadata [ 235.114515][ T7780] EXT4-fs (loop1): pa ffff8880348dc0e8: logic 48768, phys. 129, len 24 [ 235.123826][ T7780] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5363: group 0, free 23, pa_free 24 [ 235.828193][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.433288][ T7825] loop9: detected capacity change from 0 to 16 [ 236.520456][ T7825] erofs (device loop9): mounted with root inode @ nid 36. [ 237.286171][ T7848] netlink: 372 bytes leftover after parsing attributes in process `syz.9.466'. [ 237.304246][ T7840] netlink: 'syz.3.465': attribute type 5 has an invalid length. [ 237.350806][ T7850] netlink: 'syz.5.468': attribute type 1 has an invalid length. [ 237.527835][ T7854] loop1: detected capacity change from 0 to 1024 [ 237.660690][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 237.777267][ T7859] netlink: zone id is out of range [ 237.797296][ T7859] netlink: zone id is out of range [ 237.802795][ T7859] netlink: zone id is out of range [ 237.850409][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 237.994300][ T7859] netlink: set zone limit has 4 unknown bytes [ 238.617250][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.628490][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.651216][ T24] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 238.669620][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.691305][ T24] usb 6-1: config 0 descriptor?? [ 239.172005][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.220505][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.227661][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.285910][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.346855][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.372468][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.415312][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.461902][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.501301][ T24] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 239.508446][ T24] hid-rmi 0003:06CB:81A7.0007: unbalanced collection at end of report description [ 239.521927][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 239.575183][ T24] hid-rmi 0003:06CB:81A7.0007: parse failed [ 239.620892][ T24] hid-rmi 0003:06CB:81A7.0007: probe with driver hid-rmi failed with error -22 [ 239.669760][ T24] usb 6-1: USB disconnect, device number 10 [ 240.115881][ T7900] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.714790][ T7901] loop3: detected capacity change from 0 to 512 [ 240.887279][ T7901] EXT4-fs: Ignoring removed oldalloc option [ 241.011523][ T7899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 241.288754][ T7901] EXT4-fs (loop3): 1 truncate cleaned up [ 241.358308][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.437369][ T7914] netlink: 104 bytes leftover after parsing attributes in process `syz.2.486'. [ 241.707449][ T7919] netlink: 96 bytes leftover after parsing attributes in process `syz.9.488'. [ 241.808373][ T7345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.284356][ T7926] netlink: 'syz.2.490': attribute type 5 has an invalid length. [ 244.447198][ T7980] loop9: detected capacity change from 0 to 8 [ 244.506765][ T7979] loop2: detected capacity change from 0 to 2048 [ 244.632571][ T7979] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 244.721929][ T7979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.103444][ T7995] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 245.577716][ T30] audit: type=1804 audit(1751759524.775:21): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.515" name="/newroot/95/file0" dev="tmpfs" ino=533 res=1 errno=0 [ 245.981280][ T5938] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 246.118252][ T8019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 246.206907][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 246.278666][ T5938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 246.344837][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.618471][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.425385][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.803898][ T5938] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 247.814823][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.830502][ T5938] usb 3-1: Product: syz [ 247.840387][ T5938] usb 3-1: Manufacturer: syz [ 247.850292][ T5938] usb 3-1: SerialNumber: syz [ 247.906111][ T5938] usb 3-1: config 0 descriptor?? [ 247.914709][ T8011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.185019][ T5938] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 248.225106][ T5938] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 248.452093][ T8047] overlayfs: failed to resolve './file0': -2 [ 248.644916][ C0] powermate: config urb returned -71 [ 248.653504][ C0] powermate: config urb returned -71 [ 248.659118][ C0] powermate: config urb returned -71 [ 248.664703][ C0] powermate: config urb returned -71 [ 248.670972][ T5945] usb 3-1: USB disconnect, device number 5 [ 248.676941][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 249.077322][ T8054] netlink: 96 bytes leftover after parsing attributes in process `syz.8.529'. [ 249.857354][ T30] audit: type=1804 audit(1751759529.065:22): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.536" name="/newroot/114/file0" dev="tmpfs" ino=613 res=1 errno=0 [ 250.603431][ T8093] input: syz0 as /devices/virtual/input/input12 [ 251.030561][ T5945] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 251.456127][ T5945] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.495501][ T5945] usb 10-1: config 0 has no interface number 0 [ 251.510532][ T5945] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 251.575759][ T5945] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 251.704298][ T5945] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.787727][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.843084][ T5945] usb 10-1: config 0 descriptor?? [ 251.849464][ T8098] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 251.900892][ T5945] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 252.405259][ T5923] usb 10-1: USB disconnect, device number 4 [ 252.411487][ T8127] binder: 8126:8127 ioctl c0306201 2000000003c0 returned -14 [ 253.703347][ T8144] loop3: detected capacity change from 0 to 128 [ 254.127757][ T8146] syz.3.560: attempt to access beyond end of device [ 254.127757][ T8146] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 254.175680][ T8146] syz.3.560: attempt to access beyond end of device [ 254.175680][ T8146] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 254.219264][ T8146] syz.3.560: attempt to access beyond end of device [ 254.219264][ T8146] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 254.267909][ T8146] syz.3.560: attempt to access beyond end of device [ 254.267909][ T8146] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 254.323718][ T8146] syz.3.560: attempt to access beyond end of device [ 254.323718][ T8146] loop3: rw=2049, sector=281, nr_sectors = 5 limit=128 [ 254.743369][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.743369][ T13] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 254.775159][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.775159][ T13] loop3: rw=1, sector=153, nr_sectors = 24 limit=128 [ 254.803023][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.803023][ T13] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 254.817416][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.817416][ T13] loop3: rw=1, sector=201, nr_sectors = 24 limit=128 [ 254.831979][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.831979][ T13] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 254.902121][ T8164] fuse: Bad value for 'fd' [ 255.055836][ T8166] loop2: detected capacity change from 0 to 16 [ 255.129549][ T8166] erofs (device loop2): mounted with root inode @ nid 36. [ 256.248667][ T8187] ref_ctr_offset mismatch. inode: 0x231 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 256.443600][ T8194] overlayfs: failed to resolve './file0/file0': -2 [ 257.796067][ T8196] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.116294][ T8196] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.160692][ T8220] loop9: detected capacity change from 0 to 2048 [ 258.168148][ T8218] process 'syz.5.587' launched './file0' with NULL argv: empty string added [ 258.230832][ T8222] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.294218][ T30] audit: type=1800 audit(1751759537.505:23): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.588" name="file1" dev="loop9" ino=16 res=0 errno=0 [ 258.296396][ T8220] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12 [ 258.373250][ T8220] Remounting filesystem read-only [ 258.390677][ T8196] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.567787][ T8226] netlink: 'syz.5.590': attribute type 12 has an invalid length. [ 258.668732][ T6838] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 258.693282][ T8196] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.066398][ T8196] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.174360][ T8196] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.255000][ T8196] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.339488][ T8196] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.360413][ T5945] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 259.525785][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.538987][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.563772][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.599723][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.653689][ T5945] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.695840][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.746871][ T5945] usb 6-1: config 0 descriptor?? [ 260.242514][ T5945] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 260.448508][ T30] audit: type=1326 audit(1751759539.655:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.8.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e9f8e929 code=0x0 [ 260.563170][ T8265] syz_tun: entered allmulticast mode [ 260.799150][ T8264] loop3: detected capacity change from 0 to 256 [ 260.840930][ T8264] exfat: Deprecated parameter 'namecase' [ 260.894314][ T8265] syz_tun: left allmulticast mode [ 261.255997][ T8264] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 261.323421][ T8264] exFAT-fs (loop3): failed to load alloc-bitmap [ 261.373417][ T8264] exFAT-fs (loop3): failed to recognize exfat type [ 261.935182][ T8277] netdevsim netdevsim1: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 261.957377][ T8277] netdevsim netdevsim1: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 263.002972][ T6664] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.142957][ T5944] usb 6-1: USB disconnect, device number 11 [ 263.257407][ T6664] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.452059][ T6664] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.641068][ T8305] trusted_key: syz.3.617 sent an empty control message without MSG_MORE. [ 264.002815][ T8312] loop5: detected capacity change from 0 to 32768 [ 264.198850][ T8312] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 264.198908][ T8312] allowing incompatible features above 0.0: (unknown version) [ 264.198928][ T8312] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 264.243972][ T8312] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 264.252283][ T8312] bcachefs (loop5): initializing new filesystem [ 264.268578][ T8312] bcachefs (loop5): going read-write [ 264.283753][ T6664] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.321956][ T8312] bcachefs (loop5): marking superblocks [ 264.338673][ T8312] bcachefs (loop5): initializing freespace [ 264.349099][ T8312] bcachefs (loop5): done initializing freespace [ 264.358547][ T8312] bcachefs (loop5): reading snapshots table [ 264.364672][ T8312] bcachefs (loop5): reading snapshots done [ 264.442813][ T8312] bcachefs (loop5): done starting filesystem [ 264.736057][ T30] audit: type=1804 audit(1751759543.945:25): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.619" name="/newroot/103/file0/cgroup.controllers" dev="loop5" ino=4098 res=1 errno=0 [ 264.980013][ T5857] bcachefs (loop5): shutting down [ 265.018541][ T5857] bcachefs (loop5): going read-only [ 265.035021][ T5857] bcachefs (loop5): finished waiting for writes to stop [ 265.181695][ T5857] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 265.284053][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.293232][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.470791][ T5857] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 265.574560][ T6664] bridge_slave_1: left allmulticast mode [ 265.595589][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.611182][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.622493][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.628129][ T5857] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 265.642776][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.655555][ T6664] bridge_slave_1: left promiscuous mode [ 265.664644][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.674098][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.734830][ T5857] bcachefs (loop5): marking filesystem clean [ 265.803343][ T6664] bridge_slave_0: left allmulticast mode [ 265.859456][ T6664] bridge_slave_0: left promiscuous mode [ 265.880954][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.018348][ T5857] bcachefs (loop5): shutdown complete [ 266.555687][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 267.269919][ T8366] loop2: detected capacity change from 0 to 32768 [ 267.750931][ T51] Bluetooth: hci2: command tx timeout [ 267.795930][ T6664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.838073][ T6664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.891807][ T6664] bond0 (unregistering): Released all slaves [ 268.678053][ T8394] loop2: detected capacity change from 0 to 512 [ 268.703222][ T8394] EXT4-fs: Ignoring removed nobh option [ 268.748075][ T8394] EXT4-fs (loop2): Test dummy encryption mode enabled [ 268.837504][ T8394] EXT4-fs error (device loop2): __ext4_iget:5379: inode #11: block 1: comm syz.2.636: invalid block [ 268.980631][ T8394] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.636: couldn't read orphan inode 11 (err -117) [ 269.177469][ T8394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.410684][ T8394] Bluetooth: MGMT ver 1.23 [ 269.592090][ T8402] loop3: detected capacity change from 0 to 8 [ 269.609271][ T8402] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 269.714894][ T5896] udevd[5896]: incorrect cramfs checksum on /dev/loop3 [ 269.870581][ T5859] Bluetooth: hci2: command tx timeout [ 269.940279][ T8405] cramfs: Error -5 while decompressing! [ 269.947708][ T8405] cramfs: ffffffff9aeca308(26)->ffff88801b4e0000(4096) [ 269.955567][ T8405] cramfs: Error -3 while decompressing! [ 269.969002][ T8405] cramfs: ffffffff9aeca322(26)->ffff8880bfeca000(4096) [ 269.976795][ T8405] cramfs: Error -3 while decompressing! [ 269.983033][ T8405] cramfs: ffffffff9aeca33c(16)->ffff88804a9b7000(4096) [ 269.992298][ T8405] cramfs: Error -5 while decompressing! [ 269.998107][ T8405] cramfs: ffffffff9aeca308(26)->ffff88801b4e0000(4096) [ 270.038791][ T30] audit: type=1800 audit(1751759549.225:26): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 270.057733][ T5896] udevd[5896]: incorrect cramfs checksum on /dev/loop3 [ 270.426430][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.475045][ T6664] hsr_slave_0: left promiscuous mode [ 270.497207][ T6664] hsr_slave_1: left promiscuous mode [ 270.538759][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.618823][ T30] audit: type=1326 audit(1751759549.825:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27de38e929 code=0x0 [ 270.664107][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.717212][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.774457][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.908121][ T6664] veth1_macvtap: left promiscuous mode [ 270.936864][ T6664] veth0_macvtap: left promiscuous mode [ 270.947551][ T6664] veth1_vlan: left promiscuous mode [ 270.975656][ T6664] veth0_vlan: left promiscuous mode [ 271.510446][ T5859] Bluetooth: hci0: command 0x1407 tx timeout [ 271.516793][ T51] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 271.922055][ T51] Bluetooth: hci2: command tx timeout [ 273.273792][ T6664] team0 (unregistering): Port device team_slave_1 removed [ 273.473532][ T6664] team0 (unregistering): Port device team_slave_0 removed [ 273.996552][ T51] Bluetooth: hci2: command tx timeout [ 275.195587][ T8442] loop2: detected capacity change from 0 to 40427 [ 275.369938][ T8442] F2FS-fs (loop2): invalid crc value [ 275.590662][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 275.765689][ T10] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.776867][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 275.788748][ T10] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 275.800916][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.819966][ T8442] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 275.835807][ T10] usb 6-1: Product: syz [ 275.840108][ T10] usb 6-1: Manufacturer: syz [ 275.851201][ T10] usb 6-1: SerialNumber: syz [ 276.099370][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input14 [ 276.230739][ T10] usb 6-1: USB disconnect, device number 12 [ 276.247381][ T5195] pxrc 6-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 276.642349][ T5853] bio_check_eod: 5 callbacks suppressed [ 276.642373][ T5853] syz-executor: attempt to access beyond end of device [ 276.642373][ T5853] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 276.714800][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 276.714851][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.714878][ T5853] Call Trace: [ 276.714889][ T5853] [ 276.714903][ T5853] dump_stack_lvl+0x16c/0x1f0 [ 276.714966][ T5853] f2fs_handle_critical_error+0x621/0x9f0 [ 276.715016][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.715060][ T5853] ? f2fs_build_fault_attr+0x53/0x1f0 [ 276.715111][ T5853] f2fs_write_end_io+0x785/0xc20 [ 276.715165][ T5853] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 276.715222][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.715277][ T5853] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 276.715326][ T5853] bio_endio+0x70d/0x850 [ 276.715404][ T5853] submit_bio_noacct+0x56d/0x1eb0 [ 276.715465][ T5853] __submit_merged_bio+0x33c/0x770 [ 276.715521][ T5853] __submit_merged_write_cond+0x319/0x3f0 [ 276.715585][ T5853] f2fs_sync_node_pages+0x1929/0x1c20 [ 276.715645][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.715691][ T5853] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 276.715733][ T5853] ? irqentry_exit+0x3b/0x90 [ 276.715788][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.715832][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.715891][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.715980][ T5853] ? down_write+0x14d/0x200 [ 276.716018][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716064][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716107][ T5853] ? up_write+0x1b2/0x520 [ 276.716153][ T5853] block_operations+0x941/0xfd0 [ 276.716226][ T5853] ? __pfx_block_operations+0x10/0x10 [ 276.716282][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716385][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716428][ T5853] ? down_write+0x14d/0x200 [ 276.716463][ T5853] ? __pfx_down_write+0x10/0x10 [ 276.716503][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716546][ T5853] ? rcu_is_watching+0x12/0xc0 [ 276.716600][ T5853] f2fs_write_checkpoint+0x2b8/0x4c60 [ 276.716669][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716713][ T5853] ? kfree+0x2b4/0x4d0 [ 276.716745][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716792][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716835][ T5853] ? rcu_is_watching+0x12/0xc0 [ 276.716886][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.716929][ T5853] ? kthread_stop+0x273/0x650 [ 276.716969][ T5853] kill_f2fs_super+0x3c2/0x470 [ 276.717004][ T5853] ? __pfx_kill_f2fs_super+0x10/0x10 [ 276.717038][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.717114][ T5853] deactivate_locked_super+0xc1/0x1a0 [ 276.717156][ T5853] deactivate_super+0xde/0x100 [ 276.717198][ T5853] cleanup_mnt+0x225/0x450 [ 276.717245][ T5853] task_work_run+0x150/0x240 [ 276.717287][ T5853] ? __pfx_task_work_run+0x10/0x10 [ 276.717325][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.717372][ T5853] ? __pfx___x64_sys_umount+0x10/0x10 [ 276.717431][ T5853] exit_to_user_mode_loop+0xeb/0x110 [ 276.717477][ T5853] do_syscall_64+0x3f6/0x4c0 [ 276.717513][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.717550][ T5853] RIP: 0033:0x7f4d13d8fc57 [ 276.717579][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 276.717615][ T5853] RSP: 002b:00007ffd44f5f628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 276.717649][ T5853] RAX: 0000000000000000 RBX: 00007f4d13e10925 RCX: 00007f4d13d8fc57 [ 276.717677][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd44f5f6e0 [ 276.717700][ T5853] RBP: 00007ffd44f5f6e0 R08: 0000000000000000 R09: 0000000000000000 [ 276.717723][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd44f60770 [ 276.717746][ T5853] R13: 00007f4d13e10925 R14: 00000000000437fc R15: 00007ffd44f607b0 [ 276.717796][ T5853] [ 276.717809][ T5853] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 277.229514][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 277.229566][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.229589][ T5853] Call Trace: [ 277.229600][ T5853] [ 277.229614][ T5853] dump_stack_lvl+0x16c/0x1f0 [ 277.229679][ T5853] f2fs_handle_critical_error+0x621/0x9f0 [ 277.229730][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.229776][ T5853] ? f2fs_build_fault_attr+0x53/0x1f0 [ 277.229836][ T5853] f2fs_write_end_io+0x785/0xc20 [ 277.229892][ T5853] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 277.229950][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.230007][ T5853] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 277.230056][ T5853] bio_endio+0x70d/0x850 [ 277.230099][ T5853] submit_bio_noacct+0x56d/0x1eb0 [ 277.230162][ T5853] __submit_merged_bio+0x33c/0x770 [ 277.230225][ T5853] __submit_merged_write_cond+0x319/0x3f0 [ 277.230291][ T5853] f2fs_sync_node_pages+0x1929/0x1c20 [ 277.230352][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.230401][ T5853] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 277.230443][ T5853] ? irqentry_exit+0x3b/0x90 [ 277.230498][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.230541][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.230595][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.230692][ T5853] ? down_write+0x14d/0x200 [ 277.230731][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.230777][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.230824][ T5853] ? up_write+0x1b2/0x520 [ 277.230872][ T5853] block_operations+0x941/0xfd0 [ 277.230947][ T5853] ? __pfx_block_operations+0x10/0x10 [ 277.231004][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.231116][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.231159][ T5853] ? down_write+0x14d/0x200 [ 277.231195][ T5853] ? __pfx_down_write+0x10/0x10 [ 277.231235][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.231278][ T5853] ? rcu_is_watching+0x12/0xc0 [ 277.231334][ T5853] f2fs_write_checkpoint+0x2b8/0x4c60 [ 277.231404][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.231447][ T5853] ? kfree+0x2b4/0x4d0 [ 277.231479][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.231528][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.231570][ T5853] ? rcu_is_watching+0x12/0xc0 [ 277.231616][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.231659][ T5853] ? kthread_stop+0x273/0x650 [ 277.231700][ T5853] kill_f2fs_super+0x3c2/0x470 [ 277.231736][ T5853] ? __pfx_kill_f2fs_super+0x10/0x10 [ 277.231770][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.231853][ T5853] deactivate_locked_super+0xc1/0x1a0 [ 277.231897][ T5853] deactivate_super+0xde/0x100 [ 277.231940][ T5853] cleanup_mnt+0x225/0x450 [ 277.231987][ T5853] task_work_run+0x150/0x240 [ 277.232031][ T5853] ? __pfx_task_work_run+0x10/0x10 [ 277.232067][ T5853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.232115][ T5853] ? __pfx___x64_sys_umount+0x10/0x10 [ 277.232175][ T5853] exit_to_user_mode_loop+0xeb/0x110 [ 277.232221][ T5853] do_syscall_64+0x3f6/0x4c0 [ 277.232259][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.232296][ T5853] RIP: 0033:0x7f4d13d8fc57 [ 277.232325][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 277.232361][ T5853] RSP: 002b:00007ffd44f5f628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 277.232395][ T5853] RAX: 0000000000000000 RBX: 00007f4d13e10925 RCX: 00007f4d13d8fc57 [ 277.232419][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd44f5f6e0 [ 277.232442][ T5853] RBP: 00007ffd44f5f6e0 R08: 0000000000000000 R09: 0000000000000000 [ 277.232465][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd44f60770 [ 277.232489][ T5853] R13: 00007f4d13e10925 R14: 00000000000437fc R15: 00007ffd44f607b0 [ 277.232544][ T5853] [ 277.676297][ T5853] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 277.710691][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 278.050664][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 278.235663][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.256276][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 278.283529][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.293088][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.320326][ T10] usb 2-1: Product: syz [ 278.329101][ T10] usb 2-1: Manufacturer: syz [ 278.348412][ T10] usb 2-1: SerialNumber: syz [ 278.431967][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 278.605745][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.637297][ T8481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.640454][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.685010][ T8345] bridge_slave_0: entered allmulticast mode [ 278.702793][ T8345] bridge_slave_0: entered promiscuous mode [ 278.737776][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.756513][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.795595][ T8345] bridge_slave_1: entered allmulticast mode [ 278.842204][ T8345] bridge_slave_1: entered promiscuous mode [ 279.286524][ T8481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 279.294754][ T10] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 279.294811][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.307803][ T10] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 279.385708][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.560820][ T10] wwan wwan0: port wwan0mbim0 attached [ 279.809425][ T8345] team0: Port device team_slave_0 added [ 279.820693][ T10] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b2:30:92:2a:1a:cc [ 279.886724][ T8345] team0: Port device team_slave_1 added [ 279.907953][ T10] usb 2-1: USB disconnect, device number 5 [ 279.955443][ T10] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 280.103867][ T8512] overlayfs: failed to clone upperpath [ 280.305946][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 280.364406][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.402774][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.539113][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.610674][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.617700][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.661261][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.803118][ T8520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.306592][ T8345] hsr_slave_0: entered promiscuous mode [ 281.369307][ T8345] hsr_slave_1: entered promiscuous mode [ 281.600190][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.675'. [ 281.603749][ T8505] loop3: detected capacity change from 0 to 32768 [ 281.675376][ T8505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.667 (8505) [ 281.720367][ T5825] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 281.800418][ T8505] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.825116][ T8505] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 281.835301][ T8505] BTRFS info (device loop3): using free-space-tree [ 281.924585][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 281.983771][ T5825] usb 3-1: config 0 has no interfaces? [ 282.060398][ T5825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.069531][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.165953][ T5825] usb 3-1: Product: syz [ 282.170202][ T5825] usb 3-1: Manufacturer: syz [ 282.215748][ T5825] usb 3-1: SerialNumber: syz [ 282.305903][ T5825] usb 3-1: config 0 descriptor?? [ 282.311597][ T7345] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.579065][ T10] usb 3-1: USB disconnect, device number 6 [ 282.762762][ T8562] loop5: detected capacity change from 0 to 4096 [ 282.849659][ T8562] EXT4-fs (loop5): Test dummy encryption mode enabled [ 282.879237][ T8562] EXT4-fs (loop5): DAX unsupported by block device. [ 284.116152][ T5944] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 284.377575][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.429156][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 284.468754][ T5944] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 284.530386][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.613889][ T5944] usb 6-1: config 0 descriptor?? [ 284.632750][ T8345] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 284.734668][ T8345] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 284.770148][ T8345] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 284.809350][ T8345] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 285.279118][ T5944] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0009/input/input15 [ 285.901258][ T5944] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 285.947602][ T5944] usb 6-1: USB disconnect, device number 13 [ 286.450068][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.594862][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.765605][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.772930][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.798694][ T8620] fido_id[8620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 286.912274][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.919581][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.042320][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 290.577153][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.187365][ T8345] veth0_vlan: entered promiscuous mode [ 293.422185][ T8345] veth1_vlan: entered promiscuous mode [ 293.652529][ T8678] loop5: detected capacity change from 0 to 32768 [ 293.672635][ T8345] veth0_macvtap: entered promiscuous mode [ 293.735003][ T8345] veth1_macvtap: entered promiscuous mode [ 293.937550][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.007975][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.081692][ T8345] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.151181][ T8345] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.211600][ T8345] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.284935][ T8345] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.992754][ T6063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.056929][ T6063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.360325][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.461748][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.588175][ T8729] tipc: Started in network mode [ 295.637944][ T8729] tipc: Node identity 7f000001, cluster identity 4711 [ 295.664031][ T8729] tipc: Enabled bearer , priority 10 [ 296.344054][ T8741] loop3: detected capacity change from 0 to 16 [ 296.752447][ T8741] erofs (device loop3): mounted with root inode @ nid 36. [ 297.112536][ T5825] tipc: Node number set to 2130706433 [ 298.134324][ T8753] loop2: detected capacity change from 0 to 256 [ 298.181454][ T8753] exfat: Deprecated parameter 'namecase' [ 298.341649][ T6965] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.649537][ T8753] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 298.718764][ T8753] exFAT-fs (loop2): failed to load alloc-bitmap [ 298.800724][ T8753] exFAT-fs (loop2): failed to recognize exfat type [ 298.906980][ T6965] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.224729][ T6965] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.695458][ T6965] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.207916][ T6965] bridge_slave_1: left allmulticast mode [ 301.218138][ T6965] bridge_slave_1: left promiscuous mode [ 301.256461][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.443731][ T6965] bridge_slave_0: left allmulticast mode [ 301.489923][ T6965] bridge_slave_0: left promiscuous mode [ 301.529275][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.717356][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.730542][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.741750][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.753614][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.763723][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.374287][ T8808] netlink: 256 bytes leftover after parsing attributes in process `syz.2.733'. [ 302.476653][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.670431][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 302.835426][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.927152][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.980308][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.013572][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.053080][ T5923] usb 2-1: config 0 descriptor?? [ 303.101699][ T5923] hub 2-1:0.0: USB hub found [ 303.289982][ T5923] hub 2-1:0.0: 1 port detected [ 303.744673][ T6965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.757784][ T6965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.775944][ T6965] bond0 (unregistering): Released all slaves [ 303.830803][ T5859] Bluetooth: hci2: command tx timeout [ 304.238350][ T5923] hub 2-1:0.0: activate --> -90 [ 304.380436][ T5923] usb 2-1-port1: config error [ 304.616380][ T55] usb 2-1: USB disconnect, device number 6 [ 305.775020][ T6965] hsr_slave_0: left promiscuous mode [ 305.790357][ T55] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 305.818364][ T6965] hsr_slave_1: left promiscuous mode [ 305.836399][ T6965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.886059][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.910736][ T5859] Bluetooth: hci2: command tx timeout [ 305.918825][ T6965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.962003][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.980670][ T55] usb 6-1: device descriptor read/64, error -71 [ 306.059683][ T6965] veth1_macvtap: left promiscuous mode [ 306.085893][ T6965] veth0_macvtap: left promiscuous mode [ 306.106178][ T6965] veth1_vlan: left promiscuous mode [ 306.120527][ T6965] veth0_vlan: left promiscuous mode [ 306.234113][ T55] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 306.534073][ T8857] netlink: 'syz.1.742': attribute type 7 has an invalid length. [ 306.612369][ T55] usb 6-1: device descriptor read/64, error -71 [ 306.864649][ T55] usb usb6-port1: attempt power cycle [ 307.243811][ T55] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 307.290719][ T55] usb 6-1: device descriptor read/8, error -71 [ 307.443516][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 307.540354][ T55] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 307.568798][ T55] usb 6-1: device descriptor read/8, error -71 [ 307.726880][ T55] usb usb6-port1: unable to enumerate USB device [ 307.990573][ T5859] Bluetooth: hci2: command tx timeout [ 308.724851][ T8873] loop5: detected capacity change from 0 to 128 [ 308.798529][ T6965] team0 (unregistering): Port device team_slave_1 removed [ 308.861277][ T8873] FAT-fs (loop5): Directory bread(block 32) failed [ 308.878447][ T8873] FAT-fs (loop5): Directory bread(block 33) failed [ 308.885507][ T8873] FAT-fs (loop5): Directory bread(block 34) failed [ 308.904837][ T8873] FAT-fs (loop5): Directory bread(block 35) failed [ 308.916277][ T8873] FAT-fs (loop5): Directory bread(block 36) failed [ 308.927500][ T8873] FAT-fs (loop5): Directory bread(block 37) failed [ 308.939775][ T8873] FAT-fs (loop5): Directory bread(block 38) failed [ 308.948071][ T8873] FAT-fs (loop5): Directory bread(block 39) failed [ 308.964512][ T8873] FAT-fs (loop5): Directory bread(block 40) failed [ 308.976402][ T8873] FAT-fs (loop5): Directory bread(block 41) failed [ 309.159960][ T8876] loop1: detected capacity change from 0 to 32768 [ 309.164461][ T6965] team0 (unregistering): Port device team_slave_0 removed [ 309.320691][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 309.320744][ T8876] allowing incompatible features above 0.0: (unknown version) [ 309.320767][ T8876] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 309.320798][ T8876] with devices loop1 [ 309.372528][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 309.383548][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem [ 309.401499][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write [ 309.427780][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks [ 309.448191][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace [ 309.461313][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace [ 309.473329][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table [ 309.482038][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done [ 309.531291][ T8876] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem [ 309.708436][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 309.737244][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only [ 309.759130][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop [ 309.846009][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3 [ 309.987231][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3 [ 310.003096][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4 [ 310.014420][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean [ 310.077910][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 310.086075][ T51] Bluetooth: hci2: command tx timeout [ 310.458809][ T8850] netem: change failed [ 311.028318][ T8796] chnl_net:caif_netlink_parms(): no params data found [ 311.159718][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz.8.754'. [ 311.289816][ T8920] loop2: detected capacity change from 0 to 128 [ 311.372384][ T8920] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.451292][ T8920] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.878516][ T8920] fscrypt: Adiantum using implementation "adiantum(xchacha12-x86_64,aes-aesni,nhpoly1305-avx2)" [ 311.971375][ T8937] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN NOPTI [ 311.983522][ T8937] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 311.991965][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.8.758 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 312.003903][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.013993][ T8937] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 312.019577][ T8937] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 d0 9b 2f f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 312.039230][ T8937] RSP: 0018:ffffc90010f17328 EFLAGS: 00010213 [ 312.045332][ T8937] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b0d1000 [ 312.053320][ T8937] RDX: 000000000000005d RSI: ffffffff898c8400 RDI: 00000000000002ec [ 312.061305][ T8937] RBP: 00000000000affe0 R08: 0000000000000005 R09: 0000000000000000 [ 312.069292][ T8937] R10: 00000000000affe0 R11: 0000000000000001 R12: ffffffff8ce87f60 [ 312.077283][ T8937] R13: 0000000000000000 R14: ffffffff8ce87f40 R15: ffff88807a410000 [ 312.085273][ T8937] FS: 00007f93ead6c6c0(0000) GS:ffff88812481c000(0000) knlGS:0000000000000000 [ 312.094246][ T8937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.101067][ T8937] CR2: 0000001b30117ff8 CR3: 000000007bda0000 CR4: 0000000000350ef0 [ 312.109059][ T8937] Call Trace: [ 312.112348][ T8937] [ 312.115289][ T8937] qdisc_tree_reduce_backlog+0x224/0x500 [ 312.120966][ T8937] codel_change+0x6d9/0xc90 [ 312.125495][ T8937] ? qdisc_alloc+0x900/0xc50 [ 312.130095][ T8937] ? qdisc_create+0x71/0xfc0 [ 312.134711][ T8937] ? tc_modify_qdisc+0x12bb/0x2130 [ 312.139850][ T8937] ? rtnetlink_rcv_msg+0x3c9/0xe90 [ 312.145016][ T8937] ? ____sys_sendmsg+0xa98/0xc70 [ 312.150017][ T8937] ? __pfx_codel_change+0x10/0x10 [ 312.155093][ T8937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.161200][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.166862][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.172529][ T8937] codel_init+0x2e6/0x430 [ 312.176881][ T8937] ? __pfx_codel_init+0x10/0x10 [ 312.181760][ T8937] qdisc_create+0x457/0xfc0 [ 312.186292][ T8937] tc_modify_qdisc+0x12bb/0x2130 [ 312.191261][ T8937] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 312.196583][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.202248][ T8937] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 312.207560][ T8937] rtnetlink_rcv_msg+0x3c9/0xe90 [ 312.212549][ T8937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.218052][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.223727][ T8937] ? ref_tracker_free+0x37c/0x830 [ 312.228810][ T8937] netlink_rcv_skb+0x158/0x420 [ 312.233615][ T8937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.239119][ T8937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.244435][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.250091][ T8937] ? netlink_deliver_tap+0x1ae/0xd30 [ 312.255397][ T8937] netlink_unicast+0x53d/0x7f0 [ 312.260183][ T8937] ? __pfx_netlink_unicast+0x10/0x10 [ 312.265489][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.271182][ T8937] netlink_sendmsg+0x8d1/0xdd0 [ 312.275974][ T8937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.281276][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.286968][ T8937] ____sys_sendmsg+0xa98/0xc70 [ 312.291767][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.297421][ T8937] ? copy_msghdr_from_user+0x10a/0x160 [ 312.302955][ T8937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.308288][ T8937] ? preempt_schedule_thunk+0x16/0x30 [ 312.313695][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.319348][ T8937] ? try_to_wake_up+0xa2f/0x1680 [ 312.324313][ T8937] ___sys_sendmsg+0x134/0x1d0 [ 312.329024][ T8937] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.334257][ T8937] ? __lock_acquire+0x622/0x1c90 [ 312.339274][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.344946][ T8937] __sys_sendmsg+0x16d/0x220 [ 312.349567][ T8937] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.354737][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.360411][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.366073][ T8937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.371740][ T8937] do_syscall_64+0xcd/0x4c0 [ 312.376261][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.382167][ T8937] RIP: 0033:0x7f93e9f8e929 [ 312.386622][ T8937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.406260][ T8937] RSP: 002b:00007f93ead6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.414724][ T8937] RAX: ffffffffffffffda RBX: 00007f93ea1b5fa0 RCX: 00007f93e9f8e929 [ 312.422718][ T8937] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 312.430716][ T8937] RBP: 00007f93ea010b39 R08: 0000000000000000 R09: 0000000000000000 [ 312.438709][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.446813][ T8937] R13: 0000000000000000 R14: 00007f93ea1b5fa0 R15: 00007ffcc2278d88 [ 312.454826][ T8937] [ 312.457850][ T8937] Modules linked in: [ 312.461889][ T8937] ---[ end trace 0000000000000000 ]--- [ 312.467443][ T8937] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 312.473043][ T8937] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 d0 9b 2f f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 312.492737][ T8937] RSP: 0018:ffffc90010f17328 EFLAGS: 00010213 [ 312.498836][ T8937] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b0d1000 [ 312.506865][ T8937] RDX: 000000000000005d RSI: ffffffff898c8400 RDI: 00000000000002ec [ 312.514916][ T8937] RBP: 00000000000affe0 R08: 0000000000000005 R09: 0000000000000000 [ 312.522953][ T8937] R10: 00000000000affe0 R11: 0000000000000001 R12: ffffffff8ce87f60 [ 312.531012][ T8937] R13: 0000000000000000 R14: ffffffff8ce87f40 R15: ffff88807a410000 [ 312.539019][ T8937] FS: 00007f93ead6c6c0(0000) GS:ffff88812481c000(0000) knlGS:0000000000000000 [ 312.548024][ T8937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.554683][ T8937] CR2: 0000001b30117ff8 CR3: 000000007bda0000 CR4: 0000000000350ef0 [ 312.562732][ T8937] Kernel panic - not syncing: Fatal exception in interrupt [ 312.570181][ T8937] Kernel Offset: disabled [ 312.574520][ T8937] Rebooting in 86400 seconds..