last executing test programs: 6m38.537983213s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m38.08264151s ago: executing program 3 (id=7): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 6m37.683429567s ago: executing program 3 (id=8): syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x8, 0x70}, 0x20) 6m36.84873893s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 6m36.671998623s ago: executing program 3 (id=12): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) write$binfmt_format(r0, 0x0, 0x0) 6m36.051299473s ago: executing program 3 (id=14): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 6m35.413615273s ago: executing program 32 (id=14): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 6m34.134204323s ago: executing program 2 (id=22): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="0342b1ce75c8332625371ce1fc96609150ea8e82871c75a609", 0x19}], 0x1, 0x6000, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000f80)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40485404, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0x0, r1, {{0x0, 0x1, 0xffffffff, 0x8, 0x80000000, 0x6, {0x5, 0x5, 0x1, 0x2, 0xf3, 0x8, 0x9, 0x347, 0xff66, 0xb000, 0x4, 0x0, 0x0, 0x1d, 0x40}}, {0x0, 0x8}}}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 6m32.081558066s ago: executing program 2 (id=29): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x6c00, 0x13c) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6m30.649465889s ago: executing program 2 (id=32): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2d5, &(0x7f00000007c0)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6m30.067830218s ago: executing program 2 (id=35): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@i_version}, {@oldalloc}, {@grpid}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@bsdgroups}, {@noquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 6m29.013383995s ago: executing program 2 (id=40): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) 6m24.974521059s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) 6m24.359758339s ago: executing program 33 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) 3m37.338609953s ago: executing program 6 (id=774): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRES16], 0xfa, 0x2b6, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1000, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/31, 0x1f) 3m36.642533074s ago: executing program 6 (id=777): unshare(0x62040200) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x400, 0x0) unshare(0x42040200) 3m33.415470816s ago: executing program 6 (id=789): waitid(0x1, 0x0, 0x0, 0xffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) rt_sigaction(0x1000037, 0x0, 0x0, 0x0, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0xfffe, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @empty}}}}) 3m32.377169262s ago: executing program 6 (id=794): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1da, &(0x7f0000000640)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='fmask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',time_offset=0x0000000000000005,errors=continue,umask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00000000000000033d312c690694ce771c6413f5bcd211bffd51865b6f636824e3413e4dd90c6821286579783eb8c0c9c1339bfb9543a6033efe7dd5934e3d895ca020b9818f742bd6a7d10dc260b842e5b16b41db0ef570ad51c6614c4ea50f35c47b49d9529aa539c8b62ba8e3ab892772922318f7634c25433926e7e314892c874abf2713823a0f3986150e108840bc0ecacff6082bd456646a823f6f3521eed452dd6a", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=default,\x00'], 0x1, 0x152d, &(0x7f00000034c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) 3m31.036788474s ago: executing program 6 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1743, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) ioctl$KDSIGACCEPT(r1, 0x5607, 0xb) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x8}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x0, 0x3e, 0x0, 0x4, 0x0, 0x0, @void, @value}, 0x28) r5 = creat(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000800)) r6 = open(0x0, 0x44841, 0x2) r7 = dup3(r6, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'}) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x19, &(0x7f0000000b40)=ANY=[@ANYRES64=r6, @ANYRESOCT, @ANYRES64=r8, @ANYRES32], &(0x7f0000000b80)='GPL\x00', 0x7, 0x63, &(0x7f0000000200)=""/99, 0x41100, 0x44, '\x00', 0x0, @fallback=0x3, r4, 0x8, &(0x7f00000002c0)={0x18, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x80000a, 0xb9, 0x10800009}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x3, @void, @value}, 0x94) 3m29.829916953s ago: executing program 6 (id=806): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "65df"}, @timestamp_addr={0x44, 0x4, 0x9, 0x1, 0x3}]}}}], 0x18}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf, 0xa6}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0x4, 0xa, &(0x7f0000000a00)=""/10, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0)=[{0x3, 0x1, 0xb, 0x3}], 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m29.321243941s ago: executing program 34 (id=806): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000020a01040000000000000000050000050c00044000000000000000010900010073797a3000000000140000001100000000000000000500000acdb26d63a9ae50e85a76a942e7d47fd77e608cb41171f8f9c7c56971cab45b7da9642c5b2d1df4e729bf6cf1048e601920a6c2de046b306df0b63a6f1ef16f4b5f88cb89db4f5ac74ccff7ffffffc185df2069438dcaeef8dedc01cf3dd6142373f2727dd4470336249646689d7113dacea1ef29b0d1dd50189a09418bd1c09cf227c8f7fb56bcdaea8d8c67c77dc72d8d8996b790d1f13454cf6a1cc471780d09734c4f5a0a2efb757f283198ba30f35b3f3a7d30f7c3ea5dd6f676176d5c3b943df4b595d4f1eea94831f1cb7a0803c183d19db07b33b9387678f62da739895b2db6eda3124225fe6dee8a75d4ca85393b8c46c05925fcc7f15bce4e2ba47d1525621de152526a12e6c205135ca1d230a03d"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "65df"}, @timestamp_addr={0x44, 0x4, 0x9, 0x1, 0x3}]}}}], 0x18}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf, 0xa6}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0x4, 0xa, &(0x7f0000000a00)=""/10, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0)=[{0x3, 0x1, 0xb, 0x3}], 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m59.925841277s ago: executing program 4 (id=1471): syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x289e0cb5, 0x0) 1m59.7121707s ago: executing program 4 (id=1474): syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x24040090) 1m59.434335474s ago: executing program 4 (id=1476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1m59.287073087s ago: executing program 4 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m58.675280777s ago: executing program 4 (id=1481): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28) 1m58.242996964s ago: executing program 4 (id=1487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[], 0x0) 1m55.714284114s ago: executing program 35 (id=1487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[], 0x0) 13.76718612s ago: executing program 5 (id=2096): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x26, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0x2, 0xb2}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000380)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d07400001020301090224000101033005090400080103016f39"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 7.350694582s ago: executing program 0 (id=2110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 7.275140034s ago: executing program 8 (id=2111): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa6}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x12, &(0x7f0000000880)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x0, 0xa, 0x20, 0x2}], &(0x7f0000000940)='GPL\x00', 0x4, 0xa, &(0x7f0000000a00)=""/10, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0), 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.009085338s ago: executing program 0 (id=2112): syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="210f00002100000000002000000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 5.747147518s ago: executing program 8 (id=2114): syz_open_dev$usbfs(0x0, 0xc, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x800}, 0x0) 5.213267577s ago: executing program 8 (id=2117): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0xfd3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 4.309886701s ago: executing program 0 (id=2119): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x404, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b96fa236bfd596c74e808dd7b85a97c6ab3f6173849702311b635ac7a4e02bb352424c"], 0x1, 0x46f, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x40001) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, r3, {0x7, 0x29, 0x9, 0x4000000, 0x20, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) sendfile(r2, r1, 0x0, 0x7ffff000) 4.240202372s ago: executing program 8 (id=2120): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/30, 0x1e}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 4.229569572s ago: executing program 7 (id=2121): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) 4.153114753s ago: executing program 5 (id=2122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 4.152652413s ago: executing program 1 (id=2123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r6}, 0x18) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0)={r7}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r5, 0x0, r8}, 0x10) 4.014347756s ago: executing program 7 (id=2124): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 3.923281817s ago: executing program 5 (id=2125): ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x22, 0xe4}]}, 0x10) sendto$inet(r1, &(0x7f00000003c0)="a8cf4658948be5672314f6800eb2fb5e1570dc5d3c53465450d7787fd1ee42ddaed361dbc344c8980e9509069fbbfc485a75e1934c78a361ce3b81dea5e6ea54278465dae07687ad1c6f6901522cda88f8d1d4c73eeaaa79a091489b7d91a8c34a1c9db441db7f84ef5b036d5bbb92700fb6aa7c90b505f84eec4e02bc0b7c53a86f26f2790654502ee91930461b42c327e390c89563821bf71b848e0c12c9804f13b1eeb12130d197d19b3cd8f991f710614603c7799e2a66f215dbfc0a5eea9807f0f870bd", 0xc6, 0x1, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9", 0x43, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.923087047s ago: executing program 1 (id=2126): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x10) 3.75419025s ago: executing program 5 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000d00)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)="cb", 0x1}], 0x1, &(0x7f0000003540)=[{0x10, 0x107, 0x400}, {0x10, 0xff, 0x1}, {0x10, 0x1, 0x5}], 0x30}}], 0x2, 0x810) 3.73559433s ago: executing program 7 (id=2128): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)=0x0) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) 3.671110951s ago: executing program 1 (id=2129): syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="210f00002100000000002000000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 3.551483883s ago: executing program 5 (id=2130): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0xfd3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.520520674s ago: executing program 7 (id=2131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 2.694354877s ago: executing program 5 (id=2132): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x26, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0x2, 0xb2}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000380)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d07400001020301090224000101033005090400080103016f39"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 2.549525769s ago: executing program 7 (id=2133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x1000080, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c726f6469722c757466383d302c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c636f6465706167653d313235aca99ee02366302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c73686f77657865632c696f636861727365743d6d616363656c7469632c00"], 0x7, 0x2c1, &(0x7f0000000bc0)="$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") 2.462098271s ago: executing program 1 (id=2134): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000700)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) 1.445181317s ago: executing program 7 (id=2135): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 1.317702059s ago: executing program 0 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 1.25933588s ago: executing program 1 (id=2137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r6 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 1.035244933s ago: executing program 0 (id=2138): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 197.400496ms ago: executing program 8 (id=2139): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000180)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x14db, &(0x7f0000002ac0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x400000)=nil, 0x400023, &(0x7f00000012c0)=""/91) 155.782397ms ago: executing program 1 (id=2140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x80008) 77.364339ms ago: executing program 0 (id=2141): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)=0x0) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) 0s ago: executing program 8 (id=2142): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0xfd3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): city change from 0 to 512 [ 155.457159][ T5608] EXT4-fs: Ignoring removed i_version option [ 155.464369][ T5608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.565010][ T5608] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.591748][ T5608] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 155.630812][ T5608] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.155284][ T5608] EXT4-fs (loop4): mount failed [ 157.692837][ T5652] loop1: detected capacity change from 0 to 164 [ 158.134673][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 158.512958][ T5673] loop1: detected capacity change from 0 to 512 [ 159.026572][ T4684] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 159.119289][ T5673] loop1: detected capacity change from 0 to 512 [ 159.192270][ T5673] EXT4-fs error (device loop1): __ext4_fill_super:5390: inode #2: comm syz.1.298: casefold flag without casefold feature [ 159.255168][ T5673] EXT4-fs (loop1): get root inode failed [ 159.267257][ T5673] EXT4-fs (loop1): mount failed [ 159.301419][ T4684] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.314462][ T4684] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.329930][ T4684] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 159.340679][ T4684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.392295][ T4684] usb 7-1: config 0 descriptor?? [ 160.022847][ T4684] usbhid 7-1:0.0: can't add hid device: -71 [ 160.033925][ T4684] usbhid: probe of 7-1:0.0 failed with error -71 [ 160.054835][ T4684] usb 7-1: USB disconnect, device number 6 [ 163.268740][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 164.736262][ C0] sched: RT throttling activated [ 166.505013][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.324'. [ 168.046460][ T127] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.256405][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 168.264551][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.288855][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.303114][ T127] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 168.312946][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.336581][ T127] usb 1-1: config 0 descriptor?? [ 168.790912][ T127] apple 0003:05AC:029C.0003: unbalanced delimiter at end of report description [ 168.801567][ T127] apple 0003:05AC:029C.0003: parse failed [ 168.809310][ T127] apple: probe of 0003:05AC:029C.0003 failed with error -22 [ 169.010963][ T129] usb 1-1: USB disconnect, device number 13 [ 169.820434][ T5806] __vm_enough_memory: pid: 5806, comm: syz.0.333, no enough memory for the allocation [ 170.005448][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.335'. [ 170.456526][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.548074][ T27] audit: type=1326 audit(1743689211.925:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 170.583090][ T27] audit: type=1326 audit(1743689211.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 170.662927][ T27] audit: type=1326 audit(1743689211.965:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 170.668320][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.736431][ T27] audit: type=1326 audit(1743689211.965:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 170.790968][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.821647][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.830397][ T27] audit: type=1326 audit(1743689211.965:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 170.893962][ T27] audit: type=1326 audit(1743689211.965:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 170.906379][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.953282][ T27] audit: type=1326 audit(1743689211.965:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 171.006431][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.017353][ T27] audit: type=1326 audit(1743689211.965:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 171.033679][ T14] usb 2-1: config 0 descriptor?? [ 171.102959][ T27] audit: type=1326 audit(1743689211.965:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 171.238324][ T27] audit: type=1326 audit(1743689211.965:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.6.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 172.175386][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 172.189511][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 172.241568][ T14] usb 2-1: USB disconnect, device number 10 [ 173.349575][ T129] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.572441][ T129] usb 2-1: config 0 has no interfaces? [ 173.612720][ T129] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 173.859139][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.010995][ T129] usb 2-1: Product: syz [ 174.015392][ T129] usb 2-1: Manufacturer: syz [ 174.111283][ T129] usb 2-1: SerialNumber: syz [ 174.159251][ T129] usb 2-1: config 0 descriptor?? [ 175.313726][ T5929] loop0: detected capacity change from 0 to 1024 [ 175.402185][ T4293] usb 2-1: USB disconnect, device number 11 [ 175.614647][ T5929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.639518][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 176.639536][ T27] audit: type=1326 audit(1743689218.025:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 177.149556][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 177.320932][ T4558] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 178.648869][ T4558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.686312][ T4558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.696160][ T4558] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 178.743076][ T4558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.783770][ T4558] usb 5-1: config 0 descriptor?? [ 179.246463][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.256054][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.263981][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.112268][ T4558] usbhid 5-1:0.0: can't add hid device: -71 [ 180.126384][ T4558] usbhid: probe of 5-1:0.0 failed with error -71 [ 180.139886][ T4558] usb 5-1: USB disconnect, device number 15 [ 180.226633][ T27] audit: type=1326 audit(1743689221.605:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 180.250866][ T6011] loop0: detected capacity change from 0 to 8 [ 180.398256][ T27] audit: type=1326 audit(1743689221.605:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 180.501448][ T27] audit: type=1326 audit(1743689221.605:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 180.589599][ T27] audit: type=1326 audit(1743689221.605:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 180.595217][ T6011] syz.0.382 (6011) used greatest stack depth: 19672 bytes left [ 180.684580][ T27] audit: type=1326 audit(1743689221.605:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 180.774648][ T27] audit: type=1326 audit(1743689221.605:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 180.867200][ T27] audit: type=1326 audit(1743689221.605:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 180.945518][ T27] audit: type=1326 audit(1743689221.605:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 181.302090][ T27] audit: type=1326 audit(1743689221.605:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58d169 code=0x7fc00000 [ 181.445010][ T6041] loop1: detected capacity change from 0 to 256 [ 181.482046][ T6041] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.499835][ T6041] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 181.531262][ T6041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 181.609341][ T6044] loop6: detected capacity change from 0 to 1024 [ 182.607537][ T6044] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 182.940821][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.995595][ T6073] __vm_enough_memory: pid: 6073, comm: syz.0.396, no enough memory for the allocation [ 183.049062][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.112274][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.125098][ T4547] EXT4-fs (loop6): unmounting filesystem. [ 186.217876][ T6131] loop6: detected capacity change from 0 to 512 [ 186.290425][ T6131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.729406][ T6131] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 186.907428][ T6131] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.290692][ T6149] __vm_enough_memory: pid: 6149, comm: syz.5.416, no enough memory for the allocation [ 187.508814][ T4547] EXT4-fs (loop6): unmounting filesystem. [ 188.002303][ T6164] kvm: pic: level sensitive irq not supported [ 188.065377][ T6169] loop4: detected capacity change from 0 to 1024 [ 188.264636][ T6172] loop0: detected capacity change from 0 to 256 [ 188.376992][ T6172] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 193.220028][ T6223] loop4: detected capacity change from 0 to 256 [ 193.280621][ T6223] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 193.526610][ T127] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.846880][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 193.867134][ T127] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 193.960950][ T127] usb 2-1: config 0 has no interface number 0 [ 194.094703][ T127] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.167741][ T6228] netlink: 48 bytes leftover after parsing attributes in process `syz.5.437'. [ 194.231175][ T127] usb 2-1: config 0 interface 85 has no altsetting 0 [ 194.322482][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328879][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.341193][ T127] usb 2-1: string descriptor 0 read error: -71 [ 194.347663][ T127] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 194.357198][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.374117][ T127] usb 2-1: config 0 descriptor?? [ 194.386653][ T127] usb 2-1: can't set config #0, error -71 [ 194.393645][ T127] usb 2-1: USB disconnect, device number 12 [ 195.547422][ T6257] loop6: detected capacity change from 0 to 1024 [ 195.620168][ T6257] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 195.655568][ T6257] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.073291][ T4547] EXT4-fs (loop6): unmounting filesystem. [ 196.396576][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 196.402803][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 196.409122][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 196.541886][ T6285] loop4: detected capacity change from 0 to 512 [ 197.509104][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 197.509120][ T27] audit: type=1326 audit(1743689238.895:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.0.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x0 [ 197.556192][ T6285] EXT4-fs (loop4): 1 orphan inode deleted [ 197.565873][ T6285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.586049][ T75] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.614905][ T6285] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.628093][ T75] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:4: Failed to release dquot type 1 [ 197.924873][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 199.087121][ T6322] ALSA: seq fatal error: cannot create timer (-22) [ 199.429895][ T4292] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 199.531218][ T6337] __vm_enough_memory: pid: 6337, comm: syz.6.465, no enough memory for the allocation [ 199.623400][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.635600][ T4292] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 199.654233][ T4292] usb 1-1: New USB device found, idVendor=04f2, idProduct=affc, bcdDevice=88.61 [ 199.685554][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.702644][ T4292] usb 1-1: Product: syz [ 199.708879][ T4292] usb 1-1: Manufacturer: syz [ 199.713680][ T4292] usb 1-1: SerialNumber: syz [ 199.735589][ T4292] usb 1-1: config 0 descriptor?? [ 202.152953][ T6379] loop6: detected capacity change from 0 to 512 [ 202.163848][ T6379] EXT4-fs (loop6): Test dummy encryption mode enabled [ 202.202399][ T6379] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #12: comm syz.6.475: inline data xattr refers to an external xattr inode [ 202.224990][ T6379] EXT4-fs (loop6): Remounting filesystem read-only [ 202.256395][ T6379] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.475: couldn't read orphan inode 12 (err -117) [ 202.271044][ T27] audit: type=1326 audit(1743689243.655:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 202.286999][ T6379] EXT4-fs (loop6): Remounting filesystem read-only [ 202.356411][ T6379] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.478574][ T4547] EXT4-fs (loop6): unmounting filesystem. [ 202.677120][ T6399] __vm_enough_memory: pid: 6399, comm: syz.6.483, no enough memory for the allocation [ 202.796734][ T4293] usb 1-1: USB disconnect, device number 14 [ 202.922385][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 202.971141][ T27] audit: type=1326 audit(1743689244.345:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 202.995891][ T27] audit: type=1326 audit(1743689244.345:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.019035][ T27] audit: type=1326 audit(1743689244.345:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.065065][ T27] audit: type=1326 audit(1743689244.345:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.088611][ T27] audit: type=1326 audit(1743689244.345:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.141766][ T27] audit: type=1326 audit(1743689244.345:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.173630][ T27] audit: type=1326 audit(1743689244.345:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.202262][ T27] audit: type=1326 audit(1743689244.345:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.225007][ T27] audit: type=1326 audit(1743689244.345:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.265750][ T27] audit: type=1326 audit(1743689244.345:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 203.406452][ T4293] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.511789][ T6416] loop1: detected capacity change from 0 to 1024 [ 203.568947][ T6416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.617954][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.629658][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.639593][ T4293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.652729][ T4293] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.662032][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.679769][ T4293] usb 1-1: config 0 descriptor?? [ 203.967066][ T4256] EXT4-fs (loop1): unmounting filesystem. [ 204.007212][ T6427] loop4: detected capacity change from 0 to 1024 [ 204.047765][ T6427] hfsplus: catalog searching failed [ 204.098960][ T4293] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 204.142144][ T4293] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 204.205025][ T6433] __vm_enough_memory: pid: 6433, comm: syz.1.496, no enough memory for the allocation [ 204.349237][ T6440] loop6: detected capacity change from 0 to 1024 [ 204.600002][ T6443] __vm_enough_memory: pid: 6443, comm: syz.6.500, no enough memory for the allocation [ 205.482351][ T6464] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 206.663934][ T6479] __vm_enough_memory: pid: 6479, comm: syz.5.512, no enough memory for the allocation [ 206.677194][ T6475] 9pnet_fd: Insufficient options for proto=fd [ 206.746425][ T4558] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 206.996941][ T6488] loop4: detected capacity change from 0 to 1024 [ 207.014818][ T6488] EXT4-fs: Ignoring removed bh option [ 207.028580][ T6488] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.088311][ T6488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.146533][ T127] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 207.169048][ T6488] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.517: Allocating blocks 481-513 which overlap fs metadata [ 207.240901][ T6488] EXT4-fs (loop4): pa ffff88807435cee0: logic 131584, phys. 465, len 3 [ 207.249770][ T6488] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 2 [ 207.360122][ T127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.401987][ T127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.422331][ T127] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.444850][ T127] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.454551][ T127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.472614][ T127] usb 7-1: config 0 descriptor?? [ 207.498269][ T6499] __vm_enough_memory: pid: 6499, comm: syz.5.519, no enough memory for the allocation [ 207.635084][ T4292] usb 1-1: USB disconnect, device number 15 [ 208.039560][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 208.102638][ T127] usbhid 7-1:0.0: can't add hid device: -71 [ 208.126359][ T127] usbhid: probe of 7-1:0.0 failed with error -71 [ 208.148295][ T127] usb 7-1: USB disconnect, device number 7 [ 208.469809][ T6521] __vm_enough_memory: pid: 6521, comm: syz.5.528, no enough memory for the allocation [ 208.775192][ T6530] __vm_enough_memory: pid: 6530, comm: syz.1.531, no enough memory for the allocation [ 209.107941][ T6542] binder: 6541:6542 ioctl 4018620d 0 returned -22 [ 210.536027][ T6564] loop4: detected capacity change from 0 to 512 [ 210.669061][ T6567] __vm_enough_memory: pid: 6567, comm: syz.5.545, no enough memory for the allocation [ 211.061591][ T6564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.703740][ T6584] loop0: detected capacity change from 0 to 1024 [ 211.754082][ T6586] __vm_enough_memory: pid: 6586, comm: syz.1.547, no enough memory for the allocation [ 211.764337][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 211.773511][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 211.801716][ T6584] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 211.876737][ T6584] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 211.958339][ T6584] EXT4-fs error (device loop0): ext4_get_journal_inode:5723: inode #5: comm syz.0.546: unexpected bad inode w/o EXT4_IGET_BAD [ 211.991607][ T6584] EXT4-fs (loop0): no journal found [ 212.004811][ T6584] EXT4-fs (loop0): can't get journal size [ 212.029547][ T6584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.216604][ T129] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 212.283286][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 212.496129][ T6602] loop0: detected capacity change from 0 to 1024 [ 212.546414][ T129] usb 7-1: Using ep0 maxpacket: 32 [ 212.568008][ T129] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 212.591217][ T6602] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 212.614201][ T6602] hfsplus: xattr searching failed [ 212.630203][ T129] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 212.653278][ T6602] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 212.688173][ T129] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.752986][ T6602] hfsplus: xattr searching failed [ 212.755470][ T129] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 212.788142][ T129] usb 7-1: config 1 has no interface number 0 [ 212.814481][ T129] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 212.858311][ T6602] syz.0.551: attempt to access beyond end of device [ 212.858311][ T6602] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 212.902349][ T129] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 212.972121][ T129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.027025][ T6602] buffer_io_error: 5 callbacks suppressed [ 213.027044][ T6602] Buffer I/O error on dev loop0, logical block 458752, async page read [ 213.041696][ T6602] hfsplus: unable to mark blocks free: error -5 [ 213.049856][ T6602] hfsplus: can't free extent [ 213.060418][ T129] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 213.062315][ T6615] netlink: 88 bytes leftover after parsing attributes in process `syz.1.555'. [ 213.076412][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 214.684444][ T6632] __vm_enough_memory: pid: 6632, comm: syz.5.560, no enough memory for the allocation [ 215.135656][ T6640] loop0: detected capacity change from 0 to 512 [ 216.312408][ T6640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.332596][ T6638] __vm_enough_memory: pid: 6638, comm: syz.4.562, no enough memory for the allocation [ 216.518267][ T6640] EXT4-fs (loop0): 1 truncate cleaned up [ 216.523998][ T6640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.862025][ T6640] EXT4-fs (loop0): unmounting filesystem. [ 216.887597][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 217.228927][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.245670][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.254280][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.156695][ T129] snd_usb_pod 7-1:1.1: set_interface failed [ 218.162963][ T129] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 218.201327][ T129] snd_usb_pod: probe of 7-1:1.1 failed with error -110 [ 218.512099][ T6661] loop4: detected capacity change from 0 to 128 [ 218.554247][ T6661] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.054266][ T127] usb 7-1: USB disconnect, device number 8 [ 220.321019][ T6689] __vm_enough_memory: pid: 6689, comm: syz.1.576, no enough memory for the allocation [ 220.414761][ T6695] __vm_enough_memory: pid: 6695, comm: syz.4.579, no enough memory for the allocation [ 220.717972][ T6707] loop6: detected capacity change from 0 to 1024 [ 220.812952][ T6707] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 220.830015][ T6707] hfsplus: xattr searching failed [ 220.938740][ T6707] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 220.945536][ T6707] hfsplus: xattr searching failed [ 221.052870][ T6707] syz.6.583: attempt to access beyond end of device [ 221.052870][ T6707] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 221.068332][ T6707] Buffer I/O error on dev loop6, logical block 458752, async page read [ 221.076843][ T6707] hfsplus: unable to mark blocks free: error -5 [ 221.083312][ T6707] hfsplus: can't free extent [ 222.046548][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 222.250682][ T6735] loop6: detected capacity change from 0 to 512 [ 222.305839][ T6738] loop4: detected capacity change from 0 to 1024 [ 222.328786][ T6738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.331098][ T6735] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 222.400929][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 222.400947][ T27] audit: type=1800 audit(1743689263.785:226): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.589" name="file1" dev="loop4" ino=839 res=0 errno=0 [ 222.613321][ T4547] EXT4-fs (loop6): unmounting filesystem. [ 222.632271][ T6744] loop4: detected capacity change from 0 to 1024 [ 222.639416][ T129] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 222.692704][ T6744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.827270][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 222.836692][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 222.885316][ T129] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 222.904770][ T129] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 222.915654][ T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.927227][ T129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 222.938127][ T129] usb 1-1: config 1 has no interface number 0 [ 222.954174][ T6749] loop6: detected capacity change from 0 to 1024 [ 222.966479][ T129] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 222.996372][ T129] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 223.015042][ T6749] EXT4-fs: Ignoring removed oldalloc option [ 223.026413][ T6749] EXT4-fs: Ignoring removed orlov option [ 223.031333][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.108511][ T129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 223.175772][ T6749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 223.225005][ T6757] loop4: detected capacity change from 0 to 2048 [ 223.262118][ T6757] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 223.292872][ T6757] UDF-fs: unknown compression code (0) [ 223.459208][ T4547] EXT4-fs (loop6): unmounting filesystem. [ 223.523953][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.5.597'. [ 223.612002][ T6762] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 223.719123][ T6764] loop6: detected capacity change from 0 to 1024 [ 223.815250][ T6766] __vm_enough_memory: pid: 6766, comm: syz.4.600, no enough memory for the allocation [ 223.899751][ T6764] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 224.042963][ T6764] hfsplus: xattr searching failed [ 224.089658][ T6764] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 224.911770][ T6764] hfsplus: xattr searching failed [ 225.049525][ T6764] syz.6.599: attempt to access beyond end of device [ 225.049525][ T6764] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 225.074397][ T6764] Buffer I/O error on dev loop6, logical block 458752, async page read [ 225.126623][ T6764] hfsplus: unable to mark blocks free: error -5 [ 225.176529][ T6764] hfsplus: can't free extent [ 225.316396][ T6782] device bridge_slave_0 left promiscuous mode [ 225.346598][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.439508][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.491500][ T6782] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 228.069629][ T129] snd_usb_pod 1-1:1.1: set_interface failed [ 228.076134][ T129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 228.103926][ T129] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 228.161700][ T129] usb 1-1: USB disconnect, device number 16 [ 229.270472][ T6823] loop4: detected capacity change from 0 to 512 [ 229.587710][ T6823] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 230.776427][ T6853] __vm_enough_memory: pid: 6853, comm: syz.0.627, no enough memory for the allocation [ 231.416496][ T4297] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 231.632572][ T4297] usb 7-1: Using ep0 maxpacket: 32 [ 231.936052][ T4297] usb 7-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 231.985307][ T4297] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.182181][ T4297] usb 7-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 232.246408][ T4297] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.299648][ T4297] usb 7-1: config 0 descriptor?? [ 232.347365][ T4297] usb 7-1: bad CDC descriptors [ 232.367293][ T4297] usb 7-1: bad CDC descriptors [ 232.936473][ T4297] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 233.047546][ T4684] usb 7-1: USB disconnect, device number 9 [ 233.196600][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 233.237506][ T4297] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 233.246005][ T4297] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 233.352984][ T4297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.404269][ T6898] loop0: detected capacity change from 0 to 764 [ 233.431420][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 233.467184][ T6898] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 233.477160][ T4297] usb 5-1: config 1 has no interface number 0 [ 233.496089][ T4297] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 233.533550][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.637'. [ 233.556549][ T4297] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 233.586426][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.548083][ T6912] loop0: detected capacity change from 0 to 512 [ 236.314344][ T6912] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.643: iget: bad extended attribute block 1 [ 236.331003][ T6912] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.643: couldn't read orphan inode 15 (err -117) [ 236.343866][ T6912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 236.579236][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 236.617263][ T6921] __vm_enough_memory: pid: 6921, comm: syz.1.645, no enough memory for the allocation [ 238.015960][ T6925] loop0: detected capacity change from 0 to 2048 [ 238.120592][ T6925] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.046436][ T4297] usb 5-1: can't set config #1, error -110 [ 239.290506][ T6939] loop6: detected capacity change from 0 to 512 [ 239.339548][ T6939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.357220][ T129] usb 5-1: USB disconnect, device number 16 [ 239.386422][ T6939] EXT4-fs: Invalid want_extra_isize 5 [ 240.019690][ T6957] loop4: detected capacity change from 0 to 128 [ 240.112423][ T27] audit: type=1804 audit(1743689281.485:227): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.659" name="/newroot/127/file0/bus" dev="loop4" ino=1048606 res=1 errno=0 [ 240.323585][ T6962] loop4: detected capacity change from 0 to 16 [ 240.363194][ T6962] erofs: (device loop4): mounted with root inode @ nid 36. [ 240.520851][ T6964] __vm_enough_memory: pid: 6964, comm: syz.6.662, no enough memory for the allocation [ 240.646575][ T129] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 240.830537][ T6973] loop0: detected capacity change from 0 to 2048 [ 240.867203][ T6973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.952570][ T6973] UDF-fs: bad mount option "}Ìõ%ï!Éêk»íâxI7¹ƒË::Röw¤Û_1'D*–:¢cIC>Š²ecï =/" or missing value [ 241.233557][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 241.251894][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59144, setting to 1024 [ 241.287919][ T129] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 241.302892][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.311664][ T129] usb 5-1: Product: syz [ 241.315968][ T129] usb 5-1: Manufacturer: syz [ 241.327050][ T129] usb 5-1: SerialNumber: syz [ 241.336094][ T129] usb 5-1: config 0 descriptor?? [ 241.350418][ T6962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.365313][ T129] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 241.385724][ T129] usb 5-1: No valid video chain found. [ 241.480774][ T6984] loop6: detected capacity change from 0 to 2048 [ 241.490650][ T6986] loop0: detected capacity change from 0 to 128 [ 241.514000][ T6984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.545584][ T27] audit: type=1800 audit(1743689282.925:228): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.670" name="bus" dev="loop0" ino=1048607 res=0 errno=0 [ 241.590612][ T129] usb 5-1: USB disconnect, device number 17 [ 241.739659][ T6989] syz.0.670: attempt to access beyond end of device [ 241.739659][ T6989] loop0: rw=2049, sector=545, nr_sectors = 496 limit=128 [ 242.340072][ T7007] __vm_enough_memory: pid: 7007, comm: syz.4.678, no enough memory for the allocation [ 245.574503][ T7056] __vm_enough_memory: pid: 7056, comm: syz.1.695, no enough memory for the allocation [ 247.042082][ T7061] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.188416][ T7081] loop0: detected capacity change from 0 to 16 [ 248.212720][ T7081] erofs: (device loop0): mounted with root inode @ nid 36. [ 251.207780][ T7099] __vm_enough_memory: pid: 7099, comm: syz.1.712, no enough memory for the allocation [ 255.326774][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 255.602823][ T7148] loop4: detected capacity change from 0 to 512 [ 255.627074][ T7148] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.707791][ T7148] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 255.723666][ T129] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 255.757679][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 255.767097][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773488][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.791198][ T7148] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.730: attempt to clear invalid blocks 2 len 1 [ 255.826529][ T7152] netlink: 48 bytes leftover after parsing attributes in process `syz.5.731'. [ 255.855295][ T7148] EXT4-fs (loop4): Remounting filesystem read-only [ 255.876801][ T7148] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 255.918500][ T7148] EXT4-fs (loop4): Remounting filesystem read-only [ 255.932375][ T7160] syz.5.735 uses obsolete (PF_INET,SOCK_PACKET) [ 255.939193][ T7148] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.730: invalid indirect mapped block 1819239214 (level 0) [ 255.958208][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.989584][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.000315][ T129] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.010094][ T129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.021942][ T129] usb 7-1: config 0 descriptor?? [ 256.036566][ T7148] EXT4-fs (loop4): Remounting filesystem read-only [ 256.050316][ T7148] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.730: invalid indirect mapped block 1819239214 (level 1) [ 256.073581][ T7148] EXT4-fs (loop4): Remounting filesystem read-only [ 256.082101][ T7148] EXT4-fs (loop4): 1 truncate cleaned up [ 256.101090][ T7148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.274905][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 256.411271][ T7172] loop4: detected capacity change from 0 to 256 [ 256.432750][ T7172] exfat: Deprecated parameter 'utf8' [ 256.443342][ T129] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 256.446787][ T7172] exfat: Deprecated parameter 'namecase' [ 256.471320][ T129] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input6 [ 256.474691][ T7172] exfat: Deprecated parameter 'utf8' [ 256.499552][ T7172] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 256.590493][ T129] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 256.702405][ T4295] usb 7-1: USB disconnect, device number 10 [ 257.193039][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 257.212134][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.745'. [ 257.785500][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.752'. [ 258.063733][ T7220] loop6: detected capacity change from 0 to 256 [ 258.085865][ T7220] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 258.772172][ T7227] __vm_enough_memory: pid: 7227, comm: syz.5.761, no enough memory for the allocation [ 260.423758][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 260.629877][ T7264] loop6: detected capacity change from 0 to 256 [ 261.587002][ T7288] __vm_enough_memory: pid: 7288, comm: syz.5.781, no enough memory for the allocation [ 261.636453][ T129] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 261.846998][ T129] usb 7-1: no configurations [ 261.851651][ T129] usb 7-1: can't read configurations, error -22 [ 262.266681][ T129] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 262.537165][ T129] usb 7-1: no configurations [ 262.541843][ T129] usb 7-1: can't read configurations, error -22 [ 262.625371][ T7301] loop0: detected capacity change from 0 to 8 [ 263.869109][ T129] usb usb7-port1: attempt power cycle [ 264.356316][ T129] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 264.396984][ T129] usb 7-1: device descriptor read/8, error -71 [ 264.646657][ T27] audit: type=1326 audit(1743689306.025:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7fc00000 [ 265.067169][ T27] audit: type=1326 audit(1743689306.025:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f123558d169 code=0x7fc00000 [ 265.234209][ T27] audit: type=1326 audit(1743689306.025:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7fc00000 [ 265.629943][ T7334] __vm_enough_memory: pid: 7334, comm: syz.1.795, no enough memory for the allocation [ 265.663704][ T7335] loop6: detected capacity change from 0 to 16 [ 265.707898][ T7335] erofs: (device loop6): mounted with root inode @ nid 36. [ 266.992378][ T27] audit: type=1326 audit(1743689308.375:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 267.185130][ T27] audit: type=1326 audit(1743689308.415:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 267.345018][ T27] audit: type=1326 audit(1743689308.415:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 267.462765][ T27] audit: type=1326 audit(1743689308.415:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 267.502262][ T27] audit: type=1326 audit(1743689308.415:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 267.691965][ T27] audit: type=1326 audit(1743689308.415:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 267.856686][ T27] audit: type=1326 audit(1743689308.415:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7fc00000 [ 268.559364][ T7384] __vm_enough_memory: pid: 7384, comm: syz.5.809, no enough memory for the allocation [ 268.938466][ T5562] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.239576][ T5562] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.348578][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.380835][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.402674][ T5562] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.448392][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.523990][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.531889][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.541736][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.615656][ T5562] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.868335][ T7429] loop0: detected capacity change from 0 to 1024 [ 271.596488][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 271.960745][ T7429] EXT4-fs error (device loop0): ext4_map_blocks:744: inode #3: block 2: comm syz.0.824: lblock 2 mapped to illegal pblock 2 (length 1) [ 271.977588][ T7429] __quota_error: 4 callbacks suppressed [ 271.977604][ T7429] Quota error (device loop0): write_blk: dquota write failed [ 271.991612][ T7429] Quota error (device loop0): find_free_dqentry: Can't write quota data block 2 [ 272.000895][ T7429] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 272.011648][ T7429] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.824: Failed to acquire dquot type 0 [ 272.024072][ T7429] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 2: comm syz.0.824: lblock 2 mapped to illegal pblock 2 (length 1) [ 272.039745][ T7429] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 272.049897][ T7429] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.824: Failed to acquire dquot type 0 [ 272.062362][ T7429] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.824: Freeing blocks not in datazone - block = 0, count = 4096 [ 272.079611][ T7429] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 2: comm syz.0.824: lblock 2 mapped to illegal pblock 2 (length 1) [ 272.098368][ T7429] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 272.108405][ T7429] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.824: Failed to acquire dquot type 0 [ 272.121293][ T7429] EXT4-fs (loop0): 1 orphan inode deleted [ 272.127160][ T7429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 272.247741][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 272.363816][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 273.306455][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.313624][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.330950][ T7400] device bridge_slave_0 entered promiscuous mode [ 273.584326][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.596763][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.646406][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 273.898911][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 274.662143][ T7400] device bridge_slave_1 entered promiscuous mode [ 274.689079][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.716613][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.746441][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.794572][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.812339][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.854543][ T7] usb 1-1: config 0 descriptor?? [ 275.196138][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.217278][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.310586][ T7400] team0: Port device team_slave_0 added [ 275.330997][ T7400] team0: Port device team_slave_1 added [ 275.532140][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 275.544782][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 275.563878][ T7] usb 1-1: USB disconnect, device number 17 [ 275.576014][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.598965][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.626472][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.669962][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.699496][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.726982][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.917935][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 276.017951][ T7400] device hsr_slave_0 entered promiscuous mode [ 276.029820][ T7400] device hsr_slave_1 entered promiscuous mode [ 276.042012][ T7400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.079650][ T7400] Cannot create hsr debugfs directory [ 276.104901][ T5562] device hsr_slave_0 left promiscuous mode [ 276.125500][ T5562] device hsr_slave_1 left promiscuous mode [ 276.170333][ T5562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.259279][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.288315][ T5562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.319890][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.350731][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.839'. [ 276.367428][ T5562] device bridge_slave_1 left promiscuous mode [ 276.396055][ T5562] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.446879][ T5562] device bridge_slave_0 left promiscuous mode [ 276.479544][ T5562] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.690711][ T5562] device veth1_macvtap left promiscuous mode [ 276.698231][ T5562] device veth0_macvtap left promiscuous mode [ 276.709785][ T5562] device veth1_vlan left promiscuous mode [ 276.721613][ T5562] device veth0_vlan left promiscuous mode [ 277.369652][ T5562] team0 (unregistering): Port device team_slave_1 removed [ 277.431872][ T5562] team0 (unregistering): Port device team_slave_0 removed [ 277.502045][ T5562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.597521][ T5562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.996532][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 278.390734][ T5562] bond0 (unregistering): Released all slaves [ 279.426945][ T7511] loop0: detected capacity change from 0 to 512 [ 279.493573][ T7511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.846: bg 0: block 288: padding at end of block bitmap is not set [ 279.540589][ T7511] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 279.556994][ T7511] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.846: attempt to clear invalid blocks 1024 len 1 [ 279.605930][ T7400] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 279.688043][ T7511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.846: invalid indirect mapped block 1819239214 (level 0) [ 279.705838][ T7400] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 279.728971][ T7400] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 279.756869][ T7511] EXT4-fs (loop0): 1 truncate cleaned up [ 279.762592][ T7511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.775937][ T7400] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 279.916907][ T7511] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 279.984776][ T7511] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 280.142029][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.214581][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.223274][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.240774][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.270787][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 280.273761][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.297220][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.341054][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.348219][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.492959][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.545061][ T7545] loop4: detected capacity change from 0 to 1024 [ 280.571821][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.581690][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.598681][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.605826][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.620525][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.631129][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.753071][ T7544] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.770187][ T27] audit: type=1800 audit(1743689322.155:243): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.855" name="file2" dev="loop4" ino=21 res=0 errno=0 [ 280.814389][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.848608][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.872789][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.275580][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.298586][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.300777][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.363539][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.483786][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.524721][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.574081][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.646816][ T4294] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 282.868134][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.894387][ T4294] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 282.933836][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.977299][ T4294] usb 1-1: config 0 descriptor?? [ 283.425814][ T4294] logitech-djreceiver 0003:046D:C531.0006: item fetching failed at offset 1/5 [ 283.552720][ T4294] logitech-djreceiver 0003:046D:C531.0006: logi_dj_probe: parse failed [ 284.110999][ T4294] logitech-djreceiver: probe of 0003:046D:C531.0006 failed with error -22 [ 284.320661][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.348324][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.363514][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.379617][ T4294] usb 1-1: USB disconnect, device number 18 [ 284.511717][ T7584] loop4: detected capacity change from 0 to 256 [ 284.551887][ T7584] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.601843][ T7584] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 284.661956][ T7584] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 285.633612][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.669356][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.742048][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.756853][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.776443][ T4294] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 285.794131][ T7400] device veth0_vlan entered promiscuous mode [ 285.830094][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.850476][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.876494][ T7400] device veth1_vlan entered promiscuous mode [ 285.966110][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.006908][ T4294] usb 5-1: Using ep0 maxpacket: 16 [ 286.025460][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.040917][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.073026][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.081693][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.098615][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.110463][ T4294] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 286.124419][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.154133][ T4294] usb 5-1: config 0 descriptor?? [ 286.188307][ T7400] device veth0_macvtap entered promiscuous mode [ 286.214574][ T7400] device veth1_macvtap entered promiscuous mode [ 286.315656][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.347020][ T7618] __vm_enough_memory: pid: 7618, comm: syz.1.870, no enough memory for the allocation [ 286.375260][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.396548][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.427638][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.457701][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.496473][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.527075][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.562789][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.585077][ T4294] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 286.617493][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.636549][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.651669][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.670519][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.694440][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.778919][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.784207][ T4297] usb 5-1: USB disconnect, device number 18 [ 286.797487][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.833987][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.851249][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.868308][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.898994][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.915153][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.956378][ T4411] wlan1: Trigger new scan to find an IBSS to join [ 286.964303][ T7400] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.973225][ T7400] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.982820][ T7400] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.997439][ T7400] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.229771][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.246338][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.319134][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.344080][ T6723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.377719][ T6723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.423389][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.156822][ T7664] loop0: detected capacity change from 0 to 512 [ 288.208994][ T7664] EXT4-fs: Ignoring removed oldalloc option [ 288.272672][ T7664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 288.335974][ T7664] EXT4-fs (loop0): 1 truncate cleaned up [ 288.349851][ T7664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 288.625409][ T7678] __vm_enough_memory: pid: 7678, comm: syz.5.885, no enough memory for the allocation [ 288.687682][ T7679] loop4: detected capacity change from 0 to 1024 [ 288.733627][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 288.802557][ T27] audit: type=1800 audit(1743689330.185:244): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.884" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 291.203260][ T7736] loop4: detected capacity change from 0 to 512 [ 291.304998][ T7736] EXT4-fs (loop4): Test dummy encryption mode enabled [ 291.342862][ T7736] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.900: inline data xattr refers to an external xattr inode [ 291.377520][ T7742] __vm_enough_memory: pid: 7742, comm: syz.5.901, no enough memory for the allocation [ 291.428416][ T7736] EXT4-fs (loop4): Remounting filesystem read-only [ 291.485127][ T7736] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.900: couldn't read orphan inode 12 (err -117) [ 291.536733][ T7736] EXT4-fs (loop4): Remounting filesystem read-only [ 291.543412][ T7736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 291.766091][ T7748] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.900: Directory hole found for htree leaf block 0 [ 291.810016][ T7748] EXT4-fs (loop4): Remounting filesystem read-only [ 291.916453][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 292.111914][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 292.461338][ T7769] loop7: detected capacity change from 0 to 512 [ 292.575772][ T7769] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 292.591458][ T7769] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.772795][ T7777] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm syz.7.907: bg 0: bad block bitmap checksum [ 292.877459][ T5369] wlan1: Creating new IBSS network, BSSID 26:2e:06:cf:fe:f7 [ 293.075264][ T7400] EXT4-fs (loop7): unmounting filesystem. [ 293.373063][ T7793] __vm_enough_memory: pid: 7793, comm: syz.0.914, no enough memory for the allocation [ 293.959138][ T7808] loop4: detected capacity change from 0 to 1024 [ 294.064339][ T7808] ext2: Unknown parameter 'defcontext' [ 296.231114][ T7854] __vm_enough_memory: pid: 7854, comm: syz.4.932, no enough memory for the allocation [ 298.510179][ T7911] __vm_enough_memory: pid: 7911, comm: syz.0.949, no enough memory for the allocation [ 298.646412][ T4557] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 298.847017][ T4557] usb 8-1: Using ep0 maxpacket: 32 [ 298.861523][ T4557] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.893441][ T4557] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.915146][ T4557] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 298.935631][ T4557] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.009441][ T4557] usb 8-1: config 0 descriptor?? [ 299.039585][ T4557] hub 8-1:0.0: USB hub found [ 299.158634][ T7927] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.194752][ T7927] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 299.208810][ T7927] bridge_slave_0: default FDB implementation only supports local addresses [ 299.257916][ T4557] hub 8-1:0.0: 1 port detected [ 300.355762][ T4557] hub 8-1:0.0: activate --> -90 [ 300.463773][ T7947] loop0: detected capacity change from 0 to 256 [ 300.536499][ T7947] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 300.647043][ T26] usb 8-1: USB disconnect, device number 2 [ 300.682511][ T7947] loop0: detected capacity change from 0 to 512 [ 300.769672][ T7947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 300.803691][ T7947] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.885344][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 300.896629][ T4292] usb 8-1-port1: config error [ 301.162752][ T7968] __vm_enough_memory: pid: 7968, comm: syz.4.963, no enough memory for the allocation [ 301.476774][ T7975] loop7: detected capacity change from 0 to 512 [ 301.503316][ T7975] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 301.542067][ T7975] EXT4-fs (loop7): failed to open journal device unknown-block(8,0) -16 [ 301.845543][ T7984] loop7: detected capacity change from 0 to 1024 [ 302.060074][ T7988] loop4: detected capacity change from 0 to 256 [ 302.091579][ T7988] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 302.217635][ T7989] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.258567][ T7989] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.294161][ T7989] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.336453][ T7989] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.513236][ T4385] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.541110][ T4385] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.831043][ T8009] __vm_enough_memory: pid: 8009, comm: syz.5.978, no enough memory for the allocation [ 303.198386][ T8019] binder: 8018:8019 ioctl c0306201 200000000080 returned -14 [ 303.229704][ T8019] binder: 8018:8019 ioctl c0306201 2000000003c0 returned -14 [ 303.264281][ T8021] loop0: detected capacity change from 0 to 16 [ 303.283740][ T8021] erofs: (device loop0): mounted with root inode @ nid 36. [ 303.343332][ T8021] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 303.398478][ T4264] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 303.476923][ T8021] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 303.516862][ T27] audit: type=1800 audit(1743689344.905:245): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.982" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 303.567072][ T8021] syz.0.982 (8021) used greatest stack depth: 18112 bytes left [ 303.681325][ T8033] __vm_enough_memory: pid: 8033, comm: syz.7.987, no enough memory for the allocation [ 304.049123][ T8037] loop0: detected capacity change from 0 to 1024 [ 304.056063][ T8037] EXT4-fs: Ignoring removed bh option [ 304.124694][ T8037] EXT4-fs: inline encryption not supported [ 304.172082][ T8037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 304.194527][ T8037] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 2: comm syz.0.988: lblock 2 mapped to illegal pblock 2 (length 1) [ 304.253167][ T8037] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 304.268491][ T8037] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 48: comm syz.0.988: lblock 0 mapped to illegal pblock 48 (length 1) [ 304.292956][ T8037] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 304.303914][ T8037] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.988: Failed to acquire dquot type 0 [ 304.326065][ T8037] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 304.342465][ T8051] __vm_enough_memory: pid: 8051, comm: syz.7.995, no enough memory for the allocation [ 304.381027][ T8037] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.988: mark_inode_dirty error [ 304.410369][ T8037] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 304.439242][ T8037] EXT4-fs (loop0): 1 orphan inode deleted [ 304.458139][ T8037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.469735][ T6036] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.501774][ T6036] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 304.533632][ T6036] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:14: Failed to release dquot type 0 [ 304.570243][ T8037] EXT4-fs (loop0): unmounting filesystem. [ 304.590876][ T8037] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.988: Invalid inode table block 1 in block_group 0 [ 304.662636][ T8037] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 304.692662][ T8037] EXT4-fs error (device loop0): ext4_quota_off:7084: inode #3: comm syz.0.988: mark_inode_dirty error [ 305.206763][ T8080] __vm_enough_memory: pid: 8080, comm: syz.5.1002, no enough memory for the allocation [ 305.398719][ T8082] device bridge1 entered promiscuous mode [ 306.670440][ T8123] device bond_slave_1 entered promiscuous mode [ 306.741460][ T8122] device bond_slave_1 left promiscuous mode [ 307.485445][ T27] audit: type=1326 audit(1743689348.865:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.0.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 307.971745][ T8149] loop0: detected capacity change from 0 to 128 [ 308.038433][ T8149] EXT4-fs: Ignoring removed nobh option [ 308.147452][ T8149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 308.166848][ T8149] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.434225][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 312.903993][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 312.910206][ T8223] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1042'. [ 314.067690][ T8265] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1056'. [ 314.127084][ T27] audit: type=1326 audit(1743689355.515:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.1056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x0 [ 314.738745][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1064'. [ 315.509028][ T27] audit: type=1326 audit(1743689356.895:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.255323][ T27] audit: type=1326 audit(1743689357.635:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.374364][ T27] audit: type=1326 audit(1743689357.635:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.523863][ T27] audit: type=1326 audit(1743689357.635:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.653842][ T27] audit: type=1326 audit(1743689357.635:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.773278][ T27] audit: type=1326 audit(1743689357.635:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.833779][ T27] audit: type=1326 audit(1743689357.635:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.862269][ T27] audit: type=1326 audit(1743689357.635:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 316.945999][ T27] audit: type=1326 audit(1743689357.635:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x7fc00000 [ 317.199243][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.205644][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.445620][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 319.445639][ T27] audit: type=1326 audit(1743689360.825:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.556318][ T27] audit: type=1326 audit(1743689360.825:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.621028][ T27] audit: type=1326 audit(1743689360.825:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.632275][ T8426] loop0: detected capacity change from 0 to 1764 [ 319.687240][ T27] audit: type=1326 audit(1743689360.825:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.755849][ T27] audit: type=1326 audit(1743689360.825:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.902916][ T27] audit: type=1326 audit(1743689360.825:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.936446][ T27] audit: type=1326 audit(1743689360.825:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.962055][ T8443] fuse: Bad value for 'fd' [ 319.969849][ T27] audit: type=1326 audit(1743689360.825:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 319.993745][ T27] audit: type=1326 audit(1743689360.825:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 320.067455][ T27] audit: type=1326 audit(1743689360.825:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128678d169 code=0x7fc00000 [ 320.191949][ T8452] __vm_enough_memory: pid: 8452, comm: syz.7.1103, no enough memory for the allocation [ 320.358877][ T8460] syz.0.1106 sent an empty control message without MSG_MORE. [ 321.603710][ T8502] loop0: detected capacity change from 0 to 764 [ 322.131745][ T8516] __vm_enough_memory: pid: 8516, comm: syz.1.1121, no enough memory for the allocation [ 322.884168][ T6036] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 323.883603][ T8555] __vm_enough_memory: pid: 8555, comm: syz.7.1137, no enough memory for the allocation [ 324.537359][ T8570] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 326.094096][ T27] kauditd_printk_skb: 113 callbacks suppressed [ 326.094112][ T27] audit: type=1326 audit(1743689367.475:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 326.135567][ T8607] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1152'. [ 326.173885][ T27] audit: type=1326 audit(1743689367.515:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 326.224962][ T27] audit: type=1326 audit(1743689367.515:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 326.326280][ T27] audit: type=1326 audit(1743689367.515:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 327.201143][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 327.632165][ T8651] loop0: detected capacity change from 0 to 64 [ 328.199247][ T8665] loop0: detected capacity change from 0 to 512 [ 328.244231][ T8665] EXT4-fs: Ignoring removed nobh option [ 328.308972][ T8665] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1179: invalid indirect mapped block 256 (level 2) [ 328.357260][ T8665] EXT4-fs (loop0): 2 truncates cleaned up [ 328.366903][ T8665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 328.393680][ T8665] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1179: bg 0: block 5: invalid block bitmap [ 328.426738][ T8674] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 328.444441][ T8665] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 328.466876][ T8665] EXT4-fs (loop0): This should not happen!! Data will be lost [ 328.466876][ T8665] [ 328.503288][ T8665] EXT4-fs (loop0): Total free blocks count 0 [ 328.539019][ T8665] EXT4-fs (loop0): Free/Dirty block details [ 328.545082][ T8665] EXT4-fs (loop0): free_blocks=0 [ 328.589048][ T8665] EXT4-fs (loop0): dirty_blocks=66 [ 328.665179][ T8665] EXT4-fs (loop0): Block reservation details [ 328.695572][ T8665] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 328.776482][ T6036] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 328.842258][ T8688] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.851830][ T8688] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.860688][ T8688] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.869710][ T8688] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.950220][ T8688] team0: Port device vxlan0 added [ 329.421318][ T8708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.800177][ T27] audit: type=1326 audit(1743689371.185:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 329.830621][ T27] audit: type=1326 audit(1743689371.185:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 329.854553][ T27] audit: type=1326 audit(1743689371.205:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 329.893988][ T27] audit: type=1326 audit(1743689371.205:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 329.957355][ T27] audit: type=1326 audit(1743689371.205:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 330.301022][ T8740] __vm_enough_memory: pid: 8740, comm: syz.4.1212, no enough memory for the allocation [ 330.558833][ T8738] loop0: detected capacity change from 0 to 40427 [ 330.589027][ T8738] F2FS-fs (loop0): invalid crc value [ 330.655807][ T8738] F2FS-fs (loop0): Found nat_bits in checkpoint [ 330.742136][ T8738] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 330.775167][ T27] audit: type=1800 audit(1743689372.155:462): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1210" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 330.812442][ T8738] syz.0.1210: attempt to access beyond end of device [ 330.812442][ T8738] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 330.829827][ T8738] syz.0.1210: attempt to access beyond end of device [ 330.829827][ T8738] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 330.922318][ T4248] syz-executor: attempt to access beyond end of device [ 330.922318][ T4248] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 331.214149][ T8765] netlink: zone id is out of range [ 331.738213][ T8777] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1228'. [ 331.778285][ T8777] netlink: 'syz.5.1228': attribute type 2 has an invalid length. [ 331.814783][ T8777] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1228'. [ 332.092476][ T8789] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 332.168088][ T8793] loop0: detected capacity change from 0 to 64 [ 333.360777][ T27] audit: type=1326 audit(1743689374.745:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.5.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7ffc0000 [ 333.425380][ T27] audit: type=1326 audit(1743689374.745:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.5.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f353598d169 code=0x7ffc0000 [ 333.590173][ T27] audit: type=1326 audit(1743689374.745:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.5.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x7ffc0000 [ 333.891415][ T8851] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 334.196538][ T8859] __vm_enough_memory: pid: 8859, comm: syz.5.1264, no enough memory for the allocation [ 334.269132][ T8853] loop0: detected capacity change from 0 to 40427 [ 334.301982][ T8853] F2FS-fs (loop0): invalid crc value [ 334.372281][ T8853] F2FS-fs (loop0): Found nat_bits in checkpoint [ 334.439878][ T8853] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 334.527143][ T8853] F2FS-fs (loop0): access invalid blkaddr:2816 [ 334.533549][ T8853] CPU: 1 PID: 8853 Comm: syz.0.1262 Not tainted 6.1.132-syzkaller #0 [ 334.541659][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.551747][ T8853] Call Trace: [ 334.555051][ T8853] [ 334.558012][ T8853] dump_stack_lvl+0x1e3/0x2cb [ 334.562780][ T8853] ? nf_tcp_handle_invalid+0x647/0x647 [ 334.568286][ T8853] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 334.574162][ T8853] f2fs_is_valid_blkaddr+0xca2/0x1270 [ 334.579582][ T8853] f2fs_map_blocks+0x15fb/0x3ab0 [ 334.584617][ T8853] ? f2fs_do_map_lock+0x70/0x70 [ 334.589545][ T8853] ? page_index+0xff/0x4b0 [ 334.594139][ T8853] f2fs_mpage_readpages+0xbd5/0x2b90 [ 334.599479][ T8853] ? mark_lock+0x9a/0x340 [ 334.603867][ T8853] ? dquot_release_reservation_block+0x90/0x90 [ 334.610072][ T8853] ? folio_add_lru+0x34d/0xd70 [ 334.614912][ T8853] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 334.621104][ T8853] ? f2fs_readahead+0x18a/0x3a0 [ 334.625997][ T8853] ? blk_start_plug+0x95/0x110 [ 334.630808][ T8853] read_pages+0x17f/0x830 [ 334.635179][ T8853] ? folio_add_lru+0x34d/0xd70 [ 334.639976][ T8853] ? folio_add_lru+0x34d/0xd70 [ 334.644786][ T8853] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 334.650460][ T8853] ? __filemap_add_folio+0x1b00/0x1b00 [ 334.655958][ T8853] ? page_cache_ra_order+0xb2a/0xd80 [ 334.661294][ T8853] page_cache_ra_unbounded+0x68b/0x7b0 [ 334.666825][ T8853] f2fs_readdir+0x5ae/0xc30 [ 334.671383][ T8853] ? __might_sleep+0xb0/0xb0 [ 334.676006][ T8853] ? f2fs_fill_dentries+0xd60/0xd60 [ 334.681222][ T8853] ? iterate_dir+0x10a/0x560 [ 334.685825][ T8853] ? __fdget_pos+0x2ba/0x360 [ 334.690440][ T8853] ? common_file_perm+0x17d/0x1d0 [ 334.695479][ T8853] ? fsnotify_perm+0x439/0x590 [ 334.700265][ T8853] iterate_dir+0x224/0x560 [ 334.704695][ T8853] ? f2fs_fill_dentries+0xd60/0xd60 [ 334.709906][ T8853] __se_sys_getdents64+0x209/0x4f0 [ 334.715049][ T8853] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 334.721050][ T8853] ? __x64_sys_getdents64+0x80/0x80 [ 334.726257][ T8853] ? filldir+0x6f0/0x6f0 [ 334.730512][ T8853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 334.736506][ T8853] ? lockdep_hardirqs_on+0x94/0x130 [ 334.741719][ T8853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 334.747718][ T8853] do_syscall_64+0x3b/0xb0 [ 334.752181][ T8853] ? clear_bhb_loop+0x45/0xa0 [ 334.757033][ T8853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.762971][ T8853] RIP: 0033:0x7f846558d169 [ 334.767414][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.787035][ T8853] RSP: 002b:00007f846638a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 334.795467][ T8853] RAX: ffffffffffffffda RBX: 00007f84657a5fa0 RCX: 00007f846558d169 [ 334.803545][ T8853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 334.811522][ T8853] RBP: 00007f846560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 334.819504][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.827477][ T8853] R13: 0000000000000000 R14: 00007f84657a5fa0 R15: 00007ffd1810fe88 [ 334.835478][ T8853] [ 334.862995][ T8853] F2FS-fs (loop0): access invalid blkaddr:2816 [ 334.870547][ T8853] CPU: 1 PID: 8853 Comm: syz.0.1262 Not tainted 6.1.132-syzkaller #0 [ 334.878686][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.888791][ T8853] Call Trace: [ 334.892125][ T8853] [ 334.895185][ T8853] dump_stack_lvl+0x1e3/0x2cb [ 334.900006][ T8853] ? nf_tcp_handle_invalid+0x647/0x647 [ 334.905527][ T8853] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 334.911411][ T8853] f2fs_is_valid_blkaddr+0xca2/0x1270 [ 334.916842][ T8853] f2fs_map_blocks+0x15fb/0x3ab0 [ 334.921949][ T8853] ? f2fs_do_map_lock+0x70/0x70 [ 334.926867][ T8853] ? page_index+0xff/0x4b0 [ 334.931368][ T8853] f2fs_mpage_readpages+0xbd5/0x2b90 [ 334.936714][ T8853] ? mark_lock+0x9a/0x340 [ 334.941104][ T8853] ? dquot_release_reservation_block+0x90/0x90 [ 334.947757][ T8853] ? folio_add_lru+0x34d/0xd70 [ 334.952579][ T8853] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 334.958765][ T8853] ? f2fs_readahead+0x18a/0x3a0 [ 334.963743][ T8853] ? blk_start_plug+0x95/0x110 [ 334.968553][ T8853] read_pages+0x17f/0x830 [ 334.972912][ T8853] ? folio_add_lru+0x34d/0xd70 [ 334.977795][ T8853] ? folio_add_lru+0x34d/0xd70 [ 334.982599][ T8853] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 334.988260][ T8853] ? __filemap_add_folio+0x1b00/0x1b00 [ 334.993758][ T8853] ? page_cache_ra_order+0xb2a/0xd80 [ 334.999090][ T8853] page_cache_ra_unbounded+0x68b/0x7b0 [ 335.004718][ T8853] f2fs_readdir+0x5ae/0xc30 [ 335.009686][ T8853] ? __might_sleep+0xb0/0xb0 [ 335.014409][ T8853] ? f2fs_fill_dentries+0xd60/0xd60 [ 335.019644][ T8853] ? iterate_dir+0x10a/0x560 [ 335.024271][ T8853] ? __fdget_pos+0x2ba/0x360 [ 335.028938][ T8853] ? common_file_perm+0x17d/0x1d0 [ 335.033996][ T8853] ? fsnotify_perm+0x439/0x590 [ 335.038889][ T8853] iterate_dir+0x224/0x560 [ 335.043337][ T8853] ? f2fs_fill_dentries+0xd60/0xd60 [ 335.048573][ T8853] __se_sys_getdents64+0x209/0x4f0 [ 335.053721][ T8853] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 335.059833][ T8853] ? __x64_sys_getdents64+0x80/0x80 [ 335.065155][ T8853] ? filldir+0x6f0/0x6f0 [ 335.069445][ T8853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 335.075474][ T8853] ? lockdep_hardirqs_on+0x94/0x130 [ 335.080710][ T8853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 335.086726][ T8853] do_syscall_64+0x3b/0xb0 [ 335.091166][ T8853] ? clear_bhb_loop+0x45/0xa0 [ 335.095961][ T8853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.101896][ T8853] RIP: 0033:0x7f846558d169 [ 335.106352][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.125987][ T8853] RSP: 002b:00007f846638a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 335.134436][ T8853] RAX: ffffffffffffffda RBX: 00007f84657a5fa0 RCX: 00007f846558d169 [ 335.142442][ T8853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 335.150614][ T8853] RBP: 00007f846560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.158610][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.166605][ T8853] R13: 0000000000000000 R14: 00007f84657a5fa0 R15: 00007ffd1810fe88 [ 335.174717][ T8853] [ 335.178019][ T8853] syz.0.1262: attempt to access beyond end of device [ 335.178019][ T8853] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 335.430196][ T4248] syz-executor: attempt to access beyond end of device [ 335.430196][ T4248] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.069055][ T8903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.312242][ T8908] __vm_enough_memory: pid: 8908, comm: syz.0.1271, no enough memory for the allocation [ 336.341687][ T4264] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 336.351988][ T4264] Bluetooth: hci1: Injecting HCI hardware error event [ 336.368592][ T4264] Bluetooth: hci1: hardware error 0x00 [ 336.856896][ T8916] tipc: Started in network mode [ 336.861962][ T8916] tipc: Node identity 4, cluster identity 4711 [ 336.868757][ T8916] tipc: Node number set to 4 [ 337.286342][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 337.478488][ T7] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 337.495630][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.530016][ T7] usb 1-1: config 0 descriptor?? [ 337.553078][ T7] cp210x 1-1:0.0: cp210x converter detected [ 337.589503][ T8942] __vm_enough_memory: pid: 8942, comm: syz.5.1295, no enough memory for the allocation [ 338.154325][ T7] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 338.176498][ T7] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 338.198193][ T7] usb 1-1: cp210x converter now attached to ttyUSB0 [ 338.225993][ T7] usb 1-1: USB disconnect, device number 19 [ 338.242048][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 338.251883][ T7] cp210x 1-1:0.0: device disconnected [ 338.716417][ T4264] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 339.177504][ T8978] __vm_enough_memory: pid: 8978, comm: syz.0.1309, no enough memory for the allocation [ 339.570856][ T8986] loop0: detected capacity change from 0 to 32768 [ 339.599413][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 339.687709][ T8986] JBD2: Ignoring recovery information on journal [ 339.741523][ T8986] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 339.802058][ T8986] OCFS2: ERROR (device loop0): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 339.819217][ T8986] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 339.829136][ T8986] OCFS2: File system is now read-only. [ 339.834647][ T8986] (syz.0.1312,8986,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 339.844744][ T8986] (syz.0.1312,8986,1):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -30 [ 339.856123][ T8986] (syz.0.1312,8986,1):ocfs2_local_alloc_reserve_for_window:1123 ERROR: status = -30 [ 339.865827][ T8986] (syz.0.1312,8986,1):ocfs2_local_alloc_reserve_for_window:1139 ERROR: status = -30 [ 339.875960][ T8986] (syz.0.1312,8986,1):ocfs2_local_alloc_slide_window:1254 ERROR: status = -30 [ 339.885312][ T8986] (syz.0.1312,8986,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 339.894305][ T8986] (syz.0.1312,8986,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 339.903363][ T8986] (syz.0.1312,8986,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 339.912929][ T8986] (syz.0.1312,8986,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 339.922217][ T8986] (syz.0.1312,8986,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 339.931925][ T8986] (syz.0.1312,8986,1):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 339.940596][ T8986] (syz.0.1312,8986,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 339.949233][ T8986] (syz.0.1312,8986,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 340.112092][ T4248] ocfs2: Unmounting device (7,0) on (node local) [ 340.134200][ T9003] 9pnet_fd: Insufficient options for proto=fd [ 343.161638][ T9049] random: crng reseeded on system resumption [ 343.234435][ T9051] netlink: 'syz.7.1339': attribute type 4 has an invalid length. [ 345.520059][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 347.740346][ T9143] netlink: 'syz.7.1379': attribute type 1 has an invalid length. [ 347.784640][ T9143] netlink: 'syz.7.1379': attribute type 2 has an invalid length. [ 347.806581][ T9146] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1378'. [ 347.833537][ T9141] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1378'. [ 349.053388][ T9179] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1394'. [ 349.074618][ T9178] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1394'. [ 350.125490][ T9208] 9pnet_fd: Insufficient options for proto=fd [ 350.638247][ T9218] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1407'. [ 350.673823][ T9213] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1407'. [ 352.058441][ T9255] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1422'. [ 352.086416][ T9254] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1422'. [ 353.516140][ T9263] overlayfs: failed to clone upperpath [ 354.055790][ T9279] 8021q: VLANs not supported on caif0 [ 355.245412][ T9329] loop0: detected capacity change from 0 to 2048 [ 355.313934][ T9329] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 355.433611][ T9337] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.257740][ T9388] loop0: detected capacity change from 0 to 32768 [ 357.271533][ T9388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1465 (9388) [ 357.306134][ T9388] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.317032][ T9388] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 357.326238][ T9388] BTRFS info (device loop0): doing ref verification [ 357.333120][ T9388] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 357.344177][ T9388] BTRFS info (device loop0): trying to use backup root at mount time [ 357.352389][ T9388] BTRFS info (device loop0): metadata ratio 128 [ 357.358833][ T9388] BTRFS info (device loop0): enabling auto defrag [ 357.366546][ T9388] BTRFS info (device loop0): max_inline at 0 [ 357.373028][ T9388] BTRFS info (device loop0): using free space tree [ 357.576326][ T9388] BTRFS info (device loop0): enabling ssd optimizations [ 357.666454][ T27] audit: type=1800 audit(1743689399.055:466): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1465" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 358.163651][ T4248] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 359.065760][ T9449] loop0: detected capacity change from 0 to 512 [ 359.174881][ T9449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 359.184091][ T9449] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.322681][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 362.180333][ T29] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.440040][ T29] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.599187][ T29] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.914731][ T29] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.977173][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.626445][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.722540][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.732101][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.742742][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 363.757032][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.459970][ T9489] chnl_net:caif_netlink_parms(): no params data found [ 365.836916][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 365.956135][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.974944][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.000798][ T9489] device bridge_slave_0 entered promiscuous mode [ 366.106215][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.154906][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.199782][ T9489] device bridge_slave_1 entered promiscuous mode [ 367.980715][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 368.281081][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.308295][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.399016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.475127][ T9489] team0: Port device team_slave_0 added [ 368.514879][ T9489] team0: Port device team_slave_1 added [ 368.844602][ T9576] fuse: Bad value for 'fd' [ 368.870586][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.902865][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.964895][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.071444][ T29] device hsr_slave_0 left promiscuous mode [ 369.084866][ T29] device hsr_slave_1 left promiscuous mode [ 369.094438][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.115010][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.137237][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.144725][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.171279][ T29] device bridge_slave_1 left promiscuous mode [ 369.181175][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.194990][ T29] device bridge_slave_0 left promiscuous mode [ 369.209988][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.302552][ T29] device veth1_macvtap left promiscuous mode [ 369.496134][ T29] device veth0_macvtap left promiscuous mode [ 369.530683][ T29] device veth1_vlan left promiscuous mode [ 369.559030][ T29] device veth0_vlan left promiscuous mode [ 370.006451][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 370.674603][ T9623] netlink: set zone limit has 4 unknown bytes [ 371.074654][ T29] team0 (unregistering): Port device team_slave_1 removed [ 371.130624][ T29] team0 (unregistering): Port device team_slave_0 removed [ 371.187903][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.243611][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.900332][ T29] bond0 (unregistering): Released all slaves [ 371.972624][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.979739][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.006046][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.076235][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 372.207260][ T9489] device hsr_slave_0 entered promiscuous mode [ 372.222609][ T9489] device hsr_slave_1 entered promiscuous mode [ 372.245520][ T9489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.258196][ T9489] Cannot create hsr debugfs directory [ 372.868305][ T9489] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 372.928939][ T9489] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 372.989813][ T9489] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 373.013171][ T9489] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 373.411199][ T9489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.458160][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.479422][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.499745][ T9489] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.541503][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.581972][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.618686][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.625841][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.672352][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.715638][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.732732][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.775852][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.783107][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.830872][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.868772][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.889356][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.907781][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.933786][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.962608][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.008599][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.023259][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.086712][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.106484][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.128181][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.180362][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.952422][ T27] audit: type=1326 audit(1743689416.335:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.0.1561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846558d169 code=0x0 [ 375.091739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.130071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.164581][ T9489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.274757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.290424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.370071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.385880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.413252][ T9489] device veth0_vlan entered promiscuous mode [ 376.421154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.430170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.454195][ T9489] device veth1_vlan entered promiscuous mode [ 376.517441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 376.527640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 376.547016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.584898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.617247][ T9489] device veth0_macvtap entered promiscuous mode [ 376.650310][ T9489] device veth1_macvtap entered promiscuous mode [ 376.741856][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.793629][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.825664][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.850977][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.867251][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.896211][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.937910][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.969174][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.988618][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.007261][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.023259][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.052826][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.081039][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.112397][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.138694][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.165409][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.184882][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.204251][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.213041][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.227756][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.253644][ T9489] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.274208][ T9489] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.305143][ T9489] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.323967][ T9489] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.544973][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.585262][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.631285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 377.653649][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.669190][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.702896][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.651949][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.658556][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.666915][ T9870] dlm: non-version read from control device 0 [ 380.116693][ T9884] tmpfs: Unknown parameter 'usrquota' [ 380.682087][ T9901] overlayfs: failed to clone upperpath [ 380.732217][ T9901] mmap: syz.1.1619 (9901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 382.190462][ T9956] netlink: set zone limit has 8 unknown bytes [ 383.637834][ T9988] device ipvlan2 entered promiscuous mode [ 383.683087][ T9988] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 383.698911][ T9988] team0: Device ipvlan2 is already an upper device of the team interface [ 383.989058][T10002] overlayfs: missing 'workdir' [ 385.801963][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 386.371107][T10057] __vm_enough_memory: pid: 10057, comm: syz.1.1670, no enough memory for the allocation [ 387.107721][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'. [ 387.807452][T10091] __vm_enough_memory: pid: 10091, comm: syz.8.1682, no enough memory for the allocation [ 388.317802][T10103] netlink: 'syz.7.1686': attribute type 4 has an invalid length. [ 388.337622][T10103] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1686'. [ 388.704024][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 389.277690][T10127] overlayfs: failed to clone upperpath [ 389.701535][T10145] __vm_enough_memory: pid: 10145, comm: syz.0.1700, no enough memory for the allocation [ 391.064104][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1710'. [ 392.938445][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'. [ 394.858266][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1745'. [ 396.861524][T10311] device ipvlan2 entered promiscuous mode [ 396.887354][T10311] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 396.925941][T10311] team0: Device ipvlan2 is already an upper device of the team interface [ 397.322600][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1765'. [ 398.840191][T10354] overlayfs: failed to clone upperpath [ 400.538043][T10406] overlayfs: failed to clone upperpath [ 401.359569][ T27] audit: type=1326 audit(1743689442.745:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.5.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f353598d169 code=0x0 [ 402.154375][T10258] Set syz1 is full, maxelem 65536 reached [ 403.857423][T10512] overlayfs: failed to clone upperpath [ 406.331967][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1836'. [ 407.392400][T10571] overlayfs: failed to clone upperpath [ 410.402490][T10640] overlayfs: failed to clone upperpath [ 411.013015][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1866'. [ 414.810808][ T4264] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 414.819778][ T4264] Bluetooth: hci0: Injecting HCI hardware error event [ 414.829123][ T4264] Bluetooth: hci0: hardware error 0x00 [ 416.590845][T10723] Device name cannot be null; rc = [-22] [ 417.756684][ T4264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 418.264772][T10743] netlink: 'syz.8.1891': attribute type 16 has an invalid length. [ 418.272741][T10743] netlink: 64130 bytes leftover after parsing attributes in process `syz.8.1891'. [ 421.086945][T10770] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1897'. [ 421.131000][T10761] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1897'. [ 423.938665][T10803] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1913'. [ 423.968850][T10802] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1913'. [ 424.039812][T10805] __vm_enough_memory: pid: 10805, comm: syz.7.1914, no enough memory for the allocation [ 427.739919][T10842] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1926'. [ 427.770711][T10840] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1926'. [ 428.103119][T10849] __vm_enough_memory: pid: 10849, comm: syz.7.1928, no enough memory for the allocation [ 428.165874][T10851] netlink: 'syz.8.1927': attribute type 27 has an invalid length. [ 430.548931][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.557964][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.054988][T10851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.110153][T10851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.588256][T10851] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.597468][T10851] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.606935][T10851] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.615845][T10851] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.274416][T10889] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1939'. [ 432.303171][T10886] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1939'. [ 432.575586][T10898] overlayfs: failed to clone upperpath [ 433.998920][T10917] __vm_enough_memory: pid: 10917, comm: syz.1.1949, no enough memory for the allocation [ 436.294587][T10938] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1953'. [ 436.367611][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 437.584661][T10961] __vm_enough_memory: pid: 10961, comm: syz.1.1967, no enough memory for the allocation [ 440.080000][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.311443][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1987'. [ 440.512920][T11019] device ipvlan2 entered promiscuous mode [ 440.600104][T11019] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 440.695636][T11019] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.830784][T11026] overlayfs: failed to clone upperpath [ 442.955249][T11045] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1996'. [ 443.185705][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1999'. [ 443.927920][T11076] overlayfs: failed to clone upperpath [ 445.268978][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2015'. [ 446.394786][T11108] overlayfs: failed to clone upperpath [ 447.626656][T11131] Device name cannot be null; rc = [-22] [ 449.764260][T11164] overlayfs: failed to clone upperpath [ 456.979237][ T27] audit: type=1326 audit(1743689498.365:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 457.057123][ T27] audit: type=1326 audit(1743689498.365:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 457.151476][ T27] audit: type=1326 audit(1743689498.415:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 457.251216][ T27] audit: type=1326 audit(1743689498.415:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 457.775787][ T27] audit: type=1326 audit(1743689498.415:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 457.920805][ T27] audit: type=1326 audit(1743689498.425:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 458.906689][ T27] audit: type=1326 audit(1743689498.425:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 458.966538][ T27] audit: type=1326 audit(1743689498.425:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123558d169 code=0x7ffc0000 [ 459.730215][ T27] audit: type=1326 audit(1743689498.445:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1235529359 code=0x7ffc0000 [ 459.785097][ T27] audit: type=1326 audit(1743689498.445:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1235529359 code=0x7ffc0000 [ 465.245654][T11325] tmpfs: Bad value for 'size' [ 469.187598][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2106'. [ 469.280012][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 469.322098][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.369006][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.394726][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.431025][T11364] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 469.510209][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 469.554845][ T27] kauditd_printk_skb: 110 callbacks suppressed [ 469.554863][ T27] audit: type=1326 audit(1743689510.935:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 469.669394][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.723893][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.741446][ T27] audit: type=1326 audit(1743689510.975:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 469.801870][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.849403][ T27] audit: type=1326 audit(1743689510.975:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 469.889570][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.941209][ T27] audit: type=1326 audit(1743689510.975:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 469.966511][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.995585][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.040788][ T27] audit: type=1326 audit(1743689510.995:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 470.067588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 470.138631][ T27] audit: type=1326 audit(1743689510.995:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 470.235974][ T27] audit: type=1326 audit(1743689510.995:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540f98d169 code=0x7ffc0000 [ 470.365477][ T27] audit: type=1326 audit(1743689511.005:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f540f929359 code=0x7ffc0000 [ 470.482090][ T27] audit: type=1326 audit(1743689511.005:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f540f929359 code=0x7ffc0000 [ 470.565281][ T27] audit: type=1326 audit(1743689511.005:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f540f929359 code=0x7ffc0000 [ 470.736748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 472.218393][T11385] device ipvlan2 entered promiscuous mode [ 472.246531][T11385] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 472.279776][T11385] team0: Device ipvlan2 is already an upper device of the team interface [ 477.652603][T11446] overlayfs: failed to clone upperpath [ 582.916076][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 582.923191][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29/1:b..l [ 582.931478][ C0] (detected by 0, t=10502 jiffies, g=58197, q=15 ncpus=2) [ 582.938678][ C0] task:kworker/u4:2 state:R running task stack:22328 pid:29 ppid:2 flags:0x00004000 [ 582.950751][ C0] Workqueue: bat_events batadv_nc_worker [ 582.956416][ C0] Call Trace: [ 582.959700][ C0] [ 582.962670][ C0] __schedule+0x143f/0x4570 [ 582.967210][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 582.973114][ C0] ? print_irqtrace_events+0x210/0x210 [ 582.978586][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 582.983809][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 582.989302][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 582.994436][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 583.000204][ C0] irqentry_exit+0x53/0x80 [ 583.004634][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 583.010624][ C0] RIP: 0010:lock_acquire+0x1d/0x5a0 [ 583.015862][ C0] Code: c1 ba 97 7e a9 00 ff ff 00 0f 95 c0 c3 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 00 4c 89 4c 24 28 <4c> 89 44 24 38 48 89 4c 24 30 89 54 24 1c 41 89 f6 48 89 7c 24 20 [ 583.035785][ C0] RSP: 0018:ffffc90000a5fa80 EFLAGS: 00000282 [ 583.041971][ C0] RAX: ffffffff8a822ad7 RBX: ffff888058604640 RCX: 0000000000000002 [ 583.050050][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d32e740 [ 583.058148][ C0] RBP: ffffc90000a5fbe0 R08: 0000000000000000 R09: 0000000000000000 [ 583.066134][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888058688c80 [ 583.074226][ C0] R13: 00000000000000fd R14: ffff888058604640 R15: dffffc0000000000 [ 583.082314][ C0] ? batadv_nc_worker+0xc7/0x610 [ 583.087290][ C0] ? batadv_nc_worker+0xc7/0x610 [ 583.092333][ C0] ? __rcu_read_unlock+0x100/0x100 [ 583.097476][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 583.102543][ C0] batadv_nc_worker+0xe8/0x610 [ 583.107522][ C0] ? batadv_nc_worker+0xc7/0x610 [ 583.112470][ C0] ? batadv_nc_worker+0xc7/0x610 [ 583.117419][ C0] ? process_one_work+0x806/0x1260 [ 583.122536][ C0] process_one_work+0x917/0x1260 [ 583.127580][ C0] ? worker_detach_from_pool+0x260/0x260 [ 583.133238][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 583.138903][ C0] ? kthread_data+0x4e/0xc0 [ 583.143459][ C0] ? wq_worker_running+0x97/0x190 [ 583.148577][ C0] worker_thread+0xa47/0x1200 [ 583.153288][ C0] kthread+0x28d/0x320 [ 583.157360][ C0] ? worker_clr_flags+0x190/0x190 [ 583.162390][ C0] ? kthread_blkcg+0xd0/0xd0 [ 583.167075][ C0] ret_from_fork+0x1f/0x30 [ 583.171537][ C0] [ 583.174560][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10526 jiffies! g58197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 583.187169][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=23910 [ 583.195054][ C0] rcu: rcu_preempt kthread starved for 10527 jiffies! g58197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 583.206540][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 583.216513][ C0] rcu: RCU grace-period kthread stack dump: [ 583.222510][ C0] task:rcu_preempt state:I stack:26712 pid:16 ppid:2 flags:0x00004000 [ 583.231754][ C0] Call Trace: [ 583.235042][ C0] [ 583.237995][ C0] __schedule+0x143f/0x4570 [ 583.242517][ C0] ? _raw_spin_unlock+0x40/0x40 [ 583.247524][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 583.253443][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 583.258837][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 583.264741][ C0] ? _raw_spin_unlock+0x40/0x40 [ 583.269604][ C0] schedule+0xbf/0x180 [ 583.273796][ C0] schedule_timeout+0x1b9/0x300 [ 583.278827][ C0] ? console_conditional_schedule+0x40/0x40 [ 583.284828][ C0] ? update_process_times+0x1b0/0x1b0 [ 583.290315][ C0] ? prepare_to_swait_event+0x329/0x350 [ 583.295979][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 583.300948][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 583.305739][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 583.310431][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 583.315636][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 583.321554][ C0] ? __kthread_parkme+0x168/0x1c0 [ 583.327203][ C0] kthread+0x28d/0x320 [ 583.331313][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 583.336435][ C0] ? kthread_blkcg+0xd0/0xd0 [ 583.341055][ C0] ret_from_fork+0x1f/0x30 [ 583.345669][ C0] [ 583.348784][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 583.355104][ C0] Sending NMI from CPU 0 to CPUs 1: [ 583.360415][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340