last executing test programs: 9m18.475040811s ago: executing program 3 (id=35): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x6, 0x0, 0xffff}]}, 0x30}}, 0x0) 9m14.726343083s ago: executing program 3 (id=38): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x500}, 0x10) 9m13.599369182s ago: executing program 3 (id=41): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0xc, &(0x7f0000000c80)=ANY=[@ANYRES16], 0x1, 0x367, &(0x7f00000011c0)="$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") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000800)=ANY=[@ANYBLOB='gid=ignore,iocharset=macroman,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=ascii,mode=00000000000000000000010,dmode=00000000000000000000004,iocharset=cp949,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6c617374626c6f6379000000000100000a94707f983030303030303030303030643de66f7569643d000000000000da0ea32015c86915dd0311295a31115a046a2f6a0a67d09c89b7cd394ec3f2f6258f52dc9d7820ad3b9df9c4bc411cda854a75931336e104dcdd3659d8db71014781df7e9f1284a629836699727c8cc579", @ANYRESDEC=0x0, @ANYBLOB=',partition=00000000000000000006,session=00000000000000000006,umask=00000000000000000000062,\x00'], 0x1, 0xc67, &(0x7f0000001dc0)="$eJzs3U9sHNd9B/DfG5LiSm5rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoEW8zsW3FFkZYskiIlfz429d2deW/mvZnxjCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xj13/ETaZEXfHjQGAHgoLox99fjJzZ7/AMBj69JW//8PAAAAAAAAAAAAAADsFymKeCpSzF1YSxPV947a+dbAjZvjI6ObVzuYqpp9Vfnyp3bi5KnTX35h+Ew3z7dmPqT+TvtsvD526Vz9ldnrc/NTCwtTk/XxmdaV2cmp+97CdutvdLQ6APXrb9yYvHp1oX7y+VN3rL459MHgE4eHzg4/e+yZbtnxkdHRsfUitd7y/Q/ckI6tRngciCKORYrnvvuT1IyIIrZ/LGoP99xvdLDqxNGqE+Mjo1VHplvNmcVy5cXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+WnZvbK4537w8PVW/2JxfbC22Zmcupk5ry/7Uo4gzKWI5IlYH797cQBTRHym+/eRaupzf+lEdhy9VA4O3bkexi328D2U76wMRy8UjcM72scEo4rVI8dN3j8SVfJ+p7jVfjHitzO9H3Crz5YhUXhinI97f5Dri0dQfRfxZef7PrqXJ6n7Qva+c/1r9KzNXZ3vKdu8rH/H5cNedYo+eDwc35MOxz+9NtSiiWd3x19KD/2YHAAAAAAAAAAAAAAAAgJ12MIr4TKR49V//oBpXHNW49CfPDv/u0C/2jhl/+h7bKcs+HxFLxf2NyT2QBwZeTBdT2uOxxB9ntSjiD/P4v2/udWMAAAAAAAAAAAAAAAAAAAA+1or4caR46b0jaTl65xRvzVyrX2penu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Z+2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfw8UnzrG2spUkQ0IiaikyuDe906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0mIr4XqSo/17j9rL+iEjVvx1Hyl9OR+NAmZ+MxnCZL0fjXM5mlf2Nb+5B+9megVTEjyLFYO2d2yc8n/+Bzrfbl0Hcenv922f7O9nXXTn0weATh588Ozz6+ae3+pw2a8DR862ZGzfr4yOjo2M9i/vz3j/Zs2wo77fYma4TEQtvvvVGc3p6av7BP5SXwANW757Jbez9YX5I/Y9MU33YiQ/Rvy+asTd9v0NtL25O7Lry+f9+pPjN9/6t+8DvPP9r8Qudb7ef8PGzP1p//r+0cUP3+fzv31gvP//LJ8Fmz/+nepa9lH83MtAfUVu8PjdwOKK28OZbx1rXm9emrk3NnD5+/MXh4RdPHR84EFG72pqe6vm0I4cLAAAAAAAAAAAAAAAA4OFJRfx2pGj+aC3VI+JmNV5r6Ozws8ee6Yu+arzVHeO2Xx+7dK7+yuz1ufmphYWpyfr4TOvK7OTU/e6uVg33Gh8Z3ZXO3NPBXW7/wdors3Nvzreu/f7ipusP1c5dXlicb17ZfHUcjCKi0bvkaNXg8ZHRqtHTreZMVfXipoPpP7qBVMS/R4orp+vpC3lZHv+/cYR/3Hr7xdvXwtLGDe3g+P/PH1of//eJnqLlPlMq4meR4jf+/On4QtXOQ3HXMcvl/jpSHD3zuVwuDpTlum3ovFegMzKwLPvfkeLvf35n2e54yKfWy574SAf3EVCe/ycjxff+9Dvxq3nZne9/6D3/68fv0MYN7dL7Hz7Vs+zQHe8r2HbXyef/WKR4+al34teqJf/7oe//6L6x4Uin8Pr7OXbp/P9yz7KhvN9f36nOAwAAAAAAAAAAPMIGUhF/Eyl+MNqfXsjL7ufv/01u3NAu/f2vT/csm9yZ+Yru+WHbBxUAAAAA9omBVMSPI8W1xXduj6G+c/x3z/jP31of/zmSNqyt/pzvl6r3Buzkn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBfSamIF/J86hPVeP7JLedTX4kUr/7nc7lcOlyW684DP1T9WrswO3Ps3PT0bC0Wm5enp+pjc80rU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2IE2XZT0SK//i7O8vmqanz3NHVdk+WZf8yUnz9Hzcve3i97Kmy7HcixQ+/Xu+WPVSW7b4f9dPrZZ+/MlvswlkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri/fHsuf5/8f6PlaufV2z3z/G9ys5vkfqub/3+rzg8z/X71XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYq5C2tpZbD83lE735q5cXN8ZHTzagdTVbOvKl/+1E6cPHX6yy8Mn+nmh9ffaZ+J18cunau/Mnt9bn5qYWFqsj4+07oyOzl131vYbv2NjlYHoH79jRuTV68u1E8+f+qO1TeHPhh84vDQ2eFnjz3TLTs+Mjo61lOmf+CB936XtMXyA1HEX0SK5777k/SDwYgitn8s7nHt7LaDVSeOVp0YHxmtOjLdas4slisvdg9EEVHvqdToHqN7nov/a7fbD6srm2hELJXNLxt8tOze2Fxzvnl5eqp+sTm/2Fpszc5cTJ3Wlv2pRxFnUsRyRKwO3r25gSjijUjx7SfX0j8NRvR1j8OXLox99fjJrdtR7GIf70PZzvpAxHJxP+eMrQxGEf8QKX767pH458GI/uj8xBcjXivz+xG3onO+U3lhnI54f5PriEdTfxTxP+X5P7uW3h0s7wfd+8r5r9W/MnN1tqds976yzedDu93+4zL37vnwMO3ze1MtivhhdcdfS//iv2sAAAAAAAAAAAAAAACAfaSIX4kUL713JFXjg2+PKW7NXKtfal6e7gzr6479646Zbrfb7XrqZCPnRM6lnMs5V3Ku5owi18/ZKLPWbk/k70s5l3Ou5FzNGX25fl81XLHdyN8nci7lXM65knM1Z/Tn+jkbOSdyLuVczrmSczVn7JOxewAAAAAAAAAAAAAAAAAAwOOlqP5J8a1vrKX2YGd+6Yno5Ir5QB97/x8AAP//Jhb4VQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000780)={'vlan0\x00', &(0x7f0000000680)=@ethtool_perm_addr={0x20, 0xd7, "c2da6097bec1a7f885ef30a1e3f35b10d3f8d72838924663dbc3222a791b43c628471e548e85643ef3ae4842511ad52b0062a0316f3cce890930f6022e02cbbc29f03dfb531d4bbb0c87fc09e6a109679e5b2ceb80be79fec53cae81597868571f51363e0b0e2bf1031c4848338f05d980783ec4086a6920e326558e064492f05898791bfd0a5714d7ed290f784611937ee5896edd746fe86473b23b33ecf627069e8e4f3d279fbde7ec64295757fa0a6d7687a0ee989a6e98036cb5e614de082385ef04c231a729eed129802d979d8257d209d065f5e2"}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x8}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 9m11.095856716s ago: executing program 3 (id=47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x34, 0x0, 0x20, 0xfffff02a}]}) 9m10.204979869s ago: executing program 3 (id=51): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m9.903471194s ago: executing program 3 (id=52): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$KDSIGACCEPT(r3, 0x80047456, 0x100000001ffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5}, 0x94) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000000280)={0x1, 0x100}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 8m54.808851707s ago: executing program 32 (id=52): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$KDSIGACCEPT(r3, 0x80047456, 0x100000001ffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5}, 0x94) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000000280)={0x1, 0x100}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 8m19.852896506s ago: executing program 2 (id=177): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/280], 0x25, 0x442b, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzsLOwIaVsGDr53NgmOf38p159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4n2zb/6H965/2dOI6Oehr75/s6vmL7944E8L3sz8+WV9fXw9V3SERhWZDTb//9uu9meZjQxzSqu2GjvoghHByy7iqukII739X/xTnkrTR5NgbQjiWfMIb9z67mduj0Tx8XDybfzp1f2349OTqg7XWnz0K4avS/167Pf/zi13DP72yR90DAAAAAAAAAAAAAAAAAPCMG7929fo7g0PhURS6V6Ot7+uOJ8dW78eu75kXOv9hAQAAAAAAAAAAAAAAAAAA4G9q8/3/XHRim/f/x5LjSIv66291fox0zsTbV8cuDA4l+79HW/JfT5J+OdcV+rfZ9z27//u5TP3t93/f2s9uNcbX6LcvRPFA6jyOBwZC+CbZ+P1UdCQulZcqr94qLy/M7tkwnlnp+Nd3709FJ9nQv934j2ba7/z+///dcjVVz2/u3SX2XEvHv6tluW8/jdqK//lMvf2IP7uXjn93La23ucBIfQKoxv/z7p3jP5Zpv1PxPx5CyEXVseZSM0B1DVNNb7VeIS0d/0O1tNTUmfwhW93/v2fifyHT/kHN/yvZLyK2lY7/v2ppPakSm/d/f7zz/X8x0/5BxL86/hXf/21Jx/9wPbE7VaT2l2x3/h/PtN+p+F+Pk3Eej1JXwGpUT2/1/+pIS8e/Z0v+5vNf3Nb671Km/n49/zX6bTz/Nab/l6P68x/bS8e/t2W5du//iUy9Ts//I7X1H7uVjv+RWlp67dxX+9lu/Ccz7Xcq/rVVSU8j/pvzyR+H6+lfW/+1JR3/f9cT4+YSK7WftfVftPP6/3Km/YNY/1XHvxJ3ttfnRXP8u8LRluWq8f+hje//K5l6nY9/CIPW+ruWvv+PtSxXu/97do7/VKZep+P/UicbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgGjCbHvhDFA6nzOB4YCOF8cn4qHImmC7P56VJ55qOlEMaS9Fw4Ed0ulacLpfzcQnm2mC+USuWZEC4k+SdDT7RUKlfy84W7Fzfa6o3uFAuLlelioRJCGE/S/x+ONdqanqvMF+6GEC5t5P0nLi/evVNYyM/OLb45ODg4GCY2xtAfFT+pFBcq9d7ruSFMbtTti5oGV8u+vDGWo9GH5eXFhUKpln6lqU6pPFMoNdWZSvK+CP1RZXF5YaZQKeZL5duN/g7SSHIcm7j23rUrQ1vyb0b14+j+DgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv+jR8BtfhhC662dxCGGk8Uu0XfmHj4tn80+n7q8Nn55cfbD2pFU5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi4dozQQRGEAfjMWaucxrJbdznZFES1cETyBHsPD6FG8hHdIkSJtihBIZiFsdmGbpPq+5sH8zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJjn6b37eKubiBRXm8uIv6//xWH+UurP/fj9izPMyOk8v3YPj3VT/j0d5XflaNnmXbpefX/GSO39DvZkuE97fZ/rybmm9m1qvr7vTaRcRURb8tuUc1XNewsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W0fRtwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA//+Elx0W") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000006b40)=ANY=[@ANYBLOB="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"], 0x80, 0x350, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x40002) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket(0x1e, 0x2, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) getdents(r1, &(0x7f0000000900)=""/4105, 0x1009) mount$bind(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x500874, 0x0) mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) 8m16.961737802s ago: executing program 2 (id=183): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0xfffffffd) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1811e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0xfc01, 0x1000f4) creat(&(0x7f0000000180)='./bus\x00', 0x9b00000000000009) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0xc75af85df20d31a}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0x800000}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0) 8m15.194167183s ago: executing program 2 (id=188): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf4}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) 8m11.396961062s ago: executing program 2 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002100)={&(0x7f00000020c0)='sctp_probe\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffff7b}, 0x18) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001000000090001"], 0xfc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffe00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x800) recvmmsg$unix(r7, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f00000026c0)=""/42, 0x2a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002780)=[{&(0x7f00000021c0)=""/29, 0x1d}, {&(0x7f0000001c00)=""/26, 0x1a}, {&(0x7f0000002700)=""/84, 0x54}], 0x3}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x33, 0x107, 0xfffffffc, 0x25dfd9fd, {0x2, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="dd5f"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}]}, 0x5c}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000002580)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x48, r11, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, ':%\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x48}}, 0x48001) 8m7.357786529s ago: executing program 2 (id=206): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x0) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='veth1_macvtap\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 8m5.110525876s ago: executing program 2 (id=209): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) 7m49.928186294s ago: executing program 33 (id=209): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) 4m51.443278163s ago: executing program 1 (id=618): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001001000090000000500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 4m49.876413846s ago: executing program 1 (id=621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m49.510551363s ago: executing program 1 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 4m49.122076591s ago: executing program 1 (id=624): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8800, &(0x7f0000000200)={0x5, 0x84, 0x100000}, 0x20) 4m48.415441517s ago: executing program 1 (id=627): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000300)={0x40}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "bf36ed2c833c90392b92f96f8ee71dc21d52a2ef4be89d3e536b89d07653c8fa746f1c83f1815ccc431e40ef450569"}}) 4m42.905683926s ago: executing program 1 (id=638): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x1, r2}) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 4m27.827626095s ago: executing program 34 (id=638): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x1, r2}) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 4m9.892561629s ago: executing program 4 (id=710): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)={0x4ec, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x2a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x73, 0x5, "18d9362cff2ae28d05fc54e2fadb29a1bd965f1b88f41722888cf9d227c1bc9482716ed04ceb84d34a530310fad4ee23093c94a4a628dcb1e364e4bc4295db568f455070ac7946ca4ca12f7d8bdf18274ad65f3da971c4a0dcc34a3bef6df7ec60a4f9be940d58363baea3238db9a0"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8634}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'security.capability\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'B&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-,\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xebc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '^/{:^+-*!\x00'}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#\\[$\xbd\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'security.capability\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'security.capability\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x95, 0x5, "4b689714259f9f50816538020e947d55b38099e72adba8ffccddbd3c6ba381369a7f16c34f5b4c170e988a2ad0f87c98f8370c7e2d7ea946b5ed37b351ac2e0634ba363eb543ccaa425d818b658a7ac0e180ac81ee689a39c6d2ea1794f2d1c7bbe0d87635186d416be25032d2cd5725b63be62ab31164c17e58c247322594d73a172ade94b061bcc7c63223d3e35b5987"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':[$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf855}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x144, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe7e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':[$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#{(:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "d044f5b25bd1aa93e7964703eb3cdd6815130463d84e7a53e4bc5ffadd46558ca3f386f839f2f7bb2ba8a93b53512c1fdfcaea71e4f72ced8c9f2ffb5442c2510ba957f95c545e228c36c90287badded6e05acbc32a947f4ab2a98ecbbd69db9491a4e9998645e294bded2ca6069b1372dd3728335ab425274e8deb534c653b5fec65c87f802a78ada1c394f22c4cba62c25d318bd938724c234c9779e771670235a9bd229d614ee70b1a6923e03cd407b0a10bdbd8c1fbcbc3b587aca449aadbaa7267807706c8fbc5ae88c"}]}]}, 0x4ec}, 0x1, 0x0, 0x0, 0xc0}, 0x40080a5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) r5 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x24) fcntl$notify(r5, 0x402, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40012020, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 4m2.875194412s ago: executing program 4 (id=719): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0xfc01, 0x1000f4) creat(&(0x7f0000000180)='./bus\x00', 0x9b00000000000009) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0xc75af85df20d31a}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0x800000}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0) 3m59.266429269s ago: executing program 4 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c0002006e6c38303231"], 0x20}}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 3m58.100064135s ago: executing program 4 (id=733): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0xc, &(0x7f0000000c80)=ANY=[@ANYRES16], 0x1, 0x367, &(0x7f00000011c0)="$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") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000800)=ANY=[@ANYBLOB='gid=ignore,iocharset=macroman,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=ascii,mode=00000000000000000000010,dmode=00000000000000000000004,iocharset=cp949,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6c617374626c6f6379000000000100000a94707f983030303030303030303030643de66f7569643d000000000000da0ea32015c86915dd0311295a31115a046a2f6a0a67d09c89b7cd394ec3f2f6258f52dc9d7820ad3b9df9c4bc411cda854a75931336e104dcdd3659d8db71014781df7e9f1284a629836699727c8cc579", @ANYRESDEC=0x0, @ANYBLOB=',partition=00000000000000000006,session=00000000000000000006,umask=00000000000000000000062,\x00'], 0x1, 0xc67, &(0x7f0000001dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000780)={'vlan0\x00', &(0x7f0000000680)=@ethtool_perm_addr={0x20, 0xce, "c2da6097bec1a7f885ef30a1e3f35b10d3f8d72838924663dbc3222a791b43c628471e548e85643ef3ae4842511ad52b0062a0316f3cce890930f6022e02cbbc29f03dfb531d4bbb0c87fc09e6a109679e5b2ceb80be79fec53cae81597868571f51363e0b0e2bf1031c4848338f05d980783ec4086a6920e326558e064492f05898791bfd0a5714d7ed290f784611937ee5896edd746fe86473b23b33ecf627069e8e4f3d279fbde7ec64295757fa0a6d7687a0ee989a6e98036cb5e614de082385ef04c231a729eed129802d97"}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x8}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 3m56.637609394s ago: executing program 4 (id=737): socket$alg(0x26, 0x5, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000300)=""/205, &(0x7f0000000080)=0xcd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 3m54.135660898s ago: executing program 4 (id=741): socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3m38.936321776s ago: executing program 35 (id=741): socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 23.370538585s ago: executing program 8 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005"], 0x2d4}}, 0x4048010) 22.032761363s ago: executing program 8 (id=1307): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f0001000000000000009600060100801400"], 0x118}], 0x1}, 0x0) 20.347451827s ago: executing program 8 (id=1312): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 19.826314024s ago: executing program 7 (id=1314): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x2, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 15.620875545s ago: executing program 7 (id=1323): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) syz_open_dev$sndctrl(0x0, 0x9, 0x88680) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) socket$inet_tcp(0x2, 0x1, 0x0) 14.512842717s ago: executing program 6 (id=1328): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="06", 0x1}], 0x1}}], 0x1, 0x44810) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x40, 0x46, 0xd0, {0xd0, 0x5, "75da4a37064cc74243d1c88223831866c950ca914a2af48797d126fd082b5dba9d8780c5193382e9e8086e9bb7ce542c3cd5f5614a928617b3b286ecdb65797bcf477191f6d7efedadd0ceb60b2d28d303b87f055790a5e410d5f4d26ff4ebe4f0ca9a72d11692eb95130714c21e4adb880f3fe360b623efed63327f56f2888cf50b7787a1a5e241f852e543dc303e5bc831c451796476f842753796d3618fd5c44488d8b0a67d5ceb14d3d6a6655e2ff85a0265ef041a13bb0b9beef83c87b0ce8435e82b0501b386a522a8ab81"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0xa, 0x57, "c91325bc24d239b37bf09ac62886d5d94eda0933ea504f36930a5010d0c4b7556f70c58de7bd93f00731a3be96615234b8b7b2985a02b5bb1e66c1c7a6a42b324c9aceca7c4eb54d9fb18af9cf026f4c13408eb748aee9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000600)={0xc0, 0x5, 0x3, "e0cd8e"}, &(0x7f0000000640)}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'veth0_vlan\x00', 0x1}) syz_clone3(&(0x7f0000000280)={0x1000000, &(0x7f0000000040), &(0x7f0000000080)=0x0, 0x0, {0x12}, &(0x7f0000000100)=""/247, 0xf7, &(0x7f0000000200)=""/52, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x3, &(0x7f0000000300)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x400d83f) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1, 0x10122, 0x0) 13.679922715s ago: executing program 7 (id=1330): syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) 13.497352592s ago: executing program 8 (id=1332): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r5, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x3, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) 12.700391158s ago: executing program 7 (id=1335): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000000), 0x1001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000004000000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8880b8409000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r5, 0x4, 0x0, &(0x7f00000019c0), 0x0) io_destroy(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 9.0915266s ago: executing program 6 (id=1344): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x48) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) clock_gettime(0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc0405602, &(0x7f00000001c0)=@fd={0x6, 0x1, 0x4, 0x0, 0xa198, {0x0, 0x2710}, {0x0, 0x0, 0x10, 0x0, 0x0, 0x82, '\x00\x00@\x00'}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe880000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 8.312065735s ago: executing program 0 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4048010) 8.310250851s ago: executing program 7 (id=1349): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = syz_io_uring_setup(0x1110, &(0x7f0000000240)={0x0, 0xdb9c, 0x800, 0x10000000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r2, 0x8000000000000001, 0x0, 0x40000, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x20, 0x0, 0x0) 8.124174303s ago: executing program 6 (id=1350): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000008000000000000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000c9030000000000008500000083000000bf09000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) epoll_create(0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/178, 0xb2) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/101) 8.087719774s ago: executing program 9 (id=1351): mount$binderfs(0x0, 0x0, 0x0, 0xa4513bdfeadefff5, &(0x7f0000000000)=ANY=[]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) 7.981542243s ago: executing program 5 (id=1352): mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7.827414079s ago: executing program 0 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x200, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1d0, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x5, 0x7, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x7, 0xfffff000, 0x3a2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x3, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x3, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x200}}, 0x0) 6.636690902s ago: executing program 9 (id=1354): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) clock_settime(0x1ed5d7403, 0x0) 6.431862807s ago: executing program 5 (id=1355): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0) 6.326626819s ago: executing program 8 (id=1356): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r0) 6.165936268s ago: executing program 0 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdb933201}, 0x10) 5.991473317s ago: executing program 9 (id=1358): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) syz_open_dev$sndctrl(0x0, 0x9, 0x88680) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) socket$inet_tcp(0x2, 0x1, 0x0) 5.968417847s ago: executing program 8 (id=1359): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)={0x28, r3, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'payload\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x28}}, 0x0) 5.81616953s ago: executing program 9 (id=1360): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b07, 0x0) syz_usb_disconnect(r0) 5.756770102s ago: executing program 6 (id=1361): shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.485820508s ago: executing program 5 (id=1362): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 4.693056716s ago: executing program 0 (id=1363): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x48) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) clock_gettime(0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc0405602, &(0x7f00000001c0)=@fd={0x6, 0x1, 0x4, 0x0, 0xa198, {0x0, 0x2710}, {0x0, 0x0, 0x10, 0x0, 0x0, 0x82, '\x00\x00@\x00'}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe880000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 4.615298102s ago: executing program 9 (id=1364): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f1, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f00000004c0)='./file0\x00', 0x3806022, &(0x7f0000000500), 0x1, 0x3e8, &(0x7f0000000000)="$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") prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4.51151384s ago: executing program 6 (id=1365): shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 3.927111072s ago: executing program 5 (id=1366): mount$binderfs(0x0, 0x0, 0x0, 0xa4513bdfeadefff5, &(0x7f0000000000)=ANY=[]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) 3.41019267s ago: executing program 0 (id=1367): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 3.179532803s ago: executing program 6 (id=1368): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r5, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x3, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) 2.58140757s ago: executing program 0 (id=1369): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004580)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x2, {0x6, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x7ff, 0x1, 0xffffffffffffffff, 0x403, 0x6, 0x20, 0x1, 0x2, 0x8000, 0x6, 0x0, 0x0, 0x800, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) flistxattr(r2, 0x0, 0x0) 2.482904666s ago: executing program 5 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = timerfd_create(0x8, 0x800) timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000000100}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) 1.247376155s ago: executing program 5 (id=1371): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x8000000, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x182, 0xfffffff9) fallocate(r1, 0x0, 0x1000000, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 979.73092ms ago: executing program 7 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="74224b87089dd08998"]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 9 (id=1373): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): T6038] hub 2-1:0.0: USB hub found [ 275.751742][ T6038] hub 2-1:0.0: 1 port detected [ 276.869843][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 278.457480][ T6029] usb 2-1: USB disconnect, device number 7 [ 278.690403][ T6038] hub 2-1:0.0: activate --> -19 [ 279.080309][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 279.091330][ T7686] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 279.102202][ T7686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 279.112899][ T7686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 279.265615][ T30] audit: type=1800 audit(1758304916.674:205): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.410" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 279.589570][ T7712] loop6: detected capacity change from 0 to 512 [ 279.970726][ T7712] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.417: casefold flag without casefold feature [ 279.983963][ T7712] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.417: couldn't read orphan inode 15 (err -117) [ 280.001215][ T7712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.880545][ T7732] loop5: detected capacity change from 0 to 1024 [ 282.930586][ T7732] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.043414][ T7732] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.422: Invalid block bitmap block 0 in block_group 0 [ 283.071840][ T7732] Quota error (device loop5): write_blk: dquota write failed [ 283.079676][ T7732] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 283.090837][ T7732] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.422: Failed to acquire dquot type 0 [ 283.143168][ T7732] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.422: Freeing blocks not in datazone - block = 0, count = 4096 [ 283.164850][ T7732] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.422: Invalid inode bitmap blk 0 in block_group 0 [ 283.726428][ T7732] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 283.739216][ T7732] EXT4-fs (loop5): 1 orphan inode deleted [ 284.770076][ T7732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.818903][ T5998] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 285.829908][ T5998] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 286.063349][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.146506][ T6301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.553151][ T6029] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 286.937330][ T6029] usb 6-1: Using ep0 maxpacket: 32 [ 286.958955][ T6029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.969994][ T6029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.993127][ T6029] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.066197][ T6029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.138800][ T6029] usb 6-1: config 0 descriptor?? [ 287.158020][ T6029] hub 6-1:0.0: USB hub found [ 287.360043][ T6029] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 287.575623][ T6029] usbhid 6-1:0.0: can't add hid device: -71 [ 287.811505][ T6029] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 287.872436][ T6029] usb 6-1: USB disconnect, device number 10 [ 290.697894][ T7784] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.432'. [ 291.167224][ T7786] bridge0: port 3(gretap0) entered blocking state [ 291.173766][ T7786] bridge0: port 3(gretap0) entered disabled state [ 291.181962][ T7786] gretap0: entered allmulticast mode [ 291.189881][ T7786] gretap0: entered promiscuous mode [ 291.195662][ T7786] bridge0: port 3(gretap0) entered blocking state [ 291.202155][ T7786] bridge0: port 3(gretap0) entered forwarding state [ 291.494618][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.503104][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.946866][ T7803] ptrace attach of "./syz-executor exec"[5863] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ 8   € \x09   þÿÿú ÿÿÿÿ [ 293.184110][ T7808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 294.339988][ T7817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.371673][ T7817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 294.494993][ T7830] netlink: 52 bytes leftover after parsing attributes in process `syz.6.443'. [ 296.181813][ T5886] Bluetooth: hci3: command 0x0406 tx timeout [ 296.610184][ T7817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.618016][ T7817] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 297.611275][ T7817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 297.691637][ T7817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 297.714332][ T7845] netlink: 15678 bytes leftover after parsing attributes in process `syz.6.448'. [ 297.907370][ T7817] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 298.021579][ T7817] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 298.151642][ T7817] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 298.191826][ T7817] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 298.261499][ T5886] Bluetooth: hci3: command 0x0406 tx timeout [ 298.318995][ T7817] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 298.695745][ T5886] Bluetooth: hci4: command 0x0406 tx timeout [ 299.701738][ T5886] Bluetooth: hci1: command 0x0406 tx timeout [ 299.941531][ T5886] Bluetooth: hci6: command 0x0406 tx timeout [ 300.181575][ T7868] loop4: detected capacity change from 0 to 1024 [ 300.181577][ T5886] Bluetooth: hci5: command 0x0c1a tx timeout [ 300.182758][ T7868] EXT4-fs: Ignoring removed orlov option [ 300.645798][ T7883] overlayfs: missing 'lowerdir' [ 300.757178][ T5886] Bluetooth: hci4: command 0x0406 tx timeout [ 301.229293][ T7868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.569299][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.6.458'. [ 301.781537][ T5886] Bluetooth: hci1: command 0x0406 tx timeout [ 301.781744][ T7890] Illegal XDP return value 4294967274 on prog (id 109) dev N/A, expect packet loss! [ 302.591924][ T5876] Bluetooth: hci6: command 0x0406 tx timeout [ 302.597987][ T5876] Bluetooth: hci5: command 0x0c1a tx timeout [ 302.728010][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.005697][ T7908] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.465'. [ 304.691041][ T5886] Bluetooth: hci5: command 0x0c1a tx timeout [ 305.638628][ T7950] overlayfs: missing 'lowerdir' [ 308.889487][ T7963] loop1: detected capacity change from 0 to 4096 [ 308.975886][ T7967] netlink: 36 bytes leftover after parsing attributes in process `syz.6.476'. [ 309.058556][ T7963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.166629][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.478'. [ 309.238175][ T7975] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.783154][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.891503][ T48] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 310.105262][ T48] usb 7-1: config 32 has an invalid interface number: 77 but max is 0 [ 310.136804][ T48] usb 7-1: config 32 has no interface number 0 [ 310.151548][ T48] usb 7-1: config 32 interface 77 has no altsetting 0 [ 310.177556][ T48] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=d5.79 [ 310.415462][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.424634][ T48] usb 7-1: Product: syz [ 310.428810][ T48] usb 7-1: Manufacturer: syz [ 310.435800][ T48] usb 7-1: SerialNumber: syz [ 310.545311][ T8004] overlayfs: missing 'lowerdir' [ 311.207012][ T48] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 312.271253][ T48] gspca_zc3xx: reg_w_i err -110 [ 312.277599][ T48] gspca_zc3xx 7-1:32.77: probe with driver gspca_zc3xx failed with error -110 [ 314.164422][ T8030] loop5: detected capacity change from 0 to 512 [ 315.135122][ T8030] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.490: casefold flag without casefold feature [ 315.184737][ T5868] usb 7-1: USB disconnect, device number 6 [ 315.201783][ T8030] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.490: couldn't read orphan inode 15 (err -117) [ 315.329376][ T8037] netlink: 'syz.1.491': attribute type 3 has an invalid length. [ 315.339959][ T8037] netlink: 'syz.1.491': attribute type 3 has an invalid length. [ 315.432545][ T8030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.565137][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'. [ 315.834331][ T8049] openvswitch: netlink: Flow actions attr not present in new flow. [ 316.555616][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.778655][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.039347][ T8064] bridge0: port 3(gretap0) entered disabled state [ 317.046056][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.053260][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.104437][ T8067] ptrace attach of "./syz-executor exec"[5867] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   8   € \x09   þÿÿú ÿÿÿÿ [ 319.926181][ T8080] loop5: detected capacity change from 0 to 8192 [ 320.111831][ T5960] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 321.541585][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 321.557428][ T5960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.595200][ T5960] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.661728][ T5960] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 321.798154][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.830097][ T5960] usb 2-1: Product: syz [ 321.851911][ T5960] usb 2-1: Manufacturer: syz [ 321.890884][ T5960] usb 2-1: SerialNumber: syz [ 321.913978][ T5960] usb 2-1: config 0 descriptor?? [ 321.961565][ T5933] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 322.153628][ T5933] usb 8-1: config 32 has an invalid interface number: 77 but max is 0 [ 322.177082][ T5933] usb 8-1: config 32 has no interface number 0 [ 322.224656][ T5933] usb 8-1: config 32 interface 77 has no altsetting 0 [ 322.252602][ T5933] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=d5.79 [ 322.270035][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.375563][ T5933] usb 8-1: Product: syz [ 322.391553][ T5933] usb 8-1: Manufacturer: syz [ 322.416547][ T5933] usb 8-1: SerialNumber: syz [ 322.683913][ T5933] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 322.911076][ T8108] loop4: detected capacity change from 0 to 512 [ 322.958240][ T8108] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 322.975087][ T8108] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 323.786286][ T8108] EXT4-fs (loop4): 1 truncate cleaned up [ 323.809216][ T8108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.934901][ T5933] input: gspca_zc3xx as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9 [ 324.148159][ T48] usb 2-1: USB disconnect, device number 8 [ 325.860225][ T5933] usb 8-1: USB disconnect, device number 2 [ 326.084225][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.492177][ T5960] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 326.554596][ T8140] loop4: detected capacity change from 0 to 128 [ 326.569896][ T8140] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 326.618726][ T8140] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.840918][ T5960] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 329.821443][ T5960] usb 6-1: config 0 has no interface number 0 [ 330.085457][ T5960] usb 6-1: string descriptor 0 read error: -71 [ 330.112120][ T5960] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 331.401465][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.429318][ T8155] loop1: detected capacity change from 0 to 512 [ 332.529147][ T5960] usb 6-1: config 0 descriptor?? [ 332.657284][ T5960] usb 6-1: can't set config #0, error -71 [ 332.903205][ T8172] ptrace attach of "./syz-executor exec"[5866] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   8   € \x09   þÿÿú ÿÿÿÿ [ 332.949568][ T8155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.111537][ T5960] usb 6-1: USB disconnect, device number 11 [ 333.117520][ T6038] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 333.183965][ T8155] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.345722][ T6038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.462935][ T6038] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.524803][ T6038] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 333.585536][ T6038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.772059][ T30] audit: type=1804 audit(1758304972.359:206): pid=8155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.516" name="/newroot/98/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 333.774392][ T6038] usb 5-1: config 0 descriptor?? [ 333.851580][ T48] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 334.057145][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 334.087072][ T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.113311][ T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.169994][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.207274][ T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.251576][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.273512][ T48] usb 6-1: Product: syz [ 334.298660][ T48] usb 6-1: Manufacturer: syz [ 334.341626][ T48] usb 6-1: SerialNumber: syz [ 334.613938][ T48] usb 6-1: 0:2 : does not exist [ 334.654086][ T48] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 334.677462][ T8177] bridge0: port 3(gretap0) entered blocking state [ 334.684021][ T8177] bridge0: port 3(gretap0) entered forwarding state [ 334.690829][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.697954][ T8177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.705347][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.712463][ T8177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.853610][ T48] usb 6-1: USB disconnect, device number 12 [ 334.868896][ T8177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.012396][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.371562][ T5872] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 335.568594][ T8192] fuse: Invalid rootmode [ 335.581509][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 335.604955][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.623874][ T5872] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.636667][ T6029] usb 5-1: USB disconnect, device number 10 [ 335.830569][ T5872] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 335.844417][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.852683][ T5872] usb 7-1: Product: syz [ 335.875721][ T5872] usb 7-1: Manufacturer: syz [ 335.886219][ T5872] usb 7-1: SerialNumber: syz [ 336.717472][ T8200] loop5: detected capacity change from 0 to 1024 [ 336.874576][ T5872] usb 7-1: config 0 descriptor?? [ 337.953907][ T5933] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 337.986344][ T8213] netlink: 68 bytes leftover after parsing attributes in process `syz.7.535'. [ 338.155234][ T5933] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 338.185347][ T5933] usb 2-1: config 0 has no interface number 0 [ 338.213518][ T5933] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 338.243863][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.271766][ T5933] usb 2-1: Product: syz [ 338.289631][ T5933] usb 2-1: Manufacturer: syz [ 338.321082][ T5933] usb 2-1: SerialNumber: syz [ 338.369394][ T5933] usb 2-1: config 0 descriptor?? [ 338.402721][ T8200] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 338.822138][ T5933] usb 2-1: Firmware version (0.0) predates our first public release. [ 338.830279][ T5933] usb 2-1: Please update to version 0.2 or newer [ 339.157407][ T5868] usb 7-1: USB disconnect, device number 7 [ 339.336296][ T5933] usb 2-1: USB disconnect, device number 9 [ 340.177454][ T8247] netlink: 72 bytes leftover after parsing attributes in process `syz.5.544'. [ 340.206311][ T8248] loop4: detected capacity change from 0 to 512 [ 340.251250][ T5868] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 340.327383][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'. [ 340.429851][ T8248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 340.472495][ T8248] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.505033][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.715940][ T5868] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.727038][ T5868] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 340.758322][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.456153][ T5868] usb 7-1: config 0 descriptor?? [ 341.533020][ T8260] fuse: Unknown parameter 'group_i00000000000000000000' [ 341.717195][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 345.624764][ T8273] loop7: detected capacity change from 0 to 1024 [ 345.678794][ T6006] usb 7-1: USB disconnect, device number 8 [ 345.764465][ T8273] EXT4-fs: Ignoring removed i_version option [ 345.770517][ T8273] EXT4-fs: inline encryption not supported [ 345.925135][ T8273] EXT4-fs (loop7): Test dummy encryption mode enabled [ 346.031081][ T8273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.066852][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 346.190265][ T8273] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 346.272616][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 346.306899][ T5872] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.320906][ T5872] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 346.361185][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.401106][ T5872] usb 2-1: Product: syz [ 346.405713][ T5868] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 346.425949][ T5872] usb 2-1: Manufacturer: syz [ 346.430563][ T5872] usb 2-1: SerialNumber: syz [ 346.500641][ T5872] usb 2-1: config 0 descriptor?? [ 346.511144][ T6918] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.587655][ T8299] netlink: 68 bytes leftover after parsing attributes in process `syz.0.559'. [ 346.617465][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.683288][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.731501][ T5868] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 346.761480][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.807837][ T5868] usb 6-1: config 0 descriptor?? [ 347.304071][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 347.333258][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 347.345180][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 347.357139][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 348.377583][ T8304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.398288][ T8304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 348.443765][ T8304] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 348.472417][ T8304] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 348.484233][ T8304] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 348.680166][ T8289] loop6: detected capacity change from 0 to 32768 [ 348.748571][ T8289] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 348.877136][ T8329] netlink: 72 bytes leftover after parsing attributes in process `syz.7.565'. [ 350.414817][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 350.431050][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 350.501784][ T5886] Bluetooth: hci5: command 0x0c1a tx timeout [ 350.508078][ T5876] Bluetooth: hci6: command 0x0406 tx timeout [ 350.514153][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 350.587607][ T6038] usb 2-1: USB disconnect, device number 10 [ 350.600378][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.565'. [ 350.639880][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 350.701686][ T8289] (syz.6.554,8289,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 350.705596][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 350.792937][ T5868] usb 6-1: USB disconnect, device number 13 [ 350.919287][ T6301] ocfs2: Unmounting device (7,6) on (node local) [ 351.051599][ T6038] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 351.215096][ T6038] usb 2-1: Using ep0 maxpacket: 8 [ 351.227346][ T6038] usb 2-1: unable to get BOS descriptor or descriptor too short [ 351.245525][ T6038] usb 2-1: config 6 has an invalid interface number: 172 but max is 0 [ 351.254035][ T6038] usb 2-1: config 6 has no interface number 0 [ 351.260242][ T6038] usb 2-1: config 6 interface 172 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.273417][ T6038] usb 2-1: config 6 interface 172 has no altsetting 0 [ 351.283538][ T6038] usb 2-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice=ad.a4 [ 351.300585][ T6038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.319226][ T6038] usb 2-1: Product: syz [ 351.326551][ T6038] usb 2-1: Manufacturer: syz [ 351.331301][ T6038] usb 2-1: SerialNumber: syz [ 352.566480][ T6038] usb 2-1: unknown interface protocol 0x4, assuming v1 [ 352.596365][ T6038] usb 2-1: 172:2 : does not exist [ 352.648695][ T6038] usb 2-1: USB disconnect, device number 11 [ 352.900934][ T8290] udevd[8290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.172/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.340271][ T8382] netlink: 'syz.7.583': attribute type 27 has an invalid length. [ 356.541718][ T8382] bridge0: port 3(gretap0) entered disabled state [ 358.634165][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.641996][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.449236][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.510454][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.069290][ T8407] loop6: detected capacity change from 0 to 256 [ 360.671786][ T8407] FAT-fs (loop6): Directory bread(block 64) failed [ 360.678563][ T8407] FAT-fs (loop6): Directory bread(block 65) failed [ 360.686256][ T8407] FAT-fs (loop6): Directory bread(block 66) failed [ 360.692946][ T8407] FAT-fs (loop6): Directory bread(block 67) failed [ 360.700382][ T8407] FAT-fs (loop6): Directory bread(block 68) failed [ 360.707273][ T8407] FAT-fs (loop6): Directory bread(block 69) failed [ 360.715776][ T8407] FAT-fs (loop6): Directory bread(block 70) failed [ 360.723294][ T8407] FAT-fs (loop6): Directory bread(block 71) failed [ 360.738450][ T8407] FAT-fs (loop6): Directory bread(block 72) failed [ 360.745316][ T8407] FAT-fs (loop6): Directory bread(block 73) failed [ 361.350050][ T8385] bridge0: port 3(gretap0) entered blocking state [ 361.356665][ T8385] bridge0: port 3(gretap0) entered forwarding state [ 361.381294][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.397682][ T8385] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.415262][ T8385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.758484][ T8389] bridge0: port 3(gretap0) entered blocking state [ 362.765697][ T8389] bridge0: port 3(gretap0) entered disabled state [ 362.772633][ T8389] gretap0: entered allmulticast mode [ 362.779720][ T8389] gretap0: entered promiscuous mode [ 362.785780][ T8389] bridge0: port 3(gretap0) entered blocking state [ 362.792345][ T8389] bridge0: port 3(gretap0) entered forwarding state [ 363.755598][ T5960] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 364.019828][ T1081] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.211877][ T1081] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.427981][ T1081] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.656430][ T1081] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.641576][ T5960] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 367.005717][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 367.020625][ T5960] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 367.040107][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.149884][ T8460] bridge0: port 3(gretap0) entered blocking state [ 367.157409][ T8460] bridge0: port 3(gretap0) entered disabled state [ 367.166819][ T8460] gretap0: entered allmulticast mode [ 367.191924][ T8460] gretap0: entered promiscuous mode [ 367.804406][ T5960] usb 7-1: Product: syz [ 367.808631][ T5960] usb 7-1: Manufacturer: syz [ 367.820316][ T5960] usb 7-1: SerialNumber: syz [ 367.828144][ T5960] usb 7-1: config 0 descriptor?? [ 367.837064][ T5960] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 368.878019][ T8475] loop1: detected capacity change from 0 to 1024 [ 368.889013][ T8475] EXT4-fs: inline encryption not supported [ 368.895191][ T8475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.902923][ T8475] EXT4-fs: quotafile must be on filesystem root [ 369.199128][ T5960] gspca_sonixj: reg_r err -32 [ 369.205250][ T5960] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 371.384256][ T10] usb 7-1: USB disconnect, device number 9 [ 373.551754][ T6006] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 373.797123][ T6006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.834785][ T6006] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 373.870926][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.927470][ T6006] usb 6-1: config 0 descriptor?? [ 375.134510][ T6006] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 375.184504][ T8513] binder: 8512:8513 ioctl c0306201 200000000080 returned -14 [ 375.684769][ T6006] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71 [ 375.703393][ T6006] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71 [ 375.755364][ T6006] usb 6-1: USB disconnect, device number 14 [ 377.636720][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 377.814906][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 378.003895][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.108931][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 378.184494][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.231774][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.630'. [ 378.260209][ T8544] netlink: 408 bytes leftover after parsing attributes in process `syz.5.630'. [ 378.269294][ T8544] netlink: 88 bytes leftover after parsing attributes in process `syz.5.630'. [ 378.328283][ T10] usb 2-1: Product: syz [ 378.396909][ T10] usb 2-1: Manufacturer: syz [ 378.472117][ T10] usb 2-1: SerialNumber: syz [ 379.020343][ T10] usb 2-1: config 0 descriptor?? [ 379.505430][ T8550] netlink: 52 bytes leftover after parsing attributes in process `syz.7.631'. [ 380.367867][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 381.307969][ T10] gspca_sonixj: reg_w1 err -110 [ 381.313281][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 381.351205][ T10] usb 2-1: USB disconnect, device number 12 [ 383.315419][ T8576] capability: warning: `syz.6.640' uses 32-bit capabilities (legacy support in use) [ 386.179578][ T8604] netlink: 52 bytes leftover after parsing attributes in process `syz.0.650'. [ 391.008960][ T8629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.656'. [ 391.221251][ T30] audit: type=1326 audit(1758305030.634:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 391.398958][ T30] audit: type=1326 audit(1758305030.634:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 391.473865][ T30] audit: type=1326 audit(1758305030.634:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 391.636238][ T30] audit: type=1326 audit(1758305030.644:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 391.750212][ T30] audit: type=1326 audit(1758305030.644:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 391.938070][ T30] audit: type=1326 audit(1758305030.644:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 392.075256][ T30] audit: type=1326 audit(1758305030.644:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 392.149341][ T30] audit: type=1326 audit(1758305030.644:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 392.282293][ T30] audit: type=1326 audit(1758305030.644:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 392.407336][ T30] audit: type=1326 audit(1758305030.644:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6c58ec29 code=0x7ffc0000 [ 392.409909][ T8639] netlink: 'syz.5.659': attribute type 39 has an invalid length. [ 396.638601][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.664'. [ 399.031720][ T8683] tipc: Invalid UDP bearer configuration [ 399.031782][ T8683] tipc: Enabling of bearer rejected, failed to enable media [ 399.265180][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.6.676'. [ 399.342012][ T8687] netem: invalid attributes len -4 [ 399.347184][ T8687] netem: change failed [ 400.386481][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.395517][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.403265][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.415635][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.425513][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.810799][ T8705] netlink: 14 bytes leftover after parsing attributes in process `syz.6.676'. [ 402.253496][ T8705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.331133][ T8705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.380531][ T8705] bond0 (unregistering): Released all slaves [ 402.501620][ T5886] Bluetooth: hci2: command tx timeout [ 403.167968][ T8728] block nbd4: Attempted send on invalid socket [ 403.301680][ T8728] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 403.332361][ T8728] SQUASHFS error: Failed to read block 0x0: -5 [ 403.339287][ T8728] unable to read squashfs_super_block [ 404.484959][ T5984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.581618][ T5886] Bluetooth: hci2: command tx timeout [ 406.723625][ T5886] Bluetooth: hci2: command tx timeout [ 406.732955][ T5984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.867265][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 407.867282][ T30] audit: type=1326 audit(1758305048.400:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 407.924136][ T30] audit: type=1326 audit(1758305048.400:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 407.946524][ T5984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.957933][ T30] audit: type=1326 audit(1758305048.400:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 407.980382][ T30] audit: type=1326 audit(1758305048.400:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 408.002648][ T30] audit: type=1326 audit(1758305048.400:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 408.026184][ T30] audit: type=1326 audit(1758305048.400:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 408.048260][ T30] audit: type=1326 audit(1758305048.410:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 408.097236][ T30] audit: type=1326 audit(1758305048.410:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 408.260712][ T30] audit: type=1326 audit(1758305048.410:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 408.736877][ T30] audit: type=1326 audit(1758305048.410:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cd318ec29 code=0x7ffc0000 [ 408.795450][ T5876] Bluetooth: hci2: command tx timeout [ 408.830272][ T5984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.023693][ T8764] bridge0: port 3(gretap0) entered disabled state [ 409.030377][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.038146][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.294231][ T8698] chnl_net:caif_netlink_parms(): no params data found [ 409.941573][ T5886] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 409.941833][ T5876] Bluetooth: hci0: command 0x1003 tx timeout [ 410.565806][ T8781] netlink: 52 bytes leftover after parsing attributes in process `syz.7.699'. [ 412.170816][ T5984] gretap0: left allmulticast mode [ 412.179521][ T5984] gretap0: left promiscuous mode [ 412.201905][ T5984] bridge0: port 3(gretap0) entered disabled state [ 412.248993][ T5984] bridge_slave_1: left allmulticast mode [ 412.300729][ T5984] bridge_slave_1: left promiscuous mode [ 412.323457][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.401552][ T5984] bridge_slave_0: left allmulticast mode [ 412.418049][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.908552][ T8803] block nbd6: Attempted send on invalid socket [ 413.920913][ T8803] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.939485][ T8803] block nbd6: Attempted send on invalid socket [ 413.947297][ T8803] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.966760][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 413.998009][ T8803] block nbd6: Attempted send on invalid socket [ 414.053620][ T8803] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.081761][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 414.107353][ T8803] block nbd6: Attempted send on invalid socket [ 414.113802][ T8803] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.125344][ T8803] block nbd6: Attempted send on invalid socket [ 414.131819][ T8803] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.151450][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 414.496648][ T8803] block nbd6: Attempted send on invalid socket [ 414.588212][ T8803] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.908888][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 415.112028][ T8803] block nbd6: Attempted send on invalid socket [ 415.134382][ T8803] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.164331][ T8803] block nbd6: Attempted send on invalid socket [ 415.183140][ T8803] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.217708][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 415.235597][ T8803] block nbd6: Attempted send on invalid socket [ 415.244658][ T8803] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.258766][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 415.279744][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.710'. [ 415.317627][ T8803] block nbd6: Attempted send on invalid socket [ 415.326010][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 415.326026][ T30] audit: type=1326 audit(1758305055.910:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 415.340024][ T8803] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.548287][ T8818] random: crng reseeded on system resumption [ 416.336426][ T30] audit: type=1326 audit(1758305055.950:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 416.360047][ T30] audit: type=1326 audit(1758305055.970:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 417.204609][ T30] audit: type=1326 audit(1758305056.920:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 417.236122][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 417.415406][ T30] audit: type=1326 audit(1758305056.920:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 417.451847][ T8803] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 417.478079][ T8803] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 417.501741][ T30] audit: type=1326 audit(1758305056.920:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 417.607042][ T30] audit: type=1326 audit(1758305056.920:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 417.751514][ T30] audit: type=1326 audit(1758305056.920:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 418.107763][ T30] audit: type=1326 audit(1758305056.920:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 418.182754][ T30] audit: type=1326 audit(1758305056.930:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fde02d8ec29 code=0x7ffc0000 [ 418.973793][ T8830] netlink: 'syz.6.712': attribute type 4 has an invalid length. [ 419.760827][ T5984] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 421.915149][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.925886][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.936771][ T5984] bond0 (unregistering): Released all slaves [ 421.958951][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.966295][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.974782][ T8698] bridge_slave_0: entered allmulticast mode [ 421.991350][ T8698] bridge_slave_0: entered promiscuous mode [ 422.437243][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.447013][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.570073][ T8698] bridge_slave_1: entered allmulticast mode [ 422.578310][ T8698] bridge_slave_1: entered promiscuous mode [ 422.593338][ T5984] tipc: Left network mode [ 425.235019][ T8698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.361305][ T8882] loop7: detected capacity change from 0 to 128 [ 425.914384][ T8698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.673296][ T8895] mkiss: ax0: crc mode is auto. [ 426.942441][ T8698] team0: Port device team_slave_0 added [ 426.999643][ T8698] team0: Port device team_slave_1 added [ 427.030998][ T8900] loop4: detected capacity change from 0 to 512 [ 427.144264][ T8903] ptrace attach of "./syz-executor exec"[5866] was attempted by "./syz-executor exec"[8903] [ 427.270906][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.289883][ T8900] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.681008][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 427.681031][ T30] audit: type=1804 audit(1758305068.260:296): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.733" name="/newroot/121/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 427.768926][ T8910] ptrace attach of "./syz-executor exec"[6918] was attempted by "./syz-executor exec"[8910] [ 428.132663][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.167971][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.322536][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.345599][ T8698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.481689][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.515242][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.712118][ T8926] nbd_handle_cmd: 2 callbacks suppressed [ 428.712168][ T8926] block nbd5: Attempted send on invalid socket [ 428.724518][ T8926] blk_print_req_error: 2 callbacks suppressed [ 428.724563][ T8926] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 428.741440][ T8926] SQUASHFS error: Failed to read block 0x0: -5 [ 428.742980][ T8698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.759366][ T8926] unable to read squashfs_super_block [ 428.923155][ T5984] hsr_slave_0: left promiscuous mode [ 429.475117][ T5984] hsr_slave_1: left promiscuous mode [ 429.527597][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.591894][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.642601][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.672461][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.870968][ T5984] veth1_macvtap: left promiscuous mode [ 430.934504][ T5984] veth0_macvtap: left promiscuous mode [ 431.131696][ T5984] veth1_vlan: left promiscuous mode [ 431.137095][ T5984] veth0_vlan: left promiscuous mode [ 431.308599][ T8945] overlayfs: failed lookup in lower (newroot/58, name='file0', err=-40): overlapping layers [ 432.537625][ T8954] loop5: detected capacity change from 0 to 128 [ 433.324229][ T5984] pim6reg (unregistering): left allmulticast mode [ 433.776734][ T8947] loop6: detected capacity change from 0 to 40427 [ 433.905425][ T8947] F2FS-fs (loop6): invalid crc value [ 434.327412][ T8947] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 434.409656][ T8947] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 434.695903][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db3d400: rx timeout, send abort [ 434.820133][ T6301] syz-executor: attempt to access beyond end of device [ 434.820133][ T6301] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 434.887977][ T6301] CPU: 1 UID: 0 PID: 6301 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 434.888013][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.888028][ T6301] Call Trace: [ 434.888037][ T6301] [ 434.888047][ T6301] dump_stack_lvl+0x189/0x250 [ 434.888087][ T6301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.888117][ T6301] ? __pfx_queue_work_on+0x10/0x10 [ 434.888141][ T6301] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 434.888181][ T6301] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.888234][ T6301] f2fs_handle_critical_error+0x37c/0x540 [ 434.888280][ T6301] f2fs_write_end_io+0x886/0xb60 [ 434.888326][ T6301] __submit_merged_bio+0x27a/0x6a0 [ 434.888370][ T6301] __submit_merged_write_cond+0x255/0x530 [ 434.888413][ T6301] f2fs_write_data_pages+0x261d/0x3000 [ 434.888478][ T6301] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 434.888555][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.888596][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.888622][ T6301] ? folios_put_refs+0x559/0x640 [ 434.888665][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.888691][ T6301] ? __lock_acquire+0xab9/0xd20 [ 434.888737][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.888763][ T6301] ? do_raw_spin_lock+0x121/0x290 [ 434.888800][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.888831][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.888857][ T6301] ? do_raw_spin_unlock+0x122/0x240 [ 434.888894][ T6301] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 434.888920][ T6301] do_writepages+0x32e/0x550 [ 434.888963][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.888994][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.889021][ T6301] ? do_raw_spin_unlock+0x122/0x240 [ 434.889057][ T6301] filemap_fdatawrite+0x199/0x240 [ 434.889091][ T6301] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 434.889175][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.889208][ T6301] ? do_raw_spin_unlock+0x122/0x240 [ 434.889244][ T6301] f2fs_sync_dirty_inodes+0x31f/0x830 [ 434.889289][ T6301] f2fs_write_checkpoint+0x95a/0x1df0 [ 434.889343][ T6301] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 434.889420][ T6301] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 434.889446][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.889473][ T6301] ? kfree+0x18e/0x440 [ 434.889505][ T6301] ? kill_f2fs_super+0x298/0x6c0 [ 434.889537][ T6301] kill_f2fs_super+0x2c3/0x6c0 [ 434.889571][ T6301] ? __pfx_kill_f2fs_super+0x10/0x10 [ 434.889594][ T6301] ? radix_tree_delete_item+0x2b6/0x400 [ 434.889627][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.889654][ T6301] ? shrinker_free+0x2ce/0x3e0 [ 434.889684][ T6301] deactivate_locked_super+0xbc/0x130 [ 434.889717][ T6301] cleanup_mnt+0x425/0x4c0 [ 434.889744][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.889771][ T6301] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.889799][ T6301] task_work_run+0x1d4/0x260 [ 434.889837][ T6301] ? __pfx_task_work_run+0x10/0x10 [ 434.889873][ T6301] ? __x64_sys_umount+0x122/0x160 [ 434.889913][ T6301] ? exit_to_user_mode_loop+0x40/0x110 [ 434.889954][ T6301] exit_to_user_mode_loop+0xec/0x110 [ 434.889990][ T6301] do_syscall_64+0x2bd/0x3b0 [ 434.890014][ T6301] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.890039][ T6301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.890061][ T6301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.890087][ T6301] ? exc_page_fault+0x9f/0xf0 [ 434.890115][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.890139][ T6301] RIP: 0033:0x7f949fd8ff57 [ 434.890161][ T6301] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 434.890181][ T6301] RSP: 002b:00007fffcac6be18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 434.890206][ T6301] RAX: 0000000000000000 RBX: 00007f949fe11c2d RCX: 00007f949fd8ff57 [ 434.890223][ T6301] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcac6bed0 [ 434.890238][ T6301] RBP: 00007fffcac6bed0 R08: 0000000000000000 R09: 0000000000000000 [ 434.890253][ T6301] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffcac6cf60 [ 434.890270][ T6301] R13: 00007f949fe11c2d R14: 000000000006a1c2 R15: 00007fffcac6cfa0 [ 434.890309][ T6301] [ 435.204252][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db3d400: abort rx timeout. Force session deactivation [ 435.209844][ T6301] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 435.813222][ T8979] hub 9-0:1.0: USB hub found [ 435.827117][ T8979] hub 9-0:1.0: 1 port detected [ 437.239035][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 438.443227][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 439.386190][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.013203][ T9026] loop7: detected capacity change from 0 to 512 [ 441.211744][ T9026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.237603][ T9026] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.864352][ T30] audit: type=1804 audit(1758305083.440:297): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.769" name="/newroot/68/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 443.306441][ T8996] pim6reg: entered allmulticast mode [ 443.460757][ T6918] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.797527][ T8698] hsr_slave_0: entered promiscuous mode [ 443.817710][ T8698] hsr_slave_1: entered promiscuous mode [ 443.833231][ T8698] debugfs: 'hsr0' already exists in 'hsr' [ 443.839340][ T8698] Cannot create hsr debugfs directory [ 446.114257][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 447.101568][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 447.199238][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 447.221475][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.229609][ T10] usb 8-1: Product: syz [ 447.271632][ T10] usb 8-1: Manufacturer: syz [ 447.280038][ T10] usb 8-1: SerialNumber: syz [ 447.301177][ T10] usb 8-1: config 0 descriptor?? [ 447.348419][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 447.511764][ T8698] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 447.673229][ T8698] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 447.796236][ T8698] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 447.959420][ T8698] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 448.208205][ T9102] hub 9-0:1.0: USB hub found [ 448.224977][ T9102] hub 9-0:1.0: 1 port detected [ 448.507132][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.516420][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.527122][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.546885][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.560979][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.700254][ T5872] usb 8-1: USB disconnect, device number 3 [ 450.985745][ T5876] Bluetooth: hci0: command tx timeout [ 451.669079][ T8698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.736090][ T8698] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.937713][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.944908][ T8415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.250263][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.257533][ T8415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.954860][ T6006] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 453.132232][ T5876] Bluetooth: hci0: command tx timeout [ 453.151817][ T6006] usb 7-1: Using ep0 maxpacket: 32 [ 453.204036][ T6006] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.807323][ T6006] usb 7-1: config 0 has no interface number 0 [ 453.830642][ T6006] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 453.853640][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.873028][ T6006] usb 7-1: Product: syz [ 453.877804][ T6006] usb 7-1: Manufacturer: syz [ 453.883143][ T6006] usb 7-1: SerialNumber: syz [ 453.916028][ T6006] usb 7-1: config 0 descriptor?? [ 453.950129][ T9164] Can't find ip_set type hash:ip,ma [ 453.978292][ T6006] quatech2 7-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 454.951927][ T6006] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 455.123176][ T6006] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 455.142037][ T5876] Bluetooth: hci0: command tx timeout [ 455.152679][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 455.219559][ T6006] usb 7-1: USB disconnect, device number 10 [ 455.246884][ T6006] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 455.347129][ T6006] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 455.397401][ T6006] quatech2 7-1:0.1: device disconnected [ 455.407323][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 457.221649][ T5876] Bluetooth: hci0: command tx timeout [ 457.969283][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.978651][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.077736][ T9110] bridge_slave_0: entered allmulticast mode [ 458.141617][ T9110] bridge_slave_0: entered promiscuous mode [ 458.212635][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.231587][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.271881][ T9110] bridge_slave_1: entered allmulticast mode [ 458.279917][ T9110] bridge_slave_1: entered promiscuous mode [ 458.557155][ T9223] netlink: 'syz.5.813': attribute type 1 has an invalid length. [ 460.235661][ T9236] binder: 9235:9236 ioctl c0306201 200000000080 returned -14 [ 460.245030][ T9236] binder: BINDER_SET_CONTEXT_MGR already set [ 460.251237][ T9236] binder: 9235:9236 ioctl 4018620d 200000000040 returned -16 [ 460.564748][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.723422][ T5886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.791706][ T5886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.800917][ T5886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.822837][ T5886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.830595][ T5886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.606623][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.195206][ T5886] Bluetooth: hci4: command tx timeout [ 464.261593][ T6029] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 464.421455][ T6029] usb 7-1: Using ep0 maxpacket: 32 [ 465.354274][ T9110] team0: Port device team_slave_0 added [ 465.367339][ T6029] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 465.378106][ T6029] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.131584][ T6029] usb 7-1: Product: syz [ 466.135805][ T6029] usb 7-1: Manufacturer: syz [ 466.140401][ T6029] usb 7-1: SerialNumber: syz [ 466.156794][ T9110] team0: Port device team_slave_1 added [ 466.352108][ T5886] Bluetooth: hci4: command tx timeout [ 466.404138][ T6029] usb 7-1: config 0 descriptor?? [ 466.639878][ T6029] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 466.723708][ T6029] usb 7-1: USB disconnect, device number 11 [ 466.786284][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.801356][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.831863][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.873230][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.885070][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.918686][ T9290] netlink: zone id is out of range [ 466.923973][ T9290] netlink: zone id is out of range [ 466.929322][ T9290] netlink: zone id is out of range [ 466.938451][ T9290] netlink: zone id is out of range [ 466.943572][ T9290] netlink: zone id is out of range [ 466.948660][ T9290] netlink: zone id is out of range [ 466.953765][ T9290] netlink: zone id is out of range [ 466.958862][ T9290] netlink: zone id is out of range [ 466.963973][ T9290] netlink: zone id is out of range [ 466.969063][ T9290] netlink: zone id is out of range [ 467.036538][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.392036][ T9297] ptrace attach of "./syz-executor exec"[5866] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   8   € \x09   þÿÿú ÿÿÿÿ"[9297] [ 467.819093][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 468.306492][ T9110] hsr_slave_0: entered promiscuous mode [ 468.362339][ T9110] hsr_slave_1: entered promiscuous mode [ 468.379392][ T9110] debugfs: 'hsr0' already exists in 'hsr' [ 468.415673][ T9110] Cannot create hsr debugfs directory [ 468.423629][ T5886] Bluetooth: hci4: command tx timeout [ 469.857977][ T9319] block nbd5: Attempted send on invalid socket [ 469.866743][ T9319] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 469.881779][ T9319] SQUASHFS error: Failed to read block 0x0: -5 [ 469.890681][ T9319] unable to read squashfs_super_block [ 470.303740][ T8415] bridge_slave_1: left allmulticast mode [ 470.309441][ T8415] bridge_slave_1: left promiscuous mode [ 470.328288][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.350864][ T8415] bridge_slave_0: left allmulticast mode [ 470.359345][ T8415] bridge_slave_0: left promiscuous mode [ 470.388327][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.501759][ T5886] Bluetooth: hci4: command tx timeout [ 472.659141][ T8415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.701058][ T8415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.751693][ T8415] bond0 (unregistering): Released all slaves [ 473.065722][ T9336] loop5: detected capacity change from 0 to 40427 [ 473.780060][ T9336] F2FS-fs (loop5): invalid crc value [ 474.682775][ T8415] hsr_slave_0: left promiscuous mode [ 474.714360][ T8415] hsr_slave_1: left promiscuous mode [ 474.720602][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.754001][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.875331][ T9336] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 477.316937][ T9366] loop5: detected capacity change from 0 to 512 [ 477.354100][ T9366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.395313][ T8415] team0 (unregistering): Port device team_slave_1 removed [ 477.450190][ T9366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.476255][ T9366] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.491213][ T8415] team0 (unregistering): Port device team_slave_0 removed [ 477.851460][ T9371] overlayfs: failed to resolve './bus': -2 [ 478.415797][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.586607][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.594757][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.602904][ T9242] bridge_slave_0: entered allmulticast mode [ 479.610889][ T9242] bridge_slave_0: entered promiscuous mode [ 479.773563][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.781115][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.801530][ T5886] Bluetooth: hci3: unexpected event 0x14 length: 20 > 6 [ 479.806550][ T9242] bridge_slave_1: entered allmulticast mode [ 479.837131][ T9242] bridge_slave_1: entered promiscuous mode [ 480.163464][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.076875][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.506531][ T9242] team0: Port device team_slave_0 added [ 481.574923][ T9242] team0: Port device team_slave_1 added [ 481.881872][ T5999] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 482.249089][ T5999] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.354493][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.381530][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.391663][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.404587][ T5999] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 482.457947][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.467718][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.500734][ T5999] usb 7-1: config 0 descriptor?? [ 482.530146][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.549495][ T5999] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 482.570258][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.640898][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.722814][ T9411] bridge0: port 3(gretap0) entered disabled state [ 483.015419][ T9242] hsr_slave_0: entered promiscuous mode [ 483.076317][ T9242] hsr_slave_1: entered promiscuous mode [ 483.125396][ T9242] debugfs: 'hsr0' already exists in 'hsr' [ 483.168195][ T9242] Cannot create hsr debugfs directory [ 483.652393][ T9110] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 483.711255][ T9110] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 484.791512][ T9110] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 484.849074][ T6006] usb 7-1: USB disconnect, device number 12 [ 484.867463][ T9110] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 485.366158][ T5999] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 485.522056][ T5999] usb 8-1: Using ep0 maxpacket: 32 [ 485.534884][ T5999] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 485.553497][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.556247][ T5999] usb 8-1: config 0 has no interface number 0 [ 485.576872][ T5999] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 485.589815][ T5999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.598636][ T5999] usb 8-1: Product: syz [ 485.609509][ T5999] usb 8-1: Manufacturer: syz [ 485.625065][ T5999] usb 8-1: SerialNumber: syz [ 485.763209][ T5999] usb 8-1: config 0 descriptor?? [ 485.788177][ T5999] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 485.816801][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.856683][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.863925][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.065947][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.073410][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.386509][ T9482] overlayfs: failed to clone lowerpath [ 486.489843][ T9485] overlayfs: failed to clone upperpath [ 486.789945][ T9242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 486.845873][ T9242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 486.960613][ T9242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 487.039835][ T9242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 487.496495][ T5999] usb 8-1: qt2_attach - failed to power on unit: -71 [ 487.520727][ T5999] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 487.642235][ T5999] usb 8-1: USB disconnect, device number 4 [ 487.798171][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.945951][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.036439][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.043660][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.139734][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.146959][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.340528][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.554718][ T9518] binder: BINDER_SET_CONTEXT_MGR already set [ 488.560761][ T9518] binder: 9516:9518 ioctl 4018620d 200000000040 returned -16 [ 492.157914][ T9550] netlink: 'syz.6.891': attribute type 4 has an invalid length. [ 493.745515][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.033571][ T9566] block nbd6: Attempted send on invalid socket [ 494.043913][ T9566] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 494.056163][ T9566] SQUASHFS error: Failed to read block 0x0: -5 [ 494.063793][ T9566] unable to read squashfs_super_block [ 494.747306][ T9110] veth0_vlan: entered promiscuous mode [ 494.830206][ T9110] veth1_vlan: entered promiscuous mode [ 495.045234][ T9110] veth0_macvtap: entered promiscuous mode [ 495.112836][ T9110] veth1_macvtap: entered promiscuous mode [ 495.226523][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.280329][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.369077][ T8415] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.405281][ T8415] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.478867][ T8415] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.517102][ T8415] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.749382][ T9591] binder: BINDER_SET_CONTEXT_MGR already set [ 495.796637][ T9591] binder: 9589:9591 ioctl 4018620d 200000000040 returned -16 [ 495.955813][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.002116][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.071117][ T9242] veth0_vlan: entered promiscuous mode [ 496.223720][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.241283][ T9242] veth1_vlan: entered promiscuous mode [ 496.262758][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.338845][ T9602] ptrace attach of "./syz-executor exec"[6301] was attempted by "./syz-executor exec"[9602] [ 496.495190][ T9242] veth0_macvtap: entered promiscuous mode [ 496.528174][ T9242] veth1_macvtap: entered promiscuous mode [ 496.628833][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.710077][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.412706][ T1081] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.453739][ T1081] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.587824][ T1081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.610649][ T1081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.105835][ T9627] netlink: 'syz.7.904': attribute type 4 has an invalid length. [ 500.912495][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.459343][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.534806][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.636299][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.689569][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.741732][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 501.932451][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 502.053900][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 502.090893][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.702932][ T10] usb 6-1: Product: syz [ 502.707144][ T10] usb 6-1: Manufacturer: syz [ 502.758227][ T10] usb 6-1: SerialNumber: syz [ 502.784690][ T10] usb 6-1: config 0 descriptor?? [ 502.806771][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 503.282363][ T9651] binder: BINDER_SET_CONTEXT_MGR already set [ 503.372658][ T9651] binder: 9650:9651 ioctl 4018620d 200000000040 returned -16 [ 503.425928][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.913'. [ 505.421963][ T48] usb 6-1: USB disconnect, device number 15 [ 507.564602][ T48] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 507.570216][ T9711] net_ratelimit: 5 callbacks suppressed [ 507.570234][ T9711] netlink: zone id is out of range [ 507.587495][ T9711] netlink: zone id is out of range [ 507.608307][ T9711] netlink: zone id is out of range [ 507.613560][ T9711] netlink: zone id is out of range [ 507.618740][ T9711] netlink: zone id is out of range [ 507.636170][ T9711] netlink: zone id is out of range [ 507.641534][ T9711] netlink: zone id is out of range [ 507.650039][ T9711] netlink: zone id is out of range [ 507.655445][ T9711] netlink: zone id is out of range [ 507.660774][ T9711] netlink: zone id is out of range [ 508.093706][ T9699] loop5: detected capacity change from 0 to 8192 [ 508.342687][ T9716] overlayfs: failed to clone upperpath [ 508.363376][ T48] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 508.409572][ T48] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 508.646898][ T48] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.673378][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.439229][ T9702] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 509.468973][ T48] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.237294][ T9736] block nbd8: Attempted send on invalid socket [ 510.245264][ T9736] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 510.255635][ T9736] SQUASHFS error: Failed to read block 0x0: -5 [ 510.263020][ T9736] unable to read squashfs_super_block [ 510.741560][ T5872] usb 7-1: USB disconnect, device number 13 [ 511.917461][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 511.971270][ T9754] loop5: detected capacity change from 0 to 512 [ 511.996990][ T9754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 512.007708][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.061615][ T9754] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.938: bad orphan inode 131083 [ 512.077110][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.099409][ T9754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.111977][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.156146][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.481708][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.500433][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.525057][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.612697][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.799668][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 512.921830][ T9749] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 513.014546][ T9771] hub 9-0:1.0: USB hub found [ 513.020732][ T9771] hub 9-0:1.0: 1 port detected [ 513.728397][ T9775] netlink: 52 bytes leftover after parsing attributes in process `syz.5.941'. [ 513.777683][ T9776] overlayfs: failed lookup in lower (newroot/3, name='file0', err=-40): overlapping layers [ 515.286941][ T9783] overlayfs: failed to clone upperpath [ 518.311069][ T9824] overlayfs: failed lookup in lower (newroot/7, name='file0', err=-40): overlapping layers [ 518.879711][ T9846] binder: BINDER_SET_CONTEXT_MGR already set [ 518.889176][ T9846] binder: 9844:9846 ioctl 4018620d 200000004a80 returned -16 [ 521.647259][ T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 521.718483][ T9860] loop5: detected capacity change from 0 to 8192 [ 521.831608][ T30] audit: type=1800 audit(1758305163.374:298): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.973" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 521.882039][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.952880][ T10] usb 9-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 522.136667][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.346710][ T10] usb 9-1: config 0 descriptor?? [ 522.355581][ T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 522.731844][ T9892] bridge0: port 3(gretap0) entered blocking state [ 522.738405][ T9892] bridge0: port 3(gretap0) entered disabled state [ 522.745096][ T9892] gretap0: entered allmulticast mode [ 522.752242][ T9892] gretap0: entered promiscuous mode [ 522.757878][ T9892] bridge0: port 3(gretap0) entered blocking state [ 522.764397][ T9892] bridge0: port 3(gretap0) entered forwarding state [ 524.475269][ T5868] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 524.721598][ T5868] usb 10-1: Using ep0 maxpacket: 16 [ 524.848469][ T5868] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 525.090798][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.201498][ T5868] usb 10-1: Product: syz [ 525.202722][ T5960] usb 9-1: USB disconnect, device number 2 [ 525.224072][ T5868] usb 10-1: Manufacturer: syz [ 525.239091][ T5868] usb 10-1: SerialNumber: syz [ 525.311883][ T5868] usb 10-1: config 0 descriptor?? [ 525.393551][ T5868] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 525.427531][ T5868] usb 10-1: Detected FT-X [ 525.589717][ T5868] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 525.864101][ T5868] ftdi_sio 10-1:0.0: GPIO initialisation failed: -5 [ 525.903863][ T5868] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 527.374008][ T5960] usb 10-1: USB disconnect, device number 2 [ 527.410840][ T5960] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 527.454730][ T5960] ftdi_sio 10-1:0.0: device disconnected [ 528.555527][ T9962] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 529.427720][ T48] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 530.500965][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.555823][ T5868] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 530.581483][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.621563][ T48] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 530.632132][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.649421][ T48] usb 7-1: config 0 descriptor?? [ 530.754733][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 530.795421][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 530.822613][ T5868] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 530.841126][ T5868] usb 6-1: can't read configurations, error -71 [ 530.903350][ T48] usbhid 7-1:0.0: can't add hid device: -71 [ 530.923673][ T48] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 530.964455][ T48] usb 7-1: USB disconnect, device number 14 [ 531.081583][ T5999] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 531.421535][ T5999] usb 10-1: Using ep0 maxpacket: 16 [ 531.453908][ T5999] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 531.475348][ T5999] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.504687][ T5999] usb 10-1: Product: syz [ 531.519240][ T5999] usb 10-1: Manufacturer: syz [ 531.535495][ T5999] usb 10-1: SerialNumber: syz [ 531.574897][ T5999] usb 10-1: config 0 descriptor?? [ 531.594999][ T9998] fuse: Bad value for 'fd' [ 531.634327][ T5999] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 531.682825][ T5999] usb 10-1: Detected FT-X [ 532.226609][ T5999] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 532.686222][ T5999] ftdi_sio 10-1:0.0: GPIO initialisation failed: -5 [ 532.705361][ T5999] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 534.709555][ T48] usb 10-1: USB disconnect, device number 3 [ 534.780301][ T48] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 534.854052][T10032] fuse: Unknown parameter '00000000000000000000' [ 534.863032][ T48] ftdi_sio 10-1:0.0: device disconnected [ 536.146638][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 536.201133][T10049] ptrace attach of "./syz-executor exec"[9110] was attempted by "./syz-executor exec"[10049] [ 536.382135][ T5868] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 536.407915][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 536.431142][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 536.441736][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 536.449413][ T10] usb 7-1: can't read configurations, error -71 [ 536.533386][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.545746][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.563824][ T5868] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 536.591185][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.720119][ T5868] usb 6-1: config 0 descriptor?? [ 537.575182][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 537.711551][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 537.767392][ T5868] usb 6-1: USB disconnect, device number 18 [ 539.506341][T10078] fuse: Unknown parameter '00000000000000000000' [ 540.472195][T10095] loop6: detected capacity change from 0 to 8192 [ 541.281523][ T48] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 541.462777][ T48] usb 9-1: Using ep0 maxpacket: 8 [ 541.502717][ T48] usb 9-1: unable to get BOS descriptor or descriptor too short [ 541.533197][ T48] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 541.562994][ T48] usb 9-1: can't read configurations, error -71 [ 541.943004][T10090] loop5: detected capacity change from 0 to 32768 [ 542.176391][T10090] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 543.815308][T10147] fuse: Unknown parameter '00000000000000000000' [ 544.121327][ T5864] ocfs2: Unmounting device (7,5) on (node local) [ 545.490249][T10161] fuse: Unknown parameter ' ÿ0x0000000000000006' [ 545.493274][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1049'. [ 546.556467][T10190] overlayfs: failed lookup in lower (newroot/120, name='file0', err=-40): overlapping layers [ 546.833764][ T5886] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 546.842802][ T5886] Bluetooth: hci0: Injecting HCI hardware error event [ 546.857240][ T5876] Bluetooth: hci0: hardware error 0x00 [ 548.018941][ T5886] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 548.161114][T10208] fuse: Unknown parameter '00000000000000000000' [ 548.231530][ T48] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 548.413235][ T48] usb 8-1: Using ep0 maxpacket: 8 [ 548.533538][ T48] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 548.574361][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.650871][ T48] usb 8-1: Product: syz [ 548.666464][ T48] usb 8-1: Manufacturer: syz [ 548.681302][ T48] usb 8-1: SerialNumber: syz [ 548.818557][ T48] usb 8-1: config 0 descriptor?? [ 548.845367][ T48] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 549.183715][T10189] loop8: detected capacity change from 0 to 32768 [ 549.355413][T10189] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 549.871724][ T5876] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 550.757530][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'. [ 550.875278][ T48] gspca_sonixj: reg_r err -32 [ 550.943783][ T48] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 551.370186][ T48] usb 8-1: USB disconnect, device number 5 [ 551.560193][ T9242] ocfs2: Unmounting device (7,8) on (node local) [ 555.059745][T10274] overlayfs: failed lookup in lower (newroot/32, name='file0', err=-40): overlapping layers [ 555.875077][T10278] hub 9-0:1.0: USB hub found [ 555.890398][T10278] hub 9-0:1.0: 1 port detected [ 556.979281][T10303] block nbd6: Attempted send on invalid socket [ 556.987609][T10303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.111653][T10303] block nbd6: Attempted send on invalid socket [ 557.122024][T10303] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.133382][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 557.161072][T10303] block nbd6: Attempted send on invalid socket [ 557.167666][T10303] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.182418][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 557.229711][T10303] block nbd6: Attempted send on invalid socket [ 557.236165][T10303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.252890][T10303] block nbd6: Attempted send on invalid socket [ 557.259133][T10303] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.272563][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 557.285327][T10303] block nbd6: Attempted send on invalid socket [ 557.291598][T10303] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.304433][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 557.335530][T10303] block nbd6: Attempted send on invalid socket [ 557.342094][T10303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.357948][T10303] block nbd6: Attempted send on invalid socket [ 557.364306][T10303] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.376220][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 557.403810][T10303] block nbd6: Attempted send on invalid socket [ 557.410062][T10303] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.423989][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 557.437069][T10303] block nbd6: Attempted send on invalid socket [ 557.443376][T10303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.454446][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 557.465312][T10303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 557.474931][T10303] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 558.081545][ T30] audit: type=1326 audit(1758305202.484:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 558.418540][ T30] audit: type=1326 audit(1758305202.484:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 558.513696][ T30] audit: type=1326 audit(1758305202.484:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 558.820998][ T30] audit: type=1326 audit(1758305202.484:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 559.020181][ T30] audit: type=1326 audit(1758305202.494:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 559.330376][ T30] audit: type=1326 audit(1758305202.494:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 559.407777][ T30] audit: type=1326 audit(1758305202.494:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 559.545046][ T30] audit: type=1326 audit(1758305202.494:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 559.646118][ T30] audit: type=1326 audit(1758305202.494:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 559.782492][ T30] audit: type=1326 audit(1758305202.494:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.8.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5618ec29 code=0x7ffc0000 [ 561.627364][T10322] loop6: detected capacity change from 0 to 40427 [ 561.634656][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1095'. [ 561.644684][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1095'. [ 562.046877][T10322] F2FS-fs (loop6): invalid crc value [ 562.052718][T10322] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-4) [ 562.275433][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.882209][ T973] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 563.292557][ T973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 563.326854][ T973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.524826][ T973] usb 8-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 563.532527][T10353] syz.8.1100: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 563.534776][ T973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.571752][ T48] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 563.600020][ T973] usb 8-1: config 0 descriptor?? [ 563.624830][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.8.1100 Not tainted syzkaller #0 PREEMPT(full) [ 563.624855][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 563.624867][T10353] Call Trace: [ 563.624874][T10353] [ 563.624882][T10353] dump_stack_lvl+0x189/0x250 [ 563.624910][T10353] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 563.624938][T10353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.624960][T10353] ? __pfx__printk+0x10/0x10 [ 563.624986][T10353] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 563.625008][T10353] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 563.625032][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625057][T10353] warn_alloc+0x214/0x310 [ 563.625093][T10353] ? __pfx_warn_alloc+0x10/0x10 [ 563.625127][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625148][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625168][T10353] ? __get_vm_area_node+0x28f/0x300 [ 563.625195][T10353] ? fq_pie_init+0x430/0x840 [ 563.625226][T10353] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 563.625277][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625301][T10353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 563.625338][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625359][T10353] ? rcu_is_watching+0x15/0xb0 [ 563.625378][T10353] ? fq_pie_init+0x430/0x840 [ 563.625404][T10353] ? fq_pie_init+0x430/0x840 [ 563.625428][T10353] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 563.625456][T10353] ? fq_pie_init+0x430/0x840 [ 563.625482][T10353] ? tcf_block_get+0x67/0xa0 [ 563.625499][T10353] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 563.625523][T10353] fq_pie_init+0x430/0x840 [ 563.625552][T10353] ? __pfx_fq_pie_init+0x10/0x10 [ 563.625580][T10353] qdisc_create+0x7ac/0xea0 [ 563.625607][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625635][T10353] tc_modify_qdisc+0x1538/0x20e0 [ 563.625662][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625696][T10353] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 563.625742][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.625770][T10353] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 563.625795][T10353] rtnetlink_rcv_msg+0x77c/0xb70 [ 563.625820][T10353] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 563.625838][T10353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.625879][T10353] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 563.625913][T10353] netlink_rcv_skb+0x208/0x470 [ 563.625931][T10353] ? rcu_is_watching+0x15/0xb0 [ 563.625949][T10353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.625970][T10353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.626000][T10353] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.626022][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.626046][T10353] netlink_unicast+0x82f/0x9e0 [ 563.626083][T10353] ? __pfx_netlink_unicast+0x10/0x10 [ 563.626121][T10353] netlink_sendmsg+0x805/0xb30 [ 563.626150][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.626172][T10353] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.626190][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.626210][T10353] ? aa_sock_msg_perm+0xf1/0x1d0 [ 563.626229][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.626249][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.626270][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.626291][T10353] __sock_sendmsg+0x21c/0x270 [ 563.626322][T10353] ____sys_sendmsg+0x505/0x830 [ 563.626357][T10353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.626388][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.626408][T10353] ? import_iovec+0x74/0xa0 [ 563.626436][T10353] ___sys_sendmsg+0x21f/0x2a0 [ 563.626462][T10353] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.626492][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.626538][T10353] ? __fget_files+0x2a/0x420 [ 563.626553][T10353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 563.626573][T10353] ? __fget_files+0x3a0/0x420 [ 563.626599][T10353] __x64_sys_sendmsg+0x19b/0x260 [ 563.626625][T10353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.626666][T10353] ? do_syscall_64+0xbe/0x3b0 [ 563.626691][T10353] do_syscall_64+0xfa/0x3b0 [ 563.626712][T10353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.626728][T10353] ? asm_sysvec_call_function_single+0x1a/0x20 [ 563.626752][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.626770][T10353] RIP: 0033:0x7f1d5618ec29 [ 563.626786][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.626801][T10353] RSP: 002b:00007f1d56fa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.626820][T10353] RAX: ffffffffffffffda RBX: 00007f1d563d6180 RCX: 00007f1d5618ec29 [ 563.626833][T10353] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000009 [ 563.626845][T10353] RBP: 00007f1d56211e41 R08: 0000000000000000 R09: 0000000000000000 [ 563.626856][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.626867][T10353] R13: 00007f1d563d6218 R14: 00007f1d563d6180 R15: 00007ffe0ab98c48 [ 563.626895][T10353] [ 563.626903][T10353] Mem-Info: [ 563.784136][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.292671][T10353] active_anon:13431 inactive_anon:0 isolated_anon:0 [ 564.292671][T10353] active_file:11524 inactive_file:40086 isolated_file:0 [ 564.292671][T10353] unevictable:768 dirty:313 writeback:0 [ 564.292671][T10353] slab_reclaimable:11568 slab_unreclaimable:105386 [ 564.292671][T10353] mapped:38987 shmem:5928 pagetables:1705 [ 564.292671][T10353] sec_pagetables:0 bounce:0 [ 564.292671][T10353] kernel_misc_reclaimable:0 [ 564.292671][T10353] free:1290892 free_pcp:14599 free_cma:0 [ 564.363851][T10353] Node 0 active_anon:50824kB inactive_anon:0kB active_file:46096kB inactive_file:160140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156072kB dirty:1264kB writeback:0kB shmem:19284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13680kB pagetables:6596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 564.427704][T10353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 564.472561][T10353] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.514543][T10353] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 564.520401][T10353] Node 0 DMA32 free:1258480kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47076kB inactive_anon:0kB active_file:46096kB inactive_file:158572kB unevictable:1536kB writepending:1264kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:45980kB local_pcp:24716kB free_cma:0kB [ 564.563460][T10353] lowmem_reserve[]: 0 0 1 1 1 [ 564.571908][T10353] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 564.602203][T10353] lowmem_reserve[]: 0 0 0 0 0 [ 564.606943][T10353] Node 1 Normal free:3893676kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14920kB local_pcp:8856kB free_cma:0kB [ 564.639037][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.649185][ T48] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 564.659117][T10353] lowmem_reserve[]: 0 0 0 0 0 [ 564.674632][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.690374][T10353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 564.707221][ T48] usb 7-1: config 0 descriptor?? [ 564.724653][T10353] Node 0 DMA32: 204*4kB (UME) 494*8kB (UME) 177*16kB (UME) 361*32kB (UME) 104*64kB (UME) 27*128kB (ME) 22*256kB (ME) 46*512kB (UME) 38*1024kB (UM) 7*2048kB (UME) 280*4096kB (UM) = 1258576kB [ 564.744863][T10353] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 564.762994][ T973] uclogic 0003:2179:0053.000A: interface is invalid, ignoring [ 564.776874][T10353] Node 1 Normal: 143*4kB (UME) 44*8kB (UME) 23*16kB (UME) 193*32kB (UME) 60*64kB (UME) 11*128kB (UME) 2*256kB (M) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3893676kB [ 564.798843][T10353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 564.818693][T10353] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 564.829294][T10353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 564.839488][T10353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 564.849132][T10353] 55884 total pagecache pages [ 564.854602][T10353] 0 pages in swap cache [ 564.858755][T10353] Free swap = 124996kB [ 564.863546][T10353] Total swap = 124996kB [ 564.867827][T10353] 2097051 pages RAM [ 564.872076][T10353] 0 pages HighMem/MovableOnly [ 564.877940][T10353] 425671 pages reserved [ 564.882539][T10353] 0 pages cma reserved [ 565.002957][ T6038] usb 8-1: USB disconnect, device number 6 [ 565.032998][ T48] usbhid 7-1:0.0: can't add hid device: -71 [ 565.039008][ T48] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 565.081907][T10363] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 565.140406][T10363] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 565.161032][ T48] usb 7-1: USB disconnect, device number 17 [ 565.170864][T10363] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 566.298576][T10382] loop6: detected capacity change from 0 to 512 [ 567.719985][T10382] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 567.794636][T10382] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1110: bad orphan inode 131083 [ 567.869858][T10397] binder: 10393:10397 ioctl c0306201 200000000080 returned -14 [ 568.043562][T10382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.811509][ T5886] Bluetooth: hci4: command 0x0405 tx timeout [ 570.172300][ T6301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.351054][T10420] fuse: Unknown parameter '00000000000000000000' [ 571.957576][T10433] hub 9-0:1.0: USB hub found [ 571.964353][T10433] hub 9-0:1.0: 1 port detected [ 574.361931][T10449] loop5: detected capacity change from 0 to 1024 [ 574.379079][T10449] EXT4-fs: inline encryption not supported [ 574.385947][T10449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.392816][T10449] EXT4-fs: quotafile must be on filesystem root [ 575.528956][T10446] binder: 10445:10446 ioctl c0306201 200000000080 returned -14 [ 575.936764][T10452] loop5: detected capacity change from 0 to 512 [ 575.988544][T10452] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 576.108053][T10455] nbd_handle_cmd: 2 callbacks suppressed [ 576.108107][T10455] block nbd7: Attempted send on invalid socket [ 576.120503][T10455] blk_print_req_error: 2 callbacks suppressed [ 576.120549][T10455] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 576.136549][T10455] SQUASHFS error: Failed to read block 0x0: -5 [ 576.144089][T10455] unable to read squashfs_super_block [ 576.615017][T10452] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1131: bad orphan inode 131083 [ 576.638934][T10452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.012964][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.634917][T10470] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1136'. [ 579.381075][T10476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.397903][T10478] random: crng reseeded on system resumption [ 579.473852][ T5876] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 583.000971][T10502] program syz.6.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.143042][T10508] block nbd6: Attempted send on invalid socket [ 584.188048][T10508] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 584.204785][T10508] SQUASHFS error: Failed to read block 0x0: -5 [ 584.213759][T10508] unable to read squashfs_super_block [ 584.637848][T10511] autofs: Unknown parameter '0x0000000000000000' [ 584.901678][ T5886] Bluetooth: hci4: command 0x0405 tx timeout [ 585.044946][T10517] process 'syz.9.1152' launched './file0' with NULL argv: empty string added [ 585.096353][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1153'. [ 586.637912][T10536] loop8: detected capacity change from 0 to 2048 [ 586.735727][T10538] binder: 10537:10538 ioctl c0306201 200000000080 returned -14 [ 586.772778][T10536] loop8: detected capacity change from 0 to 128 [ 587.113236][T10544] input: syz1 as /devices/virtual/input/input10 [ 588.648982][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1164'. [ 588.775425][T10553] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1166'. [ 589.572068][ T5868] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 589.613928][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1171'. [ 589.750816][T10575] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 589.762324][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 589.789276][ T5868] usb 8-1: unable to get BOS descriptor or descriptor too short [ 589.819202][ T5868] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 589.884501][ T5868] usb 8-1: can't read configurations, error -71 [ 590.018103][T10579] loop6: detected capacity change from 0 to 512 [ 590.065108][T10579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 590.165085][T10579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.221891][T10579] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.114454][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 591.114476][ T30] audit: type=1800 audit(1758305235.694:316): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1173" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 591.294649][T10595] binder: 10594:10595 ioctl c0306201 200000000080 returned -14 [ 591.369821][ T6301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.211700][T10604] CUSE: info not properly terminated [ 593.643812][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1185'. [ 593.654836][T10619] autofs: Unknown parameter '0x0000000000000000' [ 593.896908][T10624] net_ratelimit: 4 callbacks suppressed [ 593.896924][T10624] netlink: zone id is out of range [ 594.027543][T10624] netlink: del zone limit has 4 unknown bytes [ 594.180066][T10630] fuse: Bad value for 'fd' [ 599.212756][ T5960] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 600.026890][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1197'. [ 600.101770][T10655] : entered promiscuous mode [ 600.519090][ T5960] usb 6-1: device descriptor read/all, error -71 [ 601.889186][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1203'. [ 606.113616][T10697] overlayfs: failed lookup in lower (newroot/51, name='file0', err=-40): overlapping layers [ 606.290484][T10702] loop6: detected capacity change from 0 to 512 [ 606.319462][T10702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 606.519091][T10702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.575333][T10702] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.927165][T10715] overlay: ./file0 is not a directory [ 607.935403][ T30] audit: type=1800 audit(1758305252.504:317): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1212" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 608.318696][ T6301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.941654][ T10] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 609.112600][ T10] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 609.702759][ T10] usb 8-1: config 1 has no interface number 0 [ 609.771761][ T10] usb 8-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64 [ 609.826426][ T10] usb 8-1: config 1 interface 105 has no altsetting 0 [ 610.032802][ T10] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 610.048085][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.056746][ T10] usb 8-1: Product: syz [ 610.061075][ T10] usb 8-1: Manufacturer: syz [ 610.066212][ T10] usb 8-1: SerialNumber: syz [ 610.099074][T10723] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 611.102656][T10723] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 612.201566][ T10] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 612.241623][ T10] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 612.982217][ T10] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 613.034152][ T10] aqc111 8-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5a:76:34:63:d9:d9 [ 613.083817][ T10] usb 8-1: USB disconnect, device number 9 [ 613.120440][ T10] aqc111 8-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 613.481139][ T10] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 613.726697][ T10] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 613.743342][ T10] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 616.842303][T10782] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 616.851052][T10782] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.206657][T10819] overlayfs: failed to clone upperpath [ 623.464934][T10827] openvswitch: netlink: VXLAN extension 59 out of range max 1 [ 623.708869][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.942313][T10883] Bluetooth: MGMT ver 1.23 [ 631.957997][ T5876] Bluetooth: hci6: Malformed HCI Event: 0x22 [ 632.525043][T10892] overlayfs: failed to clone upperpath [ 633.337141][T10902] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 633.361161][T10902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.980288][T10930] loop7: detected capacity change from 0 to 512 [ 634.998526][T10930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.031949][ T10] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 635.173814][T10930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.219541][T10930] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.263305][ T10] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 635.282662][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.317294][ T10] usb 7-1: config 0 descriptor?? [ 635.708215][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1274'. [ 635.812018][ T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 636.077449][ T6918] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.362416][T10944] overlayfs: failed lookup in lower (newroot/60, name='file0', err=-40): overlapping layers [ 638.141963][ T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 638.188020][ T10] asix 7-1:0.0: probe with driver asix failed with error -71 [ 638.298750][ T10] usb 7-1: USB disconnect, device number 18 [ 640.684991][T10972] overlayfs: failed to resolve './file0': -2 [ 640.814296][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 641.952019][T10992] overlayfs: failed lookup in lower (newroot/154, name='file0', err=-40): overlapping layers [ 644.029447][T11008] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1307'. [ 645.038084][T11023] syzkaller0: entered promiscuous mode [ 645.089555][T11023] syzkaller0: entered allmulticast mode [ 646.118930][ T5876] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 647.107554][T11054] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1321'. [ 647.374973][ T30] audit: type=1326 audit(1758305291.944:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 647.444649][ T30] audit: type=1326 audit(1758305291.944:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 647.476172][ T30] audit: type=1326 audit(1758305291.944:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 647.505340][ T30] audit: type=1326 audit(1758305291.944:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 647.541549][ T30] audit: type=1326 audit(1758305291.944:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 647.571781][ T30] audit: type=1326 audit(1758305291.954:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 647.596608][ T30] audit: type=1326 audit(1758305291.954:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 647.622003][ T30] audit: type=1326 audit(1758305291.954:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11055 comm="syz.9.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f847678ec29 code=0x7ffc0000 [ 649.456849][T11061] pim6reg: entered allmulticast mode [ 650.181842][ T5876] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 650.192787][ T5876] Bluetooth: hci6: Injecting HCI hardware error event [ 650.202240][ T5876] Bluetooth: hci6: hardware error 0x00 [ 651.531603][ T48] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 651.583325][ T5886] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 652.141865][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 652.197558][ T48] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 652.216033][ T48] usb 7-1: config 0 has no interface number 0 [ 652.273262][ T5876] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 652.294256][ T48] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 652.524617][ T48] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 652.628674][ T48] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 652.848993][ T48] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 652.868439][ T48] usb 7-1: Product: syz [ 652.872853][ T48] usb 7-1: SerialNumber: syz [ 652.895548][ T48] usb 7-1: config 0 descriptor?? [ 653.268124][ T48] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 653.326001][ T48] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input11 [ 653.492919][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 655.641681][ T5876] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 655.650415][ T5876] Bluetooth: hci5: Injecting HCI hardware error event [ 655.659811][ T5886] Bluetooth: hci5: hardware error 0x00 [ 656.077357][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.086090][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.094182][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.101351][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.108503][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.115664][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.122812][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.129964][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.137230][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.138629][T11138] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1344'. [ 656.144387][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 656.153795][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1344'. [ 656.190438][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 656.201081][ T48] usb 7-1: USB disconnect, device number 19 [ 656.227036][ T48] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 657.309531][T11158] overlayfs: failed to resolve './bus': -2 [ 657.858103][ T5886] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 657.860527][T11160] block nbd6: Attempted send on invalid socket [ 657.877780][T11160] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 657.887846][T11160] SQUASHFS error: Failed to read block 0x0: -5 [ 657.894521][T11160] unable to read squashfs_super_block [ 660.542158][T11197] block nbd6: Attempted send on invalid socket [ 660.548372][T11197] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.557949][T11197] block nbd6: Attempted send on invalid socket [ 660.564213][T11197] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.573564][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 660.583832][T11197] block nbd6: Attempted send on invalid socket [ 660.589976][T11197] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.599456][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 660.609802][T11197] block nbd6: Attempted send on invalid socket [ 660.616042][T11197] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.625459][T11197] block nbd6: Attempted send on invalid socket [ 660.632925][T11197] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.642273][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 660.651993][T11197] block nbd6: Attempted send on invalid socket [ 660.658144][T11197] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.667697][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 660.677975][T11197] block nbd6: Attempted send on invalid socket [ 660.684173][T11197] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.693584][T11197] block nbd6: Attempted send on invalid socket [ 660.699757][T11197] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.709162][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 660.718884][T11197] block nbd6: Attempted send on invalid socket [ 660.725086][T11197] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.735659][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 660.746045][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 660.755785][T11197] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 660.765273][T11197] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 661.085574][T11204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1363'. [ 661.094897][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'. [ 661.858974][T11206] overlayfs: failed to resolve './bus': -2 [ 664.860142][ T48] libceph: connect (1)[c::]:6789 error -101 [ 664.871359][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 664.952828][T11229] ceph: No mds server is up or the cluster is laggy [ 664.958420][ T10] libceph: connect (1)[b::]:6789 error -101 [ 664.966050][T11232] ceph: No mds server is up or the cluster is laggy [ 664.974231][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 665.236542][ T10] libceph: connect (1)[b::]:6789 error -101 [ 665.454245][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 685.145028][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.731444][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 770.738424][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5984/1:b..l P1081/1:b..l [ 770.748015][ C1] rcu: (detected by 1, t=10502 jiffies, g=43097, q=915 ncpus=2) [ 770.755714][ C1] task:kworker/u8:5 state:R running task stack:21192 pid:1081 tgid:1081 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 770.770488][ C1] Workqueue: bat_events batadv_nc_worker [ 770.776130][ C1] Call Trace: [ 770.779391][ C1] [ 770.782306][ C1] __schedule+0x1798/0x4cc0 [ 770.786816][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.792452][ C1] ? __pfx___schedule+0x10/0x10 [ 770.797284][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.802903][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.808519][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 770.813714][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 770.818989][ C1] preempt_schedule_irq+0xb5/0x150 [ 770.824090][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 770.829804][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.835428][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 770.841227][ C1] irqentry_exit+0x6f/0x90 [ 770.845724][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 770.851696][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 770.856971][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 0b 5f 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 770.876564][ C1] RSP: 0018:ffffc90003f679b8 EFLAGS: 00000206 [ 770.882623][ C1] RAX: a0afc8dd61709e00 RBX: 0000000000000202 RCX: a0afc8dd61709e00 [ 770.890580][ C1] RDX: 0000000000000002 RSI: ffffffff8dba98b5 RDI: ffffffff8be33f00 [ 770.898533][ C1] RBP: ffff888026a32940 R08: 0000000000000000 R09: ffffffff8b47d3a2 [ 770.906488][ C1] R10: dffffc0000000000 R11: ffffffff8b47d2d0 R12: 0000000000000002 [ 770.914570][ C1] R13: 0000000000000002 R14: ffffffff8e13a0e0 R15: ffff888026a31e00 [ 770.922545][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 770.927919][ C1] ? batadv_nc_worker+0xd2/0x610 [ 770.932866][ C1] ? batadv_nc_worker+0xd2/0x610 [ 770.937796][ C1] ? batadv_nc_worker+0xd2/0x610 [ 770.942733][ C1] batadv_nc_worker+0x28c/0x610 [ 770.947599][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 770.953327][ C1] process_scheduled_works+0xae1/0x17b0 [ 770.958928][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 770.964904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.970530][ C1] worker_thread+0x8a0/0xda0 [ 770.975132][ C1] kthread+0x711/0x8a0 [ 770.979189][ C1] ? __pfx_worker_thread+0x10/0x10 [ 770.984283][ C1] ? __pfx_kthread+0x10/0x10 [ 770.988855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.994484][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 770.999669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.005281][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.010462][ C1] ? __pfx_kthread+0x10/0x10 [ 771.015036][ C1] ret_from_fork+0x439/0x7d0 [ 771.019617][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 771.024729][ C1] ? __switch_to_asm+0x39/0x70 [ 771.029482][ C1] ? __switch_to_asm+0x33/0x70 [ 771.034321][ C1] ? __pfx_kthread+0x10/0x10 [ 771.038900][ C1] ret_from_fork_asm+0x1a/0x30 [ 771.043666][ C1] [ 771.046664][ C1] task:kworker/u8:8 state:R running task stack:19224 pid:5984 tgid:5984 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 771.060218][ C1] Workqueue: iou_exit io_ring_exit_work [ 771.065758][ C1] Call Trace: [ 771.069015][ C1] [ 771.071928][ C1] __schedule+0x1798/0x4cc0 [ 771.076431][ C1] ? __pfx___schedule+0x10/0x10 [ 771.081278][ C1] ? unwind_next_frame+0xa5/0x2390 [ 771.086374][ C1] preempt_schedule_notrace+0xd1/0x110 [ 771.091815][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 771.097862][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.103481][ C1] ? unwind_next_frame+0xa5/0x2390 [ 771.108601][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 771.114498][ C1] rcu_is_watching+0x7f/0xb0 [ 771.119072][ C1] ? unwind_next_frame+0xa5/0x2390 [ 771.124169][ C1] lock_release+0x4b/0x3e0 [ 771.128578][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.134193][ C1] ? deref_stack_reg+0x19f/0x230 [ 771.139123][ C1] ? unwind_next_frame+0xa5/0x2390 [ 771.144218][ C1] unwind_next_frame+0x19a9/0x2390 [ 771.149320][ C1] ? unwind_next_frame+0xa5/0x2390 [ 771.154416][ C1] ? worker_thread+0x8a0/0xda0 [ 771.159172][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.165313][ C1] arch_stack_walk+0x11c/0x150 [ 771.170072][ C1] ? kthread+0x711/0x8a0 [ 771.174307][ C1] stack_trace_save+0x9c/0xe0 [ 771.178970][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 771.184331][ C1] ? kasan_save_track+0x4f/0x80 [ 771.189173][ C1] ? kasan_save_track+0x3e/0x80 [ 771.194012][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 771.198764][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 771.204302][ C1] ? kmem_cache_free+0x166/0x400 [ 771.209227][ C1] ? __io_req_caches_free+0x8f/0x140 [ 771.214505][ C1] ? io_req_caches_free+0x21/0x60 [ 771.219521][ C1] ? io_ring_exit_work+0x415/0x930 [ 771.224630][ C1] kasan_save_stack+0x3e/0x60 [ 771.229318][ C1] ? kasan_save_stack+0x3e/0x60 [ 771.234159][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 771.239518][ C1] ? kmem_cache_free+0x2f6/0x400 [ 771.244443][ C1] ? __io_req_caches_free+0x8f/0x140 [ 771.249714][ C1] ? io_req_caches_free+0x21/0x60 [ 771.254725][ C1] ? io_ring_exit_work+0x415/0x930 [ 771.259822][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 771.265522][ C1] ? worker_thread+0x8a0/0xda0 [ 771.270306][ C1] ? __phys_addr+0xd3/0x180 [ 771.274805][ C1] ? __io_req_caches_free+0x8f/0x140 [ 771.280079][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 771.285264][ C1] kmem_cache_free+0x2f6/0x400 [ 771.290021][ C1] __io_req_caches_free+0x8f/0x140 [ 771.295124][ C1] io_req_caches_free+0x21/0x60 [ 771.299969][ C1] io_ring_exit_work+0x415/0x930 [ 771.304912][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 771.310378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.316003][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 771.321708][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 771.327416][ C1] process_scheduled_works+0xae1/0x17b0 [ 771.333002][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.338980][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.344653][ C1] worker_thread+0x8a0/0xda0 [ 771.349235][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 771.355571][ C1] ? __kthread_parkme+0x7b/0x200 [ 771.360504][ C1] kthread+0x711/0x8a0 [ 771.364570][ C1] ? __pfx_worker_thread+0x10/0x10 [ 771.369672][ C1] ? __pfx_kthread+0x10/0x10 [ 771.374249][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.379879][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.385075][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.390694][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.395871][ C1] ? __pfx_kthread+0x10/0x10 [ 771.400448][ C1] ret_from_fork+0x439/0x7d0 [ 771.405023][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 771.410123][ C1] ? __switch_to_asm+0x39/0x70 [ 771.414892][ C1] ? __switch_to_asm+0x33/0x70 [ 771.419660][ C1] ? __pfx_kthread+0x10/0x10 [ 771.424244][ C1] ret_from_fork_asm+0x1a/0x30 [ 771.429027][ C1] [ 771.432039][ C1] rcu: rcu_preempt kthread starved for 10016 jiffies! g43097 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 771.443212][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 771.453160][ C1] rcu: RCU grace-period kthread stack dump: [ 771.459022][ C1] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 771.472499][ C1] Call Trace: [ 771.475756][ C1] [ 771.478698][ C1] __schedule+0x1798/0x4cc0 [ 771.483207][ C1] ? __pfx___schedule+0x10/0x10 [ 771.488050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.493671][ C1] ? schedule+0x91/0x360 [ 771.497925][ C1] schedule+0x165/0x360 [ 771.502085][ C1] schedule_timeout+0x12b/0x270 [ 771.506928][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 771.512286][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 771.518170][ C1] ? __pfx_process_timeout+0x10/0x10 [ 771.523441][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.529059][ C1] ? prepare_to_swait_event+0x341/0x380 [ 771.534621][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 771.539475][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.544656][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 771.550805][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 771.556078][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 771.561275][ C1] ? finish_swait+0xcd/0x1f0 [ 771.565850][ C1] rcu_gp_kthread+0x99/0x390 [ 771.570434][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 771.575626][ C1] ? __kthread_parkme+0x7b/0x200 [ 771.580548][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.586164][ C1] ? __kthread_parkme+0x1a1/0x200 [ 771.591178][ C1] kthread+0x711/0x8a0 [ 771.595240][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 771.600426][ C1] ? __pfx_kthread+0x10/0x10 [ 771.605007][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.610630][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.615825][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.621453][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.626719][ C1] ? __pfx_kthread+0x10/0x10 [ 771.631295][ C1] ret_from_fork+0x439/0x7d0 [ 771.635870][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 771.640969][ C1] ? __switch_to_asm+0x39/0x70 [ 771.645719][ C1] ? __switch_to_asm+0x33/0x70 [ 771.650473][ C1] ? __pfx_kthread+0x10/0x10 [ 771.655046][ C1] ret_from_fork_asm+0x1a/0x30 [ 771.659809][ C1] [ 771.662807][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 771.669102][ C1] Sending NMI from CPU 1 to CPUs 0: [ 771.674299][ C0] NMI backtrace for cpu 0 [ 771.674314][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 771.674337][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.674350][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 771.674375][ C0] Code: 3e fd 95 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e9 0d 00 f3 0f 1e fa fb f4 13 fd 95 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 771.674393][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 771.674412][ C0] RAX: 84b976e007ceb000 RBX: ffffffff819683f8 RCX: 84b976e007ceb000 [ 771.674429][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba295 RDI: ffffffff8be33f00 [ 771.674444][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 771.674460][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630 [ 771.674476][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 771.674493][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 771.674511][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.674526][ C0] CR2: 00007fd386f02fc6 CR3: 000000002f3f8000 CR4: 0000000000350ef0 [ 771.674543][ C0] Call Trace: [ 771.674551][ C0] [ 771.674558][ C0] default_idle+0x13/0x20 [ 771.674583][ C0] default_idle_call+0x74/0xb0 [ 771.674609][ C0] do_idle+0x1e8/0x510 [ 771.674634][ C0] ? __pfx_do_idle+0x10/0x10 [ 771.674665][ C0] cpu_startup_entry+0x44/0x60 [ 771.674686][ C0] rest_init+0x2de/0x300 [ 771.674733][ C0] start_kernel+0x3a9/0x410 [ 771.674757][ C0] x86_64_start_reservations+0x24/0x30 [ 771.674786][ C0] x86_64_start_kernel+0x143/0x1c0 [ 771.674815][ C0] common_startup_64+0x13e/0x147 [ 771.674855][ C0] [ 773.896957][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=792 sent=0 n=-1 (errno 32: Broken pipe) [ 780.537012][ T1095] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0