last executing test programs: 2m30.709947655s ago: executing program 3 (id=98): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz1\x00', {0x3, 0x5, 0x8, 0xffa1}, 0xb, [0x5135abb0, 0x4, 0x3ff, 0x8, 0xffff, 0x1, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x10001, 0xe, 0x3, 0x10000, 0x4, 0xfff, 0x6, 0x6, 0x6, 0x1, 0x6, 0x8, 0x200, 0x3, 0x73e, 0x8, 0x1000, 0x9b, 0x8000, 0xa, 0x8, 0x38c, 0x9, 0x9, 0x46, 0x583, 0xb, 0x5, 0x9, 0xffff, 0x3ff, 0x100, 0x10, 0xffff4095, 0xfffffff7, 0x49c0, 0x4, 0x7, 0x1, 0x27, 0xc, 0x5, 0x9, 0x0, 0xe08825a, 0x5, 0x4, 0x23, 0xfffffffb, 0xffff, 0x73], [0x10000, 0x9, 0xf2, 0x3, 0x5, 0x32d, 0x8001, 0x4, 0x101, 0xd, 0x86a, 0x1, 0x1, 0x6, 0x7, 0xffffff60, 0x10001, 0xfffffffb, 0x3c1, 0x1, 0x2, 0x8, 0x78, 0x2, 0x400, 0x9, 0x2, 0x3, 0x5, 0x3ff, 0x3, 0x8, 0xc, 0x8, 0x40, 0x2, 0x8, 0x10, 0x401, 0x2, 0x5, 0x10000, 0xd, 0x1, 0x2, 0x7, 0xcd82, 0x4, 0xfff, 0x800, 0x6, 0x6, 0x3, 0x2, 0x0, 0x2, 0x7fff, 0x8, 0x2, 0x4, 0x9, 0x9, 0x8, 0xf0], [0xfffffffa, 0x10001, 0x8, 0x9ba8, 0x9, 0x6, 0x3, 0x5, 0x2, 0x8001, 0x8, 0x400, 0x7, 0xc, 0x6, 0x10, 0x8, 0x9, 0x4, 0x7302, 0x7f, 0x7, 0x80, 0x40, 0x7fffffff, 0xfffffffa, 0x2, 0x4, 0xe4dc, 0x31, 0x1, 0x2, 0x23, 0x2, 0x2, 0xa7f, 0x5, 0x6, 0x821, 0x2, 0x8000, 0x27, 0x401, 0x800, 0x2, 0x100, 0x0, 0x101, 0x0, 0xf8f3, 0xf, 0x3, 0x5, 0x1, 0x0, 0x2, 0x80000001, 0x8, 0x2ff, 0x80000000, 0x300000, 0x7, 0x1, 0x6], [0x72e, 0x3, 0x896, 0x5, 0xbe08, 0x5, 0x0, 0x2, 0x1000, 0x3, 0x3, 0x10, 0x8, 0x21, 0xd0e, 0x7, 0xf, 0x6, 0xf, 0xfffffffc, 0x7f, 0xffffffff, 0x3, 0x5, 0xffff, 0x5, 0x8001, 0xfffffffb, 0x8, 0x0, 0x3, 0x2, 0x5, 0x3c, 0x10000, 0x8, 0x6, 0x9, 0x7, 0x8, 0x5, 0x9, 0x8, 0x8000, 0x0, 0xfffffffd, 0x5, 0x3, 0x2, 0x4, 0xff, 0x3, 0x2, 0x1, 0x3, 0x438, 0x8, 0x6e66463, 0x81, 0xb7, 0xfffffffe, 0x8, 0x1f0, 0x5]}, 0x45c) syz_open_pts(r0, 0x40000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a00)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@discard}, {@fmask={'fmask', 0x3d, 0x5}}, {@dmask={'dmask', 0x3d, 0x2}}, {@dmask={'dmask', 0x3d, 0x8}}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@utf8}]}, 0x1, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0xa169, 0x1) getdents(r1, 0x0, 0x0) 2m29.642204006s ago: executing program 3 (id=104): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r5) 2m27.568108916s ago: executing program 3 (id=113): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 2m26.616616191s ago: executing program 3 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) unshare(0x26020480) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00000000b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x13, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x14}, 0x10) 2m26.475102059s ago: executing program 3 (id=120): set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000814) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8010, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32=r2], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 2m25.369108563s ago: executing program 3 (id=126): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x8, 0x7f, 0x80000001, 0xfffffffffffffffc, 0x2, 0xfffffffffffff844, 0x0, 0x0, 0x0, 0x1fffffffffffe, 0x4, 0x2, 0x1, 0x4], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x23, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.492724871s ago: executing program 32 (id=126): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x8, 0x7f, 0x80000001, 0xfffffffffffffffc, 0x2, 0xfffffffffffff844, 0x0, 0x0, 0x0, 0x1fffffffffffe, 0x4, 0x2, 0x1, 0x4], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x23, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 11.859406336s ago: executing program 5 (id=851): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, r2) setns(r1, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, &(0x7f0000000700)='.\x00', 0x0, 0x8dd0a4, 0x0) 10.554059881s ago: executing program 5 (id=854): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000000)='./file\x00', 0x220c880, &(0x7f0000000f40)=ANY=[], 0x41, 0x5f16, &(0x7f0000001f80)="$eJzs3UuPHFfZB/CnL9NzyZt4FOmNIovFxAkX49geX2JzT7IBiRUS8oaVrckksnAA2QaRyMITzYJvgGABgj0rPgF7+0NkwRJLNmyyolDNnGNXFz1uj+3pas/5/aRx1VOnqvuU/13T3dNVfQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiB9+/8dnehFx+VdpwWrE/8Ugoh+xXNdrEbG8tprXH0bE67HTHK/Vqy9G1Nvv/HMk4nxE3H0l4v6DWxv14rNP2I9/v/T/R/751x+c/P3ffnfn+B9PvN1u/9PmP+785Ha6LwAAAGBfqqqqeult/tH0/r7fdacAgJnIz/9Vkper1Wq1Wq0+fHVTNdntZhERW81t6tcMtyfdGAAwv7bii667QIfkX7RhRLzUdSeAuea8+8Pp/oNbG72Ub6/5fLC2257PBRnLf6v38PqOvabTtM8xmdXjazsG8eoe/VmeUR/mSc6/387/8m77KK130PnPyl75j3YvfSpOzn/Qzr/l8OTfn5h/qXL+w33lP5A/AAAAAADMsfz3/9WZff7bG7vdbPH57M5Uj/v8d21GfQAAAAAAAACA5+1Zx/97yPh/AAAAMLfq9+q1P7/yaNle77Hr5Zd6ES+31gcKky6WWem6HwAAAAAAAAAAAABQkuHuObyXehELEfHyykpVVfVPU7ver2fd/kVX+v5Dybr+JQ8AALvuvtK6lr8XsRQRl9J3/S2srKxU1dLySrVSLS/m17OjxaVqufG+Nk/rZYujJ3hBPBxV9Y0tNbZrmvZ+eVp7+/bq+xpVgyfo2Gx0GDgARMTus9F9z0iHTFUdia5f5fBicPwfPo5/nkTXj1MAAADg4FVVVfXS13kfTZ/597vuFAAwE/n5v/25gFqtVqvV6sNXN1WT3W4WEbHV3KZ+zXB70o0BAPNrK77ougt0SP5FG0bE6113Aphrva47wIG4/+DWRi/l22s+H6Tx3fO5IGP5b/V2tsvbT5pO0z7HZFaPr+0YxKt79Oe1GfVhnuT8++38L++2j9J6B53/rOyVf72fqx30p2s5/0E7/5bDk39/Yv6lyvkP95X/QP4AAAAAADDH8t//V33+m3cZAAAAAAAAAF449x/c2sjXvebP/780YT3Xfx5OOf+e/IuU8++38v9aa71BY/7e+4/y/9eDWxs/+sPnR/P0SfNfzDO99MjqpUdEL91Tb5imT71ri5MWbi8MRvU9LfT6g2E656da+DCuxrXYjPWxdfvp/+NR+5mx9rqnC+mhvNt+dqx9uNve2P7cWPtC+t6Bajm3n4qN+Hlciw922uu2xSn7vzSlvZrSnvMfOP6LlPMfNn7q/FdSe681rd37rP8/x31zOul+3vvtnbvrB787U23H4OG+NdX7d6yD/uz8n7w0il/e2Lx+6tdXbt68fibSZGzp2UiT5yznv5B+Hv7+f3O3Pf/ebx6v9z4b7Tv/ebEdwz3zf7MxX+/v8Rn3rQs5/1H6yfl/kNonH/8vcv57H/8nOugPAAAAAAAAAAAAAAAAPE5VVTuXiL4XERfS9T9dXZsJAMxWfv6vkrxcrVbPsB7FmM77o1arD23dVE32brOIiL83t6lfM/xm0o0BAPPsPxHxededoDPyL1j+vr96+lbXnQFm6sYnn/70yrVrm9dvdN0TAAAAAAAAAOBp5fE/1xrjP78VEaut9cbGf30/1p51/M9hnnk4wOjTD/S9H9v90aDfGG78jXj8+N/H4vHjfw+n3N/ClPbRlPaJg5g3LE1pn3ihR0PO/43GeOd1/kdbw6+XMP5re8z7EuT8jzUez3X+X22t18y/+suLnH9/LP/TNz/+xekbn3x68urHVz7a/GjzZ+fX1y+cu/jO+sX10x9evbaZ/u2wxwcr55/HvnYeaFly/jlz+Zcl5//lVMu/LDn/r6Ra/mXJ+efXe/IvS84/v/eRf1ly/sdTLf+y5Py/nmr5lyXnfyLV8i9Lzv/tVMu/LDn/k6mWf1ly/qdSLf+y5PxPp1r+Zcn550+45F+WnH8+s0H+Zcn5n021/MuS8z+XavmXJed/PtXyL0vO/51Uy78sOf8LqZZ/WXL+F1Mt/7Lk/L+RavmXJef/zVTLvyw5/2+lWv5lyfl/O9XyL0vO/zupln9Zcv7fTfV+8j9+gP1iNnL+30u1478sOf93Uy3/sjz6/n8zZsyYyTNd/2YCAAAAAAAAAAAAANpmcTpx1/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9lBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu7cYOc/yDuDfnuy1E2ALIbghwMYxwSRLdn2OaQ3mVNKEtBQIbenBuPbaGHyq1+bUSDEKLZEatZHKBVyUU5HKTUUEqKIqRa7UCiSQyBWt1DakClQRhdbQXkAFbDUz7/PuzOzsaWZtz3zf7yfFjz3zzcw7M+/M7n83/10AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHbLa2Y/NFQURe2/+h8TRXF97e+bJidq/9z28mu9QgAAAKBXP63/eflZ+YSDq7hQ0zFfeeE3vjA/Pz9fPPGdlz7vw/Pz+YzJopjYWBT188LT9/3ttuZjkoeK8aHhpn8Pr3DzIyucP7rC+WMrnL9hhfM3rnD++ArnL3oAFtnU+HpM/cq21f860XhIixuKsfp52zpc6qGhjcPD8bWcuqH6ZebHjhUnipPFbDHTcnzj2KH68V+6pXZbdxdxW8NNt3VzbYf84IEjsYah9Bhva7mthesM339VMfnDHzxw5I0fffKmTnPFh6Hl+hrr3L61ts4PplMaax0qNubHJNY53LTOmzs8JyMt6xyqX6729/Z1Xl7lOkcWlnlVtT/n48Vw/e+P1x+n0eYv6+XH6eZ02o9uLYri4sKy249ZdFvFcLG55ZThhednvLEja9dR20rPLkbXtE9vWcU+rc2j21r3aftrIp7/W9LlRpdYQ/PT9P0PbFj0vK91n4bavV7qtdK+B9f7tdIvezD2xeP1O/1wxz24Ld3/B25beg923Dsd9mC+3017cOtKe3B4w0h9zflJGKpfZmEP7mg5fqR+S0P1+fRty+/B6fOnzk7Pve/9Lztx6vDx2eOzp3fPzOzdtW/PzL6Z6WMnTs6mP7t8tPvf5mI4vwa2pscuXgMvaTu2eavOf3L9Xofjy7wOJ9qOXe/X4Wj7nRu6Oi/IxXu68dp4S+1BH39kuFjiNVZ/fm7v/XWY73fT63C06XXY8WNKh9fh6Cpeh7Vjzt6+us9ZRpv+67SGK/WxYKJpD7Z/PtK+B9f785F+2YPjaV/86+1Lfyy4Oa334am1fj4ysmgP5rub3ntqp+TP98fvqo9O+/Km2hnXbSguzM2eu/O9h8+fP7ejSOOqeE7TXmnfr5ub7lOxaL8Or3m/HvzQ175+U4fTJ9JjNf6y2h/jSz5XtWN237n8c1X/6Nb58Ww5dWeRxjq72o9np4/mtcczZ8llHs/aMR+c7v1z8ZxLm95/x5Z4/43c/7P67WzLV/XQyNho4/U7kh+dsZb349anarT+3jVUv+3L06t7Px5L/13t9+Mblnk/3tJ27Hq/H4+137l4Px5a6asdvWl/PsfTPjk5s/j9OPbPzenvW3audU+OLvt+fGuaQ+nxf2lKCjkXNe2dpfZtvq3R0bF0v0bjFlr36a6W48dSNqvd1md2drdPt9/auK6RfO8WXK19Otl27Hrv0/x+tdQ+HVrpq2/daX8+x9O+uGHXsp83bKqdfml37++dm+KvTe+dG1bag2MjG2prHsubsPF+P78p9uCdxZHiTHGyOFo/d0N9Pw3Vb2tqz+r24Ib039V+r9yyzB7c3nbseu/B/HFsqb03NLr4zq+D9udzPO2Lj+xZ/nPX2jGv3be+n7tuT6fkY5o+d23/+tpSX/O6qe1hupJf86qt8x/2Lf+12doxJ+9aa85c/nG6I51yXYfHqf31u9Rr6mhxdR6nLWmd37tr6ceptp7aMR/ev8r9dLAois/fe7D+9d70/ZXPXfjmF1q+73Kwcd4X9y9c16LPOjp93+fz9x689M/3/Hgt9xGA/vaz+p/bNjc+1jV9Z2o13/8HAAAABkLk/uE0M/kfAAAASiNyf/xf4Zn8DwAAAKURuX80zawi+f/hf3vuu37yYJGb+fNJnB8Pw9mnGsdFx/UT6d+T8wtqp7/60//4tbc9uLrbHi6K4if3/EvH4x9+KtbV8Gha5+S3Wk9fZMu3VnX7b79/4bjmDuBEuv64P+3b4Ev//VT9cpP7G/PSPZfq800XH36odv7l/Y1/R3fy6f9pHPfnqcx78Njft1x++xON29v2xPL3Ky732Tdsuvf5b124vbjc0NZn1u/GR17RuN74uTePvqZx/OV03FLr/7s//sxna8e/98Wd1//gcOf1P52u99tp/vinjdObH9Pav+Nyf5jWH7cXl7vzU1/uuP7HXt84/rH0vHwizfb1v+pPX/DT5scr1h+3c/DJxuXi9mf++j/ql4vri+tvX//4K59qeTzar//S5xrXc+Dd/zvSfHycHreT992Trc9z7Xqa91v4zB9danmci39vXO5v2tYf13f2yc7rv6NtnWd3bK5ffqnK+Mdmv93x/sZ6Dv7V4y3357Hvpsfv1ffVr3f8R2k/pvP/79HG9bX/tITHv9v6fhLHf2Ki8bqM65tuW/+jbeu/+KLaY7fy+u/+YWP9j73yK63Px3821nHw+4250vqPf/wbLZf/5Dcbz8e590ydPjN34UR0qCfSz/45+53G9W0c37T5uuuf8cxnpffK9n8fOnP+HbPnJmcmZ4picgB/JN6VXv+n0vyvxri43tf/QFEU72n6uHb76xr7r3jh5T950d2ffkcc90+vbZz+yL2Nj1svScc9mk6/mJ7vuJ6PfbTx8bDX9cftLDXzelfpwlc/tHdVB6b7/5Fbbqy/yoYuNU5uf7/qVrzOn3xu6+v+ibc05hfT4zqffjLz1hu/Wj+u/fbjZyM88ubG6zs+k4vL97r+v0zP933fblx/XG9eb/o85stbWt8f4/n54oNtP2lgovFTPC6m94/iYuP8OCo+p3rk8o1rWeaS5t43N33yxOkL750+Pzt3fnrufe8/dOrMhdPnD9V/Nuehd650+YXX9+b66/vo7N7dRf3VfqYxrrBrvf6z9x85um/mtqOzxw5fOHb+/rOz544fmZs7Mnt07rbDx47Nvmely584emDHzv279u2cOn7i6IG79u/ftX/qxOkztWU0FrWCvTPvmjp97lD9InMHdu/fsWfP7pmpU2eOzh7YNzMzdWGly9c/Nk3VLv3uqXOzJw+fP3FqdmruxPtnD+zYv3fvzhV/ut+ps8fmJqfPXTg9fWFu9tx0475Mnq+fXPvYt9LloWbu45s6fpwaSp+977hjb/75rDWf/sCSV9U4pO0HiH4v/Syar//Fn+1Zzb8j94+lmVUk/wMAAEAVRO7fkGYm/wMAAEBpRO7fmGYm/wMAAEBpRO4fTzOrSP7X/9f/1//X/w/6//r/3ahS/7+2F/T/9f/1//X/9f/1/1m9fuv/R+7fVBSVzP8AAABQBZH7N6eZyf8AAABQGpH7r0szk/8BAACgNCL3X59mVpH8r/+v/6//r/8f9P/1/7tRpf6/3/+v/6//r/+v/6//z9r0W/8/cv8z0swqkv8BAACgCiL3PzPNTP4HAACA0ojc/6w0M/kfAAAASiNy/0SaWUXyv/6//r/+v/5/0P/X/++G/r/+fzf0//X/B2H9+v/6//Su3/r/kft/Ls2sIvkfAAAAqiBy/7PTzOR/AAAAKI3I/c9JM5P/AQAAoDQi99+QZlaR/K//r//fP/3/hVqs/r/+v/7/4ND/1//vhv6//v8grF//X/+f3vVb/z9y/3PTzCqS/wEAAKAKIvffmGYm/wMAAEBpRO5/XpqZ/A8AAAClEbl/S5pZRfK//r/+f//0//3+/6D/r/8/SPT/9f+7of+v/98f69+47OX1//X/6V2/9f8j9/98mllF8j8AAABUQeT+m9LM5H8AAAAojcj9z08zk/8BAACgNCL335xmVpH8r/+v/6//r/8f9P/1/7uh/6//3w39f/3/QVi//r/+P73rt/5/5P4XpJlVJP8DAABAFUTuf2GamfwPAAAApRG5/0VpZvI/AAAAlEbk/sk0s4rkf/1//X/9f/3/oP+v/98N/X/9/27o/+v/D8L69f/1/+ldv/X/I/ffkmZWkfwPAAAAVRC5f2uamfwPAAAApRG5/9Y0M/kfAAAASiNy/7Y0s4rkf/1//X/9f/3/oP+v/98N/X/9/27o/+v/D8L69f/1/+ldv/X/I/e/OM2sIvkfAAAAqiBy/21pZvI/AAAAlEbk/pekmcn/AAAAUBqR+7enmVUk/+v/6//r/+v/B/1//f9u6P/r/3dD/1//fxDWr/+v/0/v+q3/H7n/pWlmFcn/AAAAUAWR+29PM5P/AQAAoDQi99+RZib/AwAAQGlE7p9KM6tI/tf/1//X/9f/D/r/+v/d0P/X/++G/r/+/yCsX/9f/5/e9Vv/P3L/y9LMKpL/AQAAoAoi99+ZZib/AwAAQGlE7p9OM5P/AQAAoDQi98+kmVUk/+v/6//r/+v/B/1//f9u6P/r/3dD/1//fxDWr/+v/0/v+q3/H7l/R5pZRfI/AAAAVEHk/p1pZvI/AAAAlEbk/l1pZvI/AAAAlEbk/t1pZhXJ//r/+v/6//r/Qf9f/78b+v/6/93Q/9f/H4T16//r/9O7fuv/R+7fk2ZWkfwPAAAAVRC5f2+amfwPAAAApRG5f1+amfwPAAAApRG5/640s4rkf/1//X/9f/3/oP+v/98N/X/9/27o/+v/D8L6r0r//6GlfwyA/j9l0G/9/8j9+9PMKpL/AQAAoAoi9788zUz+BwAAgNKI3P8LaWbyPwAAAJRG5P5fTDOrSP7vpf9/6Xr9f/1//X/9f/1//X/9f/3/tVtV/3+T/n+vrnV/ftDX7/f/6//Tu37r/0fuP5BmVpH8DwAAAFUQuf8VaWbyPwAAAJRG5P5XppnJ/wAAAFAakfsPpplVJP9fgd//P6T/r/+v/6//X+j/X7n+/x+s4pirSP9f/78bfv+//v8grF//X/+f3vVb/z9y/6vSzCqS/wEAAKAKIve/Os1M/gcAAIDSiNz/mjQz+R8AAABKI3L/a9PMKpL/r0D/3+//1//X/9f/r9P/9/v/14P+v/5/of/ftWvdnx/09ev/6//Tu37r/0fuf12aWUXyPwAAAFRB5P5fSjOT/wEAAKA0Ive/Ps1M/gcAAIDSiNx/d5pZRfK//r/+/5Xq/29I16H/37Tv9P/r9P/1/9dC/1//v1hL/38ovYL1/+uudX9+0Nev/6//T+/6rf8fuf+X08wqkv8BAACgCiL335NmJv8DAABAaUTuvzfNTP4HAACA0ojc/4Y0s4rk/77v/6cb1P9fsv//jNrsx/5/0P9v2ncD1v8fbVuP/r/+fyf6//r/3fD7//X/B2H9+v/6//Su3/r/kfvvSzOrSP4HAACAKojc/ytpZs35f6lvlgEAAAADIXL/r6aZ+f4/AAAAlEbk/jemmVUk//d9/z/R/x+83/8f9P+b9t2A9f/b16P/r//fif6//n839P/1/wdh/fr/+v/0rt/6/5H7fy3NrCL5HwAAAKogcv+b0szkfwAAABgUK/7kvsj9b04zk/8BAACgNCL3vyXNrCL5X/9f/1//X/8/6P/r/3dD/1//vxv6//r/g7B+/X/9f3rXb/3/yP33p5lVJP8DAABAFUTuf2uamfwPAAAApRG5/9fTzOR/AAAAKI3I/b+RZlaR/K//r/+v/6//H/T/9f+7of+v/98N/X/9/0FYv/6//j+967f+f+T+30wzq0j+BwAAgCqI3P+2NDP5HwAAAEojcv9vpZnJ/wAAAFAakft/O82sIvlf/1//X/9f/z/o/+v/d0P/X/+/G/r/+v+DsH79f/1/etdv/f/I/b+TZlaR/A8AAABVELn/d9PM5H8AAAAojcj9h9LM5H8AAAAojcj9b08zq0j+1//vw/7/xsXr1f/X/9f/1//vV/r/+v/d0P/X/x+E9ev/6//Tu37r/0fuP5xmVpH8DwAAAFUQuf/30szkfwAAACiNyP1H0szkfwAAACiNyP1H08wqkv/1//uw/9+B/r/+v/6//n+/0v/X/++G/r/+f1juCbnW61+v/v9Iof9PdfVb/z9y/2yaWUXyPwAAAFRB5P5jaWbyPwAAAJRG5P7jaWbyPwAAAJRG5P53pJlVJP/r/+v/6//r/wf9f/3/buj/6/93Q/9f/38Q1u/3/+v/07t+6/9H7j+RZlaR/A8AAABVELn/nWlm8j8AAACURuT+d6WZyf8AAABQGpH7T6aZVST/6//r/+v/6/8H/X/9/27o/+v/d0P/X/9/ENav/6//T+/6rf8fuf9UmllF8j8AAABUQeT+02lm8j8AAACURuT+M2lm8j8AAACURuT+s2lmFcn/+v/6//r/+v9B/1//vxv6//r/3dD/1/8fhPXr/+v/07t+6/9H7v/9NLOK5H8AAACogsj959LM5H8AAAAojcj9c2lm8j8AAP/P3l3taJpVcRz+IECKE8IFcA9cFLeAu7sN7u7O4O7u7u7uNHZA4Ftrkaa6p1L77ere717Pc7KS6slkz6QzmX86v7wALCN3/13jlib7X/+v/9f/d+3/b3Xqn0v/r/8fof/X/4/Q/+v/9/B+/b/+nzNdOus/q7P1/7n77xa3NNn/AAAA0EHu/rvHLfY/AAAALCN3/z3iFvsfAAAAlpG7/55xS5P9r//X/+v/u/b/p+n/9f8j9P/6/xH6f/3/Ht6v/9f/s91s/X/u/nvFLU32PwAAAHSQu//ecYv9DwAAAMvI3X+fuMX+BwAAgGXk7r9v3NJk/+v/9f/6f/1/0v/r/0fo//X/I/T/+v89vF//r/9nu9n6/9z994tbmux/AAAA6CB3//3jFvsfAAAAlpG7/wFxi/0PAAAAy8jd/8C4pcn+1//r//X/+v+k/9f/j9D/6/9H6P/1/3t4v/5f/892s/X/ufsfFLc02f8AAADQQe7+B8ct9j8AAAAsI3f/Q+IW+x8AAACWkbv/oXFLk/1/qv+/3eW/rv+/nP5f/3/Q/xf9v/7/oP/X/w/S/+v/9/B+/b/+n+1m6/9z9z8sbmmy/wEAAKCD3P0Pj1vsfwAAAFhG7v5HxC32PwAAACwjd/8j45Ym+9/3//X/+n/9f9L/6/9H6P/1/yP0//r/Pbxf/6//Z7vZ+v/c/Y+KW5rsfwAAAOggd/+j4xb7HwAAAJaRu/8xcYv9DwAAAMvI3f/YuKXJ/tf/6//1//r/pP/X/4/Q/+v/R+j/9f97eL/+X//PdrP1/7n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAALCN3/xPilv/f/yfX81UAAADAtZS7/4lxS5M//9f/6//1//r/pP/X/4/Q/+v/R+j/9f97eL/+X//PdrP1/7n7b4pbmux/AAAA6CB3/5PiFvsfAAAAlpG7/8lxi/0PAAAAy8jd/5S4pcn+1//r//X/+v+k/9f/j9D/6/9H6P/1/3t4v/5f/892s/X/ufufGrc02f8AAADQQe7+p8Ut9j8AAAAsI3f/0+MW+x8AAACWkbv/GXFLk/2v/9f/6//1/0n/r/8fof/X/4/Q/+v/9/B+/b/+n+1m6/9z9z8zbmmy/wEAAKCD3P3PilvsfwAAAFhG7v5nxy32PwAAACwjd/9z4pYm+1//r//X/+v/k/5f/z+iQ/9/5zsd/1r9v/5f/6//1//r/zmf2fr/3P3PjVua7H8AAADoIHf/8+IW+x8AAACWkbv/+XGL/Q8AAADLyN3/grilyf7X/+v/9f/6/6T/1/+PWLD/P/4W8P1//b/+X/+v/9f/s9ls/X/u/hfGLU32PwAAAHSQu/9FcYv9DwAAAMvI3f/iuMX+BwAAgGXk7n9J3NJk/+v/9f/6f/1/0v/r/0cs2P+f+v7/Qf+/sf8/OfUT/b/+fw/v1//r/9lutv4/d/9L45Ym+x8AAAA6yN3/srjF/gcAAIBl5O5/edxi/wMAAMAycve/Im5psv/1//p//b/+P+n/9f8j9P+L9v+3Pvj+v/5f/6//1/+z2Wz9f+7+V8YtTfY/AAAAdJC7/1Vxi/0PAAAAy8jd/+q4xf4HAACAZeTuf03c0mT/6//1//p//X/S/+v/R+j/F+3/r+n3/0/T/+v/9/B+/b/+n+1m6/9z9782bmmy/wEAAGC3zrHdc/e/Lu7I3wMAAACYW+7+18ct9j8AAAAsI3f/G+KWJvtf/6//n6P/v/lwpffr//X/B/3/9PT/+v8R+n/9/x7ef0H9f/421f/Twmz9f+7+N8YtTfY/AAAAdJC7/+a4xf4HAACAZeTuf1PcYv8DAADAMnL3vzluabL/9f/6/zn6/57f/z/R/1/271P/r/+/Ev2//v+g/x92o/v5vb/f9//1/2w3W/+fu/8tcUuT/Q8AAAAd5O5/a9xi/wMAAMAycve/LW6x/wEAAGAZufvfHrc02f/6f/2//t/3/5P+X/8/Qv+v/x+h/9f/7+H9+n/9P9vN1v/n7n9H3NJk/wMAAEAHufvfGbfY/wAAALCM3P3vilvsfwAAAFhG7v53xy1N9r/+X/+v/9f/J/2//n+E/l//P0L/r//fw/v1//p/tput/8/d/564pcn+BwAAgA5y9783brH/AQAAYBm5+98Xt9j/AAAAsIzc/e+PW5rsf/3/de3/76j/1//r//X/+v/z0f/r/w/6/2E3up/f+/v1//p/tput/8/d/4G4pcn+BwAAgA5y938wbrH/AQAAYBm5+z8Ut9j/AAAAsIzc/R+OW5rsf/2/7//r//X/Sf+v/x+h/9f/j9D/6//38H79v/6f7Wbr/3P3fyRuabL/AQAAoIPc/R+NW+x/AAAAWEbu/o/FLfY/AAAALCN3/8fjlib7X/+v/9f/6/+T/l//P0L/r/8fof/X/+/h/fp//T/bzdb/5+7/RNzSZP8DAABAB7n7Pxm32P8AAACwjNz9n4pb7H8AAABYRu7+T8ctTfa//l//r//X/yf9v/5/hP5f/z9C/6//38P79f/6f7abrf/P3f+ZuKXJ/gcAAIAOcvd/Nm6x/wEAAGAZufs/F7fY/wAAALCM3P2f/++9zf9+ocn+1//r//X/+v+k/9f/j9D/6/9H6P/1/3t4v/5f/892s/X/x91/cvhC3NJk/wMAAEAHufu/GLfY/wAAALCM3P1filvsfwAAAFhG7v4vxy1N9r/+X/+v/9f/J/2//n+E/l//P0L/r//fw/v1//p/tput/8/d/5W4pcn+BwAAgA5y9381brH/AQAAYBm5+78Wt9j/AAAAsIzc/V+PW5rsf/2//n+t/v+Y4un/j/T/R/r/i6X/1/+P0P/r//fwfv2//p/tZuv/c/d/I25psv8BAACgg9z934xb7H8AAABYRu7+b8Ut9j8AAAAsI3f/t+OWJvtf/6//X6v/P9L/H+n/j/T/F0v/r/8fof/X/+/h/fp//T/bzdb/5+7/TtzSZP8DAABAB7n7vxu32P8AAACwjNz934tb7H8AAABYRu7+78ctTfa//l//r//X/yf9v/5/hP5f/z9C/6//v5o7TPR+/b/+n3O6/ekfzdb/5+7/QdzSZP8DAABAB7n7fxi32P8AAACwjNz9P4pb7H8AAABYRu7+H8ctTfa//l//r//X/yf9v/5/hP5f/z9C/6//38P79f/6f7abrf/P3f+TuKXJ/gcAAIAOcvf/NG6x/wEAAGAZuft/FrfY/wAAALCM3P0/j1ua7H/9v/5f/6//T/p//f8I/b/+f4T+X/+/h/fr//X/bDdb/5+7/xdxS5P9DwAAAB3k7v9l3GL/AwAAwDJy9/8qbrH/AQAAYBm5+38dtzTZ//p//b/+X/+f9P/6/xH6f/3/CP2//n8P79f/6//Z7pb6//h//uva/+fu/03c0mT/AwAAQAe5+38bt9j/AAAAsIzc/b+LW+x/AAAAWEbu/t/HLU32v/5f/6//1/8n/b/+f4T+X/8/Qv+v/9/D+/X/+n+2m+37/7n7/xC3NNn/AAAA0EHu/j/GLfY/AAAALCN3/5/iFvsfAAAAlpG7/89xS5P9f1b/f9u4Z/X/mbxdQP+fT9D/6//1//p//f+E9P/6/xH6f/3/Ht6v/9f/s91s/X/u/r/ELU32PwAAAHSQu/+vcYv9DwAAAMvI3X8pbrH/AQAAYBm5+/8WtzTZ/77/r//X/+v/k/5f/z9C/6//H9G+///Pj/X/079f/6//Z7vZ+v/c/X+PW5rsfwAAAOggd/8/4hb7HwAAAJaRu/+fcYv9DwAAAMvI3f+vuKXJ/tf/X73/v+ku+n/9v/7/oP/X/59B/6//H9G+//f9/128X/+v/2e72fr/3P3/DgAA//+KB1Ys") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") creat(0x0, 0x106) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9.979885674s ago: executing program 4 (id=856): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 8.765685503s ago: executing program 2 (id=858): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="748080a54714ce974a428103824a223696f0821cda0b0faabd2683bce6e29460f49e7ecca4b1efcaead665a9586108b36c3123d86e7472495513633f1a9b91ba0c6f68df1c7d587f503c24c0ab03730c8e3fd08dade50b3e8cc887e4ceefc44b41a04ab49c20b7a6caed21801820f58ceb0124c7a7f1145a47bdac6a15ecc48e712cce474b342b787013c31dec1e44edfe546ae4ad5fd37f93609de43a8e4a657cb582bbc0d5a6e03f0c8eabb5afd4579b71af1e22c4dd007b5e56c4d2638f382de8621e221ba85e0985abcf3487c8dc41095787d0660bc6695edf4897d391658837e9d0476448584cd49e02c59b6485e49ffb5f4b5861df94caa8adc078ec2774ec19d0ddf49891d9", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 7.931538722s ago: executing program 4 (id=859): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x240448f0}, 0x4000) 7.902741414s ago: executing program 2 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 7.837034848s ago: executing program 1 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xa}}, 0x20) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.781570431s ago: executing program 4 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000025000f001fffffffbd0301000000000095002008000000006916700000000000bf6700000000000017060000b964b01a4606feff0020000037060000d3551b84bf150000000000000f5700000000000065070000020000002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c400000000000000500000000000000950000000000000032ed3c53e95e5db67754bb12dc8c4ed68ecfd00000000000000030e3c7bdd2d17f2f09000000000000005d7095f9ce000078af6d71d79a5e12814cb1d8a5d4601d295c45a69eb9bdb7dd390700000500000000f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a0500000084c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3e1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8da39eb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e4c16dfecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1d932b3a6158446c02bcef3e4acbb400001e3738270b315d362ed834f2af97792f69b649a462e7ee4bcf8b07a10311145eac1f2ede14308d582685e1bece9f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed8400200aab43176e65ec1118d46d1e827f3472f4441401d2ddc1cbf60ab3a123da773af2245d753887a5ad103649afa1769080584f800231e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000007f37d83f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9be2a29ab028acfc1cb26a0f6a5480a55d6a0c544ba0dc828c22fe3000072c6000000437d57fcf8295f63a70837f5cd4e5e77b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac693a27051f2ab779b8dbe800aeeda0426c7e7c0032028c955735557df78628a59d56f4400a83b29b6ddb55117669d9598c0f3598073f3a922a76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe70cac8b9e44023a1749eb1d0d572b7756e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6ea4a2215c3b9ee1dbb43f40256b5abcaaa8c27b25def02dbc05823e98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b1d3dfdf0cb8b71ad790000000d0500000000000000000000dd434a25e95d0ec29d3adaccf8400880031ecdfdb4dfbe440104be099ece7e4009c76c716d906fbc3c9b412e0478cfee4485f423c63f49db5a583c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c40000000000000000000000000000000026b80c3899543223a6079ee96198b9a326da3be3098af415ca284b7467103c65a0867032f04384129cdc79b3978bc800990e8e29af8d763ef9b1f31befcad2ce5394601c7c4f5975e8bd07d8dcce3c7bebdc233ba3d45dc60f2f54393895650f154dcf83b84e16a29c743544a6091ec93e0d2fd5b4dc42913e1ba32277d5f4bb2142b46be48b41c717858cfefd4946bf19e617d51f964727bfd5cc5ba15370f6e1b39f1541eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d95ac7ad17a507000000c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde1800a2dc02af2b7bcf6f8af68249ce5370e593d9eafbefdb91fbdff9ee3307d4a1837963b2dc3f3698d90e7915b098f19392e792f05675f252f4e948184001b6494e906925a092483adc7e9c8f7a29d226943c100a92ae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baa0905aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e7ad741e4feb0e37f0c85d13a33250d78cfa7daf529c5bea49cad7c3433e322d8dbdfc85ae7b5b544aacd5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a94548d47c609a93c45f4d7d24b20166d7f510f80d13138216e03995da047ccef9de49a90ced031235e3219ebd9d06c257a50497ec523364a42e2e81fc068fcbb9792b673893ff2c1e27ced4b77b0300fbf46a19600b802cba88b7d0a938d9e0e6cfe5d66b874cd004179e5b6025c0e1050fae1f70437ee7cbaa9ab2f8c06a551236278c474914c7cf8406f95351704fc428806c23d16847bde483d98321d7648496e065f120ed7ffc11c29a1145c09b5e48ccbdb66dfe4188952868da9c0ad91463ec7670bec7772deb4e2b56f411f586dd4285146d1a0686975c89d7caa234be3c6aee7697860385f99a4a918fe6efa78e3227d54fe9c9fde78e16db810abb601e15a231f9510c7607204ad685177659b844efeb1d448b692444375c49e2b482b32470fc2e15511bb71cffa87b8c7179f56366666b57a3e1e226a481b6db11367685750cdec47e3c76f84788dbe28aa4a39a196bde8aa2de215d49c552c70000000000000000dbb68e58b4c96972b8e9e06dde8762bf753ec8545cb623afdaa1e52fec9f21ee2454cb653ebc7577a56204c1f942a944e650c1d1820b7fac005ed19bf0d96c3d946478b31af45aeb262ab41cd9eacbad70fbeaa97f1aa9669fd3e25060281aede1e75795eeee3b6abd08ca490c2ce0531ed667898403ff2bb4f074352da58a3d649057fcdad446222212ef5dc67c8852953c9ebbd2b3807c9361046a375ecd599f6653ce8df9bc7e177e88b1f171df357cf5256041a620ca68b035ccd784f97930a1f363bfd224e9cd1263ff16e6d513c9d7c67158ec5502c17266cea90306808f50a87fb2aaa1b1954bfa3ba8a6df6fbe38bd7ad09cecf8ecbaf005e68bb476ed3d8ea0cf21a9da7c11eedf3454556b63fe1133bf415cfc1b459c8bfc54ca3bd54d15ee11971b119a28d34ae8d20350ba647d2ef813515f4614c7e8cb04059d2b79867c07ae780ea3d8c875ee3834d3cf37271e882554782fa58781a715dec10864761389cd8cb32350917d17b03d37ad4c0400000000000000a78bfa6aa624c498fd927ac1da3b0ddab0cabeb7436b52b59ff23a19b487e1bea3f418b6e3d21e6833edd299b39ccbeddb532d6df19246710b01ad6ed06b18fc4ca5e1e72232dfab2a6f606e4fa637bddddf4ab9f093815de2c1193cf5c014005b1854515f815637caca1a2bff030000b56de1b1927d359fc87abf4dcb23f89c4f8dc93b27e411d1d331153aa8692777ab7076efd7c057dff57c248ba01c52f7a182124ae0f623a0b942581faddacd8f18c812cbcd22a938b6b5df6f3cb0eb5d3aaf5acd944650a8fed42eb945293133a4bbc2a7c3ccac0a9055dbbe29b18c87ab4e3b86c3185650da3d9fc9e42228e449f066557462192cba2b2c2a3ad27ef0f719c1e5c99d506d11dca102c408842af65f17f1dd12fd1c35ee264a15fa041b22ca56d91477e8c5a96c7bb5a4db4caa8ac0e61ad8871aa5c3ce5c8a41b53841e1bf67e2bdcf7c3e830549dda33ae785eaff3c33b7c917fbfd747854f87f8a1b084bb91f0d00000000000000000000000000000000c39a4ab1b1f5f9fe629b3f067b64a755e1af70ca2afe9f6a6f3bc859d345064672eb09a4e94f82a820302651a3077313338cfcebb143567c563959f0de0442526c68c3eea5716c6477ba77f32e77aced7ef77fadfb06cd6860bedb7e3feeb169275e6016a17c7e4a9c26942d65a181caae11f5bba4230c11236f0049986c0edcf201305e7a58ea53c97806b929e7d1dfbbe35cf1b9bb7e2352cfbecb6ea18da0fdc5877c4afb9b7659a9853b313d73bf4f8f4ca26f3633f51cb64ca41e0916169867b4608d684fb618d1f3db858d765ca75bc4a75062523ce6c1f9ab1aa1c1b2d04712eafaf279fd3d594a23e9c5ba4b94425ad0e0dfe43330bc96b163b57b96653b1c3a86257e57586be52fd85e981936b1b0027e4de18cf6d7bf47ebe4dc9f3e8be776e3488b704c90b1ff1daec119b70b800a887eed7418bdfd9cfe6a4a1e6be430f321db5c5a56149427766e0c8262ecdd65e3f9ebd2b3eccf56e1fe831ac61b3b48c7ef798842eceb794a90d59c88b9e034d09b9faeb7acde447ed1cf8ff8adf53e14da1e70999b8423a711274849386a98698530fb0b6d517a8a879ca12a72dec308ec8304e5fd80fd11b20c25809a5a6cb168a0d895903e21f12c72a6a533608b7930be480c5f959d93821a9cb863c842db2db3046e80454f7e1169152f9d89a7cb4e2bdfa95661848540dfd983b96e79e84bae030bf1f4702cc51aaf262ec866ed993c15702aeab59c130c014782bca64c3c213d2d52a408db7668ea48ef544de7bb9d3d4b6d89cb3ab86b3e19b1e0534fc22ef4490000000000000000007235b0d11e8c1ef08fd8df205b5dbe5417c2b7556900ed5ef0ea898077ae62d4f7f2c31b1eb1c661c5f6192f7ec0d306fb665b0f3b8f26e01e57fc03b02df26fbdc97895ba9bf45585a39aeef9609d181fe06d50220739c0aac2556d81b1e54591068376f023eb4ba287938ab22ccffd5770eb3f8c7a9b1f72ab2a83ab778d47dc3e91f72dbff307f4ce02c5d4a83cb9a25accd10e08dc81344c1e60bdedaa056fc00e00"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.740349873s ago: executing program 0 (id=863): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 6.824370616s ago: executing program 1 (id=864): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pread64(r4, &(0x7f00000003c0)=""/128, 0x80, 0x9) 6.764336939s ago: executing program 5 (id=865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x1f4}], 0x1}, 0x4) 6.05492103s ago: executing program 0 (id=867): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f0000000080)=@caif=@rfm={0x25, 0x5dab7cbc, "40a0b6ca4594d6d11993ff307661f1b4"}, 0x80, 0x0}}], 0x1, 0x24040040) setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 5.979550815s ago: executing program 2 (id=868): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r5) 5.70863368s ago: executing program 0 (id=869): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x12) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_STATX(r2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x80001200, 0x0, 0x0, &(0x7f0000006280), 0x0, &(0x7f000000fa40)) 5.648637154s ago: executing program 1 (id=870): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='6', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x5}, 0xfff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2}, 0x8) 5.268584636s ago: executing program 0 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 5.198256359s ago: executing program 5 (id=872): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 3.776893532s ago: executing program 1 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000a40)='\\\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2.59790664s ago: executing program 0 (id=874): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x240448f0}, 0x4000) 2.519424304s ago: executing program 4 (id=875): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x92a8, 0x40, 0x2, 0x8b}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x6) sendfile(r1, r2, &(0x7f0000000100)=0x6, 0x100000000010001) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.474252707s ago: executing program 2 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xa}}, 0x20) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60090bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.473256077s ago: executing program 1 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.772303818s ago: executing program 1 (id=877): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000000)='./file\x00', 0x220c880, &(0x7f0000000f40)=ANY=[], 0x41, 0x5f16, &(0x7f0000001f80)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") creat(0x0, 0x106) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.771992137s ago: executing program 5 (id=878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x6}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.770798728s ago: executing program 0 (id=888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) 1.705061271s ago: executing program 4 (id=879): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000080), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.444161256s ago: executing program 2 (id=880): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f0000000080)=@caif=@rfm={0x25, 0x5dab7cbc, "40a0b6ca4594d6d11993ff307661f1b4"}, 0x80, 0x0}}], 0x1, 0x24040040) setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 1.321522513s ago: executing program 5 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52}, 0x28) 1.298463835s ago: executing program 4 (id=882): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe(&(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 0s ago: executing program 2 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) kernel console output (not intermixed with test programs): =4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 60.738888][ T4290] tipc: Enabled bearer , priority 0 [ 60.749094][ T4330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.815781][ T4328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.817602][ T26] audit: type=1800 audit(1769484965.755:3): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 60.886231][ T4291] device syzkaller0 entered promiscuous mode [ 60.894529][ T4329] netlink: 'syz.2.8': attribute type 4 has an invalid length. [ 60.928779][ T1108] usb 2-1: USB disconnect, device number 2 [ 61.013485][ T4289] tipc: Resetting bearer [ 61.083850][ T4346] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.270962][ C0] sched: RT throttling activated [ 62.316054][ T4340] loop4: detected capacity change from 0 to 4096 [ 62.341260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.350460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.359361][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.368255][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.377140][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.386041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.394916][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.403801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.412950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.422437][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.828775][ T4289] tipc: Disabling bearer [ 62.862739][ T1111] tipc: Node number set to 3696559041 [ 63.181624][ T1111] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 63.389252][ T4365] loop4: detected capacity change from 0 to 512 [ 63.458785][ T4365] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 63.520531][ T4365] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.19: bad orphan inode 15 [ 63.533189][ T4365] ext4_test_bit(bit=14, block=18) = 1 [ 63.546638][ T4365] is_bad_inode(inode)=0 [ 63.575082][ T4365] NEXT_ORPHAN(inode)=1023 [ 63.579443][ T4365] max_ino=32 [ 63.611216][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.630136][ T4365] i_nlink=0 [ 63.649861][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.661766][ T4365] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.706962][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 63.742956][ T4365] ext2 filesystem being mounted at /2/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 63.817508][ T1111] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 63.850435][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.884770][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 63.964456][ T4365] device hsr_slave_0 left promiscuous mode [ 63.971294][ T4354] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 63.993310][ T1111] hub 4-1:1.0: bad descriptor, ignoring hub [ 63.999621][ T1111] hub: probe of 4-1:1.0 failed with error -5 [ 64.034329][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 64.056757][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 64.119659][ T1111] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 64.139347][ T1111] cdc_wdm 4-1:1.0: Unknown control protocol [ 64.194558][ T4365] device hsr_slave_1 left promiscuous mode [ 64.227933][ T4333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 64.229282][ T1111] usb 4-1: USB disconnect, device number 2 [ 64.316069][ T4382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.779054][ T4396] loop0: detected capacity change from 0 to 4096 [ 64.799935][ T4393] VFS: Mount too revealing [ 64.832159][ T4396] ntfs3: Unknown parameter 'hide_dot_files' [ 64.863912][ T1111] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 65.462287][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 65.521171][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.570344][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.593781][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.607156][ T1111] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 65.616517][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.032638][ T4354] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.187567][ T1111] hub 4-1:1.0: bad descriptor, ignoring hub [ 67.205801][ T1111] hub: probe of 4-1:1.0 failed with error -5 [ 67.239063][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 67.263886][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 67.287438][ T1111] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 67.363002][ T1111] usb 4-1: USB disconnect, device number 3 [ 68.646759][ T4414] overlayfs: failed to clone lowerpath [ 68.884545][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.905134][ T4434] device batadv_slave_0 entered promiscuous mode [ 69.531334][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 69.697835][ T4455] loop4: detected capacity change from 0 to 128 [ 69.746838][ T4455] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.848943][ T4455] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.925344][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.933792][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.967108][ T4446] device bridge_slave_1 left promiscuous mode [ 69.996030][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.020036][ T4446] device bridge_slave_0 left promiscuous mode [ 70.036782][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.287429][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 70.648873][ T4477] device syzkaller0 entered promiscuous mode [ 70.699308][ T4479] device syzkaller0 entered promiscuous mode [ 70.961282][ T4482] loop2: detected capacity change from 0 to 512 [ 71.146096][ T4488] loop4: detected capacity change from 0 to 128 [ 71.323556][ T4482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.414112][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.423986][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.383272][ T4514] loop3: detected capacity change from 0 to 1024 [ 72.460072][ T4514] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 72.499879][ T4520] process 'syz.0.60' launched '/dev/fd/4' with NULL argv: empty string added [ 72.620925][ T4523] loop2: detected capacity change from 0 to 1024 [ 72.647744][ T4523] hfsplus: unable to find HFS+ superblock [ 73.319329][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 73.655186][ T4544] loop3: detected capacity change from 0 to 32768 [ 73.716032][ T4544] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.68 (4544) [ 73.819914][ T4544] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 73.828855][ T4544] BTRFS info (device loop3): setting nodatacow, compression disabled [ 73.837083][ T4544] BTRFS info (device loop3): enabling auto defrag [ 73.843577][ T4544] BTRFS info (device loop3): max_inline at 0 [ 73.849646][ T4544] BTRFS info (device loop3): using free space tree [ 73.856253][ T4544] BTRFS info (device loop3): has skinny extents [ 74.196287][ T4545] loop0: detected capacity change from 0 to 32768 [ 74.362189][ T4568] syzkaller0: create flow: hash 1720427110 index 1 [ 75.198177][ T4540] loop1: detected capacity change from 0 to 32768 [ 75.306256][ T1108] syzkaller0: tun_net_xmit 76 [ 75.341516][ T1108] syzkaller0: tun_net_xmit 48 [ 75.367525][ T23] syzkaller0: tun_net_xmit 76 [ 75.406518][ T4578] loop4: detected capacity change from 0 to 47 [ 75.526822][ T4540] JBD2: Ignoring recovery information on journal [ 75.718894][ T4558] syzkaller0: delete flow: hash 1720427110 index 1 [ 75.755837][ T4540] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 76.307629][ T4599] netlink: 60 bytes leftover after parsing attributes in process `syz.4.75'. [ 76.374607][ T4599] unsupported nlmsg_type 40 [ 76.640815][ T4540] syz.1.67 (4540) used greatest stack depth: 18512 bytes left [ 76.761319][ T4609] net_ratelimit: 11 callbacks suppressed [ 76.761337][ T4609] batadv0: mtu less than device minimum [ 77.463481][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.476215][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.488660][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.501109][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.513622][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.526048][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.538486][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.550845][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.563257][ T4609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 77.704508][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 77.748330][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 77.860895][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.868410][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.706707][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 78.755730][ T4605] loop2: detected capacity change from 0 to 4096 [ 79.003709][ T4605] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 79.345049][ T4630] loop1: detected capacity change from 0 to 16 [ 79.390897][ T4449] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 79.408641][ T4630] erofs: (device loop1): mounted with root inode @ nid 36. [ 79.418208][ T4193] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 79.476639][ T4193] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 79.507769][ T4193] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 79.528532][ T377] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 79.542860][ T4193] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 80.659969][ T4658] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 80.833359][ T4658] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 81.534478][ T4664] loop0: detected capacity change from 0 to 131072 [ 81.818718][ T1347] cfg80211: failed to load regulatory.db [ 82.020571][ T4680] loop3: detected capacity change from 0 to 256 [ 82.030803][ T4664] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.148289][ T4664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.234985][ T4680] exfat: Deprecated parameter 'utf8' [ 82.601926][ T4680] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 83.197497][ T4697] device syzkaller0 entered promiscuous mode [ 83.242404][ T4702] device syzkaller0 entered promiscuous mode [ 85.271107][ T1347] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.631152][ T1347] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.761224][ T1347] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.770376][ T1347] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 85.779892][ T1347] usb 3-1: Product: syz [ 85.784956][ T1347] usb 3-1: SerialNumber: syz [ 85.915462][ T4729] device batadv_slave_0 left promiscuous mode [ 85.935703][ T4729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.222012][ T4748] input: syz1 as /devices/virtual/input/input5 [ 86.268104][ T4750] loop3: detected capacity change from 0 to 8 [ 86.311844][ T4729] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.356246][ T4729] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.366733][ T4729] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.376776][ T4729] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.695157][ T4763] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.707541][ T4763] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.718941][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.729606][ T4763] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.740908][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.753846][ T4763] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 86.761606][ T4763] UDF-fs: Scanning with blocksize 512 failed [ 86.768276][ T4763] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.779814][ T4763] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.792218][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.802095][ T4763] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.813755][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.823782][ T4763] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 86.831530][ T4763] UDF-fs: Scanning with blocksize 1024 failed [ 86.838142][ T4763] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.849403][ T4763] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.861114][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.871108][ T4763] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.882384][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.892217][ T4763] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 86.899929][ T4763] UDF-fs: Scanning with blocksize 2048 failed [ 86.906477][ T4763] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.918145][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.928165][ T4763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.937898][ T4763] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 86.945909][ T4763] UDF-fs: Scanning with blocksize 4096 failed [ 86.952664][ T4763] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 87.081124][ T26] audit: type=1800 audit(1769484992.075:4): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.120" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 87.192181][ T4765] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 87.334288][ T4765] loop1: detected capacity change from 0 to 8 [ 87.341493][ T1347] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 87.362915][ T1347] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 87.376737][ T1347] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 87.465737][ T4765] SQUASHFS error: zlib decompression failed, data probably corrupt [ 88.258275][ T4765] SQUASHFS error: Failed to read block 0x9b: -5 [ 88.281252][ T4765] SQUASHFS error: Unable to read metadata cache entry [99] [ 88.288478][ T4765] SQUASHFS error: Unable to read inode 0x127 [ 88.339237][ T1347] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 88.553591][ T1111] usb 3-1: USB disconnect, device number 2 [ 88.560174][ T1111] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 88.575995][ T4784] team0 (unregistering): Port device team_slave_0 removed [ 88.606006][ T4784] team0 (unregistering): Port device team_slave_1 removed [ 88.734912][ T4792] VFS: Mount too revealing [ 89.905829][ T4807] loop2: detected capacity change from 0 to 256 [ 89.986885][ T4807] exfat: Deprecated parameter 'utf8' [ 90.048222][ T4807] exFAT-fs (loop2): failed to read sector(0x100) [ 90.048222][ T4807] [ 90.082755][ T4813] loop4: detected capacity change from 0 to 512 [ 90.091417][ T4807] exFAT-fs (loop2): failed to load upcase table [ 90.106234][ T4807] exFAT-fs (loop2): failed to recognize exfat type [ 90.139441][ T4813] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 90.315368][ T4830] loop2: detected capacity change from 0 to 512 [ 90.398639][ T4830] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.421213][ T4830] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.629569][ T4830] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.671651][ T4830] EXT4-fs (loop2): 1 truncate cleaned up [ 90.680751][ T4830] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug_want_extra_isize=0x0000000000000068,barrier,jqfmt=vfsold,quota,. Quota mode: writeback. [ 91.564562][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 91.574696][ T4848] bond0: option arp_all_targets: invalid value (16711680) [ 91.710815][ T4852] loop4: detected capacity change from 0 to 1024 [ 91.844477][ T4857] device syzkaller0 entered promiscuous mode [ 92.014070][ T4860] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.087068][ T377] hfsplus: b-tree write err: -5, ino 8 [ 92.379474][ T4872] loop4: detected capacity change from 0 to 512 [ 92.595207][ T4872] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.636626][ T4872] EXT4-fs (loop4): 1 truncate cleaned up [ 92.655614][ T4872] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 92.678402][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.068766][ T4886] loop0: detected capacity change from 0 to 2048 [ 94.075850][ T4886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.020167][ T4921] loop1: detected capacity change from 0 to 736 [ 95.923477][ T4929] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 95.971848][ T4929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.024344][ T4929] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 96.222778][ T4940] loop0: detected capacity change from 0 to 1024 [ 97.053741][ T4940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.348852][ T4946] loop1: detected capacity change from 0 to 32768 [ 98.374642][ T4960] loop2: detected capacity change from 0 to 256 [ 98.393223][ T4946] XFS (loop1): Mounting V5 Filesystem [ 98.417545][ T4960] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.465975][ T4960] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 98.491143][ T4960] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.494036][ T4946] XFS (loop1): Ending clean mount [ 98.530879][ T4946] XFS (loop1): Quotacheck needed: Please wait. [ 98.597702][ T4946] XFS (loop1): Quotacheck: Done. [ 98.772515][ T4970] exFAT-fs (loop2): abnormal access to deleted source dentry [ 98.916124][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'. [ 99.109345][ T4185] XFS (loop1): Unmounting Filesystem [ 101.028529][ T4993] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 101.090841][ T4993] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.355948][ T5008] loop2: detected capacity change from 0 to 7 [ 101.409622][ T5008] loop2: [ 101.420913][ T5008] loop2: partition table partially beyond EOD, truncated [ 102.236909][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 102.368508][ T5021] bond0: (slave bond_slave_1): Releasing backup interface [ 102.368692][ T5026] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 102.455296][ T5024] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 102.470361][ T5019] loop0: detected capacity change from 0 to 8192 [ 102.790604][ T5040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 102.799923][ T1347] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.953645][ T5028] chnl_net:caif_netlink_parms(): no params data found [ 103.055434][ T1347] usb 5-1: Using ep0 maxpacket: 8 [ 103.100857][ T5053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.113570][ T5053] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 103.145549][ T5053] bond0: (slave gre0): Error -95 calling set_mac_address [ 103.202081][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 103.220165][ T1347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.243002][ T1347] usb 5-1: config 0 has no interfaces? [ 103.248526][ T1347] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.288420][ T1347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.300617][ T1347] usb 5-1: config 0 descriptor?? [ 103.310636][ T5053] bond0: (slave rose0): Enslaving as an active interface with an up link [ 103.418536][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.465188][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.483538][ T5028] device bridge_slave_0 entered promiscuous mode [ 103.497602][ T5067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.524572][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.542429][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.556821][ T5028] device bridge_slave_1 entered promiscuous mode [ 103.651337][ T5028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.696676][ T5077] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.717300][ T5028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.847683][ T5028] team0: Port device team_slave_0 added [ 103.868713][ T5028] team0: Port device team_slave_1 added [ 103.890164][ T5087] loop0: detected capacity change from 0 to 1024 [ 103.950360][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.976403][ T5087] EXT4-fs (loop0): Ignoring removed bh option [ 103.988296][ T5087] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 104.009451][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.067607][ T5087] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 104.094280][ T5028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.107190][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.114631][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.146428][ T5028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.238866][ T5087] netlink: 96 bytes leftover after parsing attributes in process `syz.0.213'. [ 104.327531][ T5028] device hsr_slave_0 entered promiscuous mode [ 104.367126][ T5028] device hsr_slave_1 entered promiscuous mode [ 104.387054][ T5028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.429666][ T5028] Cannot create hsr debugfs directory [ 104.583612][ T1111] Bluetooth: hci5: command 0x0409 tx timeout [ 104.753991][ T26] audit: type=1326 audit(1769485009.745:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.0.219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8d8db1eb9 code=0x0 [ 105.722189][ T1347] usb 5-1: USB disconnect, device number 2 [ 105.814384][ T5028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.866334][ T5028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.887590][ T5028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.912660][ T5145] sch_fq: defrate 53322 ignored. [ 105.964594][ T5028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.008412][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 106.159872][ T5163] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.289616][ T5028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.314815][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.315381][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.326050][ T5028] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.329305][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.329803][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.330125][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.330200][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.358137][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.358765][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.359302][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.359679][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.359710][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.364383][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.385238][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.390656][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.393273][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.394828][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.397320][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.397969][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.439760][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.440323][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.444009][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.444711][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.452260][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.663849][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 106.679211][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.680875][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.681316][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.926180][ T5202] netlink: 'syz.4.233': attribute type 4 has an invalid length. [ 107.072542][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.073180][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.199555][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.200171][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.201357][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.201934][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.239966][ T5028] device veth0_vlan entered promiscuous mode [ 107.638900][ T5028] device veth1_vlan entered promiscuous mode [ 107.665493][ T5216] loop2: detected capacity change from 0 to 16 [ 107.684328][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 107.687832][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 107.775418][ T5216] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.806552][ T5028] device veth0_macvtap entered promiscuous mode [ 107.810523][ T5028] device veth1_macvtap entered promiscuous mode [ 107.846864][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.847429][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.847880][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.849094][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.849524][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.861603][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.879404][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.879453][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.879463][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.879474][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.879484][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.879495][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.879504][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.879515][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.880683][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.894148][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.894162][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.894167][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.894173][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.894179][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.894185][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.894189][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.894195][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.894929][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.896540][ T5028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.896560][ T5028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.896575][ T5028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.896588][ T5028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.936902][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.937548][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.938115][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.938609][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.041645][ T5212] orangefs_mount: mount request failed with -4 [ 108.072321][ T5218] loop2: detected capacity change from 0 to 1024 [ 108.114695][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.139336][ T5222] overlayfs: upper fs does not support file handles, falling back to index=off. [ 108.189052][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.198190][ T5218] EXT4-fs (loop2): Ignoring removed nobh option [ 108.206555][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.241317][ T5218] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.380206][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.469850][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.480800][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.514529][ T5218] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 108.542122][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.591822][ T5226] Illegal XDP return value 2632377014, expect packet loss! [ 108.744212][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 108.772028][ T5239] device syzkaller0 entered promiscuous mode [ 108.780421][ T5241] loop4: detected capacity change from 0 to 128 [ 108.913250][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.936972][ T5241] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.102886][ T4225] syzkaller0: tun_net_xmit 76 [ 109.109648][ T4225] syzkaller0: tun_net_xmit 48 [ 109.117648][ T5254] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.239: Invalid inode table block 2311279685043996184 in block_group 0 [ 109.144258][ T13] syzkaller0: tun_net_xmit 76 [ 109.149203][ T5251] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 109.158731][ T5251] syzkaller0: Linktype set failed because interface is up [ 109.186865][ T13] syzkaller0: tun_net_xmit 76 [ 109.321898][ T5256] netlink: 52 bytes leftover after parsing attributes in process `syz.4.249'. [ 109.392528][ T5256] loop4: detected capacity change from 0 to 512 [ 109.489316][ T5256] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 109.530293][ T5256] System zones: 0-2, 18-18, 34-35 [ 109.540683][ T5256] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.559070][ T5256] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.058961][ T5276] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.625335][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 110.645690][ T5295] HTB: quantum of class 80020005 is small. Consider r2q change. [ 110.729259][ T5299] loop1: detected capacity change from 0 to 256 [ 110.812236][ T26] audit: type=1326 audit(1769485015.815:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37f7831eb9 code=0x0 [ 110.841184][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 112.912108][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 113.905096][ T5347] loop5: detected capacity change from 0 to 32768 [ 114.006742][ T5347] XFS (loop5): Mounting V5 Filesystem [ 114.179267][ T5347] XFS (loop5): Ending clean mount [ 114.212170][ T5347] XFS (loop5): Quotacheck needed: Please wait. [ 114.272038][ T5347] XFS (loop5): Quotacheck: Done. [ 114.841695][ T5028] XFS (loop5): Unmounting Filesystem [ 115.042298][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.050019][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.114420][ T5399] batman_adv: batadv0: Interface deactivated: dummy0 [ 115.280809][ T5409] loop5: detected capacity change from 0 to 1024 [ 115.442674][ T5409] attempt to access beyond end of device [ 115.442674][ T5409] loop5: rw=0, want=393220, limit=1024 [ 115.478687][ T5409] attempt to access beyond end of device [ 115.478687][ T5409] loop5: rw=0, want=393220, limit=1024 [ 115.524954][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.586932][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.931990][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'. [ 116.036171][ T5399] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.056809][ T5399] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.075563][ T5399] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.092890][ T5399] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.294621][ T5386] chnl_net:caif_netlink_parms(): no params data found [ 116.347748][ T4224] Bluetooth: hci0: command 0x0409 tx timeout [ 116.387826][ T5425] device syzkaller0 entered promiscuous mode [ 116.594605][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.602312][ T5386] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.611018][ T5386] device bridge_slave_0 entered promiscuous mode [ 116.624070][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.638210][ T5386] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.702178][ T5386] device bridge_slave_1 entered promiscuous mode [ 116.816011][ T5386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.893294][ T5386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.915714][ T4313] device wlan1 left promiscuous mode [ 116.923469][ T4313] bridge0: port 3(wlan1) entered disabled state [ 116.963991][ T5386] team0: Port device team_slave_0 added [ 116.973466][ T5386] team0: Port device team_slave_1 added [ 117.089672][ T5386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.097059][ T4225] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.114969][ T5386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.177398][ T5386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.214170][ T5386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.231351][ T5386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.305336][ T5386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.367635][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.391099][ T4225] usb 6-1: Using ep0 maxpacket: 32 [ 117.398053][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.408816][ T4313] device bridge_slave_1 left promiscuous mode [ 117.454895][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.470166][ T5484] loop2: detected capacity change from 0 to 512 [ 117.484835][ T4313] device bridge_slave_0 left promiscuous mode [ 117.491593][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.524136][ T4225] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 117.536502][ T5486] loop0: detected capacity change from 0 to 512 [ 117.543518][ T4225] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 117.557460][ T4225] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.567248][ T5484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.575682][ T4225] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 117.589860][ T5486] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 117.599990][ T4225] usb 6-1: config 0 interface 0 has no altsetting 0 [ 117.619835][ T5484] EXT4-fs (loop2): 1 truncate cleaned up [ 117.630342][ T5484] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,usrquota,lazytime,nombcache,i_version,,errors=continue. Quota mode: writeback. [ 117.654648][ T5486] EXT4-fs (loop0): 1 truncate cleaned up [ 117.660304][ T5486] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,resgid=0x0000000000000000,errors=remount-ro,noload,data_err=ignore,noblock_validity,. Quota mode: none. [ 117.689076][ T26] audit: type=1800 audit(1769485022.685:7): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.311" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 117.881795][ T4225] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 117.922229][ T4225] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 118.025037][ T4225] usb 6-1: Product: syz [ 118.062634][ T4225] usb 6-1: Manufacturer: syz [ 118.104853][ T4225] usb 6-1: SerialNumber: syz [ 118.197630][ T4225] usb 6-1: config 0 descriptor?? [ 118.350606][ T4225] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 118.446201][ T5486] EXT4-fs error (device loop0): ext4_group_add:1699: comm syz.0.313: inode #7: comm syz.0.313: iget: illegal inode # [ 118.523255][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 118.534146][ T5486] EXT4-fs (loop0): Remounting filesystem read-only [ 118.540714][ T4225] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 118.544745][ T5486] EXT4-fs warning (device loop0): ext4_group_add:1701: Error opening resize inode [ 118.596412][ T4225] usb 6-1: USB disconnect, device number 2 [ 118.639940][ T4225] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 118.773265][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.853755][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.018449][ T4313] bond0 (unregistering): Released all slaves [ 119.076989][ T5499] loop1: detected capacity change from 0 to 1024 [ 119.113007][ T5499] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nobarrier,,errors=continue. Quota mode: none. [ 119.306854][ T5386] device hsr_slave_0 entered promiscuous mode [ 119.325773][ T5386] device hsr_slave_1 entered promiscuous mode [ 119.447683][ T5386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.494568][ T5386] Cannot create hsr debugfs directory [ 119.773917][ T5527] loop1: detected capacity change from 0 to 4096 [ 119.874987][ T5527] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.903319][ T5531] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.943881][ T5527] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 119.952871][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.992679][ T5527] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 120.020123][ T5527] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 120.321243][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.351524][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.378861][ T1108] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 120.399687][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.418378][ T1108] usb 1-1: config 0 descriptor?? [ 120.518541][ T5555] netlink: 'syz.1.334': attribute type 10 has an invalid length. [ 120.574722][ T5553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.580203][ T5557] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 120.585567][ T4590] Bluetooth: hci0: command 0x040f tx timeout [ 120.791374][ T5386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.808746][ T5386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.819339][ T5386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.830301][ T5386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.907312][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.982788][ T1108] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 121.053009][ T5386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.084901][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.111479][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.121283][ T1108] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 121.189115][ T5386] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.209132][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.221953][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.241314][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.248447][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.296914][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.310083][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.387618][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.393115][ T5582] loop2: detected capacity change from 0 to 128 [ 121.421558][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.428850][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.492043][ T5582] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.504913][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.514992][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.571181][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.581152][ T5582] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.620359][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.661823][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.692335][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.729866][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.753143][ T5524] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 121.755961][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.794048][ T5386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.811095][ T1108] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 121.832952][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.850356][ T1108] usb 1-1: USB disconnect, device number 2 [ 121.880886][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.899505][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.937509][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.990875][ T5600] loop1: detected capacity change from 0 to 128 [ 122.124349][ T5596] fido_id[5596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.156959][ T4424] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.333582][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.353422][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.414701][ T5386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.543965][ T5617] team0 (unregistering): Port device team_slave_0 removed [ 122.593288][ T5617] team0 (unregistering): Failed to send options change via netlink (err -105) [ 122.661218][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 122.666275][ T5617] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 122.711734][ T5617] team0 (unregistering): Port device team_slave_1 removed [ 122.892759][ T5633] input: syz1 as /devices/virtual/input/input6 [ 123.232431][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.254834][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.326700][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.348063][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.367815][ T5654] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=393216 (786432 ns) > initial count (524288 ns). Using initial count to start timer. [ 123.390789][ T5386] device veth0_vlan entered promiscuous mode [ 123.407615][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.436080][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.468929][ T5386] device veth1_vlan entered promiscuous mode [ 123.575263][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.591743][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.633833][ T5386] device veth0_macvtap entered promiscuous mode [ 123.653379][ T5386] device veth1_macvtap entered promiscuous mode [ 123.704309][ T5386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.718509][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061f53000: rx timeout, send abort [ 123.768547][ T5386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.798541][ T5386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.849719][ T5386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.868042][ T5386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.886641][ T5386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.929252][ T5386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.964295][ T5386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.995640][ T5386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.188454][ T5691] loop1: detected capacity change from 0 to 4096 [ 124.229001][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061f53000: abort rx timeout. Force session deactivation [ 125.673806][ T5704] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.800884][ T5707] loop0: detected capacity change from 0 to 736 [ 125.930061][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.937597][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.111109][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.162283][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.201010][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.381237][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 127.517403][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.532057][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.543092][ T1111] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 127.552463][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.581845][ T1111] usb 1-1: config 0 descriptor?? [ 127.632310][ T5712] loop1: detected capacity change from 0 to 40427 [ 127.658600][ T5674] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.670875][ T5674] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.682284][ T5674] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.691553][ T5674] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.722019][ T5712] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x1ffff [ 127.739170][ T5712] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 127.774975][ T5712] F2FS-fs (loop1): invalid crc value [ 127.783529][ T5712] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.826620][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.859043][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.867332][ T5712] F2FS-fs (loop1): Start checkpoint disabled! [ 127.876337][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.888624][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.912290][ T5386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.925141][ T5386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.925434][ T5712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 127.936342][ T5386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.963785][ T5386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.983303][ T5386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.007063][ T5386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.042585][ T5386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.045180][ T5712] F2FS-fs (loop1) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 128.076740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.123075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.156679][ T5386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.182698][ T1111] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 128.201020][ T5386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.209920][ T5386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.246400][ T5386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.318698][ T4272] attempt to access beyond end of device [ 128.318698][ T4272] loop1: rw=2049, want=40976, limit=40427 [ 128.385861][ T4292] usb 1-1: USB disconnect, device number 3 [ 128.482133][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.499585][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.587851][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.600266][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.624705][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.683545][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.304056][ T5749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 129.439007][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 129.490729][ T5756] net_ratelimit: 10 callbacks suppressed [ 129.490747][ T5756] Set syz1 is full, maxelem 8182 reached [ 129.801127][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.051174][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 130.171672][ T21] usb 3-1: config 0 has no interfaces? [ 130.178662][ T21] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.261456][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.330517][ T21] usb 3-1: config 0 descriptor?? [ 130.362667][ T5770] loop1: detected capacity change from 0 to 764 [ 130.395542][ T5770] rock: directory entry would overflow storage [ 130.408372][ T5770] rock: sig=0x4654, size=5, remaining=4 [ 130.531087][ T5770] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 130.588876][ T1108] usb 3-1: USB disconnect, device number 3 [ 131.251593][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.423162][ T5777] syz.0.384 uses obsolete (PF_INET,SOCK_PACKET) [ 131.831606][ T5777] loop0: detected capacity change from 0 to 65536 [ 131.881022][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 131.955327][ T5777] XFS (loop0): Mounting V5 Filesystem [ 132.001848][ T1108] usb 3-1: config 0 has no interfaces? [ 132.007378][ T1108] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.115877][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.140104][ T1108] usb 3-1: config 0 descriptor?? [ 132.163440][ T5777] XFS (loop0): Ending clean mount [ 132.174597][ T5777] XFS (loop0): Quotacheck needed: Please wait. [ 132.279190][ T5777] XFS (loop0): Quotacheck: Done. [ 132.465033][ T4191] XFS (loop0): Unmounting Filesystem [ 132.775581][ T5823] Set syz1 is full, maxelem 8182 reached [ 133.568383][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.574864][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.751254][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 133.869051][ T1347] usb 3-1: USB disconnect, device number 4 [ 134.171028][ T4225] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 134.203144][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.218540][ T21] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.243704][ T21] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 134.262981][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.370498][ T21] usb 6-1: config 0 descriptor?? [ 135.111251][ T21] usbhid 6-1:0.0: can't add hid device: -71 [ 135.127870][ T21] usbhid: probe of 6-1:0.0 failed with error -71 [ 135.144372][ T5862] loop0: detected capacity change from 0 to 1764 [ 135.178582][ T21] usb 6-1: USB disconnect, device number 3 [ 135.231132][ T4225] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.295772][ T4225] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.358429][ T4225] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.475760][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.488012][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 135.646258][ T5897] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 135.781286][ T4225] usb 5-1: usb_control_msg returned -32 [ 135.791267][ T4225] usbtmc 5-1:16.0: can't read capabilities [ 135.907826][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 135.968747][ T26] audit: type=1326 audit(1769485040.965:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 135.993065][ T26] audit: type=1326 audit(1769485040.965:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.017756][ T26] audit: type=1326 audit(1769485040.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.071085][ T26] audit: type=1326 audit(1769485040.995:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.096708][ T26] audit: type=1326 audit(1769485040.995:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.119908][ T26] audit: type=1326 audit(1769485040.995:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.150311][ T26] audit: type=1326 audit(1769485040.995:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.172821][ T26] audit: type=1326 audit(1769485041.025:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.195319][ T26] audit: type=1326 audit(1769485041.025:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecd1c5eb9 code=0x7ffc0000 [ 136.219346][ T26] audit: type=1326 audit(1769485041.025:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1ecd18678e code=0x7ffc0000 [ 136.384072][ T1111] usb 5-1: USB disconnect, device number 3 [ 136.628111][ T5919] loop1: detected capacity change from 0 to 4096 [ 136.691783][ T5919] ntfs3: Bad value for 'gid' [ 136.720585][ T5919] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(23948779807205) <= P.seqno(0) <= S.SWH(23948779807279)) and (P.ackno exists or LAWL(202633730878790) <= P.ackno(202633730878791) <= S.AWH(202633730878791), sending SYNC... [ 137.038669][ T5935] loop2: detected capacity change from 0 to 512 [ 137.312842][ T5935] EXT4-fs (loop2): 1 truncate cleaned up [ 137.318564][ T5935] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000d,,errors=continue. Quota mode: none. [ 138.599143][ T5935] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 138.686378][ T5935] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.421: bg 0: block 465: padding at end of block bitmap is not set [ 138.967038][ T5935] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 138.972425][ T5953] loop1: detected capacity change from 0 to 32768 [ 139.025424][ T5935] EXT4-fs error (device loop2): ext4_free_branches:1043: inode #13: block 234881024: comm syz.2.421: Read failure [ 139.040856][ T5953] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.426 (5953) [ 139.086585][ T5953] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.095597][ T5953] BTRFS info (device loop1): setting nodatacow, compression disabled [ 139.103786][ T5953] BTRFS info (device loop1): force clearing of disk cache [ 139.111203][ T5953] BTRFS info (device loop1): enabling ssd optimizations [ 139.118148][ T5953] BTRFS info (device loop1): using spread ssd allocation scheme [ 139.125966][ T5953] BTRFS info (device loop1): turning off barriers [ 139.132488][ T5953] BTRFS info (device loop1): disabling free space tree [ 139.139354][ T5953] BTRFS info (device loop1): not using ssd optimizations [ 139.146432][ T5953] BTRFS info (device loop1): not using spread ssd allocation scheme [ 139.154453][ T5953] BTRFS info (device loop1): has skinny extents [ 139.248899][ T5953] BTRFS info (device loop1): clearing free space tree [ 139.265454][ T5953] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.275770][ T5953] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.664393][ T5985] BTRFS info (device loop1): space_info 5 has 131072 free, is not full [ 139.673435][ T5985] BTRFS info (device loop1): space_info total=3276800, used=49152, pinned=0, reserved=12288, may_use=3084288, readonly=0 zone_unusable=0 [ 139.687635][ T5985] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 139.697443][ T5985] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 139.705801][ T5985] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 139.713519][ T5985] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 139.721465][ T5985] BTRFS info (device loop1): delayed_refs_rsv: size 393216 reserved 393216 [ 139.927299][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 140.323207][ T5991] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.984605][ T5999] loop0: detected capacity change from 0 to 512 [ 141.109024][ T6001] loop5: detected capacity change from 0 to 2048 [ 141.133518][ T5999] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.187357][ T6001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.402086][ T5999] EXT4-fs (loop0): 1 truncate cleaned up [ 141.422658][ T5999] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 142.763186][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 143.276175][ T6043] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.977026][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 144.311123][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.430221][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.449'. [ 144.530567][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.450'. [ 144.741393][ T21] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 144.753519][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.764404][ T21] usb 3-1: config 0 has no interfaces? [ 144.882965][ T6072] loop5: detected capacity change from 0 to 32768 [ 144.921214][ T21] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=fc.ee [ 144.934069][ T21] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 144.943114][ T21] usb 3-1: Product: syz [ 144.947412][ T21] usb 3-1: Manufacturer: syz [ 144.952544][ T21] usb 3-1: SerialNumber: syz [ 144.958204][ T21] usb 3-1: config 0 descriptor?? [ 144.981235][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.000482][ T6072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.453 (6072) [ 145.033101][ T6072] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 145.041964][ T6072] BTRFS info (device loop5): setting nodatacow, compression disabled [ 145.050218][ T6072] BTRFS info (device loop5): force clearing of disk cache [ 145.057841][ T6072] BTRFS info (device loop5): enabling ssd optimizations [ 145.064836][ T6072] BTRFS info (device loop5): using spread ssd allocation scheme [ 145.072558][ T6072] BTRFS info (device loop5): turning off barriers [ 145.079022][ T6072] BTRFS info (device loop5): disabling free space tree [ 145.086042][ T6072] BTRFS info (device loop5): not using ssd optimizations [ 145.093155][ T6072] BTRFS info (device loop5): not using spread ssd allocation scheme [ 145.101253][ T6072] BTRFS info (device loop5): has skinny extents [ 145.149707][ T6072] BTRFS info (device loop5): clearing free space tree [ 145.156852][ T6072] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.166675][ T6072] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.234413][ T6051] tipc: Started in network mode [ 145.239498][ T6051] tipc: Node identity 4a26abfe347a, cluster identity 4711 [ 145.256813][ T6051] tipc: Enabled bearer , priority 0 [ 145.272652][ T6093] loop1: detected capacity change from 0 to 2048 [ 145.308256][ T6093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.315948][ T6051] device syzkaller0 entered promiscuous mode [ 145.401591][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.429544][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.459539][ T23] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 145.480721][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.521144][ T23] usb 1-1: config 0 descriptor?? [ 145.529324][ T6050] tipc: Resetting bearer [ 145.535781][ T21] usb 3-1: USB disconnect, device number 5 [ 145.592595][ T6050] tipc: Disabling bearer [ 145.650496][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 145.829884][ T6103] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.846309][ T6070] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.016593][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 146.032465][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 146.058651][ T23] usb 1-1: USB disconnect, device number 4 [ 148.051057][ T6127] netlink: 'syz.2.460': attribute type 2 has an invalid length. [ 148.942173][ T6137] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.000931][ T6141] loop2: detected capacity change from 0 to 2048 [ 149.068797][ T6141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.218568][ T6146] loop4: detected capacity change from 0 to 32768 [ 149.324703][ T6146] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.469 (6146) [ 149.360272][ T6153] loop0: detected capacity change from 0 to 128 [ 149.369475][ T6146] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 149.378404][ T6146] BTRFS info (device loop4): setting nodatacow, compression disabled [ 149.386673][ T6146] BTRFS info (device loop4): force clearing of disk cache [ 149.393844][ T6146] BTRFS info (device loop4): enabling ssd optimizations [ 149.400789][ T6146] BTRFS info (device loop4): using spread ssd allocation scheme [ 149.408474][ T6146] BTRFS info (device loop4): turning off barriers [ 149.415095][ T6146] BTRFS info (device loop4): disabling free space tree [ 149.422189][ T6146] BTRFS info (device loop4): not using ssd optimizations [ 149.429226][ T6146] BTRFS info (device loop4): not using spread ssd allocation scheme [ 149.437258][ T6146] BTRFS info (device loop4): has skinny extents [ 149.588132][ T6153] attempt to access beyond end of device [ 149.588132][ T6153] loop0: rw=2049, want=234, limit=128 [ 149.646037][ T6146] BTRFS info (device loop4): clearing free space tree [ 149.653006][ T6146] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.663105][ T6146] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.788510][ T6153] attempt to access beyond end of device [ 149.788510][ T6153] loop0: rw=2049, want=505, limit=128 [ 149.792936][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.820709][ T6153] attempt to access beyond end of device [ 149.820709][ T6153] loop0: rw=524288, want=497, limit=128 [ 149.861522][ T6153] attempt to access beyond end of device [ 149.861522][ T6153] loop0: rw=0, want=249, limit=128 [ 149.897180][ T6173] attempt to access beyond end of device [ 149.897180][ T6173] loop0: rw=0, want=242, limit=128 [ 149.935734][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.949245][ T6180] tipc: Failed to remove unknown binding: 66,1,1/0:3319893158/3319893160 [ 149.970488][ T6153] attempt to access beyond end of device [ 149.970488][ T6153] loop0: rw=0, want=242, limit=128 [ 150.012586][ T6153] Buffer I/O error on dev loop0, logical block 241, async page read [ 150.018696][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.021551][ T6180] tipc: Failed to remove unknown binding: 66,1,1/0:3319893158/3319893160 [ 150.046883][ T6153] attempt to access beyond end of device [ 150.046883][ T6153] loop0: rw=0, want=243, limit=128 [ 150.058316][ T6180] tipc: Failed to remove unknown binding: 66,1,1/0:3319893158/3319893160 [ 150.073881][ T6153] Buffer I/O error on dev loop0, logical block 242, async page read [ 150.110578][ T6153] attempt to access beyond end of device [ 150.110578][ T6153] loop0: rw=0, want=244, limit=128 [ 150.148921][ T6153] Buffer I/O error on dev loop0, logical block 243, async page read [ 150.158078][ T6153] attempt to access beyond end of device [ 150.158078][ T6153] loop0: rw=0, want=245, limit=128 [ 150.169101][ T6153] Buffer I/O error on dev loop0, logical block 244, async page read [ 150.177804][ T6153] attempt to access beyond end of device [ 150.177804][ T6153] loop0: rw=0, want=246, limit=128 [ 150.215209][ T6153] Buffer I/O error on dev loop0, logical block 245, async page read [ 150.227094][ T6153] Buffer I/O error on dev loop0, logical block 246, async page read [ 150.235721][ T6153] Buffer I/O error on dev loop0, logical block 247, async page read [ 150.263169][ T6153] Buffer I/O error on dev loop0, logical block 248, async page read [ 150.284706][ T6024] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.652427][ T6024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.670387][ T6024] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.683648][ T6200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.708251][ T6200] team0: Port device bond0 added [ 150.712873][ T6024] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 150.725507][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.795541][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.813368][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.897486][ T6024] usb 2-1: config 0 descriptor?? [ 151.857303][ T6221] loop0: detected capacity change from 0 to 256 [ 151.890038][ T6219] loop4: detected capacity change from 0 to 2048 [ 151.915485][ T6221] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.960171][ T4225] syzkaller0: tun_net_xmit 76 [ 151.965191][ T6024] usbhid 2-1:0.0: can't add hid device: -71 [ 151.967625][ T6219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.971613][ T4225] syzkaller0: tun_net_xmit 48 [ 151.985634][ T6024] usbhid: probe of 2-1:0.0 failed with error -71 [ 151.993035][ T6224] syzkaller0: create flow: hash 1720427110 index 1 [ 152.003209][ T6221] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 152.037864][ T6024] usb 2-1: USB disconnect, device number 3 [ 152.065184][ T4225] syzkaller0: tun_net_xmit 76 [ 152.094211][ T6214] syzkaller0: delete flow: hash 1720427110 index 1 [ 152.390026][ T6230] tipc: Failed to remove unknown binding: 66,1,1/0:294071213/294071215 [ 152.409353][ T6230] tipc: Failed to remove unknown binding: 66,1,1/0:294071213/294071215 [ 152.420045][ T6230] tipc: Failed to remove unknown binding: 66,1,1/0:294071213/294071215 [ 153.113217][ T6233] loop1: detected capacity change from 0 to 128 [ 153.566283][ T6250] bridge0: port 3(erspan0) entered blocking state [ 153.607964][ T6233] Buffer I/O error on dev loop1, logical block 241, async page read [ 153.616549][ T6250] bridge0: port 3(erspan0) entered disabled state [ 153.651075][ T6233] Buffer I/O error on dev loop1, logical block 242, async page read [ 153.681091][ T6250] device erspan0 entered promiscuous mode [ 153.779506][ T6254] device erspan0 left promiscuous mode [ 153.795299][ T6254] bridge0: port 3(erspan0) entered disabled state [ 153.930736][ T6257] loop4: detected capacity change from 0 to 2048 [ 154.058352][ T6257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.060585][ T6260] syzkaller0: create flow: hash 1720427110 index 1 [ 154.097206][ T4593] syzkaller0: tun_net_xmit 76 [ 154.105461][ T4593] syzkaller0: tun_net_xmit 48 [ 154.127134][ T4593] syzkaller0: tun_net_xmit 76 [ 154.189375][ T6258] syzkaller0: delete flow: hash 1720427110 index 1 [ 154.363210][ T6264] loop5: detected capacity change from 0 to 128 [ 154.640751][ T6270] handle_bad_sector: 3747 callbacks suppressed [ 154.640772][ T6270] attempt to access beyond end of device [ 154.640772][ T6270] loop5: rw=2049, want=873, limit=128 [ 154.753688][ T6264] attempt to access beyond end of device [ 154.753688][ T6264] loop5: rw=524288, want=497, limit=128 [ 154.785813][ T6264] attempt to access beyond end of device [ 154.785813][ T6264] loop5: rw=0, want=249, limit=128 [ 154.810069][ T6270] attempt to access beyond end of device [ 154.810069][ T6270] loop5: rw=0, want=242, limit=128 [ 154.821200][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.841162][ T6264] attempt to access beyond end of device [ 154.841162][ T6264] loop5: rw=0, want=242, limit=128 [ 154.863813][ T6264] attempt to access beyond end of device [ 154.863813][ T6264] loop5: rw=0, want=243, limit=128 [ 154.878876][ T6264] attempt to access beyond end of device [ 154.878876][ T6264] loop5: rw=0, want=244, limit=128 [ 154.898884][ T6264] attempt to access beyond end of device [ 154.898884][ T6264] loop5: rw=0, want=245, limit=128 [ 154.910043][ T6264] attempt to access beyond end of device [ 154.910043][ T6264] loop5: rw=0, want=246, limit=128 [ 154.927157][ T6264] attempt to access beyond end of device [ 154.927157][ T6264] loop5: rw=0, want=247, limit=128 [ 155.027115][ T6264] buffer_io_error: 4832 callbacks suppressed [ 155.027134][ T6264] Buffer I/O error on dev loop5, logical block 243, async page read [ 155.064056][ T6264] Buffer I/O error on dev loop5, logical block 244, async page read [ 155.072196][ T6264] Buffer I/O error on dev loop5, logical block 245, async page read [ 155.080282][ T6264] Buffer I/O error on dev loop5, logical block 246, async page read [ 155.098056][ T6264] Buffer I/O error on dev loop5, logical block 247, async page read [ 155.112364][ T6274] tipc: Failed to remove unknown binding: 66,1,1/0:2570773928/2570773930 [ 155.126177][ T6264] Buffer I/O error on dev loop5, logical block 248, async page read [ 155.137741][ T6274] tipc: Failed to remove unknown binding: 66,1,1/0:2570773928/2570773930 [ 155.146778][ T6264] Buffer I/O error on dev loop5, logical block 241, async page read [ 155.231199][ T6274] tipc: Failed to remove unknown binding: 66,1,1/0:2570773928/2570773930 [ 155.246919][ T6264] Buffer I/O error on dev loop5, logical block 242, async page read [ 155.514482][ T6264] Buffer I/O error on dev loop5, logical block 243, async page read [ 155.738099][ T6264] Buffer I/O error on dev loop5, logical block 244, async page read [ 155.963419][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.983472][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.040464][ T23] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 156.106429][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.133026][ T23] usb 5-1: config 0 descriptor?? [ 157.621453][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 157.630207][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 157.802579][ T23] usb 5-1: USB disconnect, device number 4 [ 158.073634][ T6299] loop2: detected capacity change from 0 to 8192 [ 159.031320][ T6299] tipc: Cannot configure node identity twice [ 159.059548][ T6318] loop0: detected capacity change from 0 to 128 [ 159.135443][ T6323] tipc: Failed to remove unknown binding: 66,1,1/3696559041:1742027610/1742027612 [ 159.273528][ T6325] loop2: detected capacity change from 0 to 128 [ 159.282175][ T6323] tipc: Failed to remove unknown binding: 66,1,1/3696559041:1742027610/1742027612 [ 159.292987][ T6323] tipc: Failed to remove unknown binding: 66,1,1/3696559041:1742027610/1742027612 [ 159.351039][ T6318] loop0: detected capacity change from 128 to 1 [ 159.578414][ T6318] FAT-fs (loop0): FAT read failed (blocknr 1) [ 159.709451][ T6318] FAT-fs (loop0): unable to read inode block for updating (i_pos 52) [ 159.846998][ T6318] FAT-fs (loop0): unable to read inode block for updating (i_pos 52) [ 160.003543][ T6325] handle_bad_sector: 5266 callbacks suppressed [ 160.003560][ T6325] attempt to access beyond end of device [ 160.003560][ T6325] loop2: rw=2049, want=234, limit=128 [ 160.111914][ T6325] attempt to access beyond end of device [ 160.111914][ T6325] loop2: rw=2049, want=1041, limit=128 [ 160.168316][ T6338] binder: 6336:6338 ioctl c0306201 200000000680 returned -14 [ 160.194319][ T4314] FAT-fs (loop0): unable to read inode block for updating (i_pos 52) [ 160.207809][ T6325] attempt to access beyond end of device [ 160.207809][ T6325] loop2: rw=524288, want=497, limit=128 [ 160.249885][ T6325] attempt to access beyond end of device [ 160.249885][ T6325] loop2: rw=0, want=249, limit=128 [ 160.279627][ T6325] attempt to access beyond end of device [ 160.279627][ T6325] loop2: rw=0, want=249, limit=128 [ 160.301162][ T6325] attempt to access beyond end of device [ 160.301162][ T6325] loop2: rw=0, want=249, limit=128 [ 160.318946][ T6325] attempt to access beyond end of device [ 160.318946][ T6325] loop2: rw=0, want=249, limit=128 [ 160.341194][ T6347] attempt to access beyond end of device [ 160.341194][ T6347] loop2: rw=0, want=242, limit=128 [ 160.372025][ T6351] device veth0 entered promiscuous mode [ 160.378007][ T6346] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 160.385142][ T6346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.387570][ T6325] attempt to access beyond end of device [ 160.387570][ T6325] loop2: rw=0, want=242, limit=128 [ 160.437519][ T6346] vhci_hcd vhci_hcd.0: Device attached [ 160.454875][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 160.466780][ T6325] buffer_io_error: 3700 callbacks suppressed [ 160.466797][ T6325] Buffer I/O error on dev loop2, logical block 241, async page read [ 160.492843][ T6325] attempt to access beyond end of device [ 160.492843][ T6325] loop2: rw=0, want=243, limit=128 [ 160.510516][ T6325] Buffer I/O error on dev loop2, logical block 242, async page read [ 160.520132][ T6325] Buffer I/O error on dev loop2, logical block 243, async page read [ 160.535446][ T6325] Buffer I/O error on dev loop2, logical block 244, async page read [ 160.546343][ T6325] Buffer I/O error on dev loop2, logical block 245, async page read [ 160.559268][ T6325] Buffer I/O error on dev loop2, logical block 246, async page read [ 160.570233][ T6325] Buffer I/O error on dev loop2, logical block 247, async page read [ 160.581282][ T4316] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.618928][ T6325] Buffer I/O error on dev loop2, logical block 248, async page read [ 160.661042][ T4593] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.701103][ T6191] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 160.971216][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.982576][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.992854][ T4316] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.006436][ T4316] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.016182][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.027095][ T4316] usb 6-1: config 0 descriptor?? [ 161.041106][ T6024] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.041248][ T4593] usb 5-1: config 0 has no interfaces? [ 161.071034][ T4225] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 161.078065][ T4593] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 161.087925][ T4593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.102711][ T4593] usb 5-1: config 0 descriptor?? [ 161.370176][ T6019] usb 5-1: USB disconnect, device number 5 [ 161.378031][ T6352] vhci_hcd: connection closed [ 161.381750][ T4314] vhci_hcd: stop threads [ 161.390898][ T4314] vhci_hcd: release socket [ 161.397725][ T4314] vhci_hcd: disconnect device [ 161.441328][ T6024] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.450349][ T6024] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.459639][ T6191] vhci_hcd: vhci_device speed not set [ 161.466015][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.475981][ T4225] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.489028][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.497334][ T4225] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 161.507973][ T6024] usb 1-1: config 0 descriptor?? [ 161.513061][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.513319][ T4316] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 161.522954][ T4225] usb 3-1: config 0 descriptor?? [ 161.543711][ T4316] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 161.810479][ T6361] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.916970][ T6365] loop1: detected capacity change from 0 to 128 [ 161.923600][ T4225] usbhid 3-1:0.0: can't add hid device: -71 [ 161.929688][ T4225] usbhid: probe of 3-1:0.0 failed with error -71 [ 161.938640][ T4225] usb 3-1: USB disconnect, device number 6 [ 161.946521][ T4287] udevd[4287]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 162.131621][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.139189][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.178244][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.183310][ T6365] Buffer I/O error on dev loop1, logical block 241, async page read [ 162.186118][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.206250][ T6365] Buffer I/O error on dev loop1, logical block 242, async page read [ 162.247850][ T6374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.812035][ T6385] binder: 6384:6385 ioctl c0306201 200000000680 returned -14 [ 164.263564][ T4593] usb 6-1: USB disconnect, device number 4 [ 164.281868][ T4590] usb 1-1: USB disconnect, device number 5 [ 164.494625][ T6407] loop2: detected capacity change from 0 to 256 [ 164.521573][ T6411] Bluetooth: hci0: service_discovery: too big uuid_count value 63764 [ 164.550202][ T6407] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.659994][ T6418] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 164.721908][ T6419] loop5: detected capacity change from 0 to 128 [ 164.732696][ T6418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.782245][ T6418] team0: Port device bond0 added [ 165.100459][ T6419] handle_bad_sector: 19615 callbacks suppressed [ 165.100550][ T6419] attempt to access beyond end of device [ 165.100550][ T6419] loop5: rw=524288, want=497, limit=128 [ 165.695076][ T6419] attempt to access beyond end of device [ 165.695076][ T6419] loop5: rw=0, want=249, limit=128 [ 165.712185][ T6419] attempt to access beyond end of device [ 165.712185][ T6419] loop5: rw=0, want=249, limit=128 [ 165.729879][ T6419] attempt to access beyond end of device [ 165.729879][ T6419] loop5: rw=0, want=249, limit=128 [ 165.783264][ T6426] attempt to access beyond end of device [ 165.783264][ T6426] loop5: rw=0, want=242, limit=128 [ 165.826762][ T6419] attempt to access beyond end of device [ 165.826762][ T6419] loop5: rw=0, want=242, limit=128 [ 165.871245][ T6419] buffer_io_error: 19238 callbacks suppressed [ 165.871261][ T6419] Buffer I/O error on dev loop5, logical block 241, async page read [ 165.886945][ T6439] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 165.893444][ T6419] attempt to access beyond end of device [ 165.893444][ T6419] loop5: rw=0, want=243, limit=128 [ 165.907346][ T6419] Buffer I/O error on dev loop5, logical block 242, async page read [ 165.920096][ T6419] attempt to access beyond end of device [ 165.920096][ T6419] loop5: rw=0, want=244, limit=128 [ 165.968359][ T6439] team0: Port device dummy0 added [ 165.973330][ T6419] Buffer I/O error on dev loop5, logical block 243, async page read [ 165.986266][ T6419] attempt to access beyond end of device [ 165.986266][ T6419] loop5: rw=0, want=245, limit=128 [ 165.998337][ T6419] Buffer I/O error on dev loop5, logical block 244, async page read [ 166.019626][ T6419] attempt to access beyond end of device [ 166.019626][ T6419] loop5: rw=0, want=246, limit=128 [ 166.068807][ T6419] Buffer I/O error on dev loop5, logical block 245, async page read [ 166.100231][ T6419] Buffer I/O error on dev loop5, logical block 246, async page read [ 166.109134][ T6419] Buffer I/O error on dev loop5, logical block 247, async page read [ 166.117568][ T6419] Buffer I/O error on dev loop5, logical block 248, async page read [ 166.311274][ T4225] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.732205][ T4225] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.828215][ T4225] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.972519][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.030448][ T4225] usb 3-1: config 0 descriptor?? [ 167.717716][ T6440] batman_adv: batadv0: Removing interface: dummy0 [ 167.758405][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.816565][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.903478][ T6024] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.148755][ T6481] loop5: detected capacity change from 0 to 128 [ 168.218763][ T6483] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 168.271215][ T6024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.301036][ T6024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.333403][ T6024] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 168.352195][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.383429][ T6024] usb 2-1: config 0 descriptor?? [ 168.405736][ T6481] Buffer I/O error on dev loop5, logical block 241, async page read [ 168.445707][ T6481] Buffer I/O error on dev loop5, logical block 242, async page read [ 168.862917][ T6024] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 168.874664][ T6024] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 169.071279][ T6024] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 169.130034][ T6191] usb 3-1: USB disconnect, device number 7 [ 169.348367][ T6511] loop5: detected capacity change from 0 to 512 [ 169.911830][ T6511] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 170.042411][ T6511] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.098153][ T6511] EXT4-fs error (device loop5): ext4_discard_preallocations:5134: comm syz.5.585: Error -117 loading buddy information for 4294724827 [ 170.124255][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 170.130839][ T6511] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.585: Freeing blocks not in datazone - block = 20, count = 1 [ 170.151184][ T6024] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 170.195867][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 170.208194][ T6511] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz.5.585: Invalid inode table block 0 in block_group 0 [ 170.258123][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 170.297613][ T6511] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 170.320581][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 170.328025][ T6511] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.585: mark_inode_dirty error [ 170.340257][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 170.347911][ T6511] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz.5.585: Invalid inode table block 0 in block_group 0 [ 170.748664][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 170.847974][ T6511] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 171.052042][ T6508] loop2: detected capacity change from 0 to 512 [ 171.072325][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 171.088245][ T6511] EXT4-fs error (device loop5): ext4_punch_hole:4119: inode #15: comm syz.5.585: mark_inode_dirty error [ 171.100880][ T6511] EXT4-fs (loop5): Remounting filesystem read-only [ 171.152380][ T5879] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 171.166900][ T5879] EXT4-fs (loop5): Remounting filesystem read-only [ 171.176371][ T5879] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 171.207167][ T5879] EXT4-fs (loop5): Remounting filesystem read-only [ 171.239309][ T6508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.268881][ T6508] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.373177][ T6549] loop5: detected capacity change from 0 to 128 [ 171.438020][ T6549] handle_bad_sector: 11714 callbacks suppressed [ 171.438037][ T6549] attempt to access beyond end of device [ 171.438037][ T6549] loop5: rw=2049, want=234, limit=128 [ 171.556056][ T6549] attempt to access beyond end of device [ 171.556056][ T6549] loop5: rw=2049, want=1041, limit=128 [ 172.111318][ T6024] usb 2-1: device descriptor read/64, error -71 [ 172.247221][ T6557] attempt to access beyond end of device [ 172.247221][ T6557] loop5: rw=524288, want=497, limit=128 [ 172.260708][ T6557] attempt to access beyond end of device [ 172.260708][ T6557] loop5: rw=0, want=249, limit=128 [ 172.276880][ T6557] attempt to access beyond end of device [ 172.276880][ T6557] loop5: rw=0, want=249, limit=128 [ 172.295285][ T6557] attempt to access beyond end of device [ 172.295285][ T6557] loop5: rw=0, want=249, limit=128 [ 172.331142][ T6557] attempt to access beyond end of device [ 172.331142][ T6557] loop5: rw=0, want=249, limit=128 [ 172.344927][ T6549] attempt to access beyond end of device [ 172.344927][ T6549] loop5: rw=0, want=242, limit=128 [ 172.357892][ T6557] attempt to access beyond end of device [ 172.357892][ T6557] loop5: rw=0, want=242, limit=128 [ 172.370478][ T6557] buffer_io_error: 10982 callbacks suppressed [ 172.370497][ T6557] Buffer I/O error on dev loop5, logical block 241, async page read [ 172.386993][ T6557] attempt to access beyond end of device [ 172.386993][ T6557] loop5: rw=0, want=243, limit=128 [ 172.395634][ T6024] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 172.406922][ T6557] Buffer I/O error on dev loop5, logical block 242, async page read [ 172.416124][ T6557] Buffer I/O error on dev loop5, logical block 243, async page read [ 172.433146][ T6559] loop2: detected capacity change from 0 to 512 [ 172.447394][ T6557] Buffer I/O error on dev loop5, logical block 244, async page read [ 172.457477][ T6557] Buffer I/O error on dev loop5, logical block 245, async page read [ 172.466457][ T6557] Buffer I/O error on dev loop5, logical block 246, async page read [ 172.486528][ T6557] Buffer I/O error on dev loop5, logical block 247, async page read [ 172.506015][ T6559] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.522380][ T6557] Buffer I/O error on dev loop5, logical block 248, async page read [ 172.578618][ T6567] loop4: detected capacity change from 0 to 256 [ 172.578659][ T6559] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.601: iget: bad i_size value: 38620345925642 [ 172.614524][ T6559] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.601: couldn't read orphan inode 15 (err -117) [ 172.630900][ T6559] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 172.690169][ T6567] exFAT-fs (loop4): hint_cluster is invalid (17) [ 172.705912][ T6567] exFAT-fs (loop4): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 172.731467][ T6024] usb 2-1: device firmware changed [ 172.737846][ T6191] usb 2-1: USB disconnect, device number 4 [ 172.766935][ T6567] exFAT-fs (loop4): Filesystem has been set read-only [ 172.921062][ T6191] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.953635][ T6573] loop2: detected capacity change from 0 to 128 [ 173.008746][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 173.008760][ T26] audit: type=1326 audit(1769485078.005:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.4.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa4179eeb9 code=0x0 [ 173.048277][ T26] audit: type=1800 audit(1769485078.035:29): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.606" name="bus" dev="loop2" ino=1048638 res=0 errno=0 [ 173.281202][ T6191] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.290758][ T6191] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 173.308021][ T6191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.329047][ T6191] usb 2-1: config 0 descriptor?? [ 174.365126][ T6594] xt_NFQUEUE: number of total queues is 0 [ 174.442029][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.494035][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.686902][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.800414][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.919371][ T6598] loop2: detected capacity change from 0 to 1024 [ 174.957404][ T6598] EXT4-fs (loop2): Ignoring removed orlov option [ 175.024716][ T6598] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nombcache,nodioread_nolock,norecovery,sysvgroups,resgid=0x0000000000000000,delalloc,grpid,orlov,. Quota mode: none. [ 175.045298][ T6602] loop5: detected capacity change from 0 to 128 [ 175.093815][ T26] audit: type=1800 audit(1769485080.095:30): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.615" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 175.100162][ T6598] Trying to write to read-only block-device loop2 [ 175.125341][ T6598] Trying to write to read-only block-device loop2 [ 175.135176][ T6598] Trying to write to read-only block-device loop2 [ 175.143272][ T6598] Trying to write to read-only block-device loop2 [ 175.156991][ T6603] Trying to write to read-only block-device loop2 [ 175.203222][ T4193] Trying to write to read-only block-device loop2 [ 175.210125][ T4193] Trying to write to read-only block-device loop2 [ 175.246952][ T4193] Trying to write to read-only block-device loop2 [ 175.260459][ T4193] Trying to write to read-only block-device loop2 [ 175.267301][ T4193] Trying to write to read-only block-device loop2 [ 175.393825][ T6611] netlink: 'syz.2.619': attribute type 27 has an invalid length. [ 175.405057][ T6602] Buffer I/O error on dev loop5, logical block 241, async page read [ 175.409825][ T6614] loop2: detected capacity change from 0 to 7 [ 175.420838][ T6611] netlink: 'syz.2.619': attribute type 4 has an invalid length. [ 175.428957][ T6614] loop2: [ 175.432488][ T6614] loop2: partition table partially beyond EOD, truncated [ 175.432758][ T6602] Buffer I/O error on dev loop5, logical block 242, async page read [ 175.442813][ T6611] netlink: 144 bytes leftover after parsing attributes in process `syz.2.619'. [ 176.451600][ T6602] handle_bad_sector: 7664 callbacks suppressed [ 176.451911][ T6602] attempt to access beyond end of device [ 176.451911][ T6602] loop5: rw=0, want=249, limit=128 [ 176.567975][ T4583] Bluetooth: hci1: command 0x0406 tx timeout [ 176.591017][ T6191] usb 2-1: USB disconnect, device number 5 [ 176.644306][ T4583] Bluetooth: hci2: command 0x0406 tx timeout [ 176.650481][ T4583] Bluetooth: hci3: command 0x0406 tx timeout [ 176.656608][ T4583] Bluetooth: hci4: command 0x0406 tx timeout [ 176.785754][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.793346][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.074735][ T6648] loop5: detected capacity change from 0 to 1024 [ 177.655546][ T6191] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.911285][ T6191] usb 2-1: Using ep0 maxpacket: 16 [ 178.054375][ T6191] usb 2-1: config 0 has no interfaces? [ 178.243887][ T6191] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.253988][ T6191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.268831][ T6191] usb 2-1: Product: syz [ 178.276473][ T6191] usb 2-1: Manufacturer: syz [ 178.281789][ T6191] usb 2-1: SerialNumber: syz [ 178.288128][ T6191] usb 2-1: config 0 descriptor?? [ 178.307611][ T6665] loop2: detected capacity change from 0 to 4096 [ 178.565300][ T6620] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.575784][ T6191] usb 2-1: USB disconnect, device number 6 [ 178.587564][ T6620] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.598114][ T6620] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.607031][ T6620] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.687295][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.623'. [ 178.699761][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.632'. [ 178.893004][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.639'. [ 179.131448][ T4292] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.562600][ T4292] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.572705][ T4292] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.583314][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.589875][ T6680] loop5: detected capacity change from 0 to 128 [ 179.597598][ T4292] usb 5-1: config 0 descriptor?? [ 179.675783][ T6680] attempt to access beyond end of device [ 179.675783][ T6680] loop5: rw=2049, want=234, limit=128 [ 179.763254][ T6680] attempt to access beyond end of device [ 179.763254][ T6680] loop5: rw=2049, want=1041, limit=128 [ 179.806200][ T6680] attempt to access beyond end of device [ 179.806200][ T6680] loop5: rw=524288, want=497, limit=128 [ 179.857165][ T6688] attempt to access beyond end of device [ 179.857165][ T6688] loop5: rw=0, want=242, limit=128 [ 179.864526][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 179.881542][ T6680] attempt to access beyond end of device [ 179.881542][ T6680] loop5: rw=0, want=242, limit=128 [ 179.900913][ T6680] buffer_io_error: 7174 callbacks suppressed [ 179.900931][ T6680] Buffer I/O error on dev loop5, logical block 241, async page read [ 179.944559][ T6680] attempt to access beyond end of device [ 179.944559][ T6680] loop5: rw=0, want=243, limit=128 [ 179.956571][ T6680] Buffer I/O error on dev loop5, logical block 242, async page read [ 180.017655][ T6680] attempt to access beyond end of device [ 180.017655][ T6680] loop5: rw=0, want=244, limit=128 [ 180.048005][ T6680] Buffer I/O error on dev loop5, logical block 243, async page read [ 180.059637][ T6680] attempt to access beyond end of device [ 180.059637][ T6680] loop5: rw=0, want=245, limit=128 [ 180.075647][ T6680] Buffer I/O error on dev loop5, logical block 244, async page read [ 180.084280][ T6680] attempt to access beyond end of device [ 180.084280][ T6680] loop5: rw=0, want=246, limit=128 [ 180.110381][ T6680] Buffer I/O error on dev loop5, logical block 245, async page read [ 180.143370][ T6680] Buffer I/O error on dev loop5, logical block 246, async page read [ 180.213873][ T6680] Buffer I/O error on dev loop5, logical block 247, async page read [ 180.229561][ T6680] Buffer I/O error on dev loop5, logical block 248, async page read [ 180.235984][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.238094][ T6680] Buffer I/O error on dev loop5, logical block 241, async page read [ 180.252387][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.253478][ T6680] Buffer I/O error on dev loop5, logical block 242, async page read [ 180.280736][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.298561][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.365496][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 180.563360][ T6706] device bridge_slave_0 left promiscuous mode [ 180.570867][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.611468][ T6706] device bridge_slave_1 left promiscuous mode [ 180.631303][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.648971][ T6706] bond0: (slave bond_slave_0): Releasing backup interface [ 180.660676][ T6706] bond0: (slave bond_slave_1): Releasing backup interface [ 180.677770][ T6706] team0: Port device team_slave_0 removed [ 180.686212][ T6706] team0: Port device team_slave_1 removed [ 180.693055][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.702140][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.764677][ T6711] team0: Mode changed to "broadcast" [ 180.775531][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.650'. [ 180.799159][ T6710] kvm: pic: level sensitive irq not supported [ 180.800129][ T6710] kvm: pic: non byte write [ 181.095020][ T6710] kvm: pic: single mode not supported [ 181.535129][ T6719] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 181.568092][ T6719] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.590212][ T6719] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 181.600856][ T6719] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 182.155787][ T4316] usb 5-1: USB disconnect, device number 6 [ 183.571407][ T4292] kernel write not supported for file /register (pid: 4292 comm: kworker/0:9) [ 183.580834][ T6750] device syzkaller0 entered promiscuous mode [ 185.241218][ T4593] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.741115][ T4593] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.750851][ T4593] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.831476][ T4593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.898481][ T4593] usb 6-1: config 0 descriptor?? [ 185.921511][ T6790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.374326][ T6815] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.121218][ T6024] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.484384][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 187.521264][ T6024] usb 2-1: config 0 has no interfaces? [ 187.572553][ T6844] bond3: (slave geneve2): Opening slave failed [ 187.605978][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 187.636786][ T6847] bond3 (unregistering): Released all slaves [ 187.681137][ T6024] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 187.694704][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.703940][ T6024] usb 2-1: Product: syz [ 187.708317][ T6024] usb 2-1: Manufacturer: syz [ 187.713535][ T6024] usb 2-1: SerialNumber: syz [ 187.720133][ T6024] usb 2-1: config 0 descriptor?? [ 187.825822][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 187.835633][ T6857] netlink: 72 bytes leftover after parsing attributes in process `syz.4.697'. [ 187.985976][ T6826] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.038997][ T6191] usb 2-1: USB disconnect, device number 7 [ 188.073282][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 188.088562][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 188.338025][ T6191] usb 6-1: USB disconnect, device number 5 [ 188.800655][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 191.296236][ T6906] netlink: 'syz.1.714': attribute type 4 has an invalid length. [ 191.347171][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'. [ 191.358170][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.716'. [ 191.478934][ T6912] loop5: detected capacity change from 0 to 8 [ 191.565125][ T6024] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 192.061205][ T6024] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.070205][ T6024] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.088675][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.105783][ T6024] usb 1-1: config 0 descriptor?? [ 192.112368][ T6921] device batadv_slave_0 entered promiscuous mode [ 193.638703][ T6948] sd 0:0:1:0: PR command failed: 2 [ 193.651777][ T6948] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 193.659551][ T6948] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 194.021429][ T4316] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.263321][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269676][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.791288][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.878064][ T4583] usb 1-1: USB disconnect, device number 6 [ 194.931701][ T4316] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 195.043765][ T6961] loop4: detected capacity change from 0 to 1024 [ 195.045238][ T4316] usb 3-1: can't read configurations, error -71 [ 195.172913][ T6961] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000008001,auto_da_alloc,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 195.378909][ T6983] loop1: detected capacity change from 0 to 256 [ 195.638065][ T6983] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 196.533040][ T6983] fuse: Bad value for 'group_id' [ 196.666303][ T7000] overlayfs: upper fs does not support file handles, falling back to index=off. [ 196.784074][ T7007] loop0: detected capacity change from 0 to 256 [ 198.012832][ T26] audit: type=1326 audit(1769485103.015:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8d8db1eb9 code=0x0 [ 198.243020][ T26] audit: type=1800 audit(1769485103.245:32): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.744" name="file1" dev="loop0" ino=1048644 res=0 errno=0 [ 198.294201][ T7018] fuse: Bad value for 'fd' [ 198.452129][ T7028] loop1: detected capacity change from 0 to 512 [ 198.545058][ T7028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.621586][ T7028] EXT4-fs (loop1): 1 truncate cleaned up [ 198.627270][ T7028] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,usrquota,lazytime,nombcache,i_version,,errors=continue. Quota mode: writeback. [ 198.679323][ T26] audit: type=1800 audit(1769485103.675:33): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.749" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 199.505710][ T7048] netlink: 'syz.5.753': attribute type 4 has an invalid length. [ 199.884034][ T7062] overlayfs: upper fs does not support file handles, falling back to index=off. [ 200.055503][ T7029] loop0: detected capacity change from 0 to 32768 [ 200.208489][ T7029] XFS (loop0): Mounting V5 Filesystem [ 201.252540][ T7029] XFS (loop0): Ending clean mount [ 201.286190][ T7029] XFS (loop0): Quotacheck needed: Please wait. [ 201.422193][ T7029] XFS (loop0): Quotacheck: Done. [ 201.436964][ T7087] device syzkaller0 entered promiscuous mode [ 201.474096][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 201.565041][ T4191] XFS (loop0): Unmounting Filesystem [ 201.631516][ T7093] HTB: quantum of class 80090005 is small. Consider r2q change. [ 201.796030][ T7100] binder: BINDER_SET_CONTEXT_MGR already set [ 201.811202][ T7100] binder: 7097:7100 ioctl 4018620d 200000000040 returned -16 [ 202.171690][ T7109] loop1: detected capacity change from 0 to 512 [ 202.324136][ T7109] EXT4-fs (loop1): 1 truncate cleaned up [ 202.329902][ T7109] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000d,,errors=continue. Quota mode: none. [ 202.352519][ T26] audit: type=1800 audit(1769485107.355:34): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.765" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 202.638407][ T7109] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 202.851921][ T7109] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.765: bg 0: block 465: padding at end of block bitmap is not set [ 203.039241][ T7109] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 203.059981][ T7109] EXT4-fs error (device loop1): ext4_free_branches:1043: inode #13: block 234881024: comm syz.1.765: Read failure [ 203.456391][ T7122] overlayfs: upper fs does not support file handles, falling back to index=off. [ 203.463828][ T7128] loop4: detected capacity change from 0 to 512 [ 203.540262][ T7128] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.571905][ T7128] EXT4-fs (loop4): 1 truncate cleaned up [ 203.578608][ T7128] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,usrquota,lazytime,nombcache,i_version,,errors=continue. Quota mode: writeback. [ 203.607310][ T26] audit: type=1800 audit(1769485108.605:35): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.771" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 210.966625][ T7178] orangefs_mount: mount request failed with -4 [ 211.128459][ T7218] loop1: detected capacity change from 0 to 1024 [ 211.174754][ T7223] loop0: detected capacity change from 0 to 256 [ 211.190493][ T7218] EXT4-fs (loop1): Ignoring removed bh option [ 211.209634][ T7223] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.257976][ T7223] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 211.261044][ T7218] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 211.285301][ T7223] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 211.347687][ T7218] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 211.424943][ T7218] netlink: 96 bytes leftover after parsing attributes in process `syz.1.803'. [ 211.557256][ T7234] sch_fq: defrate 53322 ignored. [ 211.837606][ T7242] exFAT-fs (loop0): abnormal access to deleted source dentry [ 212.830484][ T7260] loop1: detected capacity change from 0 to 256 [ 212.843231][ T7256] device syzkaller0 entered promiscuous mode [ 212.881156][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.5.808'. [ 212.904743][ T7260] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.924867][ T7260] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 212.967650][ T7260] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 213.116578][ T7275] loop5: detected capacity change from 0 to 512 [ 213.277340][ T7275] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 213.343547][ T7283] bond0: (slave gre0): Error: Device type is different from other slaves [ 213.364833][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 213.396359][ T7283] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 213.633646][ T7289] device syzkaller0 entered promiscuous mode [ 213.648869][ T7275] EXT4-fs (loop5): 1 truncate cleaned up [ 213.662174][ T7293] exFAT-fs (loop1): abnormal access to deleted source dentry [ 213.691229][ T7275] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,resgid=0x0000000000000000,errors=remount-ro,noload,data_err=ignore,noblock_validity,. Quota mode: none. [ 213.721180][ T7289] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 214.061289][ T7275] EXT4-fs error (device loop5): ext4_group_add:1699: comm syz.5.812: inode #7: comm syz.5.812: iget: illegal inode # [ 214.149765][ T7275] EXT4-fs (loop5): Remounting filesystem read-only [ 214.379588][ T7289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 214.486069][ T7275] EXT4-fs warning (device loop5): ext4_group_add:1701: Error opening resize inode [ 215.667034][ T7321] loop0: detected capacity change from 0 to 128 [ 215.677744][ T7318] loop1: detected capacity change from 0 to 512 [ 215.685068][ T7324] Set syz1 is full, maxelem 8182 reached [ 215.751400][ T7318] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 215.787012][ T7321] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.825916][ T7318] EXT4-fs (loop1): 1 truncate cleaned up [ 215.830693][ T7321] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.861481][ T7318] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,resgid=0x0000000000000000,errors=remount-ro,noload,data_err=ignore,noblock_validity,. Quota mode: none. [ 215.980927][ T7318] EXT4-fs error (device loop1): ext4_group_add:1699: comm syz.1.836: inode #7: comm syz.1.836: iget: illegal inode # [ 215.998274][ T7321] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 216.024963][ T7318] EXT4-fs (loop1): Remounting filesystem read-only [ 216.119807][ T7318] EXT4-fs warning (device loop1): ext4_group_add:1701: Error opening resize inode [ 217.161519][ T7230] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3371465275 in block_group 0 [ 217.166843][ T7230] EXT4-fs (loop1): Remounting filesystem read-only [ 218.477957][ T7361] loop0: detected capacity change from 0 to 512 [ 218.539500][ T7361] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 218.665408][ T7361] EXT4-fs (loop0): 1 truncate cleaned up [ 218.673740][ T7361] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,usrquota,lazytime,nombcache,i_version,,errors=continue. Quota mode: writeback. [ 218.701660][ T26] audit: type=1800 audit(1769485123.705:36): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.833" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 220.356858][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 220.365811][ T7392] bond0: option arp_all_targets: invalid value (16711680) [ 220.489042][ T7389] loop0: detected capacity change from 0 to 32768 [ 220.535324][ T7389] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.855 (7389) [ 220.705569][ T7389] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 220.714384][ T7389] BTRFS info (device loop0): setting nodatacow, compression disabled [ 220.722495][ T7389] BTRFS info (device loop0): enabling auto defrag [ 220.728972][ T7389] BTRFS info (device loop0): max_inline at 0 [ 220.734975][ T7389] BTRFS info (device loop0): using free space tree [ 220.741665][ T7389] BTRFS info (device loop0): has skinny extents [ 221.801496][ T7415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'. [ 221.866225][ T7423] syzkaller0: create flow: hash 1720427110 index 1 [ 221.904568][ T6024] syzkaller0: tun_net_xmit 76 [ 221.909737][ T6024] syzkaller0: tun_net_xmit 48 [ 221.920742][ T7429] loop2: detected capacity change from 0 to 8 [ 221.932514][ T4225] syzkaller0: tun_net_xmit 76 [ 222.004217][ T7429] /dev/loop2: Can't open blockdev [ 222.011303][ T7410] syzkaller0: delete flow: hash 1720427110 index 1 [ 224.813828][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 224.831073][ T7455] bond0: option arp_all_targets: invalid value (16711680) [ 226.719413][ T7482] loop0: detected capacity change from 0 to 1024 [ 226.755893][ T7478] device syzkaller0 entered promiscuous mode [ 227.073521][ T5881] hfsplus: b-tree write err: -5, ino 8 [ 227.580135][ T7499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.861945][ T4316] Bluetooth: hci5: command 0x0406 tx timeout [ 230.112479][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 230.171466][ T7509] bond0: option arp_all_targets: invalid value (16711680) [ 231.049454][ T7528] device bridge_slave_1 left promiscuous mode [ 231.067693][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.091953][ T7528] device bridge_slave_0 left promiscuous mode [ 231.166449][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.312160][ T4225] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 231.561248][ T7532] loop2: detected capacity change from 0 to 1024 [ 231.681300][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.716427][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.775351][ T4225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.907996][ T4225] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.991477][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.131127][ T4225] usb 1-1: config 0 descriptor?? [ 232.717619][ T7525] loop1: detected capacity change from 0 to 32768 [ 233.054294][ T4225] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 233.158440][ T4225] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 233.507475][ T27] INFO: task syz-executor:4195 blocked for more than 143 seconds. [ 233.564718][ T27] Not tainted syzkaller #0 [ 233.610991][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.623475][ T27] task:syz-executor state:D stack:21968 pid: 4195 ppid: 1 flags:0x00004004 [ 233.654640][ T27] Call Trace: [ 233.658377][ T27] [ 233.663245][ T27] __schedule+0x11ef/0x43c0 [ 233.677966][ T27] ? verify_lock_unused+0x140/0x140 [ 233.808563][ T27] ? mark_lock+0x94/0x320 [ 233.840794][ T27] ? release_firmware_map_entry+0x190/0x190 [ 234.307030][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 234.349259][ T27] ? lock_chain_count+0x20/0x20 [ 234.358066][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.376925][ T27] schedule+0x11b/0x1e0 [ 234.382658][ T27] io_schedule+0x7c/0xd0 [ 234.387058][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 234.393024][ T27] ? wait_on_page_bit+0x50/0x50 [ 234.398237][ T27] ? rcu_lock_release+0x20/0x20 [ 234.405515][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 234.412276][ T27] ? invalidate_inode_page+0x360/0x360 [ 234.417968][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 234.426150][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 234.431815][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 234.437198][ T27] evict+0x4dc/0x8d0 [ 234.442882][ T27] ? proc_nr_inodes+0x320/0x320 [ 234.448148][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 234.454363][ T27] evict_inodes+0x60c/0x6a0 [ 234.459026][ T27] ? __dentry_kill+0x530/0x650 [ 234.465448][ T27] ? clear_inode+0x150/0x150 [ 234.470215][ T27] generic_shutdown_super+0x93/0x300 [ 234.475993][ T27] kill_block_super+0x7c/0xe0 [ 234.480821][ T27] deactivate_locked_super+0x93/0xf0 [ 234.487847][ T27] cleanup_mnt+0x42d/0x4e0 [ 234.492684][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 234.498096][ T27] task_work_run+0x125/0x1a0 [ 234.504287][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 234.509866][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 234.516464][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 234.523610][ T27] do_syscall_64+0x58/0xa0 [ 234.528175][ T27] ? clear_bhb_loop+0x30/0x80 [ 234.533323][ T27] ? clear_bhb_loop+0x30/0x80 [ 234.538175][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.545731][ T27] RIP: 0033:0x7f9b250c9117 [ 234.550305][ T27] RSP: 002b:00007ffffe6f85d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 234.559255][ T27] RAX: 0000000000000000 RBX: 00007f9b2513171f RCX: 00007f9b250c9117 [ 234.568771][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffe6f8690 [ 234.577175][ T27] RBP: 00007ffffe6f8690 R08: 00007ffffe6f9690 R09: 00000000ffffffff [ 234.589138][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffe6f9720 [ 234.597709][ T27] R13: 00007f9b2513171f R14: 000000000001541e R15: 00007ffffe6f9760 [ 234.607317][ T27] [ 234.610629][ T27] [ 234.610629][ T27] Showing all locks held in the system: [ 234.619150][ T27] 1 lock held by khungtaskd/27: [ 234.626583][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 234.638113][ T27] 2 locks held by getty/3953: [ 234.643415][ T27] #0: ffff88814c7ee098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 234.654485][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 234.665452][ T27] 1 lock held by syz-executor/4185: [ 234.670817][ T27] #0: ffff888020802d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 234.681269][ T27] 1 lock held by syz-executor/4195: [ 234.686671][ T27] #0: ffff888025a800e0 (&type->s_umount_key#79){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 234.697558][ T27] 3 locks held by kworker/0:5/4225: [ 234.698563][ T4232] usb 1-1: USB disconnect, device number 7 [ 234.703225][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 234.745690][ T27] #1: ffffc9000313fd00 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 234.755780][ T27] #2: ffffffff8c323430 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 [ 234.765768][ T27] 3 locks held by kworker/0:6/4232: [ 234.771052][ T27] #0: ffff888141bdb138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 234.781806][ T27] #1: ffffc900031bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 234.793144][ T27] #2: ffff8880240bf220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 234.802181][ T27] 6 locks held by kworker/u4:12/5879: [ 234.807625][ T27] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 234.818132][ T27] #1: ffffc9000340fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 234.828280][ T27] #2: ffffffff8d4308d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 234.837922][ T27] #3: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: caif_exit_net+0x66/0x480 [ 234.847584][ T27] #4: ffff8881477e3880 (&caifn->caifdevs.lock){+.+.}-{3:3}, at: caif_exit_net+0x79/0x480 [ 234.857820][ T27] #5: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 234.868766][ T27] 2 locks held by kworker/0:13/6019: [ 234.874128][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 234.884522][ T27] #1: ffffc9000346fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 234.895923][ T27] 1 lock held by syz.5.851/7432: [ 234.901160][ T27] #0: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 234.912551][ T27] [ 234.914879][ T27] ============================================= [ 234.914879][ T27] [ 234.923433][ T27] NMI backtrace for cpu 1 [ 234.927767][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 234.935056][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.945204][ T27] Call Trace: [ 234.948489][ T27] [ 234.951421][ T27] dump_stack_lvl+0x188/0x250 [ 234.956384][ T27] ? show_regs_print_info+0x20/0x20 [ 234.961682][ T27] ? load_image+0x400/0x400 [ 234.966198][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 234.971404][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 234.976352][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 234.982596][ T27] ? _printk+0xda/0x130 [ 234.986753][ T27] ? load_image+0x400/0x400 [ 234.991261][ T27] ? load_image+0x400/0x400 [ 234.995768][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 235.001849][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 235.007845][ T27] watchdog+0xe0f/0xe50 [ 235.012010][ T27] kthread+0x436/0x520 [ 235.016121][ T27] ? hungtask_pm_notify+0x40/0x40 [ 235.021230][ T27] ? kthread_blkcg+0xd0/0xd0 [ 235.025822][ T27] ret_from_fork+0x1f/0x30 [ 235.030256][ T27] [ 235.033533][ T27] Sending NMI from CPU 1 to CPUs 0: [ 235.038779][ C0] NMI backtrace for cpu 0 [ 235.038791][ C0] CPU: 0 PID: 5879 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 235.038807][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.038816][ C0] Workqueue: netns cleanup_net [ 235.038836][ C0] RIP: 0010:kasan_check_range+0x10/0x290 [ 235.038856][ C0] Code: b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 41 56 <41> 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 e8 2f [ 235.038868][ C0] RSP: 0018:ffffc9000340f620 EFLAGS: 00000002 [ 235.038880][ C0] RAX: 0000000000000001 RBX: ffff8880273ebb80 RCX: ffffffff815dbb94 [ 235.038890][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d10c0 [ 235.038900][ C0] RBP: 0000000000000009 R08: dffffc0000000000 R09: 1ffffffff203a219 [ 235.038909][ C0] R10: dffffc0000000000 R11: fffffbfff203a21a R12: 0000000000000200 [ 235.038920][ C0] R13: dffffc0000000000 R14: ffff8880273ec6e8 R15: 0000000000000015 [ 235.038931][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 235.038943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.038953][ C0] CR2: 00007fb8d8ff52f8 CR3: 0000000073840000 CR4: 00000000003506f0 [ 235.038967][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 235.038975][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 235.038984][ C0] Call Trace: [ 235.038989][ C0] [ 235.038996][ C0] mark_lock+0x94/0x320 [ 235.039010][ C0] __lock_acquire+0xd69/0x7d10 [ 235.039033][ C0] ? mark_lock+0x94/0x320 [ 235.039048][ C0] ? verify_lock_unused+0x140/0x140 [ 235.039063][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 235.039085][ C0] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 235.039102][ C0] lock_acquire+0x19e/0x400 [ 235.039122][ C0] ? rcu_lock_acquire+0x5/0x30 [ 235.039139][ C0] ? rcu_lock_release+0x5/0x20 [ 235.039154][ C0] ? read_lock_is_recursive+0x10/0x10 [ 235.039170][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 235.039188][ C0] rcu_lock_acquire+0x2a/0x30 [ 235.039203][ C0] ? rcu_lock_acquire+0x5/0x30 [ 235.039216][ C0] inet_twsk_purge+0x119/0x840 [ 235.039235][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 235.039250][ C0] ? iput+0x706/0x8a0 [ 235.039265][ C0] ? dccp_v6_exit_net+0x80/0x80 [ 235.039282][ C0] cleanup_net+0x791/0xba0 [ 235.039297][ C0] ? ops_free_list+0x330/0x330 [ 235.039313][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 235.039331][ C0] process_one_work+0x85f/0x1010 [ 235.039352][ C0] ? worker_detach_from_pool+0x240/0x240 [ 235.039365][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 235.039383][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 235.039398][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 235.039415][ C0] ? wq_worker_running+0x97/0x170 [ 235.039429][ C0] worker_thread+0xaa6/0x1290 [ 235.039453][ C0] kthread+0x436/0x520 [ 235.039466][ C0] ? rcu_lock_release+0x20/0x20 [ 235.039479][ C0] ? kthread_blkcg+0xd0/0xd0 [ 235.039492][ C0] ret_from_fork+0x1f/0x30 [ 235.039512][ C0] [ 235.172709][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 235.172770][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 235.172852][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.172907][ T27] Call Trace: [ 235.172947][ T27] [ 235.172993][ T27] dump_stack_lvl+0x188/0x250 [ 235.173115][ T27] ? show_regs_print_info+0x20/0x20 [ 235.173188][ T27] ? load_image+0x400/0x400 [ 235.173301][ T27] panic+0x2e5/0x810 [ 235.173442][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 235.173530][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 235.173637][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 235.173746][ T27] watchdog+0xe4e/0xe50 [ 235.173866][ T27] kthread+0x436/0x520 [ 235.173937][ T27] ? hungtask_pm_notify+0x40/0x40 [ 235.174011][ T27] ? kthread_blkcg+0xd0/0xd0 [ 235.174107][ T27] ret_from_fork+0x1f/0x30 [ 235.174270][ T27] [ 235.174425][ T27] Kernel Offset: disabled [ 235.455629][ T27] Rebooting in 86400 seconds..