last executing test programs: 17.513340911s ago: executing program 0 (id=1037): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000040003"], 0x1c}}, 0x24044080) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 15.515074334s ago: executing program 4 (id=1041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') lseek(r2, 0x5a, 0x2) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000040)={'\x00', 0x2, 0x1, 0xd9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) socket$igmp(0x2, 0x3, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000200)=0x1) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x8002, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'pimreg1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f00000001c0)) sendmmsg(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="a0a4a4e3a27dfd4f181259301443247d3b3591e54fc507298a3da79ffbd306007d6a6f24fd454d9225e2d1df91e83d7fec5d71cd7304f9e941c29a66c5f2059c62ca1df9043975e25f278a4ee71acb4107c4412f74bd3ccfe3ac75c2e5641769e8eaf42cf26ddbd906fd267f21b05c55a68701ac41b6d45057dd179c29", 0x7d}, {&(0x7f00000002c0)="f85933688da2b2e22d4098f5ed99af85e00e13696d5c6911bf9a7a451a5b1cc2f1af7b6b47b6ac67f84b3cb6fdc99f9ab2b9149b278e6c9160caa734472e0dd820165f6dc36e8b433f82969566b44308099e36efea369d16e214d391e2e5f4c91b060a5158eaca03906dda58a2644f19b9", 0x71}], 0x2}}], 0x1, 0x20004841) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fremovexattr(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="73656375726974792e73ff4d00c1f63f090ea3049149a2b37af4f6f71820f8cd08a9b076d50abc4652288dfc7452e9a1443f0c07c2d1945044e0406c1640d11826bf70398d1fb34367492846cbb7464bcee412f44ae2d74d6915a58000000000000000743bf8c7eae5c3f2f296168975e42704259c1454572a6b3f650a6004f3b17389e2b2920a5132e5e8ca68376894b904a7966362f766a66d326e491d9e2261aed3a4"]) syz_open_dev$video(&(0x7f00000000c0), 0x10001, 0xc100) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x159b43, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 15.481199516s ago: executing program 2 (id=1042): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) bind$tipc(r1, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x3}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x28}}, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@numtail}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x27e, &(0x7f0000000240)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) 14.385405478s ago: executing program 0 (id=1044): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fileset}, {@rootdir={'rootdir', 0x3d, 0xfff}}, {@utf8}, {@partition={'partition', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x7f}}, {@rootdir={'rootdir', 0x3d, 0x1}}, {@undelete}, {@nostrict}, {@nostrict}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getnetconf={0x2c, 0x52, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x22d}]}, 0x2c}}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r4, 0x8926, 0x20001100) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 13.487638818s ago: executing program 0 (id=1047): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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") r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3, 0x2}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x301a40, 0x0) fcntl$notify(r4, 0x402, 0x30) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x20000, 0x2) fcntl$notify(r5, 0x402, 0x40000029) fcntl$notify(0xffffffffffffffff, 0x402, 0x1c) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x480c0, 0x0) fcntl$notify(r6, 0x402, 0x1a) getdents64(r5, &(0x7f0000000080)=""/226, 0xe2) keyctl$chown(0x4, 0x0, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 10.802239895s ago: executing program 4 (id=1050): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x4}, 0x20) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x27, 0x4, @thr={&(0x7f0000000340)="c73385fab85d2cb555a0cb4f58686c3db6342e324bcafaa8d051d621b9ec83e20caf6e5b26d4a4884f4de38ede4123bd09eef9455cfa74fa4af65e32fe25e20d07f7ca0c0ad16fcac9250db4728c645b396102f89b2752d4c3fc7592dcf102f64f89cc79c9ba0442f55d823eec02ce480d3ded37327a3ae16f3244ea83ac9ca1a5bf878d4cff5e5d2d55965eb5cae99eadfb7770ac5c214b86fd2147502e62fed0645372ab4d0ca5cd1a3c6452e2554ea84cb5d9aa680734f1480ce0fdda65dc4471ddf9de0f9096782fd13de6c5617bbf8a", &(0x7f0000000440)="96ff59a79bb8d7d52d5b50670dcd20e8cd3ebceca47fc8dc52dfa6734c4a3a10136645bb3cbc624936314358184b6373cf84f48cb817f47fb45879df09f0f2e3a479d04975adeed32e2dd3727e6dd5057833ff632767fd0ae01110b2791c6310201c6c4a42b704a335069acdb32b91f6cc26978367ad692a83ea7166a2ec52dd15c26617b01bfc82c8c1918b5fbadb198fa0d37cad7a06c5ed0c83079594f17a613160ebcc116d246128fa95263558607d5462cce36fb71cdb432005aad80e37c4c08021af8e525f5aa2768a6d5d45b5536f0e6592f15b10fed6bdd2eb8f9f2e0c1e8d9a66d09db8a5c873642ccf4cbf"}}, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xe) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') close(0x3) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000019000411000400000000006eec00be00442fff01000000000000000000000000000001ff02000000000000000000000000000104208bbe000000030c000800050086dd080088be00000001160906040100000000000010080022eb000000032004f008020000000000008d000294030800655800000002"], 0x7a) 10.784346257s ago: executing program 2 (id=1051): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 9.68082874s ago: executing program 0 (id=1052): socket(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x14, r4, 0x711, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002200)='net/netstat\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2c}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0xc}, 0x20008844) writev(r7, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x5, 0xffff, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x62, 0x0, 0xd4, 0x0, 0x0, @empty, @empty}}}}) syz_clone(0x630051c0, 0x0, 0x22, 0x0, 0x0, 0x0) 9.626534444s ago: executing program 4 (id=1053): syz_usb_connect(0x3, 0x146, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002a4b4b708b40402005ce2010203010902340102"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.907332907s ago: executing program 1 (id=1055): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000040003"], 0x1c}}, 0x24044080) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 7.772709446s ago: executing program 2 (id=1057): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000700)={0x8, 0x120, 0xfa00, {0x1, {0x7fff, 0x0, "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", 0xc, 0xfc, 0xd, 0x0, 0xe, 0xe, 0x6, 0x1}, r5}}, 0x128) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$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") setpgid(r0, r0) 7.41694832s ago: executing program 3 (id=1059): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000700)={0x8, 0x120, 0xfa00, {0x1, {0x7fff, 0x0, "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", 0xc, 0xfc, 0xd, 0x0, 0xe, 0xe, 0x6, 0x1}, r5}}, 0x128) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$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") setpgid(r0, r0) 7.308129317s ago: executing program 4 (id=1060): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x105000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@nl=@unspec, {&(0x7f0000000480)=""/194, 0xc2}, &(0x7f0000000080), 0x11}, 0xa0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) io_uring_setup(0x17ba, &(0x7f0000000400)={0x0, 0x80000000, 0x8010, 0x3}) r4 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b6, &(0x7f0000000840)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 6.565961136s ago: executing program 2 (id=1061): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) bind$tipc(r1, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x3}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x28}}, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@numtail}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x27e, &(0x7f0000000240)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) 5.826325985s ago: executing program 3 (id=1062): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$eJzs3MtrY1UcB/CTPqbzciziwt1cGIQWJqHpY9Bd1Rl8YIfiY+FK0yQNmUlyS5OmtSsFl+LC/0QUXLn0b3Dh2p24UNwJSu45lamOoDRt7PTzgdvvvSc3v/s7obScm5AAXFjz2a8/l8KNcCWEMB1CuB5CsV9KW2E9xnMhhJshhKlHtlIa/3PgUgjhagjhxqh4rFlKD31+e3hr7ac3fvnmu7mZa198/f3kZg1M2vMhhO5O3N/vxsxbMR+k8dqwXWR3dZgyPtB9mI7zmPvNraLCfu3ovFqRK614fr6z1x/ldqdWH2WrvV2M7/TiBfvD1lGd4gkParvFcaO5VWS7nxfZOox9HRzGv22H/UGs00j1PizKh8HgKON486AZ57PzsMh6b5DGY9280TwY5TBlulyo551G0cfWSV7p/7c32729g2zY3O238162Vqm+UKneKVd380Zz0Fwt17qNO6vZQqszOq08aNa66608b3WalXreXcwWWvV6uVrNFu42t9q1XlatVlYqS+W1xbR3O3v1/rtZp5EtjPLldm9v0O70s+18N4vPWMyWKysvLma3qtnbG5vZ5lv37m1svvP+3ffuv7Tx+ivppL+1lS0sLy0vl6tL5eXq4vmd/+h//X+a/yep6THOH06kNOkGAM4f639gEs77+j9Y/4+F9f/Fnj+ciPU/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCF9cPsl68VO/Px+FoafyoNPZOOSyGEqRDC748xHS4dqzmd6sz+w/mzf+nh21IoKoyuMZe2qyGE9bT99vRpvwoAAADw5Prqo5ufxdV6/DE/6YY4S/GmzdT1D8ZUrxRCmJ3/cQxVQrrZFJ49eVfR6Pd7JhyMqVpxA+vymIrFW24z46r2r0wfi8uPRCnG1OOf9/GZdAcAAJyO4yuBs12FAAAAcJY+nXQDTEbxTmv6LH76AP9cjPSG4JVjRwAAAMA5VJp0AwAAAMCpK9b/vv8PAAAAnmzx+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3buJyd1KIoD8Gmh7/H+GIlx7lacwTJcgkOHhgW4CZaAW3ADrAFnLsGAoS3RGkxMettG8n1Je7kN+XFKmJx7SQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC49F6v54/3VQ9uc7a6dNHcDAAAAHLMpVvPyxbSa/6uvn9WXLup5FhF5RBzr3Ufxq5E5qnOKL95ffKrhKaJM2H/G7/r4GxHX9fF63vW3AAAAAKdrvVjOqm69Ok2HLog+VYs2+f+bRHlZRBTTl0Rp+f50mSis/H2P4y5RWrmANUkUVi25jVOlfcuoMUw+DFk15L2WAwAA9KLZCfTbhQAAANCn26ELYBhZHLYyD3vB5T/v3zcE/zRmAAAAwA+UDV0AAAAA0Lmy//f8PwAAADht1fP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NKmWM3Xi+Wsbc52106auwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf25xwFQyCMAWj+xa2TOYb3P6AExNLW5j0YCAlTfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDkc73jbn5t9iT/JN+GqfVIMndqWDo1rJ0btn4Yb14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzV7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X2kBcQR0QxACiQEWer2Wlq4MoIiBPwEpSq8lcOVHm4FWFVIWNpS5C4IRISRQ2Po/dG6lLmXrcEORmBhA9tnJ6xGJgyj2Jfl8pOf3tWX5fZ8TRfn6+Q4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqE3e2Y2zYtObxml17N7jW2tFf3+mL9zZerBctCJOmkz6cHg53kn67SUCAADA8ZHV9X0I4WG+vVL0aa+s//P6nKLm/+7ZaVzX87N1f93XtX/Rfv3l0Ys7A/Wm4xQXvbw+Hp35Zyqdg5vlYnvuX8/olHe+fPaSlT+Q9P3NFyZ5eT+Tb+7efbdbhieayBYA+D9O130V1P8PFf2wzcQAODY6UeFd1/9Zr92cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrQ3QxP13ESQlju7MaF+49vrZX9zP6drQfLdbtw+/ZWfM3iEnkI4fL6eHSmqYkcAtdv3PxkdTweXWs+eCWE0N7oVfDhHOeE0GaGgv0GafW7vij5HI6g5T9MAAAcOXnVirr+Yb69UhxLlkL46/sn6//XozjE9f9MH9f/jz66cC8eK67/h43NcPENNq5+Prh+4+ab61dXr4yujD596+zw7eG5i+fPXxyUz0oGnpgAAACwP92qxfV/uhTCZGb9/1QUhznr/y++HX4Vj5Wp//e0u+jXdiYAAADH2/Ov/vF7ssfxpNsNX65ubFwbTrc7+2en2xZS/c9OVC2u/7OltrMCAAAAmjDZTJ5Y/78UxWHO9f9nfnjpp/iaWQjhZLX+f3rts/Gl5qbTkj/nOquJjxMf+FQBAABYaCerFq//5+X7/+nOKw9pCOGN16Zx9TWAc9X/2Xtf/xiPFb//f665KS6ktD+9H2XfD6HTbzsjAAAAjrKnqlYU+7/l2ysf/3zqg673/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9ncAAAD//99iPvs=") r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3, 0x2}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x301a40, 0x0) fcntl$notify(r4, 0x402, 0x30) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x20000, 0x2) fcntl$notify(r5, 0x402, 0x40000029) fcntl$notify(0xffffffffffffffff, 0x402, 0x1c) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x480c0, 0x0) fcntl$notify(r6, 0x402, 0x1a) getdents64(r5, &(0x7f0000000080)=""/226, 0xe2) keyctl$chown(0x4, 0x0, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 5.59592809s ago: executing program 1 (id=1063): socket$packet(0x11, 0x2, 0x300) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xae2, &(0x7f0000002400)="$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") setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r4, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mknodat$null(r7, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x103) 4.23275254s ago: executing program 1 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x64, r1, 0x5, 0x0, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x3, 0x7}}, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x64}}, 0x840) 3.878316734s ago: executing program 0 (id=1065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r7, @ANYRESDEC=0x0]) socket$inet(0x2, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x7f7203) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) 3.746206563s ago: executing program 1 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d00cf32cac80000040300000108000000e707800c00018006000600800a000008000280040014"], 0x76}, 0x1, 0x0, 0x0, 0x105}, 0x4008) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 2.678096193s ago: executing program 1 (id=1067): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) inotify_init1(0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x5608, 0x3) 2.566746071s ago: executing program 2 (id=1068): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.405812271s ago: executing program 4 (id=1069): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fileset}, {@rootdir={'rootdir', 0x3d, 0xfff}}, {@utf8}, {@partition={'partition', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x7f}}, {@rootdir={'rootdir', 0x3d, 0x1}}, {@undelete}, {@nostrict}, {@nostrict}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FldxWTJwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZsOhh9AYAOCBuDz2tVNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+/LzQ+e7eak98wH199pn49WxKxcbL83enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvnZr8vr1hcaZ585u2nx74L3+J44PXBh65uTT3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORopnv/+z1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnz32Fq6mt/6UZ2HL1UDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/ijilUjx87dPxLV8n6nuNV+MeKXMH0a8WeaLEan8YpyLeHeb7xGPploU8efl9b+wliar+0H3vnLp642vzlyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcRnIsXL//ZH1bjiqMalH7sw9PsDv9w7ZvypD9lPWfa5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPI8UL75xIy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIt6PFN/55lqKFBHNiIno5Er/w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDqT0X8IFI0/qB5Z10tIlL1b8eJ8pdz0Txc5iejOVTmi9G8mLNVZa357YfQfnanLxXxk0jRX3/rzgXP17+v8+nO1yDe/NbGp8/WOnmou3Hgvf4njh+7MDTy+ad2Wk7bNWDwUnvm1u3G+PDIyFjP6lo++id71g3k4xZ703UiYuH1N15rTU9Pzd//QvkVuM/q3Su5i6M/yIVUe2SaamEvFqJ2IJrxcPq+Sf1h3JzYd+Xz/91I8dvv/Hv3gd95/tfjlzqf7jzh4xd/svH8f2Hrju7x+V/bWi8//8snwXbP/yd71r2QfzfSV4uoL96c6zseUV94/Y2T7ZutG1M3pmbOnTr1laGhr5w91Xc4on69PT3Vs7QnpwsAAAAAAAAAAAAAAADgwUlF/G6kaP1kLTUi4nY1XmvgwtAzJ58+FIeq8Vabxm2/OnblYuOl2Ztz81MLC1OTjfGZ9rXZyal7PVy9Gu41PjyyL535UEf2uf1H6i/Nzr0+377xh4vbbj9av3h1YXG+dW37zXEkiohm75rBqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EimvnGukLeV0e/791hP+m8f9LW3e0h+P/P390Y/zfJ3qKlsdMqYhfRIrf+oun4gtVO4/GXecsl/ubSDF4/nO5XBwuy3Xb0HmvQGdkYFn2fyLFP7y/uWx3POSTG2VPf6ST+wgor/+xSPGDP/te/Hpet/n9D9tf/6Nbd7RP73/4VM+6o5veV7DrrpOv/8lI8eKTb8VvVGv+7wPf/9F9Y8OJTuGN93Ps0/X/1Z51A/m4v7lXnQcAAAAAAAAAAHiE9aUi/jZS/Giklp7P6+7l7/9Nbt3RPv39r0/3rJvcm/mKPnRh1ycVAAAAAA6IvlTETyPFjcW37oyh3jz+u2f85+9sjP8cTlu2Vn/O9yvVewP28s//eg3k407svtsAAAAAAAAAAAAAAAAAAABwoKRUxPN5PvWJajz/5I7zqa9Eipf/69lcLh0vy3XngR+ofq1fnp05eXF6erYei62r01ONsbnWtamy7qcixdpffy7XLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzknfnA6+vrEafLsp+IFP/595vL5qmp89zR1X7PlGX/KlJ845+2L3t8o+zZsuz3IsWPv9Holj1alu2+H/XTG2WfuzZb7MNVAQAAAAAAAAAAAAAAAAAA4OOmLxXxp5Hiv28u3xnLn+f/7+v5WHnzWz3z/W9xu5rnf6Ca/3+n5fuZ/796r8DSTkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3ogUc5fX0kp/+bmjfqk9c+v2+PDI9tWOpKrmoap8+VM/febsuS8/P3S+mx9cf699Jl4du3Kx8dLszbn5qYWFqcnG+Ez72uzk1D3vYbf1txqsTkDj5mu3Jq9fX2icee7sps23B97rf+L4wIWhZ04+3S07PjwyMtZTptZ330e/S9ph/eEo4i8jxbPf/1n6UX9EEbs/Fx/y3dlvR6pODFadGB8eqToy3W7NLJYbR7snooho9FRqds/RA7gWu9KMWCqbXzZ4sOze2FxrvnV1eqox2ppfbC+2Z2dGU6e1ZX8aUcT5FLEcEav9d++uL4p4LVJ899ha+uf+iEPd8/Cly2NfO3Vm53YU+9jHe1C2s9EXsVw8AtfsAOuPIv4xUvz87RPxL/0Rtej8xBcjXinzhxFvRud6p/KLcS7i3W2+RzyaalHE/5bX/8Jaeru/vB907yuXvt746sz12Z6y3fvKI/98eJAO+L2pHkX8uLrjr6V/9d81AAAAAAAAAAAAAAAAwAFSxK9FihfeOZGq8cF3xhS3Z240rrSuTneG9XXH/nXHTK+vr683UiebOSdyLuVczrmSczVnFLl+zmaZ9fX1ifx5KedyzpWcqznjUK6fs5lzIudSzuWcKzlXc0Yt18/ZzDmRcynncs6VnKs544CM3QMAAAAAAAAAAAAAAAAAAB4vRfVPiu98cy2t93fml56ITq6YD/Sx9/8BAAD//9kg9g0=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getnetconf={0x2c, 0x52, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x22d}]}, 0x2c}}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r4, 0x8926, 0x20001100) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.945821762s ago: executing program 3 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x80) 1.778379793s ago: executing program 4 (id=1071): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) r3 = syz_open_dev$usbmon(&(0x7f0000000d00), 0x2, 0xc80) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b3438"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r5, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x2, 0xaa, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x4, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6fff0addd3"}, {0x5, 0x24, 0x0, 0xc83d}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3ff, 0x5, 0x3}, {0x6, 0x24, 0x1a, 0x5, 0xf}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x8, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x8, 0x5}, @country_functional={0xa, 0x24, 0x7, 0xa, 0x6c68, [0x1000, 0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xa1, 0x33}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x5, 0x89}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0xa0, 0x12}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x81, 0x10, 0x1, 0x10, 0x7}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x89, "f766b320b653704fd5231d5c92b937b4"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x420}}, {0x98, &(0x7f00000002c0)=@string={0x98, 0x3, "a52b22bec2734f746c3c11fae3fd597df4f4372e22fa0a4bb24a46c42d6782a984c8f7d058862068d0a138f24cfb2b85c2f1a66f2c0ab588fb0b396e58f0a306bdeb72f436452de5c2144d42a67d6dc7f8d40a88dbc5570c39e79d62761927af0e5e7bbf600bc5a24bab2f626dcbcdfe48cb113f52f10d450cd23481c6fe6fa05117ac4d3db3b0fc596bcc304c17851720734a67d954"}}, {0x0, 0x0}, {0x2, &(0x7f0000000400)=@string={0x2}}, {0x6c, &(0x7f00000004c0)=@string={0x6c, 0x3, "32b7eaef0f1b2bc033b0a3beb11398dfdc88c4dc42dd3b166e36e78823f6648e23f752a65063e99093832e7c1c22b163db789ce017ebbb0b6d1dfefb3975ef801ffa77146591e32adcc2da82d8037fdd599623dbd46896c95d5e3b08ffb0c6b5f8cce5cdb0e3ee70020f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2009}}, {0x53, &(0x7f0000000580)=@string={0x53, 0x3, "9c53ee867bcb5183c1f0e80d1e0dfb297e6fd575fa6ff23a30c4acb1d4617c4a38322b0a73b2446eedc0f09714f805e97db8c843e7310c2d6d2ee586b83fe79351491b413be4db520781cd3202b8850ad0"}}]}) syz_usb_disconnect(r4) ioctl$MON_IOCX_GET(r3, 0x400c9206, &(0x7f0000000e80)={0x0, 0x0}) 1.648421882s ago: executing program 3 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0x10, 0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x3596}]}}]}, 0x50}}, 0x4040004) 1.407014117s ago: executing program 3 (id=1073): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000040003"], 0x1c}}, 0x24044080) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 622.354219ms ago: executing program 3 (id=1074): r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) r1 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r4}) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0xcc, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000006c0)={0x980000, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) 258.010613ms ago: executing program 0 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x10000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {0x0, 0x0, 0x3}, {}, {}, {}, 0x0, 0x2, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3, 0x5, 0x3, 0x18, 0x2, 0x3, 0xc}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x106, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="851666ce20db96ab0c7d83e114e7c41762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e1507344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdd9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5bc6752639bf37ab325c16dc2f1c4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc807543ddff977834d8740fabc6db21e011079ec7baa1ef03a3b", 0x0, 0x10, 0x0, 0x1, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000100)={'macvlan1\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b"], 0x66) 57.970367ms ago: executing program 1 (id=1076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file1\x00') connect$unix(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) openat$full(0xffffff9c, &(0x7f0000000440), 0x88000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) sendmmsg$unix(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="6798a6279ca561f36084b415b4f57d590cc0dbf66b25607827fba7905a1371e62d2902175f9aeecbc980c364926e9f668ad59dd24c38a6a3d00120794b3364f18a52182e57a000be5c801600ca3023df5650a23010463e8653ef2f5e4648b0fa20adfedcf4a596a6225e1b666ec8202c5af140f7c845b41bbf1bf106e26753fc249ed43c31133393af681203f108ece0761056979683", 0x96}], 0x1, 0x0, 0x0, 0x20040000}}], 0x1, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1370, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) keyctl$session_to_parent(0x12) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=1077): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x2000a212}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x21d5be64}, &(0x7f0000000440)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xeb93}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="248cef5dd278c0e740ce75554991a3f565e2c44dfe1d54dec0593b2574e214bd8d29d805bfa9c69598153ec8ec05a25c313641fb7e208e3c73932e99da8e627adf5fe7358735b2f1e4937f593ca5e8b1a56bfe7a65b44152b132eaec1f19681e3f9ca863f57aa1ca43737f7d890a0654aa14d54b7577c72f8fe223cfef8a6b7539a5e0330465a19ff1851a54b11a3b2721ed5e28a07b1652b907e943f5a7f543d170f9f2924eb03d6c5ae68d18599e7629571d185fc5d41b8556f8470a805c0ddb17b6f0f89744f58dae15", 0xcb}, {&(0x7f0000000740)="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", 0x1000}], 0x2, &(0x7f0000000540)=[@prinfo={0x14, 0x84, 0x5, {0x0, 0x1000}}, @dstaddrv6={0x1c, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @sndinfo={0x1c, 0x84, 0x2, {0x756, 0xc, 0x5, 0x9, r1}}, @init={0x14, 0x84, 0x0, {0x10, 0x8, 0x1, 0x100}}, @prinfo={0x14, 0x84, 0x5, {0x10, 0x8000000}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x7}}], 0x88, 0x20008001}, 0x40) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0xa0, 0x24, 0x26}}]}}]}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r6, &(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0xa0b3, 0x7}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f046, 0xfffffffd}) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e26, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}}, 0x80, 0x0}, 0x2400488c) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x20004881}) io_uring_enter(r2, 0x7f5f, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000000c0), 0x4) kernel console output (not intermixed with test programs): e 2 family 0 port 6081 - 0 [ 77.061240][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.089036][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.116075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.123585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.152158][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.219344][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.237997][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.301933][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.314230][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.364451][ T4268] device veth0_vlan entered promiscuous mode [ 77.375031][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.383911][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.394511][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.403181][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.420183][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.428518][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.439562][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.447696][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.471971][ T4268] device veth1_vlan entered promiscuous mode [ 77.495804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.503997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.514139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.522912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.533638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.545073][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 77.551139][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 77.552377][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.564144][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 77.564164][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 77.570525][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 77.589908][ T4273] device veth0_vlan entered promiscuous mode [ 77.590232][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.604637][ T4273] device veth1_vlan entered promiscuous mode [ 77.616397][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.623817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.632934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.641592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.650225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.658580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.667519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.681703][ T4272] device veth0_vlan entered promiscuous mode [ 77.732330][ T4272] device veth1_vlan entered promiscuous mode [ 77.757498][ T4273] device veth0_macvtap entered promiscuous mode [ 77.780375][ T4268] device veth0_macvtap entered promiscuous mode [ 77.788474][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.798596][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.808685][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.817639][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.826273][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.835676][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.844243][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.853688][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.863593][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.873453][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.882413][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.891743][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.908170][ T4273] device veth1_macvtap entered promiscuous mode [ 77.915122][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.923203][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.936010][ T4268] device veth1_macvtap entered promiscuous mode [ 77.961665][ T4272] device veth0_macvtap entered promiscuous mode [ 77.975202][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.984278][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.992741][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.005804][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.014389][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.023240][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.057503][ T4272] device veth1_macvtap entered promiscuous mode [ 78.068596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.077606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.094564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.104129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.113074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.136663][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.149193][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.161406][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.171217][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.181900][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.193248][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.205657][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.216912][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.226756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.236198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.250334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.259465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.272481][ T4281] device veth0_vlan entered promiscuous mode [ 78.313755][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.341050][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.354722][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.371129][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.383529][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.400085][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.411962][ T4379] loop3: detected capacity change from 0 to 4096 [ 78.412752][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.421555][ T4379] ======================================================= [ 78.421555][ T4379] WARNING: The mand mount option has been deprecated and [ 78.421555][ T4379] and is ignored by this kernel. Remove the mand [ 78.421555][ T4379] option from the mount to silence this warning. [ 78.421555][ T4379] ======================================================= [ 78.468436][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.501143][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.518919][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.528651][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.544652][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.561007][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.571647][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.610928][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.633022][ T4281] device veth1_vlan entered promiscuous mode [ 78.654352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.682002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.706876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.743113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.752094][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 78.756651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.782001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.794220][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.810747][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.821718][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.835032][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.865324][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.876154][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.894548][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.905942][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914776][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.925777][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.934547][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.950503][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960753][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.974477][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.985375][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.031934][ T4281] device veth0_macvtap entered promiscuous mode [ 79.049783][ T4281] device veth1_macvtap entered promiscuous mode [ 79.082996][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.094068][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.104337][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.117256][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.132554][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.144796][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.161565][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.172159][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.184162][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.195146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.203992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.213166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.228194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.299232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.353127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.412507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.471504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.580765][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.626174][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.635445][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 79.643864][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 79.655309][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 79.663409][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 79.669921][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 79.880550][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.895192][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.024785][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.039445][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.050023][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.060575][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.070545][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.081158][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.091066][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.101608][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.113459][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.147062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.166661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.209658][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.224432][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.234110][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.242979][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.498216][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.520642][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.523756][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.534912][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.547024][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.562166][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.592729][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.602026][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.612860][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.660207][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.677067][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.700257][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.701137][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.715793][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.731388][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.799788][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.812416][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.834170][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.851779][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.861234][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.880549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.890800][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.919165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.935628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.057613][ T4397] loop4: detected capacity change from 0 to 1024 [ 81.200181][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 81.302278][ T4397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.418170][ T4402] loop2: detected capacity change from 0 to 2048 [ 81.671725][ T4416] loop1: detected capacity change from 0 to 256 [ 81.928039][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.250044][ T4402] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.420924][ T4402] fs-verity: sha512 using implementation "sha512-avx2" [ 82.604747][ T4428] loop1: detected capacity change from 0 to 2048 [ 82.738621][ T4428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.883922][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 82.974890][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 83.042012][ T4434] device macsec0 entered promiscuous mode [ 83.054142][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 83.141621][ T4434] device veth1_macvtap left promiscuous mode [ 83.854838][ C1] sched: RT throttling activated [ 85.305992][ T4445] loop4: detected capacity change from 0 to 16 [ 85.424413][ T4445] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 85.509503][ T4445] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 86.411174][ T4462] binder: 4455:4462 ioctl 4018620d 0 returned -22 [ 86.706279][ T4462] loop3: detected capacity change from 0 to 2048 [ 86.723019][ T4462] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 86.796169][ T127] cfg80211: failed to load regulatory.db [ 86.998054][ T4469] loop2: detected capacity change from 0 to 8 [ 87.013485][ T4469] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 87.064331][ T4460] mkiss: ax0: crc mode is auto. [ 87.219609][ T4472] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.562049][ T4259] udevd[4259]: incorrect cramfs checksum on /dev/loop2 [ 87.634306][ T4480] netlink: set zone limit has 8 unknown bytes [ 88.277666][ T4479] loop4: detected capacity change from 0 to 2048 [ 88.512103][ T4484] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.798995][ T4487] loop2: detected capacity change from 0 to 512 [ 89.497342][ T4467] loop0: detected capacity change from 0 to 32768 [ 89.609123][ T4467] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.19 (4467) [ 89.627461][ T4484] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 89.694100][ T4484] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 89.844682][ T4484] Remounting filesystem read-only [ 89.882574][ T4268] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 89.905116][ T4467] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.984625][ T4467] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 90.028366][ T4477] loop3: detected capacity change from 0 to 40427 [ 90.051918][ T4467] BTRFS info (device loop0): force clearing of disk cache [ 90.088534][ T4467] BTRFS info (device loop0): enabling ssd optimizations [ 90.128175][ T4477] F2FS-fs (loop3): invalid crc value [ 90.145389][ T4467] BTRFS info (device loop0): using spread ssd allocation scheme [ 90.153105][ T4467] BTRFS info (device loop0): enabling disk space caching [ 90.215231][ T4477] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.241928][ T4467] BTRFS info (device loop0): turning on sync discard [ 90.265281][ T4467] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.318937][ T4467] BTRFS info (device loop0): use zstd compression, level 3 [ 90.338030][ T4467] BTRFS info (device loop0): setting nodatacow, compression disabled [ 90.396963][ T4467] BTRFS info (device loop0): disk space caching is enabled [ 90.408400][ T4477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.739607][ T4467] BTRFS error (device loop0): open_ctree failed: -12 [ 91.380274][ T4531] capability: warning: `syz.0.32' uses deprecated v2 capabilities in a way that may be insecure [ 91.414074][ T4533] loop4: detected capacity change from 0 to 256 [ 91.493094][ T4533] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.111997][ T4541] binder: 4534:4541 ioctl 4018620d 0 returned -22 [ 92.344945][ T4543] netlink: set zone limit has 8 unknown bytes [ 92.413198][ T4541] loop0: detected capacity change from 0 to 2048 [ 92.428123][ T4541] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 92.545794][ T4540] mkiss: ax0: crc mode is auto. [ 93.180271][ T4548] loop0: detected capacity change from 0 to 512 [ 93.189392][ T4548] EXT4-fs (loop0): can't read group descriptor 0 [ 93.505642][ T4539] loop3: detected capacity change from 0 to 32768 [ 93.589922][ T4553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.599120][ T4553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 94.213286][ T4539] (syz.3.30,4539,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 94.278268][ T4556] loop0: detected capacity change from 0 to 512 [ 94.289568][ T4539] (syz.3.30,4539,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 94.339878][ T4259] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.917575][ T4539] JBD2: Ignoring recovery information on journal [ 95.356678][ T4539] JBD2: recovery failed [ 95.370378][ T4539] (syz.3.30,4539,1):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 95.470841][ T4539] (syz.3.30,4539,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 95.495918][ T4539] (syz.3.30,4539,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 95.536068][ T4539] (syz.3.30,4539,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 95.556781][ T4569] loop4: detected capacity change from 0 to 8 [ 95.600360][ T4539] (syz.3.30,4539,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 95.657878][ T4569] unable to read id index table [ 96.357968][ T4577] netlink: set zone limit has 8 unknown bytes [ 96.836214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.938620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.954856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.963158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.971364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.979642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.987843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.996112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.004846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.013109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.661733][ T4587] binder: 4580:4587 ioctl 4018620d 0 returned -22 [ 97.746630][ T4587] loop0: detected capacity change from 0 to 2048 [ 97.757553][ T4587] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 98.564108][ T4582] loop2: detected capacity change from 0 to 8 [ 98.616447][ T4259] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.635996][ T4584] mkiss: ax0: crc mode is auto. [ 98.888851][ T4582] process 'syz.2.42' launched './file1' with NULL argv: empty string added [ 99.357237][ T4582] SQUASHFS error: zstd decompression error: 10 [ 99.493021][ T4582] SQUASHFS error: zstd decompression failed, data probably corrupt [ 99.865133][ T4582] SQUASHFS error: Failed to read block 0x60: -5 [ 99.944015][ T4582] SQUASHFS error: zstd decompression error: 10 [ 99.950722][ T4582] SQUASHFS error: zstd decompression failed, data probably corrupt [ 99.958914][ T4582] SQUASHFS error: Failed to read block 0x60: -5 [ 99.960499][ T4601] fuse: Bad value for 'fd' [ 100.081204][ T4605] loop1: detected capacity change from 0 to 256 [ 100.087006][ T4603] mkiss: ax0: crc mode is auto. [ 100.214141][ T4605] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 100.326967][ T4605] exFAT-fs (loop1): error, found bogus dentry(15) beyond unused empty group(0) (start_clu : 7, cur_clu : 7) [ 100.373578][ T4605] exFAT-fs (loop1): Filesystem has been set read-only [ 100.667735][ T4615] netlink: set zone limit has 8 unknown bytes [ 103.402324][ T4634] binder: 4629:4634 ioctl 4018620d 0 returned -22 [ 103.493228][ T4634] loop2: detected capacity change from 0 to 2048 [ 103.504993][ T4634] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 103.643679][ T4634] mkiss: ax0: crc mode is auto. [ 105.045183][ T4648] fuse: Bad value for 'fd' [ 105.170309][ T4652] loop1: detected capacity change from 0 to 512 [ 105.471569][ T4659] netlink: 104 bytes leftover after parsing attributes in process `syz.0.72'. [ 105.875914][ T4667] loop3: detected capacity change from 0 to 8 [ 105.902204][ T4667] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 106.091019][ T4667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.111216][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop3 [ 106.614721][ T4675] loop2: detected capacity change from 0 to 2048 [ 106.648044][ T4678] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.654785][ T4693] netlink: set zone limit has 8 unknown bytes [ 108.565253][ T4692] sp0: Synchronizing with TNC [ 108.700016][ T4703] loop4: detected capacity change from 0 to 8 [ 108.741896][ T4703] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 108.756326][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop4 [ 108.808386][ T4703] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.874038][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop4 [ 109.153777][ T4712] loop0: detected capacity change from 0 to 512 [ 109.921451][ T4721] netlink: 52 bytes leftover after parsing attributes in process `syz.4.92'. [ 111.236330][ T4743] netlink: set zone limit has 8 unknown bytes [ 111.475307][ T4748] sp0: Synchronizing with TNC [ 111.532354][ T4750] tipc: Started in network mode [ 111.537643][ T4750] tipc: Node identity 8, cluster identity 4711 [ 111.555014][ T4750] tipc: Node number set to 8 [ 111.942775][ T4753] overlayfs: failed to clone upperpath [ 112.364931][ T4520] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.620991][ T4770] syz.2.105 sent an empty control message without MSG_MORE. [ 112.720761][ T4771] loop0: detected capacity change from 0 to 4096 [ 112.727987][ T4771] ntfs3: Unknown parameter 'windows_names' [ 112.800603][ T4650] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.821845][ T4520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.861403][ T4520] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.927593][ T4520] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.971440][ T4520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.027066][ T4520] usb 2-1: SerialNumber: syz [ 113.321250][ T4520] usb 2-1: 0:2 : does not exist [ 113.606454][ T4520] usb 2-1: USB disconnect, device number 2 [ 113.641960][ T4776] netlink: 92 bytes leftover after parsing attributes in process `syz.3.109'. [ 114.767302][ T4650] udevd[4650]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.366893][ T4795] netlink: set zone limit has 8 unknown bytes [ 117.164528][ T4798] loop1: detected capacity change from 0 to 8 [ 117.196423][ T4798] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 117.263259][ T4801] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.263534][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop1 [ 117.321522][ T4798] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.698543][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop1 [ 118.111411][ T4817] netlink: 92 bytes leftover after parsing attributes in process `syz.2.121'. [ 118.825426][ T4823] loop4: detected capacity change from 0 to 2048 [ 118.915161][ T4825] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.643261][ T4832] netlink: set zone limit has 8 unknown bytes [ 120.213496][ T4852] fuse: Bad value for 'rootmode' [ 120.340181][ T4851] sp0: Synchronizing with TNC [ 121.730847][ T4870] netlink: 92 bytes leftover after parsing attributes in process `syz.2.136'. [ 122.418231][ T4875] netlink: set zone limit has 8 unknown bytes [ 122.862738][ T4879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.141'. [ 122.877472][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.886714][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.920179][ T4882] fuse: Bad value for 'rootmode' [ 122.983092][ T4887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 123.503657][ T4892] sp0: Synchronizing with TNC [ 124.934919][ T4912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'. [ 124.944025][ T4912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 125.314103][ T4916] loop4: detected capacity change from 0 to 8 [ 125.431545][ T4916] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 125.455640][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop4 [ 125.478470][ T4916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.099118][ T4928] netlink: set zone limit has 8 unknown bytes [ 126.672577][ T4931] fuse: Bad value for 'rootmode' [ 127.640950][ T4942] loop0: detected capacity change from 0 to 2048 [ 127.748694][ T4947] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.765808][ T4444] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.081224][ T4444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.110500][ T4444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.134941][ T4444] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.144145][ T4444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.275040][ T4444] usb 2-1: config 0 descriptor?? [ 128.840885][ T4947] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 128.852001][ T4947] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 128.864256][ T4947] Remounting filesystem read-only [ 128.870873][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 129.324771][ T4961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.166'. [ 129.333931][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 130.044951][ T4444] usb 2-1: language id specifier not provided by device, defaulting to English [ 130.377011][ T4444] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 130.571686][ T4973] netlink: set zone limit has 8 unknown bytes [ 130.938583][ T4444] usb 2-1: USB disconnect, device number 3 [ 131.100486][ T4976] fuse: Unknown parameter 'use00000000000000000000' [ 131.811095][ T4988] sp0: Synchronizing with TNC [ 132.655506][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661803][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.208767][ T4998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.180'. [ 133.217909][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 133.953208][ T4987] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 134.310716][ T5004] binder: 5003:5004 ioctl 4018620d 0 returned -22 [ 134.780779][ T5013] netlink: set zone limit has 8 unknown bytes [ 135.754754][ T5020] fuse: Unknown parameter 'use00000000000000000000' [ 136.117245][ T5029] sp0: Synchronizing with TNC [ 136.131142][ T5027] loop4: detected capacity change from 0 to 512 [ 136.147152][ T5027] EXT4-fs (loop4): can't read group descriptor 0 [ 136.209020][ T4649] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.779938][ T5035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.192'. [ 139.499826][ T5055] binder: 5049:5055 ioctl 4018620d 0 returned -22 [ 140.746217][ T5061] fuse: Unknown parameter 'use00000000000000000000' [ 141.647704][ T5080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'. [ 143.769509][ T5097] loop1: detected capacity change from 0 to 2048 [ 143.866079][ T5100] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.889103][ T5106] sp0: Synchronizing with TNC [ 145.007474][ T5100] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 145.054865][ T5100] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 145.106518][ T5100] Remounting filesystem read-only [ 145.131275][ T4273] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 145.148333][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.343707][ T4338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.370342][ T4338] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.478014][ T4338] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 145.556865][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.594024][ T4338] usb 5-1: Product: syz [ 145.637784][ T4338] usb 5-1: Manufacturer: syz [ 145.677451][ T4338] usb 5-1: SerialNumber: syz [ 145.727303][ T4338] usb 5-1: config 0 descriptor?? [ 145.887308][ T4338] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 145.943886][ T4338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.978257][ T4338] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 145.999173][ T5114] fuse: Unknown parameter 'user_i00000000000000000000' [ 146.011931][ T4338] usb 5-1: media controller created [ 146.070124][ T4338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.452109][ T4338] DVB: Unable to find symbol tda10046_attach() [ 146.458631][ T4338] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 146.483066][ T4338] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 146.819772][ T5122] binder: 5119:5122 ioctl 4018620d 0 returned -22 [ 147.467290][ T4338] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 147.503749][ T4338] usb 5-1: USB disconnect, device number 2 [ 147.795229][ T5130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.218'. [ 149.518269][ T5144] binder: 5140:5144 ioctl c0306201 0 returned -14 [ 151.787420][ T5164] loop4: detected capacity change from 0 to 8 [ 151.791163][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 151.849526][ T5164] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 151.878011][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop4 [ 152.357745][ T5170] binder: 5167:5170 ioctl 4018620d 0 returned -22 [ 153.352556][ T5177] device macsec0 entered promiscuous mode [ 153.430766][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 153.465162][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 153.509616][ T5180] device veth1_macvtap left promiscuous mode [ 153.515949][ T127] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.671194][ T5180] device macsec0 left promiscuous mode [ 153.744956][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 153.753647][ T127] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 153.782638][ T127] usb 5-1: config 0 has no interface number 0 [ 153.792776][ T127] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.824520][ T127] usb 5-1: config 0 interface 85 has no altsetting 0 [ 153.950700][ T127] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 153.970109][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.988481][ T127] usb 5-1: Product: syz [ 154.004083][ T127] usb 5-1: Manufacturer: syz [ 154.009101][ T127] usb 5-1: SerialNumber: syz [ 154.214911][ T4522] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.777122][ T127] usb 5-1: config 0 descriptor?? [ 155.429970][ T4522] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.450550][ T4522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.480379][ T4522] usb 2-1: Product: syz [ 155.496910][ T4522] usb 2-1: Manufacturer: syz [ 155.533578][ T4522] usb 2-1: SerialNumber: syz [ 155.765735][ T127] appletouch 5-1:0.85: Geyser mode initialized. [ 155.775211][ T127] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input5 [ 156.016825][ T127] usb 5-1: USB disconnect, device number 3 [ 156.084747][ T127] appletouch 5-1:0.85: input: appletouch disconnected [ 156.190985][ T4522] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 156.232613][ T4522] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 156.248546][ T4522] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 156.271164][ T4522] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 156.306215][ T4522] lan78xx: probe of 2-1:1.0 failed with error -71 [ 156.374901][ T4522] usb 2-1: USB disconnect, device number 4 [ 156.504495][ T5200] overlayfs: failed to resolve './file1': -2 [ 156.995558][ T5213] binder: 5201:5213 ioctl 4018620d 0 returned -22 [ 157.816240][ T5218] device macsec0 entered promiscuous mode [ 157.849004][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 157.884310][ T5218] device veth1_macvtap left promiscuous mode [ 157.995541][ T5218] device macsec0 left promiscuous mode [ 158.014945][ T127] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.214869][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 158.222063][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.054931][ T127] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.136941][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.184445][ T127] usb 2-1: config 0 descriptor?? [ 159.414963][ T127] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.952187][ T4522] usb 2-1: USB disconnect, device number 5 [ 161.598163][ T5244] loop4: detected capacity change from 0 to 8 [ 162.285599][ T5244] SQUASHFS error: zstd decompression error: 10 [ 162.298818][ T5254] loop0: detected capacity change from 0 to 8 [ 162.322966][ T5244] SQUASHFS error: zstd decompression failed, data probably corrupt [ 162.335013][ T4522] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.345115][ T5254] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 162.379817][ T5254] overlayfs: failed to resolve './file1': -2 [ 162.432986][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop0 [ 162.481290][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop0 [ 162.515023][ T5244] SQUASHFS error: Failed to read block 0x60: -5 [ 162.536656][ T4522] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 162.570066][ T4522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.584163][ T4650] udevd[4650]: incorrect cramfs checksum on /dev/loop0 [ 162.600364][ T5244] SQUASHFS error: zstd decompression error: 10 [ 162.624418][ T4522] usb 2-1: config 0 descriptor?? [ 162.630543][ T5244] SQUASHFS error: zstd decompression failed, data probably corrupt [ 162.667091][ T5244] SQUASHFS error: Failed to read block 0x60: -5 [ 163.707257][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 164.313924][ T4522] usb 2-1: Cannot set autoneg [ 164.325693][ T4522] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 164.564459][ T4522] usb 2-1: USB disconnect, device number 6 [ 165.277254][ T5277] syz.4.263 uses obsolete (PF_INET,SOCK_PACKET) [ 166.193958][ T5284] loop0: detected capacity change from 0 to 512 [ 166.785564][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 167.203863][ T5301] loop4: detected capacity change from 0 to 256 [ 167.821633][ T4338] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.965882][ T5298] overlayfs: failed to resolve './file1': -2 [ 168.502968][ T5306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.266'. [ 168.585090][ T5306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.266'. [ 169.616190][ T5306] Zero length message leads to an empty skb [ 169.724866][ T4338] usb 2-1: Using ep0 maxpacket: 8 [ 169.736016][ T4338] usb 2-1: device descriptor read/all, error -71 [ 171.062745][ T5337] overlayfs: failed to clone upperpath [ 171.068587][ T5333] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 171.075503][ T5333] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 171.094568][ T5333] vhci_hcd vhci_hcd.0: Device attached [ 171.119724][ T5336] vhci_hcd: connection closed [ 171.130581][ T4348] vhci_hcd: stop threads [ 171.169138][ T4348] vhci_hcd: release socket [ 171.189817][ T4348] vhci_hcd: disconnect device [ 172.347220][ T5352] loop4: detected capacity change from 0 to 512 [ 174.081975][ T5375] loop0: detected capacity change from 0 to 512 [ 174.268568][ T5375] EXT4-fs (loop0): can't read group descriptor 0 [ 175.752575][ T5390] netlink: 52 bytes leftover after parsing attributes in process `syz.4.291'. [ 175.801381][ T5392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.292'. [ 177.150822][ T5390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.291'. [ 179.154877][ T4522] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.378347][ T4522] usb 1-1: config 0 has no interfaces? [ 180.208146][ T4522] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.226688][ T4522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.251467][ T4522] usb 1-1: Product: syz [ 180.269963][ T4522] usb 1-1: Manufacturer: syz [ 180.274608][ T4522] usb 1-1: SerialNumber: syz [ 180.340146][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 180.383659][ T4522] usb 1-1: config 0 descriptor?? [ 182.037833][ T4522] usb 1-1: USB disconnect, device number 2 [ 185.176413][ T5478] loop0: detected capacity change from 0 to 8 [ 185.285931][ T5478] SQUASHFS error: zstd decompression error: 10 [ 185.338419][ T5478] SQUASHFS error: zstd decompression failed, data probably corrupt [ 185.476192][ T5478] SQUASHFS error: Failed to read block 0x60: -5 [ 185.578729][ T5478] SQUASHFS error: zstd decompression error: 10 [ 185.609895][ T5478] SQUASHFS error: zstd decompression failed, data probably corrupt [ 185.679803][ T5478] SQUASHFS error: Failed to read block 0x60: -5 [ 187.447808][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 187.501054][ T5497] device bridge_slave_1 left promiscuous mode [ 187.568717][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.698706][ T5497] device bridge_slave_0 left promiscuous mode [ 187.882263][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.616086][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 191.242856][ T5523] netlink: set zone limit has 8 unknown bytes [ 194.065583][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.065780][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.939474][ T5562] input: syz0 as /devices/virtual/input/input6 [ 196.105164][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 196.111258][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 196.117348][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 196.123384][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 196.129744][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 196.345593][ T5567] netlink: set zone limit has 8 unknown bytes [ 197.449892][ T5572] device macsec0 entered promiscuous mode [ 197.456460][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 200.193276][ T5572] device veth1_macvtap left promiscuous mode [ 202.039266][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 202.590023][ T5593] loop4: detected capacity change from 0 to 2048 [ 202.750141][ T5600] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.140278][ T5610] netlink: set zone limit has 8 unknown bytes [ 204.895614][ T5600] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 204.935735][ T5600] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 205.005434][ T5600] Remounting filesystem read-only [ 205.012643][ T4268] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 206.458834][ T5620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 207.216350][ T5635] loop1: detected capacity change from 0 to 512 [ 207.355442][ T5635] EXT4-fs (loop1): can't read group descriptor 0 [ 207.873237][ T5643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.358'. [ 207.915001][ T5643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.358'. [ 207.962278][ T5643] device bond0 entered promiscuous mode [ 208.075062][ T5643] device bond_slave_0 entered promiscuous mode [ 208.091931][ T5643] device bond_slave_1 entered promiscuous mode [ 208.143479][ T5643] device bridge0 entered promiscuous mode [ 208.173891][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 208.223572][ T5649] netlink: set zone limit has 8 unknown bytes [ 208.304938][ T952] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.402018][ T5652] loop0: detected capacity change from 0 to 2048 [ 208.465658][ T5653] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.661775][ T952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.679823][ T952] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.689088][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.712760][ T952] usb 5-1: config 0 descriptor?? [ 208.760654][ T952] pwc: Askey VC010 type 2 USB webcam detected. [ 209.496740][ T5653] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 209.518495][ T5653] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 209.552265][ T952] pwc: recv_control_msg error -32 req 02 val 2b00 [ 209.570270][ T952] pwc: recv_control_msg error -32 req 02 val 2700 [ 209.580504][ T952] pwc: recv_control_msg error -32 req 02 val 2c00 [ 209.593026][ T5653] Remounting filesystem read-only [ 209.612897][ T952] pwc: recv_control_msg error -32 req 04 val 1000 [ 209.633784][ T952] pwc: recv_control_msg error -32 req 04 val 1300 [ 209.655943][ T952] pwc: recv_control_msg error -32 req 04 val 1400 [ 209.672904][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 209.711799][ T952] pwc: recv_control_msg error -32 req 02 val 2000 [ 209.785551][ T952] pwc: recv_control_msg error -32 req 02 val 2100 [ 210.580933][ T952] pwc: recv_control_msg error -71 req 02 val 2500 [ 210.595419][ T952] pwc: recv_control_msg error -71 req 02 val 2400 [ 210.604452][ T952] pwc: recv_control_msg error -71 req 02 val 2600 [ 210.640117][ T952] pwc: recv_control_msg error -71 req 02 val 2900 [ 210.856734][ T5667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 210.917260][ T952] pwc: recv_control_msg error -71 req 02 val 2800 [ 211.134606][ T5670] binder: 5663:5670 ioctl 4018620d 0 returned -22 [ 211.159639][ T5670] loop0: detected capacity change from 0 to 2048 [ 211.167152][ T5670] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 211.419802][ T952] pwc: recv_control_msg error -71 req 04 val 1100 [ 211.425422][ T4650] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.436531][ T952] pwc: recv_control_msg error -71 req 04 val 1200 [ 211.447517][ T952] pwc: Registered as video103. [ 211.450579][ T5668] mkiss: ax0: crc mode is auto. [ 211.453637][ T952] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 211.474834][ T952] usb 5-1: USB disconnect, device number 4 [ 212.732642][ T5695] netlink: 52 bytes leftover after parsing attributes in process `syz.0.368'. [ 213.845989][ T5713] netlink: set zone limit has 8 unknown bytes [ 214.323102][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.330658][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.602546][ T5725] binder: 5720:5725 ioctl c0306201 0 returned -14 [ 216.751327][ T4444] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 216.984685][ T4444] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.024901][ T4444] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 217.033990][ T4444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.071540][ T4444] usb 2-1: config 0 descriptor?? [ 217.104229][ T4444] pwc: Askey VC010 type 2 USB webcam detected. [ 217.151473][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.274035][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.575918][ T5732] binder: 5729:5732 ioctl 4018620d 0 returned -22 [ 217.642790][ T5732] loop4: detected capacity change from 0 to 2048 [ 217.652743][ T5732] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 218.325081][ T4444] pwc: recv_control_msg error -32 req 02 val 2b00 [ 218.333533][ T4444] pwc: recv_control_msg error -32 req 02 val 2700 [ 218.342906][ T4650] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.353214][ T4444] pwc: recv_control_msg error -32 req 02 val 2c00 [ 218.369813][ T4444] pwc: recv_control_msg error -32 req 04 val 1000 [ 218.380005][ T4444] pwc: recv_control_msg error -32 req 04 val 1300 [ 218.392855][ T4444] pwc: recv_control_msg error -32 req 04 val 1400 [ 218.409827][ T4444] pwc: recv_control_msg error -32 req 02 val 2000 [ 218.451976][ T4444] pwc: recv_control_msg error -32 req 02 val 2100 [ 218.643260][ T5731] Falling back ldisc for ptm0. [ 218.662473][ T4444] pwc: recv_control_msg error -71 req 02 val 2500 [ 218.689907][ T4444] pwc: recv_control_msg error -71 req 02 val 2400 [ 218.721904][ T4444] pwc: recv_control_msg error -71 req 02 val 2600 [ 218.743605][ T4444] pwc: recv_control_msg error -71 req 02 val 2900 [ 218.750612][ T5692] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.750862][ T4444] pwc: recv_control_msg error -71 req 02 val 2800 [ 218.766357][ T5692] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.775462][ T4444] pwc: recv_control_msg error -71 req 04 val 1100 [ 218.778639][ T5692] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.782279][ T4444] pwc: recv_control_msg error -71 req 04 val 1200 [ 218.793662][ T5692] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.802760][ T4444] pwc: Registered as video103. [ 218.823563][ T4444] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 218.847636][ T4444] usb 2-1: USB disconnect, device number 9 [ 219.004697][ T5695] tipc: Started in network mode [ 219.015053][ T5695] tipc: Node identity 8, cluster identity 4711 [ 219.025081][ T5695] tipc: Node number set to 8 [ 220.031328][ T5752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 220.074002][ T5752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 220.372841][ T5759] loop4: detected capacity change from 0 to 512 [ 220.591956][ T5759] EXT4-fs (loop4): can't read group descriptor 0 [ 222.118667][ T5772] netlink: 'syz.4.390': attribute type 12 has an invalid length. [ 222.153737][ T5772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.390'. [ 222.466411][ T5776] trusted_key: encrypted_key: insufficient parameters specified [ 224.248851][ T5775] loop4: detected capacity change from 0 to 40427 [ 224.356766][ T5775] F2FS-fs (loop4): Found nat_bits in checkpoint [ 224.475072][ T5775] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 224.560997][ T5775] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.047046][ T4268] syz-executor: attempt to access beyond end of device [ 225.047046][ T4268] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.602098][ T5804] futex_wake_op: syz.1.398 tries to shift op by 32; fix this program [ 225.829694][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 226.137635][ T5815] netlink: set zone limit has 8 unknown bytes [ 226.357592][ T5817] binder: 5811:5817 ioctl 4018620d 0 returned -22 [ 226.449258][ T5817] loop4: detected capacity change from 0 to 2048 [ 226.461390][ T5817] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 226.984323][ T4650] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.999838][ T5816] mkiss: ax0: crc mode is auto. [ 228.630871][ T5843] device macsec0 entered promiscuous mode [ 228.631450][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 228.815444][ T4331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 230.265131][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 231.168793][ T5843] device veth1_macvtap left promiscuous mode [ 231.819152][ T4331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.848451][ T4331] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 231.913692][ T4331] usb 5-1: can't read configurations, error -71 [ 232.048336][ T5857] loop4: detected capacity change from 0 to 2048 [ 232.106971][ T5860] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.532112][ T5866] fuse: Bad value for 'fd' [ 233.587749][ T5860] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 233.644451][ T5860] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 233.688878][ T5860] Remounting filesystem read-only [ 233.699440][ T4268] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 235.149628][ T5887] binder: 5883:5887 ioctl 4018620d 0 returned -22 [ 235.238426][ T5887] loop1: detected capacity change from 0 to 2048 [ 235.252202][ T5887] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 235.901539][ T5848] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.918356][ T5885] mkiss: ax0: crc mode is auto. [ 236.949389][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.974944][ T4393] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.044643][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.194866][ T4393] usb 2-1: Using ep0 maxpacket: 8 [ 237.201800][ T4393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.234723][ T4393] usb 2-1: config 4 interface 0 has no altsetting 0 [ 237.255826][ T5888] loop4: detected capacity change from 0 to 40427 [ 237.272180][ T4393] usb 2-1: string descriptor 0 read error: -22 [ 237.287789][ T4393] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 237.322923][ T4393] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 237.355456][ T5888] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.412217][ T4393] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 237.437751][ T4393] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.462771][ T5888] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 237.484077][ T4393] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 237.518850][ T4393] usb 2-1: media controller created [ 237.534054][ T5888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 237.577026][ T4393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.751827][ T4393] zl10353_read_register: readreg error (reg=127, ret==0) [ 237.815097][ T4393] usb 2-1: USB disconnect, device number 10 [ 237.981514][ T4268] syz-executor: attempt to access beyond end of device [ 237.981514][ T4268] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.554698][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 239.622816][ T5930] loop0: detected capacity change from 0 to 512 [ 239.743448][ T5930] EXT4-fs (loop0): can't read group descriptor 0 [ 240.315866][ T5940] netlink: set zone limit has 8 unknown bytes [ 243.049693][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 243.185380][ T5970] device bridge_slave_1 left promiscuous mode [ 243.199806][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.369456][ T5970] device bridge_slave_0 left promiscuous mode [ 243.462089][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.580097][ T5983] binder: 5975:5983 ioctl 4018620d 0 returned -22 [ 244.675405][ T5983] loop1: detected capacity change from 0 to 2048 [ 244.687056][ T5983] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 245.165317][ T5983] mkiss: ax0: crc mode is auto. [ 245.218493][ T4331] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.495005][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 245.504338][ T4331] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 245.534085][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.563511][ T4331] usb 5-1: Product: syz [ 245.573278][ T4331] usb 5-1: Manufacturer: syz [ 245.586513][ T4331] usb 5-1: SerialNumber: syz [ 245.635106][ T4331] usb 5-1: config 0 descriptor?? [ 245.647972][ T4331] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 246.614567][ T5982] futex_wake_op: syz.3.450 tries to shift op by 32; fix this program [ 246.841313][ T4331] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 246.859200][ T4331] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 246.899705][ T4331] usb 5-1: USB disconnect, device number 7 [ 248.271145][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.323376][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 248.386092][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.424965][ T6016] device bridge_slave_1 left promiscuous mode [ 248.431301][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.497552][ T6016] device bridge_slave_0 left promiscuous mode [ 248.511618][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.901718][ T6020] loop4: detected capacity change from 0 to 40427 [ 249.091420][ T6020] F2FS-fs (loop4): Found nat_bits in checkpoint [ 249.446157][ T6020] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 249.882765][ T6020] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.465524][ T4268] syz-executor: attempt to access beyond end of device [ 250.465524][ T4268] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.775910][ T6069] binder: 6061:6069 ioctl 4018620d 0 returned -22 [ 252.866399][ T6069] loop1: detected capacity change from 0 to 2048 [ 252.878704][ T6069] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 253.084315][ T6069] mkiss: ax0: crc mode is auto. [ 255.467123][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.473573][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.622349][ T6101] loop1: detected capacity change from 0 to 8 [ 255.667677][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.484'. [ 256.664732][ T6112] loop4: detected capacity change from 0 to 512 [ 257.367620][ T6112] EXT4-fs (loop4): can't read group descriptor 0 [ 260.121969][ T6122] loop4: detected capacity change from 0 to 4096 [ 260.168726][ T6139] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.168779][ T6139] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.178388][ T6122] ntfs3: Unknown parameter 'windows_names' [ 261.044520][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 263.289757][ T6162] loop4: detected capacity change from 0 to 512 [ 263.310472][ T6162] EXT4-fs (loop4): can't read group descriptor 0 [ 264.605033][ T4521] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 264.818291][ T4521] usb 5-1: Using ep0 maxpacket: 8 [ 265.291264][ T4521] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 265.325805][ T4521] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 265.358303][ T4521] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 265.456914][ T4521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.701834][ T4521] usb 5-1: Product: syz [ 265.730903][ T4521] usb 5-1: Manufacturer: syz [ 265.774130][ T4521] usb 5-1: SerialNumber: syz [ 266.038609][ T4521] usb 5-1: USB disconnect, device number 8 [ 266.445519][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 268.888824][ T6228] loop1: detected capacity change from 0 to 512 [ 269.224406][ T6228] EXT4-fs (loop1): can't read group descriptor 0 [ 269.657731][ T6232] loop0: detected capacity change from 0 to 256 [ 270.874921][ T4371] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 271.101131][ T4371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.183116][ T4371] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 271.348718][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.500651][ T4371] usb 2-1: config 0 descriptor?? [ 271.540654][ T4371] pwc: Askey VC010 type 2 USB webcam detected. [ 271.649337][ T6247] futex_wake_op: syz.4.521 tries to shift op by 32; fix this program [ 271.941060][ T4371] pwc: recv_control_msg error -32 req 02 val 2b00 [ 271.958676][ T4371] pwc: recv_control_msg error -32 req 02 val 2700 [ 271.975571][ T4371] pwc: recv_control_msg error -32 req 02 val 2c00 [ 272.002903][ T4371] pwc: recv_control_msg error -32 req 04 val 1000 [ 272.029751][ T4371] pwc: recv_control_msg error -32 req 04 val 1300 [ 272.045593][ T4371] pwc: recv_control_msg error -32 req 04 val 1400 [ 272.063165][ T4371] pwc: recv_control_msg error -32 req 02 val 2000 [ 272.200560][ T4371] pwc: recv_control_msg error -32 req 02 val 2100 [ 272.280246][ T6254] binder: 6251:6254 ioctl 4018620d 0 returned -22 [ 272.367841][ T6254] loop0: detected capacity change from 0 to 2048 [ 272.378854][ T6254] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 272.425084][ T4371] pwc: recv_control_msg error -71 req 02 val 2500 [ 272.432527][ T4371] pwc: recv_control_msg error -71 req 02 val 2400 [ 272.957434][ T6253] mkiss: ax0: crc mode is auto. [ 272.987789][ T4371] pwc: recv_control_msg error -71 req 02 val 2600 [ 272.996344][ T4371] pwc: recv_control_msg error -71 req 02 val 2900 [ 273.010350][ T4371] pwc: recv_control_msg error -71 req 02 val 2800 [ 273.026967][ T4371] pwc: recv_control_msg error -71 req 04 val 1100 [ 273.041948][ T4371] pwc: recv_control_msg error -71 req 04 val 1200 [ 273.056532][ T4371] pwc: Registered as video103. [ 273.084823][ T4371] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 273.103214][ T4371] usb 2-1: USB disconnect, device number 11 [ 273.701180][ T6270] loop1: detected capacity change from 0 to 512 [ 275.932812][ T6282] loop1: detected capacity change from 0 to 512 [ 276.185797][ T6282] EXT4-fs (loop1): can't read group descriptor 0 [ 277.355084][ T6302] loop0: detected capacity change from 0 to 256 [ 278.214948][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 278.407020][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.429628][ T14] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.444139][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.474341][ T14] usb 5-1: config 0 descriptor?? [ 278.518591][ T14] pwc: Askey VC010 type 2 USB webcam detected. [ 278.599617][ T6309] loop0: detected capacity change from 0 to 512 [ 278.684254][ T6309] EXT4-fs (loop0): can't read group descriptor 0 [ 278.917776][ T14] pwc: recv_control_msg error -32 req 02 val 2b00 [ 278.939790][ T14] pwc: recv_control_msg error -32 req 02 val 2700 [ 278.962787][ T14] pwc: recv_control_msg error -32 req 02 val 2c00 [ 278.980784][ T14] pwc: recv_control_msg error -32 req 04 val 1000 [ 279.003748][ T14] pwc: recv_control_msg error -32 req 04 val 1300 [ 279.028002][ T14] pwc: recv_control_msg error -32 req 04 val 1400 [ 279.044156][ T14] pwc: recv_control_msg error -32 req 02 val 2000 [ 279.068130][ T14] pwc: recv_control_msg error -32 req 02 val 2100 [ 279.284488][ T14] pwc: recv_control_msg error -71 req 02 val 2500 [ 279.307619][ T14] pwc: recv_control_msg error -71 req 02 val 2400 [ 279.317319][ T14] pwc: recv_control_msg error -71 req 02 val 2600 [ 279.347686][ T14] pwc: recv_control_msg error -71 req 02 val 2900 [ 279.355303][ T14] pwc: recv_control_msg error -71 req 02 val 2800 [ 279.382942][ T14] pwc: recv_control_msg error -71 req 04 val 1100 [ 279.393052][ T14] pwc: recv_control_msg error -71 req 04 val 1200 [ 279.419747][ T14] pwc: Registered as video103. [ 279.443931][ T14] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 279.488567][ T14] usb 5-1: USB disconnect, device number 9 [ 281.921389][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 284.880069][ T6361] netlink: set zone limit has 8 unknown bytes [ 287.593945][ T6397] overlayfs: missing 'workdir' [ 288.113086][ T6390] loop4: detected capacity change from 0 to 40427 [ 288.247794][ T6405] loop0: detected capacity change from 0 to 8 [ 288.282879][ T6390] F2FS-fs (loop4): Found nat_bits in checkpoint [ 288.326746][ T6405] SQUASHFS error: zstd decompression error: 10 [ 288.377309][ T6405] SQUASHFS error: zstd decompression failed, data probably corrupt [ 288.430155][ T6390] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 288.433019][ T6405] SQUASHFS error: Failed to read block 0x60: -5 [ 288.644921][ T6390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 288.646750][ T6405] SQUASHFS error: zstd decompression error: 10 [ 288.681306][ T6405] SQUASHFS error: zstd decompression failed, data probably corrupt [ 289.011785][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 289.872652][ T6405] SQUASHFS error: Failed to read block 0x60: -5 [ 290.046417][ T4268] syz-executor: attempt to access beyond end of device [ 290.046417][ T4268] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 291.514697][ T6429] loop4: detected capacity change from 0 to 2048 [ 291.579377][ T6430] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.704827][ T4522] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 291.917225][ T4522] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.933007][ T6430] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 291.964268][ T6430] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 291.974656][ T4522] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.994849][ T4522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.005622][ T6430] Remounting filesystem read-only [ 292.019909][ T4522] usb 2-1: config 0 descriptor?? [ 292.029882][ T4268] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 292.046773][ T4522] pwc: Askey VC010 type 2 USB webcam detected. [ 292.373061][ T6445] netlink: set zone limit has 8 unknown bytes [ 293.546606][ T4522] pwc: recv_control_msg error -32 req 02 val 2b00 [ 294.072464][ T4522] pwc: recv_control_msg error -32 req 02 val 2700 [ 294.084869][ T4522] pwc: recv_control_msg error -32 req 02 val 2c00 [ 294.096690][ T4522] pwc: recv_control_msg error -32 req 04 val 1000 [ 294.107101][ T4522] pwc: recv_control_msg error -32 req 04 val 1300 [ 294.125559][ T4522] pwc: recv_control_msg error -32 req 04 val 1400 [ 294.145059][ T4522] pwc: recv_control_msg error -32 req 02 val 2000 [ 294.152075][ T4522] pwc: recv_control_msg error -32 req 02 val 2100 [ 294.581556][ T4522] pwc: recv_control_msg error -71 req 02 val 2500 [ 294.680559][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 295.811586][ T4522] pwc: recv_control_msg error -71 req 02 val 2400 [ 295.885039][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 296.236340][ T4522] pwc: recv_control_msg error -71 req 02 val 2600 [ 296.278712][ T4522] pwc: recv_control_msg error -71 req 02 val 2900 [ 296.343481][ T4522] pwc: recv_control_msg error -71 req 02 val 2800 [ 296.390730][ T4522] pwc: recv_control_msg error -71 req 04 val 1100 [ 296.465554][ T4522] pwc: recv_control_msg error -71 req 04 val 1200 [ 296.515883][ T4522] pwc: Registered as video103. [ 296.573272][ T4522] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 296.690526][ T4522] usb 2-1: USB disconnect, device number 12 [ 297.159064][ T4522] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 297.354809][ T4522] usb 2-1: Using ep0 maxpacket: 8 [ 297.362031][ T4522] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 297.382695][ T6481] loop4: detected capacity change from 0 to 512 [ 297.402346][ T6481] EXT4-fs (loop4): can't read group descriptor 0 [ 297.482326][ T4522] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 297.555035][ T4522] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 297.608278][ T4522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.665422][ T4522] usb 2-1: Product: syz [ 297.704677][ T4522] usb 2-1: Manufacturer: syz [ 297.730116][ T4522] usb 2-1: SerialNumber: syz [ 298.247833][ T4522] usb 2-1: USB disconnect, device number 13 [ 298.375907][ T6489] loop0: detected capacity change from 0 to 2048 [ 298.518153][ T6498] netlink: set zone limit has 8 unknown bytes [ 299.295631][ T6500] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.706136][ T6500] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 300.761561][ T6500] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 300.817620][ T6500] Remounting filesystem read-only [ 300.839551][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 301.045105][ T4371] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 301.411678][ T4371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.461614][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 301.568698][ T4371] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.727924][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.995952][ T4371] usb 2-1: config 0 descriptor?? [ 302.032890][ T4371] pwc: Askey VC010 type 2 USB webcam detected. [ 302.410852][ T4371] pwc: recv_control_msg error -32 req 02 val 2b00 [ 302.425790][ T4371] pwc: recv_control_msg error -32 req 02 val 2700 [ 302.461483][ T4371] pwc: recv_control_msg error -32 req 02 val 2c00 [ 302.495602][ T4371] pwc: recv_control_msg error -32 req 04 val 1000 [ 302.533512][ T4371] pwc: recv_control_msg error -32 req 04 val 1300 [ 302.563958][ T4371] pwc: recv_control_msg error -32 req 04 val 1400 [ 302.609270][ T4371] pwc: recv_control_msg error -32 req 02 val 2000 [ 302.645601][ T4371] pwc: recv_control_msg error -32 req 02 val 2100 [ 302.760785][ T6538] loop4: detected capacity change from 0 to 512 [ 302.780360][ T6538] EXT4-fs (loop4): can't read group descriptor 0 [ 302.874475][ T4371] pwc: recv_control_msg error -71 req 02 val 2500 [ 302.905098][ T4371] pwc: recv_control_msg error -71 req 02 val 2400 [ 302.975384][ T4371] pwc: recv_control_msg error -71 req 02 val 2600 [ 303.013245][ T4371] pwc: recv_control_msg error -71 req 02 val 2900 [ 303.057508][ T4371] pwc: recv_control_msg error -71 req 02 val 2800 [ 303.115123][ T4371] pwc: recv_control_msg error -71 req 04 val 1100 [ 303.169585][ T4371] pwc: recv_control_msg error -71 req 04 val 1200 [ 303.217971][ T4371] pwc: Registered as video103. [ 303.268336][ T4371] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 303.643346][ T4371] usb 2-1: USB disconnect, device number 14 [ 306.146908][ T6574] loop1: detected capacity change from 0 to 256 [ 307.381830][ T6590] binder: 6582:6590 ioctl 4018620d 0 returned -22 [ 307.475109][ T6590] loop0: detected capacity change from 0 to 2048 [ 307.486295][ T6590] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 307.580758][ T6590] mkiss: ax0: crc mode is auto. [ 308.698862][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 309.402642][ T6602] loop4: detected capacity change from 0 to 8 [ 312.459339][ T952] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 312.644927][ T952] usb 2-1: Using ep0 maxpacket: 8 [ 312.654539][ T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.708425][ T952] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.911369][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.132930][ T952] usb 2-1: config 0 descriptor?? [ 313.425198][ T952] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 313.664639][ T6646] loop4: detected capacity change from 0 to 8 [ 313.675719][ T6646] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 313.707516][ T6646] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 313.709336][ T6486] udevd[6486]: incorrect cramfs checksum on /dev/loop4 [ 313.996595][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.045352][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.116440][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.135314][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.282336][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.413613][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.020060][ T4393] usb 2-1: USB disconnect, device number 15 [ 315.573505][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 316.907643][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.915442][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.072158][ T6687] binder: 6680:6687 ioctl 4018620d 0 returned -22 [ 318.097881][ T6687] loop4: detected capacity change from 0 to 2048 [ 318.105607][ T6687] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 318.329774][ T6685] mkiss: ax0: crc mode is auto. [ 318.403626][ T6669] loop1: detected capacity change from 0 to 40427 [ 318.521572][ T6669] F2FS-fs (loop1): Found nat_bits in checkpoint [ 318.632571][ T6669] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 318.674910][ T6669] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 319.041979][ T4273] syz-executor: attempt to access beyond end of device [ 319.041979][ T4273] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.140566][ T6710] loop0: detected capacity change from 0 to 512 [ 320.535012][ T4393] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 320.764919][ T4393] usb 2-1: Using ep0 maxpacket: 8 [ 320.772277][ T4393] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 320.809049][ T4393] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 320.870165][ T4393] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 320.898609][ T4393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.917382][ T4393] usb 2-1: Product: syz [ 320.931771][ T4393] usb 2-1: Manufacturer: syz [ 320.948248][ T4393] usb 2-1: SerialNumber: syz [ 321.185725][ T4393] usb 2-1: USB disconnect, device number 16 [ 322.491782][ T6736] loop1: detected capacity change from 0 to 256 [ 322.948788][ T6741] loop0: detected capacity change from 0 to 2048 [ 323.054671][ T6743] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.922370][ T6756] loop4: detected capacity change from 0 to 512 [ 324.006161][ T4371] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 324.392993][ T4371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.410628][ T4371] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 324.420210][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.460648][ T4371] usb 2-1: config 0 descriptor?? [ 324.481344][ T4371] pwc: Askey VC010 type 2 USB webcam detected. [ 324.882093][ T4371] pwc: recv_control_msg error -32 req 02 val 2b00 [ 324.897897][ T4371] pwc: recv_control_msg error -32 req 02 val 2700 [ 324.916982][ T4371] pwc: recv_control_msg error -32 req 02 val 2c00 [ 324.936243][ T4371] pwc: recv_control_msg error -32 req 04 val 1000 [ 324.956040][ T4371] pwc: recv_control_msg error -32 req 04 val 1300 [ 324.973734][ T4371] pwc: recv_control_msg error -32 req 04 val 1400 [ 324.994096][ T4371] pwc: recv_control_msg error -32 req 02 val 2000 [ 325.009389][ T4371] pwc: recv_control_msg error -32 req 02 val 2100 [ 325.059008][ T6743] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 325.086161][ T6743] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 325.105524][ T6743] Remounting filesystem read-only [ 325.116138][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 325.259267][ T4371] pwc: recv_control_msg error -71 req 02 val 2500 [ 325.278180][ T4371] pwc: recv_control_msg error -71 req 02 val 2400 [ 325.290930][ T4371] pwc: recv_control_msg error -71 req 02 val 2600 [ 325.307313][ T4371] pwc: recv_control_msg error -71 req 02 val 2900 [ 325.324454][ T4371] pwc: recv_control_msg error -71 req 02 val 2800 [ 325.348362][ T4371] pwc: recv_control_msg error -71 req 04 val 1100 [ 325.359337][ T4371] pwc: recv_control_msg error -71 req 04 val 1200 [ 325.371406][ T4371] pwc: Registered as video103. [ 325.401239][ T4371] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 325.424933][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 325.446529][ T4371] usb 2-1: USB disconnect, device number 17 [ 325.604873][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 325.612281][ T14] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 325.627721][ T14] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 325.641128][ T14] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 325.654078][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.663879][ T14] usb 5-1: Product: syz [ 325.671811][ T14] usb 5-1: Manufacturer: syz [ 325.680596][ T14] usb 5-1: SerialNumber: syz [ 326.161118][ T6785] binder: 6778:6785 ioctl 4018620d 0 returned -22 [ 326.260357][ T6785] loop1: detected capacity change from 0 to 2048 [ 326.271904][ T6785] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 326.857186][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 327.803722][ T14] usb 5-1: USB disconnect, device number 10 [ 328.275013][ T6486] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.886314][ T6784] mkiss: ax0: crc mode is auto. [ 329.298127][ T6801] loop0: detected capacity change from 0 to 2048 [ 329.473906][ T6810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.755116][ T6809] loop1: detected capacity change from 0 to 4096 [ 329.762589][ T6809] ntfs3: Unknown parameter 'windows_names' [ 329.935342][ T6486] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.465292][ T4522] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 330.689608][ T4522] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.707420][ T4522] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 330.733634][ T4522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.755693][ T4522] usb 2-1: config 0 descriptor?? [ 330.772820][ T4522] pwc: Askey VC010 type 2 USB webcam detected. [ 331.994226][ T4522] pwc: recv_control_msg error -32 req 02 val 2b00 [ 332.044775][ T4522] pwc: recv_control_msg error -32 req 02 val 2700 [ 332.059977][ T4522] pwc: recv_control_msg error -32 req 02 val 2c00 [ 332.113314][ T4522] pwc: recv_control_msg error -32 req 04 val 1000 [ 332.381331][ T6842] binder: 6831:6842 ioctl 4018620d 0 returned -22 [ 332.407709][ T6842] loop4: detected capacity change from 0 to 2048 [ 332.415404][ T6842] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 332.678426][ T4522] pwc: recv_control_msg error -32 req 04 val 1300 [ 332.743368][ T6836] mkiss: ax0: crc mode is auto. [ 332.757189][ T4522] pwc: recv_control_msg error -32 req 04 val 1400 [ 332.764661][ T4522] pwc: recv_control_msg error -32 req 02 val 2000 [ 332.772961][ T5848] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.822043][ T4522] pwc: recv_control_msg error -32 req 02 val 2100 [ 334.430293][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 334.441599][ T4522] pwc: recv_control_msg error -71 req 02 val 2500 [ 334.450001][ T4522] pwc: recv_control_msg error -71 req 02 val 2400 [ 334.455587][ T6810] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 334.457922][ T4522] pwc: recv_control_msg error -71 req 02 val 2600 [ 334.602914][ T4522] pwc: recv_control_msg error -71 req 02 val 2900 [ 334.610533][ T4522] pwc: recv_control_msg error -71 req 02 val 2800 [ 334.618084][ T6810] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 334.627573][ T4522] pwc: recv_control_msg error -71 req 04 val 1100 [ 334.635227][ T6810] Remounting filesystem read-only [ 334.640415][ T4522] pwc: recv_control_msg error -71 req 04 val 1200 [ 334.649602][ T4522] pwc: Registered as video103. [ 334.713596][ T6854] loop1: detected capacity change from 0 to 4096 [ 334.721144][ T6854] ntfs3: Unknown parameter 'windows_names' [ 334.749397][ T4522] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 334.776595][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 334.835161][ T4522] usb 2-1: USB disconnect, device number 18 [ 334.863973][ T5848] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.888156][ T6859] loop4: detected capacity change from 0 to 512 [ 335.303414][ T6865] binder: 6861:6865 ioctl 4018620d 0 returned -22 [ 335.391548][ T6865] loop0: detected capacity change from 0 to 2048 [ 335.402652][ T6865] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 335.502795][ T6865] mkiss: ax0: crc mode is auto. [ 338.082612][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 339.889241][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 342.679279][ T6921] loop4: detected capacity change from 0 to 512 [ 343.042128][ T14] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 343.894872][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 344.036716][ T14] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 344.051335][ T14] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 344.081537][ T14] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 344.299487][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.310752][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 344.421601][ T6951] binder: 6942:6951 ioctl 4018620d 0 returned -22 [ 344.517399][ T6951] loop0: detected capacity change from 0 to 2048 [ 344.531008][ T6951] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 345.794787][ T14] usb 2-1: Product: syz [ 345.799021][ T14] usb 2-1: Manufacturer: syz [ 345.814009][ T14] usb 2-1: SerialNumber: syz [ 346.147123][ T6924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.242085][ T14] usb 2-1: can't set config #5, error -71 [ 346.263416][ T14] usb 2-1: USB disconnect, device number 19 [ 346.724898][ T6949] mkiss: ax0: crc mode is auto. [ 348.294757][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 351.002761][ T6990] loop4: detected capacity change from 0 to 512 [ 351.023982][ T6990] EXT4-fs (loop4): can't read group descriptor 0 [ 351.180406][ T6995] loop0: detected capacity change from 0 to 4096 [ 351.187965][ T6995] ntfs3: Unknown parameter 'windows_names' [ 351.304805][ T14] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 351.433480][ T6926] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.637245][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 352.705240][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.899314][ T14] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 352.970069][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.051162][ T14] usb 2-1: config 0 descriptor?? [ 353.123113][ T14] pwc: Askey VC010 type 2 USB webcam detected. [ 353.529227][ T14] pwc: recv_control_msg error -32 req 02 val 2b00 [ 353.539457][ T14] pwc: recv_control_msg error -32 req 02 val 2700 [ 353.633779][ T7014] binder: 7011:7014 ioctl 4018620d 0 returned -22 [ 353.723748][ T7014] loop0: detected capacity change from 0 to 2048 [ 353.734773][ T7014] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 354.256304][ T14] pwc: recv_control_msg error -32 req 02 val 2c00 [ 354.275052][ T14] pwc: recv_control_msg error -32 req 04 val 1000 [ 354.336468][ T14] pwc: recv_control_msg error -32 req 04 val 1300 [ 354.356690][ T14] pwc: recv_control_msg error -32 req 04 val 1400 [ 354.364079][ T14] pwc: recv_control_msg error -32 req 02 val 2000 [ 354.379468][ T14] pwc: recv_control_msg error -32 req 02 val 2100 [ 354.918695][ T7013] mkiss: ax0: crc mode is auto. [ 354.934458][ T6924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.947423][ T14] pwc: recv_control_msg error -71 req 02 val 2500 [ 354.958389][ T14] pwc: recv_control_msg error -71 req 02 val 2400 [ 354.976085][ T14] pwc: recv_control_msg error -71 req 02 val 2600 [ 355.000415][ T14] pwc: recv_control_msg error -71 req 02 val 2900 [ 355.054989][ T14] pwc: recv_control_msg error -71 req 02 val 2800 [ 355.075930][ T14] pwc: recv_control_msg error -71 req 04 val 1100 [ 355.090130][ T14] pwc: recv_control_msg error -71 req 04 val 1200 [ 355.115120][ T14] pwc: Registered as video103. [ 355.125982][ T14] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 355.327763][ T14] usb 2-1: USB disconnect, device number 20 [ 357.117286][ T7039] loop0: detected capacity change from 0 to 512 [ 357.125644][ T7039] EXT4-fs (loop0): can't read group descriptor 0 [ 357.669525][ T7053] loop1: detected capacity change from 0 to 4096 [ 357.865546][ T7055] loop4: detected capacity change from 0 to 2048 [ 357.876996][ T7055] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 357.894456][ T7053] ntfs3: Unknown parameter 'windows_names' [ 358.895120][ T7070] binder: 7062:7070 ioctl 4018620d 0 returned -22 [ 358.920292][ T7070] loop1: detected capacity change from 0 to 2048 [ 358.927895][ T7070] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 359.715349][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 360.218057][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 360.418399][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 360.427096][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.478966][ T127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 360.518690][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.563517][ T127] usb 5-1: config 0 descriptor?? [ 360.767067][ T7051] loop0: detected capacity change from 0 to 8 [ 360.793760][ T127] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 360.859090][ T7051] SQUASHFS error: zstd decompression error: 10 [ 360.871891][ T6924] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.953760][ T7051] SQUASHFS error: zstd decompression failed, data probably corrupt [ 361.354682][ T7067] mkiss: ax0: crc mode is auto. [ 361.380459][ T7051] SQUASHFS error: Failed to read block 0x60: -5 [ 361.458344][ T7051] SQUASHFS error: zstd decompression error: 10 [ 361.603961][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.620126][ T7051] SQUASHFS error: zstd decompression failed, data probably corrupt [ 361.628715][ T7051] SQUASHFS error: Failed to read block 0x60: -5 [ 361.645206][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.663193][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.673920][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.706207][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.741472][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.963576][ T4338] usb 5-1: USB disconnect, device number 11 [ 362.213827][ T7087] loop1: detected capacity change from 0 to 512 [ 362.618752][ T7087] EXT4-fs (loop1): can't read group descriptor 0 [ 363.831593][ T7099] loop0: detected capacity change from 0 to 512 [ 363.843856][ T7099] EXT4-fs (loop0): can't read group descriptor 0 [ 364.100625][ T7019] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 365.077175][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 365.620311][ T7121] binder: 7116:7121 ioctl 4018620d 0 returned -22 [ 365.707261][ T7121] loop1: detected capacity change from 0 to 2048 [ 365.718287][ T7121] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 365.862013][ T7121] mkiss: ax0: crc mode is auto. [ 367.930325][ T7139] loop0: detected capacity change from 0 to 512 [ 367.938894][ T7139] EXT4-fs (loop0): can't read group descriptor 0 [ 368.634554][ T7147] loop1: detected capacity change from 0 to 256 [ 368.950630][ T6924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 369.913692][ T7159] loop0: detected capacity change from 0 to 512 [ 369.971075][ T6924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 369.993689][ T6924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.017070][ T6924] Buffer I/O error on dev loop0, logical block 0, async page read [ 370.039113][ T7159] EXT4-fs (loop0): can't read group descriptor 0 [ 372.266552][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 373.329075][ T7206] loop1: detected capacity change from 0 to 256 [ 375.472086][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 376.636182][ T7237] loop0: detected capacity change from 0 to 512 [ 376.651264][ T7234] loop1: detected capacity change from 0 to 512 [ 376.659732][ T7234] EXT4-fs (loop1): can't read group descriptor 0 [ 376.679410][ T7237] EXT4-fs (loop0): can't read group descriptor 0 [ 377.038556][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 377.195131][ T4393] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 377.396262][ T4393] usb 2-1: Using ep0 maxpacket: 8 [ 377.408453][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.488057][ T4393] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 377.526670][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.785830][ T4393] usb 2-1: config 0 descriptor?? [ 378.099210][ T4393] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 378.498063][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.504483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.979211][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.008426][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.079821][ T7276] binder: 7267:7276 ioctl 4018620d 0 returned -22 [ 379.181491][ T7276] loop4: detected capacity change from 0 to 2048 [ 379.195121][ T7276] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 379.207622][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.352703][ T7276] mkiss: ax0: crc mode is auto. [ 379.581840][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.647053][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.663988][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.324492][ T4522] usb 2-1: USB disconnect, device number 21 [ 381.135564][ T7292] netlink: set zone limit has 8 unknown bytes [ 382.809527][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 384.141331][ T7325] loop1: detected capacity change from 0 to 2048 [ 384.148950][ T7325] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 384.473119][ T7322] loop4: detected capacity change from 0 to 512 [ 384.508998][ T7322] EXT4-fs (loop4): can't read group descriptor 0 [ 384.535568][ T6924] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 384.562853][ T7323] mkiss: ax0: crc mode is auto. [ 385.224450][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 386.461764][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 387.250523][ T7336] loop4: detected capacity change from 0 to 40427 [ 387.349971][ T7364] trusted_key: encrypted_key: insufficient parameters specified [ 387.380305][ T7336] F2FS-fs (loop4): Found nat_bits in checkpoint [ 387.682680][ T7336] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 387.793103][ T7371] loop0: detected capacity change from 0 to 256 [ 388.508682][ T7336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 389.209199][ T7383] loop1: detected capacity change from 0 to 512 [ 389.442623][ T7383] EXT4-fs (loop1): can't read group descriptor 0 [ 390.953226][ T7394] loop0: detected capacity change from 0 to 512 [ 390.973826][ T7394] EXT4-fs (loop0): can't read group descriptor 0 [ 391.655700][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 393.518096][ T7409] mmap: syz.2.830 (7409) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 393.893223][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 394.050882][ T7417] device hsr0 entered promiscuous mode [ 394.057321][ T7417] device macvlan2 entered promiscuous mode [ 395.990575][ T7442] binder: 7435:7442 ioctl 4018620d 0 returned -22 [ 396.016544][ T7442] loop1: detected capacity change from 0 to 2048 [ 396.024014][ T7442] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 396.129990][ T7442] mkiss: ax0: crc mode is auto. [ 396.260058][ T7443] loop0: detected capacity change from 0 to 512 [ 396.284742][ T7443] EXT4-fs (loop0): can't read group descriptor 0 [ 396.929858][ T7450] loop1: detected capacity change from 0 to 256 [ 397.899840][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 400.429510][ T7472] loop0: detected capacity change from 0 to 512 [ 400.629420][ T7472] EXT4-fs (loop0): can't read group descriptor 0 [ 400.695577][ T6924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 401.734731][ T7484] loop0: detected capacity change from 0 to 2048 [ 401.777249][ T7484] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 403.323354][ T7508] loop4: detected capacity change from 0 to 512 [ 404.805169][ T7508] EXT4-fs (loop4): can't read group descriptor 0 [ 404.911524][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 404.921666][ T7499] device bridge_slave_1 left promiscuous mode [ 405.104963][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.154544][ T7499] device bridge_slave_0 left promiscuous mode [ 405.174526][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.283233][ T7499] device bridge0 left promiscuous mode [ 407.361279][ T7525] loop4: detected capacity change from 0 to 512 [ 408.803938][ T7525] EXT4-fs (loop4): can't read group descriptor 0 [ 408.903647][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 409.036799][ T7527] tipc: Started in network mode [ 409.041736][ T7527] tipc: Node identity 8, cluster identity 4711 [ 409.190778][ T7529] loop4: detected capacity change from 0 to 2048 [ 409.205081][ T7527] tipc: Node number set to 8 [ 409.273518][ T7530] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.978135][ T7530] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 411.317889][ T7530] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 411.358642][ T7530] Remounting filesystem read-only [ 411.425806][ T7552] loop1: detected capacity change from 0 to 512 [ 411.438095][ T7552] EXT4-fs (loop1): can't read group descriptor 0 [ 412.884864][ T4268] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 412.944949][ T7019] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.825464][ T7566] loop4: detected capacity change from 0 to 512 [ 413.842334][ T7566] EXT4-fs (loop4): can't read group descriptor 0 [ 415.029376][ T6924] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 415.280695][ T26] audit: type=1326 audit(1759850211.095:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f383678eec9 code=0x0 [ 415.328790][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 415.521593][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 415.776175][ T7580] netlink: set zone limit has 8 unknown bytes [ 417.366456][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.876'. [ 417.464948][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.876'. [ 417.907531][ T7599] loop0: detected capacity change from 0 to 512 [ 417.946194][ T7599] EXT4-fs (loop0): can't read group descriptor 0 [ 418.782310][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 420.245293][ T7619] loop0: detected capacity change from 0 to 512 [ 421.661378][ T7619] EXT4-fs (loop0): can't read group descriptor 0 [ 422.226654][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 423.632860][ T7641] binder: 7639:7641 ioctl 4018620d 0 returned -22 [ 423.652657][ T7641] loop0: detected capacity change from 0 to 2048 [ 423.660063][ T7641] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 423.689114][ T7642] trusted_key: encrypted_key: insufficient parameters specified [ 423.711500][ T6924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.724171][ T7641] mkiss: ax0: crc mode is auto. [ 425.801561][ T7661] loop4: detected capacity change from 0 to 512 [ 425.831819][ T7661] EXT4-fs (loop4): can't read group descriptor 0 [ 427.608435][ T4371] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 427.809048][ T4371] usb 5-1: Using ep0 maxpacket: 8 [ 427.973870][ T4371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.004763][ T4371] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.013963][ T4371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.023902][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 428.073479][ T7656] loop1: detected capacity change from 0 to 8 [ 428.079556][ T4371] usb 5-1: config 0 descriptor?? [ 428.240601][ T7656] SQUASHFS error: zstd decompression error: 10 [ 428.299382][ T4371] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 428.344166][ T7656] SQUASHFS error: zstd decompression failed, data probably corrupt [ 428.352685][ T7656] SQUASHFS error: Failed to read block 0x60: -5 [ 428.426115][ T7656] SQUASHFS error: zstd decompression error: 10 [ 428.462854][ T7656] SQUASHFS error: zstd decompression failed, data probably corrupt [ 428.528050][ T7656] SQUASHFS error: Failed to read block 0x60: -5 [ 428.745045][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'. [ 428.786321][ T7685] bridge0: port 1(ip6gretap1) entered blocking state [ 428.797432][ T7685] bridge0: port 1(ip6gretap1) entered disabled state [ 428.806688][ T7685] device ip6gretap1 entered promiscuous mode [ 428.822054][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.835199][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.873389][ T952] usb 5-1: USB disconnect, device number 12 [ 428.905662][ T7685] bridge0: port 2(veth3) entered blocking state [ 428.919653][ T7685] bridge0: port 2(veth3) entered disabled state [ 428.936390][ T7685] device veth3 entered promiscuous mode [ 428.955587][ T7685] bridge0: port 2(veth3) entered blocking state [ 428.961985][ T7685] bridge0: port 2(veth3) entered forwarding state [ 429.076245][ T4368] bridge0: port 2(veth3) entered disabled state [ 430.698187][ T7709] device vlan2 entered promiscuous mode [ 430.768074][ T7707] input: syz0 as /devices/virtual/input/input16 [ 431.041334][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 434.907946][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.919'. [ 434.934982][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.919'. [ 435.074791][ T4444] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 435.357964][ T4444] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.444775][ T7756] loop0: detected capacity change from 0 to 512 [ 435.950369][ T4444] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.020913][ T4444] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 436.225916][ T7756] EXT4-fs (loop0): can't read group descriptor 0 [ 436.249623][ T4444] usb 5-1: Product: syz [ 436.278890][ T4444] usb 5-1: SerialNumber: syz [ 436.576208][ T7760] netlink: 14 bytes leftover after parsing attributes in process `syz.2.922'. [ 437.072331][ T7760] device hsr_slave_1 left promiscuous mode [ 437.100668][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 437.324809][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 437.602634][ T4444] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 437.619601][ T4444] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 437.694812][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 437.718432][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 437.748244][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.768513][ T27] usb 2-1: Product: syz [ 437.781340][ T27] usb 2-1: Manufacturer: syz [ 437.791478][ T27] usb 2-1: SerialNumber: syz [ 437.808710][ T27] usb 2-1: config 0 descriptor?? [ 437.816190][ T4444] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 437.838570][ T27] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 439.129932][ T27] radio-usb-si4713: probe of 2-1:0.0 failed with error -71 [ 439.137503][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 439.145489][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 439.145543][ T4444] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 439.238444][ T27] usb 2-1: USB disconnect, device number 22 [ 439.421416][ T4444] usb 5-1: USB disconnect, device number 13 [ 439.442803][ T4444] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 439.687910][ T7791] binder: 7786:7791 ioctl 4018620d 0 returned -22 [ 439.714541][ T7791] loop1: detected capacity change from 0 to 2048 [ 439.721787][ T7791] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 439.778345][ T7791] mkiss: ax0: crc mode is auto. [ 439.787681][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.795238][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.824979][ T7803] loop1: detected capacity change from 0 to 512 [ 442.190747][ T7803] EXT4-fs (loop1): can't read group descriptor 0 [ 446.836790][ T7820] loop1: detected capacity change from 0 to 40427 [ 446.980635][ T7820] F2FS-fs (loop1): Found nat_bits in checkpoint [ 447.128962][ T7820] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 457.641585][ T7925] binder: 7924:7925 ioctl 4018620d 0 returned -22 [ 457.661623][ T7925] loop4: detected capacity change from 0 to 2048 [ 457.668850][ T7925] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 457.729666][ T7915] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.746386][ T7925] mkiss: ax0: crc mode is auto. [ 457.964556][ T7929] tipc: New replicast peer: 255.255.255.255 [ 458.156299][ T7929] tipc: Enabled bearer , priority 10 [ 458.576295][ T7940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.969'. [ 458.945764][ T7944] loop1: detected capacity change from 0 to 512 [ 459.665246][ T7944] EXT4-fs (loop1): can't read group descriptor 0 [ 462.412745][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 462.453831][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 462.954851][ T26] audit: type=1326 audit(1759850258.755:3): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=7957 comm="syz.3.975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b0e18eec9 code=0x0 [ 463.991371][ T7965] loop1: detected capacity change from 0 to 40427 [ 464.180548][ T7965] F2FS-fs (loop1): Found nat_bits in checkpoint [ 464.187240][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 464.338975][ T7965] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 464.357234][ T7977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.978'. [ 464.435782][ T7965] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 465.149384][ T4273] syz-executor: attempt to access beyond end of device [ 465.149384][ T4273] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 465.379083][ T26] audit: type=1326 audit(1759850261.195:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 465.401144][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.487205][ T26] audit: type=1326 audit(1759850261.235:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f383678d710 code=0x7ffc0000 [ 465.522639][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 465.605248][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 465.618953][ T26] audit: type=1326 audit(1759850261.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 465.642315][ T26] audit: type=1326 audit(1759850261.235:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 465.727925][ T26] audit: type=1326 audit(1759850261.235:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 465.801209][ T26] audit: type=1326 audit(1759850261.235:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 465.829954][ T22] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 465.843154][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.866300][ T22] usb 5-1: config 0 has no interfaces? [ 465.904621][ T22] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 465.919271][ T26] audit: type=1326 audit(1759850261.235:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 465.952430][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.964499][ T22] usb 5-1: Product: syz [ 465.990655][ T22] usb 5-1: Manufacturer: syz [ 465.999909][ T26] audit: type=1326 audit(1759850261.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 466.022083][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.029048][ T22] usb 5-1: SerialNumber: syz [ 466.052257][ T22] usb 5-1: config 0 descriptor?? [ 466.114971][ T26] audit: type=1326 audit(1759850261.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383678eec9 code=0x7ffc0000 [ 466.137179][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.063956][ T8013] loop1: detected capacity change from 0 to 512 [ 469.082944][ T8013] EXT4-fs (loop1): can't read group descriptor 0 [ 469.535289][ T22] usb 5-1: USB disconnect, device number 14 [ 470.287167][ T8026] loop0: detected capacity change from 0 to 512 [ 470.302249][ T8026] EXT4-fs (loop0): can't read group descriptor 0 [ 472.392882][ T8037] trusted_key: encrypted_key: insufficient parameters specified [ 472.512774][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'. [ 472.713526][ T8032] loop0: detected capacity change from 0 to 40427 [ 472.866589][ T8032] F2FS-fs (loop0): Found nat_bits in checkpoint [ 473.006481][ T8032] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 473.257368][ T8032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 474.684536][ T4272] syz-executor: attempt to access beyond end of device [ 474.684536][ T4272] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 477.118131][ T8081] loop4: detected capacity change from 0 to 2048 [ 477.125683][ T8081] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 477.414711][ T8083] loop0: detected capacity change from 0 to 512 [ 477.555964][ T8083] EXT4-fs (loop0): can't read group descriptor 0 [ 477.597493][ T7930] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 477.609835][ T8080] mkiss: ax0: crc mode is auto. [ 478.335147][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1011'. [ 478.344300][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1011'. [ 479.969863][ T8115] loop1: detected capacity change from 0 to 4096 [ 479.970862][ T8115] ntfs3: Unknown parameter 'windows_names' [ 480.016102][ T7930] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.633222][ T8109] trusted_key: encrypted_key: insufficient parameters specified [ 480.718285][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 481.356446][ T8131] loop4: detected capacity change from 0 to 2048 [ 481.363932][ T8131] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 481.544953][ T7930] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 481.559978][ T8129] mkiss: ax0: crc mode is auto. [ 485.323938][ T8164] loop0: detected capacity change from 0 to 8 [ 485.498985][ T8164] SQUASHFS error: zstd decompression error: 10 [ 485.625782][ T8164] SQUASHFS error: zstd decompression failed, data probably corrupt [ 485.705817][ T8164] SQUASHFS error: Failed to read block 0x60: -5 [ 485.749561][ T8164] SQUASHFS error: zstd decompression error: 10 [ 485.785391][ T8164] SQUASHFS error: zstd decompression failed, data probably corrupt [ 485.819667][ T8164] SQUASHFS error: Failed to read block 0x60: -5 [ 485.874363][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1029'. [ 486.540988][ T8181] loop1: detected capacity change from 0 to 512 [ 486.849100][ T8181] EXT4-fs (loop1): can't read group descriptor 0 [ 487.447958][ T8167] trusted_key: encrypted_key: insufficient parameters specified [ 487.810542][ T8185] loop1: detected capacity change from 0 to 2048 [ 487.991909][ T8185] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 488.014836][ T8184] mkiss: ax0: crc mode is auto. [ 488.054964][ T4258] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 488.260740][ T4258] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 488.272391][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.294517][ T4258] usb 5-1: config 0 has no interfaces? [ 488.321909][ T4258] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 488.339071][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.364737][ T4258] usb 5-1: Product: syz [ 488.369092][ T4258] usb 5-1: Manufacturer: syz [ 488.373729][ T4258] usb 5-1: SerialNumber: syz [ 488.391419][ T4258] usb 5-1: config 0 descriptor?? [ 490.031836][ T8195] loop0: detected capacity change from 0 to 512 [ 490.067626][ T8195] EXT4-fs (loop0): can't read group descriptor 0 [ 491.404924][ T22] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 491.618837][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.647476][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.726776][ T22] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 491.781053][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 491.808797][ T22] usb 2-1: SerialNumber: syz [ 492.188647][ T22] usb 2-1: 0:2 : does not exist [ 492.300684][ T22] usb 2-1: USB disconnect, device number 23 [ 492.384453][ T7930] udevd[7930]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.585712][ T4258] usb 5-1: USB disconnect, device number 15 [ 493.114858][ T4444] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 493.318719][ T4444] usb 2-1: Using ep0 maxpacket: 8 [ 493.339774][ T4444] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 493.398289][ T4444] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 493.460600][ T4444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.508225][ T4444] usb 2-1: Product: syz [ 493.540743][ T4444] usb 2-1: Manufacturer: syz [ 493.588258][ T4444] usb 2-1: SerialNumber: syz [ 493.626002][ T4444] usb 2-1: config 0 descriptor?? [ 493.669432][ T4444] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 493.708281][ T4444] usb 2-1: setting power ON [ 493.739252][ T4444] dvb-usb: bulk message failed: -22 (2/0) [ 493.841963][ T4444] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 493.889021][ T4444] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 493.899960][ T8230] tipc: Started in network mode [ 493.976877][ T8230] tipc: Node identity 8, cluster identity 4711 [ 493.983118][ T8230] tipc: Node number set to 8 [ 494.057951][ T8232] loop0: detected capacity change from 0 to 2048 [ 494.065237][ T8232] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 494.086094][ T4444] usb 2-1: media controller created [ 494.119005][ T4444] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.153337][ T4444] usb 2-1: selecting invalid altsetting 6 [ 494.222000][ T4444] usb 2-1: digital interface selection failed (-22) [ 494.234882][ T4444] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 494.269408][ T4444] usb 2-1: setting power OFF [ 494.272791][ T7930] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.290776][ T8232] mkiss: ax0: crc mode is auto. [ 494.315173][ T4444] dvb-usb: bulk message failed: -22 (2/0) [ 494.332652][ T4444] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 494.377492][ T4444] (NULL device *): no alternate interface [ 494.418928][ T4444] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 494.504497][ T4444] usb 2-1: USB disconnect, device number 24 [ 495.079899][ T8244] loop1: detected capacity change from 0 to 512 [ 496.598080][ T8244] EXT4-fs (loop1): can't read group descriptor 0 [ 497.028370][ T8242] tipc: Enabling of bearer rejected, failed to enable media [ 497.859465][ T8243] loop0: detected capacity change from 0 to 40427 [ 497.899448][ T8263] trusted_key: encrypted_key: insufficient parameters specified [ 497.977968][ T8243] F2FS-fs (loop0): Found nat_bits in checkpoint [ 498.137195][ T8243] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 498.984766][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 499.234808][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 499.242466][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.275867][ T22] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 499.319365][ T22] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 499.352192][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.374500][ T22] usb 5-1: Product: syz [ 499.382667][ T22] usb 5-1: Manufacturer: syz [ 499.391545][ T22] usb 5-1: SerialNumber: syz [ 499.415483][ T22] usb 5-1: config 0 descriptor?? [ 499.679921][ T8284] netlink: set zone limit has 8 unknown bytes [ 499.900286][ T2170] usb 5-1: USB disconnect, device number 16 [ 500.915032][ T2170] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 501.114875][ T2170] usb 2-1: Using ep0 maxpacket: 8 [ 501.127903][ T2170] usb 2-1: unable to get BOS descriptor or descriptor too short [ 501.170304][ T2170] usb 2-1: config 4 interface 0 has no altsetting 0 [ 501.187446][ T2170] usb 2-1: string descriptor 0 read error: -22 [ 501.194723][ T2170] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 501.203995][ T2170] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 501.250428][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.374807][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.590757][ T2170] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 501.605559][ T2170] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 501.619168][ T2170] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 501.630286][ T2170] usb 2-1: media controller created [ 501.804455][ T2170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.854026][ T2170] zl10353_read_register: readreg error (reg=127, ret==0) [ 502.324415][ T2170] usb 2-1: USB disconnect, device number 25 [ 502.791879][ T8311] loop1: detected capacity change from 0 to 2048 [ 502.836107][ T8313] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.967402][ T8313] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 504.014922][ T8313] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 504.065078][ T8313] Remounting filesystem read-only [ 504.095208][ T4273] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 504.177460][ T8320] loop4: detected capacity change from 0 to 8 [ 504.317191][ T8320] SQUASHFS error: zstd decompression error: 10 [ 504.323427][ T8320] SQUASHFS error: zstd decompression failed, data probably corrupt [ 504.391538][ T8320] SQUASHFS error: Failed to read block 0x60: -5 [ 504.430436][ T8320] SQUASHFS error: zstd decompression error: 10 [ 504.454800][ T8320] SQUASHFS error: zstd decompression failed, data probably corrupt [ 504.490316][ T8320] SQUASHFS error: Failed to read block 0x60: -5 [ 504.813163][ T8332] netlink: set zone limit has 8 unknown bytes [ 506.097912][ T8340] loop4: detected capacity change from 0 to 2048 [ 506.105291][ T8340] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 506.145399][ T7930] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 506.162449][ T8340] mkiss: ax0: crc mode is auto. [ 506.894810][ T2170] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 507.094768][ T2170] usb 5-1: Using ep0 maxpacket: 32 [ 507.102188][ T2170] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 507.135630][ T2170] usb 5-1: config 0 has no interface number 0 [ 507.162759][ T2170] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 507.192021][ T2170] usb 5-1: config 0 interface 196 has no altsetting 0 [ 507.219426][ T2170] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 507.263041][ T2170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.293617][ T2170] usb 5-1: Product: syz [ 507.304762][ T2170] usb 5-1: Manufacturer: syz [ 507.324037][ T2170] usb 5-1: SerialNumber: syz [ 507.360567][ T2170] usb 5-1: config 0 descriptor?? [ 507.375518][ T8349] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 507.820926][ T2170] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 508.316636][ T8366] [ 508.319043][ T8366] ====================================================== [ 508.326180][ T8366] WARNING: possible circular locking dependency detected [ 508.333247][ T8366] syzkaller #0 Not tainted [ 508.337722][ T8366] ------------------------------------------------------ [ 508.344773][ T8366] syz.0.1075/8366 is trying to acquire lock: [ 508.350882][ T8366] ffff888030354c58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 508.360640][ T8366] [ 508.360640][ T8366] but task is already holding lock: [ 508.368041][ T8366] ffff888026a32220 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 508.379056][ T8366] [ 508.379056][ T8366] which lock already depends on the new lock. [ 508.379056][ T8366] [ 508.390019][ T8366] [ 508.390019][ T8366] the existing dependency chain (in reverse order) is: [ 508.399407][ T8366] [ 508.399407][ T8366] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 508.408212][ T8366] down_write+0x36/0x60 [ 508.412913][ T8366] process_measurement+0x33c/0x1a10 [ 508.418653][ T8366] ima_file_mmap+0x104/0x150 [ 508.423828][ T8366] __se_sys_remap_file_pages+0x53e/0x770 [ 508.430088][ T8366] do_syscall_64+0x4c/0xa0 [ 508.435041][ T8366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.441566][ T8366] [ 508.441566][ T8366] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 508.449137][ T8366] __lock_acquire+0x2cf8/0x7c50 [ 508.454532][ T8366] lock_acquire+0x1b4/0x490 [ 508.459584][ T8366] down_read_killable+0x4c/0x340 [ 508.465071][ T8366] mmap_read_lock_killable+0x1d/0x60 [ 508.470915][ T8366] lock_mm_and_find_vma+0x2b1/0x2f0 [ 508.476667][ T8366] do_user_addr_fault+0x2db/0xb10 [ 508.482510][ T8366] exc_page_fault+0x60/0x100 [ 508.488150][ T8366] asm_exc_page_fault+0x22/0x30 [ 508.493679][ T8366] fault_in_readable+0x13e/0x1f0 [ 508.499183][ T8366] fault_in_iov_iter_readable+0xbb/0x2e0 [ 508.505373][ T8366] generic_perform_write+0x1d2/0x560 [ 508.511982][ T8366] __generic_file_write_iter+0x172/0x430 [ 508.518166][ T8366] generic_file_write_iter+0xab/0x2e0 [ 508.524164][ T8366] vfs_write+0x44c/0x960 [ 508.528953][ T8366] ksys_write+0x143/0x240 [ 508.533829][ T8366] do_syscall_64+0x4c/0xa0 [ 508.538783][ T8366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.545404][ T8366] [ 508.545404][ T8366] other info that might help us debug this: [ 508.545404][ T8366] [ 508.555649][ T8366] Possible unsafe locking scenario: [ 508.555649][ T8366] [ 508.563117][ T8366] CPU0 CPU1 [ 508.568496][ T8366] ---- ---- [ 508.574047][ T8366] lock(&sb->s_type->i_mutex_key#12); [ 508.579540][ T8366] lock(&mm->mmap_lock); [ 508.586540][ T8366] lock(&sb->s_type->i_mutex_key#12); [ 508.594736][ T8366] lock(&mm->mmap_lock); [ 508.599083][ T8366] [ 508.599083][ T8366] *** DEADLOCK *** [ 508.599083][ T8366] [ 508.607264][ T8366] 3 locks held by syz.0.1075/8366: [ 508.612385][ T8366] #0: ffff888078c60368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 508.621648][ T8366] #1: ffff88807a156460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 508.630675][ T8366] #2: ffff888026a32220 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 508.642119][ T8366] [ 508.642119][ T8366] stack backtrace: [ 508.648028][ T8366] CPU: 0 PID: 8366 Comm: syz.0.1075 Not tainted syzkaller #0 [ 508.655412][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.665578][ T8366] Call Trace: [ 508.668868][ T8366] [ 508.671812][ T8366] dump_stack_lvl+0x168/0x22e [ 508.676515][ T8366] ? load_image+0x3b0/0x3b0 [ 508.681044][ T8366] ? show_regs_print_info+0x12/0x12 [ 508.686262][ T8366] ? print_circular_bug+0x12b/0x1a0 [ 508.691520][ T8366] check_noncircular+0x274/0x310 [ 508.696511][ T8366] ? add_chain_block+0x940/0x940 [ 508.701470][ T8366] ? lockdep_lock+0xdc/0x1e0 [ 508.706082][ T8366] ? _find_first_zero_bit+0xcf/0x100 [ 508.711391][ T8366] __lock_acquire+0x2cf8/0x7c50 [ 508.716363][ T8366] ? verify_lock_unused+0x140/0x140 [ 508.721588][ T8366] ? verify_lock_unused+0x140/0x140 [ 508.726801][ T8366] ? preempt_schedule+0xa7/0xb0 [ 508.731664][ T8366] ? verify_lock_unused+0x140/0x140 [ 508.736886][ T8366] ? preempt_schedule_common+0xa5/0xd0 [ 508.742370][ T8366] lock_acquire+0x1b4/0x490 [ 508.746914][ T8366] ? mmap_read_lock_killable+0x1d/0x60 [ 508.752404][ T8366] ? read_lock_is_recursive+0x10/0x10 [ 508.757813][ T8366] ? cmp_ex_search+0x1a/0x70 [ 508.762528][ T8366] ? bsearch+0x8a/0xb0 [ 508.766695][ T8366] ? fault_in_readable+0x13e/0x1f0 [ 508.771926][ T8366] ? search_extable+0x8c/0xd0 [ 508.776633][ T8366] ? trim_init_extable+0x3b0/0x3b0 [ 508.781765][ T8366] ? mmap_read_lock_killable+0x1d/0x60 [ 508.787391][ T8366] down_read_killable+0x4c/0x340 [ 508.792385][ T8366] ? mmap_read_lock_killable+0x1d/0x60 [ 508.797974][ T8366] mmap_read_lock_killable+0x1d/0x60 [ 508.803346][ T8366] lock_mm_and_find_vma+0x2b1/0x2f0 [ 508.808995][ T8366] do_user_addr_fault+0x2db/0xb10 [ 508.815195][ T8366] ? _raw_spin_unlock_irq+0x1f/0x40 [ 508.821817][ T8366] exc_page_fault+0x60/0x100 [ 508.828211][ T8366] asm_exc_page_fault+0x22/0x30 [ 508.833544][ T8366] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 508.840000][ T8366] Code: 38 e9 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 17 e9 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 fa e8 [ 508.861228][ T8366] RSP: 0018:ffffc90004927a90 EFLAGS: 00050287 [ 508.867867][ T8366] RAX: ffffffff81bbe5d9 RBX: 0000000000001000 RCX: 0000000000080000 [ 508.875863][ T8366] RDX: ffffc900106ef000 RSI: 000000000000b2c1 RDI: 000000000000b2c2 [ 508.883967][ T8366] RBP: 0000000000000000 R08: ffff88807d26bb80 R09: 0000000000000002 [ 508.891952][ T8366] R10: 0000000000000006 R11: 0000000000000002 R12: 000020000006d000 [ 508.899940][ T8366] R13: dffffc0000000000 R14: 000020000006c000 R15: 000020000006c000 [ 508.907934][ T8366] ? fault_in_readable+0x139/0x1f0 [ 508.913523][ T8366] fault_in_iov_iter_readable+0xbb/0x2e0 [ 508.919750][ T8366] generic_perform_write+0x1d2/0x560 [ 508.925068][ T8366] ? atime_needs_update+0x780/0x780 [ 508.930371][ T8366] ? generic_file_direct_write+0x660/0x660 [ 508.936210][ T8366] ? __file_remove_privs+0x5b0/0x5b0 [ 508.941527][ T8366] ? preempt_count_add+0x8d/0x190 [ 508.946583][ T8366] ? rwsem_write_trylock+0x12f/0x1b0 [ 508.951891][ T8366] ? clear_nonspinnable+0x60/0x60 [ 508.958273][ T8366] ? generic_write_checks_count+0x3d9/0x4c0 [ 508.964653][ T8366] __generic_file_write_iter+0x172/0x430 [ 508.970748][ T8366] generic_file_write_iter+0xab/0x2e0 [ 508.976354][ T8366] vfs_write+0x44c/0x960 [ 508.980628][ T8366] ? file_end_write+0x250/0x250 [ 508.985507][ T8366] ? __fget_files+0x44a/0x4d0 [ 508.990207][ T8366] ? __fdget_pos+0x2ae/0x360 [ 508.994819][ T8366] ? ksys_write+0x71/0x240 [ 508.999256][ T8366] ksys_write+0x143/0x240 [ 509.003609][ T8366] ? __ia32_sys_read+0x80/0x80 [ 509.008853][ T8366] ? lockdep_hardirqs_on+0x94/0x140 [ 509.014083][ T8366] do_syscall_64+0x4c/0xa0 [ 509.018604][ T8366] ? clear_bhb_loop+0x60/0xb0 [ 509.023313][ T8366] ? clear_bhb_loop+0x60/0xb0 [ 509.028004][ T8366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.033999][ T8366] RIP: 0033:0x7f383678eec9 [ 509.039054][ T8366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.058958][ T8366] RSP: 002b:00007f3837685038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.067422][ T8366] RAX: ffffffffffffffda RBX: 00007f38369e6180 RCX: 00007f383678eec9 [ 509.075497][ T8366] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000008 [ 509.083482][ T8366] RBP: 00007f3836811f91 R08: 0000000000000000 R09: 0000000000000000 [ 509.091463][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.099530][ T8366] R13: 00007f38369e6218 R14: 00007f38369e6180 R15: 00007ffe601b0578 [ 509.107523][ T8366] [ 509.127420][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.146718][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.185942][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.219332][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.522890][ T4371] usb 5-1: USB disconnect, device number 17 [ 510.596391][ T4371] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected