last executing test programs: 2m27.30914698s ago: executing program 2 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0xfffffff8}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x14) 2m27.121617108s ago: executing program 2 (id=46): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xfffffffe, 0xcc, &(0x7f0000000300)="ba5746bd702db8369f1f11ade7825c538cb388fc610c81b9e258b4488467a87c9bb994cad512338699559fca99d923c5c5a7a5aaf42c47f32b39512fbff612ed9969e2743f9743096107760cee138deadc419e09566f22048770a1e7d55231481eb32653e1f317a97cbb85c5cd49aa11743600bd32fffe6ded0fbd2b844bebdaad5a74a089197db584872a07579cd0dc398701d8ae6ec1", 0x97) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r4, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1661}]}]}, 0x44}}, 0x48040) 2m21.602985993s ago: executing program 2 (id=52): mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83) ftruncate(r4, 0x3000000) sendfile(r3, r4, 0x0, 0x80000001) 2m20.586648457s ago: executing program 2 (id=54): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVioGFVN1SiVkNOURwgUIUFNSJSKOpGrmXvP7J1zdx6Odx1v+vtJ3jkz//O8c2c85947ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8fjt3xhotaxd981SPf/u4Db//44Y8s3P3EVz51RwjTtce7snDXxac+11s5+Z7vHfrpF7+wad2jp/vzcnk8rKn+6c7vfCLW+ou1IXyjK4TeNLB+OAv05feHY32vGg5hXVgM1EvMDGUl0obDDwZDOBIWA/WqvjUYwnAhsO3R7z/0mWrinsEQLg0hVNI2flzJ2hhMA5f1Z4GhNHBrbxb4nzOZeuCb3VkAzll8MdR3+oXpxgxjS5drsv/1LVvHXlzp8HpiYqx5vt9uXeFOFfSnD0yf09NWqo4VUXp5HPdqWwWvttJ2vsvTVvwglX9CObMYqoTuXTM37Dgwtz8+0h0mJnqa1bRCz/NjT31059mkV81+GDswtiz74b2f//nHvvTktfff98l3XP/gM78fP9dunixs0mJ6pVVCvs+tmucx2uL9ZBW8/EqfksbbPm21Ii/xD12f/tnf/kmreGn+P9Z6/h9353jb3ZA71np6JJubx0eGY+LUSDY3BwAAgFVjNRw1nf/K1VOt6ivN/8c7O/8fT/nnk/lstMdD2FJL3D4awiW1x7PAsdjcB0dDeG0tNd0Y2JoEjofwilriinpVSYmBWGI8CfxqJA9sSQInYmA6CXw5Bu5KAp+IgYUksDMGjieBt8ZAmG0cxx+P5OPoODAYA9uzjbgQr0J4eiS2lmyrx+tVAQAALJN8dtjXeLdwrcO5ZojTy4XBdhniFdhNM1SSGtIZbH1a1bSG3nY1dLeroT7u+dbDL9Xc1a7m0mUYXY0Z9n70d38WWijN/ydbz/8rS3Skq3T+P4Tran9j7u48MlePb59uyAAAAACcgzVbb9nWKl6a/2/p7Pr/eEykp5A5PBwPQ+weDWGyMZBVe3U5kJ31XpMHAAAAYDWon4+vnwufzW+zS7TT+XQ5//RZ5o8n/rcsmf/X73zTTa36W5r/T3d2/f9Q423WiROxF58dDWGgEPhh7GU1UDMeAz97S2MgH/+JuAHujFXlFybUq7ozltgeA5NJ4EizEo/US1zSGMifrHrjt9fHMZuXKAQAAADgvIuHA+J5+Xj9/2MHTr6tVbnS/H/72V3/X5sHly7vn1sTwobeEHrSLwY8PJQtDBgDw1154rtDWV09aVWHhkK4pjqwtKon8vX/e9M1Bh8dzKqKgUte99WnLqsm/m4whA3FwI/ef3RTNbE/CdQbf99gCK+pjjZt/OsDWeN9aeP3DoTw6kKgXtUHB0KoNtafVvX9Sv47BmlVD1ZCuKgQqFe1uRLCwQDAKhX/K91VfHDfwdt275ibm9m7gol4DH8w3DA7NzOx89a5XZUmfdqV9LlhGaND5TE1XQ4p8Xi+RNGx564a6SRd/57gZLEv+XH80oWD+f34WaivNs6pvoa7V6ZDfsPry02EwiepF2vIQ8VKFp/EUv0xf39YEwYO7JvZO/HhHfv3792Y/e00+1T2Nw4q21Yb0201tFTfLoDd4/JiJRv237xnw76Dt62fvXnHjTM3ztwyNfnGTZs3TU1u3ryhOqrJ7G+boV6+VNXJUM8cPf9DfWVvoZLz8a4hISGx2hLztx9d0+rtpzT/39N6/h/fdeI7f74+Q7Pz/2PxNH/2+OJp/u0xcKTT8/9jzc7m1y8MGE8C8zEw7zQ/AAAALw3xcGQ87BiPWvcfvfI3rcqV5v/znX3/f5nW/68vXf+uZsv8XxFLTDZb/z9d5r++/v98s/X/02X+6+v/H3kR1v8/UA8km+Rp6/8DAAAvBedv/f+2y/unPxBQytB2ef/0BwJKGdou49/pDwSc9fr/Uzf99BehhdL8/67O5v8W7gcAAIALx93/9NRrWsVL8/8jnc3/z//6f6HZ9f/jzQLTzRYGtP4fAAAAq1Sz9f/OjP7F+1qVK83/Fzqb/8fLLrobcsdaT49ka9qFdE27UyP1rwwAAADA6tAdJib6OszbsDLq1hfe5mP5UqCt0kU/vPq/bmxVX2n+f7yz+X/D9zLu/fzPP/alJ6+9//R9n3zH9Q8+8/vxxfP/AAAAwMrp9LgEAAAAAAAAAAAAAADw4jvwgX891Spe+v5/uK72eLPv/8ff/YvfL3h5Q+5Ya/v1//L72979wMHakoUPj4Tw+mJg9+Hd60L+2/yXFwMPXX/FxdXE4bTEd37y1l9WEx9IA+9c/7Jnq4lrksD2uEjiK9JA/FXFZ9cmgbi84r+ngbg9FtJAfx749NpsHF3ptvr1cLatutJt9R/DIYwWAvVt9Y3hrI2udID3JIH6AD+UBuIA35MHutNePbAm61UMDMeif7Mm6xUAABes+CmwL9wwOzczGT/Cx9tX9jbeRg1Llh0qV9vTYfOP50uTHXvuqpFO0j3pZ9HF3xrvC5XqEDaWPq4Ws3TVRrk8tbTZdC9vMuR2q72t1Kbrbz6iwWxEEztvndvV13bgV7bPMtXbNsvG0mSnmKW7tkk7qKWDvnQwog63TQddjve7w8RET5LrTTE4Fhq02yM6/b5+cZ2/ZntBMc+hub7nW9VXmv+PdTb/rxTH9Wz+YwDz8Zf1/nLUMv8AAACwsj699Q/3xX/fGX3vf7bKW5r/j3c2/48HxvJTwdnRjuPx9/9vHw2h9tP6Y1ngWGzug6MhvLaWmo4lsh/Uf1csMZkFjsUDJlfEEtunG6saiIGFJPCrkTxwPAmciIH8KMVXQ34o5+6REDbVUtc1ltgTS4wlgffGwHgSmIiBySSwNga2JIHfrM0D00ngX2IgzDZuq39Ym28rAACAs5HPs/oa74Z0nrfQ2y5DV7sMQ+0ydLfLUGmXodko4v2vxQx9xfPxeYb4UF9a62BSSylD/DH8s+5XKUN4pDFnWrDUdP1KkrHGnDHDtoXDa0MLpfn/ZGfz/6HG26z1E3H+v/j7f1ngh7F7n42Xjo/HwM/e0hjIDwyciJPdO+tVTecl8kn7nbHElhgYTwJ7YmBLEth+XR44cnFjIJ9p1xu/vd74bF6iEAAAAIDzLh4giIdp4vz/vwee/+tW5Urz/y2dzf9je2uKjX0i1vqLtSF8o2uxN/XA+uEsEI9jDMevx79qOIR1hQMc9RIzQ1mJ/qTh8IPB7Bvq/WlV3xrMvnwQ72979PsPfaaauGcwhEsLR1/qbfy4krUxmAYu688CQ2ng1t4sEI/81APf7M4CcM7qRwXjDpVf6lI3tnS5JvvfS+U3QdPhlY6BLpFvqe9crZRK+kB+TLXu7J62UnWsjHT7H/dqWw2vtufz/4Pr/fJqK36QOpNsnuoQu3fN3LDjwNz++Ejxm6wlK/Q8F7+l2kl6GfbD+Rfe26i7aaSSdmAyefuYXLrc0vthV6zu3s///GNfevLa++/75Duuf/CZ34+362C7/Td+UfiWm/535GRh8660Ssj3uQv+/SR9YNr7yWr4byB9YNzTFkK4Y+GSp1vFS/P/6c7m/73Jbc0f4sbcNxrCGwob9+G4+d82mr0PFgLZu+RF5UB2yv3JkabvnAAAALDc6oc76scLZvPb7ILwdJ5czj99lvnj8YotS+bvtN8fufTSf2wVL83/t7ee/w8k3XT+3/l/Vojz/0u60A9FD6QPzJ/ToehSdayI0svD+f+wCl5tpTM1zv8H5/+X7N8ynP9vzvn/lpz/X90u9Ket9Clpjw9dIYTBr1/9SKt4af6/p7P5v/X/ll60r77+3/Zm6//tabb+37z1/wAAgBXVZKG5dJ5XWr2vlCFdva+Uoe0CgW2XGLT+31mv/zf0V+//XWihNP+f72z+H3eHNcXWV8v6f+PXNanqrhjYY2FAAAAALkTNDhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4vrVyaG3t4q/+apHvv3dB97+8cMfWbj7ia986o4QZmuPd2XhrotPfa63cvI93zv00y9+YdO6R09X8nJ9+e0fNeSOtZ4eCeFI4ZHhmDg1Ur2zGNj27gcO9lYTD4+E8PpiYPfh3euqiS+PhHB5MfDQ9VdcXE0cTkt85ydv/WU18YE08M71L3u2mrgmD3Sl3b1/bdbdrrS7n1kbwmghUO/uTWsbq6q3cW0e6E7b+PvhrI0YGI5F7xvO2oiBuVhidiCEDb0h9KRV/XMlq6onrerblayqnrSqj1dCuCaE0JtW9ZP+rKredOT/1p9VFQOXvO6rT11WTRzpD2FDMfCj9x/dVE18KAnUG//T/hBeU91l0sa/1pc13pc2fk9fCK8OIfSnJZ7pzUr0pyWe6A3hokKg3vif94ZwMPCSEN98dhUf3Hfwtt075uZm9q5goj9vazDcMDs3M7Hz1rldlaRPzXQV0mcOlePdHY798ac+urN6e+y5q0Y6Sffm5fpqXZ7qa7h75XL1vmuFeh/7NVSsZPH5KNUf8/eHNWHgwL6ZvRMf3rF//96N2d9Os09lf3vyaLatNi7XturUC91Wlxcr2bD/5j0b9h28bf3szTtunLlx5papyTdu2rxpanLz5g3VUU1mf5djqEfL8Z4VHuorewuVnI83AAkJidWW6G54d5u80P/LLn3QX+xoX6jU3qBL04pilq7aKJdj0Ftbx89y0NUeNf+c0nZEG0sTh1KWqfZZrixNJhazDGZZap/rSpPDYk3dtU0a73eHiYmm/9ONNd4tbr7fLrF5O/VYvuk6TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA///jqU04") r0 = creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x72, &(0x7f00000004c0)={@random="d93f47151094", @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x32, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@routing={0x1d, 0x0, 0x2, 0x8}]}}}}}}}, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) accept4(r0, 0x0, &(0x7f0000000400), 0xc928c1d80e6c3d23) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) fcntl$addseals(r3, 0x409, 0x8) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) readlinkat(r0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)=""/181, 0xb5) 2m14.109214094s ago: executing program 2 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r7, &(0x7f0000000180)={0x2, 0xcc20, @empty}, 0x10) listen(r7, 0x3) bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r6, 0x3) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) 2m9.105650836s ago: executing program 2 (id=66): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000bc0)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@force}, {@force}, {@part}, {@nls={'nls', 0x3d, 'macgreek'}}, {}, {@nodecompose}]}, 0xfc, 0x6ee, &(0x7f0000000c80)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) r2 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x10f}], 0x1}, 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x7, 0x0, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@fd={0x81, 0x4, 0x4, 0x40, 0x9, {0x77359400}, {0x5, 0x8, 0x8f, 0xe, 0x5}, 0xad, 0x4, {}, 0x101e85}) 2m8.453414204s ago: executing program 32 (id=66): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000bc0)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@force}, {@force}, {@part}, {@nls={'nls', 0x3d, 'macgreek'}}, {}, {@nodecompose}]}, 0xfc, 0x6ee, &(0x7f0000000c80)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) r2 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e92", 0x10f}], 0x1}, 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x7, 0x0, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@fd={0x81, 0x4, 0x4, 0x40, 0x9, {0x77359400}, {0x5, 0x8, 0x8f, 0xe, 0x5}, 0xad, 0x4, {}, 0x101e85}) 27.190825586s ago: executing program 1 (id=187): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000000, 0x0, 0x1000010, 0x20000], [0x0, 0x40002, 0xfffffffe], [0xfffffffffffffffd, 0x10000000000000]}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000a0000002}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0x7, 0x3fff}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000400)={0x28, 0x2, 0x0, r4, 0xd, 0x400, 0x14b2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = syz_open_dev$vbi(&(0x7f000000b380), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f000000b3c0)={0x40000000, 0x3, "7a779dc84d2d09faa2f3054936aa4476ccf56f92f5f083432dee9d5d0aa80b3a", 0xfffffffffffffff7, 0x3, 0xb, 0x4ba4, 0x6, 0x4, 0x7, 0x9, [0x40, 0xc5, 0x10001, 0x6]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000e0c0)=@deltfilter={0x3040, 0x2d, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xfff3}, {0xa, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flow={{0x9}, {0x3008, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x800, 0x4, 0x7, 0xfffffff9, 0xa57, 0x631e, 0xff, 0x3, 0x7fffffff, 0x1, 0x2, 0xb, 0x3, 0xd82, 0x36da, 0x7fffffff, 0x2, 0xff, 0x8, 0xffffffff, 0xffff8001, 0x8, 0xfffff001, 0x2, 0x2, 0x800, 0x340, 0x0, 0xfffffc00, 0x401, 0x80, 0x9957, 0x2, 0x3, 0x1129, 0xdcd, 0x5, 0x40, 0x3, 0xffff, 0x954, 0x8, 0x1, 0x4, 0x13f, 0x80000000, 0xd, 0x3, 0xd1, 0x5, 0x2, 0x3, 0x0, 0xfffff6a5, 0xfffffffd, 0x80000001, 0x3, 0x548c5256, 0x46, 0x10, 0x3, 0x6, 0x8, 0x0, 0x9, 0x3, 0x81, 0x4, 0x8, 0x7, 0xf, 0x4, 0x7, 0x3ff, 0xa3c, 0xf, 0x1c0, 0x5, 0x823, 0x5, 0x964, 0x3d, 0xff, 0x5e3b, 0x0, 0xc, 0x2b31, 0x7, 0x6, 0x2, 0x0, 0x6, 0xfffff8e3, 0x7, 0x9, 0x3, 0x0, 0x198b, 0x449b, 0x4, 0x5, 0x7, 0x1, 0x80, 0x81, 0x7f, 0x0, 0x3, 0x8, 0x7, 0x5, 0x0, 0x7, 0x5, 0xe, 0x6, 0x2, 0x7, 0xc450, 0xffff2054, 0x80000000, 0x4, 0x8000000, 0x4, 0x3, 0x6, 0xffffa485, 0x2, 0x5, 0xf, 0x3, 0x8, 0x5, 0xfffffff4, 0x1000, 0x8, 0xcc, 0x7, 0x1, 0x3000, 0xf, 0x4f1, 0x4, 0x4, 0x1, 0xa, 0x2, 0x2, 0x3, 0x6, 0x5, 0x1, 0x6, 0x40, 0x51, 0x6, 0xa000, 0x5, 0x6, 0x8, 0xfffff800, 0x800, 0x0, 0x7, 0x36f8, 0x3, 0x11, 0x9, 0x4, 0x7f, 0x19, 0x400, 0x9, 0x119, 0xa, 0xc, 0xa, 0x4, 0x86a, 0x1, 0x3ff, 0xfffffffa, 0x5a6, 0x8, 0x3, 0x5e0, 0x6, 0x1ff0, 0x80000001, 0xf, 0xa, 0x3b1f, 0x5, 0x5, 0x6, 0x1, 0x6c, 0x29ff, 0x0, 0x3, 0x1, 0x3, 0x5, 0x9, 0x59, 0x4, 0x6, 0xfffffffb, 0x41144110, 0x3, 0x1000, 0x7, 0x66, 0xe, 0x7, 0x7fff, 0x5, 0x48, 0x94c, 0x7, 0x5a1, 0x9, 0x4, 0x3, 0x1000, 0x7, 0x4, 0x5, 0xc99f, 0x6, 0x4, 0x10001, 0x3, 0x0, 0x9, 0x1, 0x7, 0xa, 0x9, 0x7, 0xaba7, 0x10, 0x8, 0x2, 0x0, 0x8, 0x40, 0x18c, 0x4, 0x6, 0xf725, 0x5, 0x7, 0x1, 0x4]}]}, @TCA_FLOW_ACT={0x2bfc, 0x9, 0x0, 0x1, [@m_pedit={0x2bf8, 0x17, 0x0, 0x0, {{0xa}, {0x2bcc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x4, 0x0, 0x2, 0x2, 0x8}, 0x6, 0xa5, [{0x1, 0x5, 0xffffffc4, 0x9, 0x3ff, 0xfffffffe}, {0x4, 0x7e, 0x2, 0x7, 0x0, 0x4}, {0x8, 0x600, 0x6, 0xfffbffff, 0x7fffffff, 0x1}, {0x8, 0x4, 0x150f, 0x8, 0x6, 0x9}, {0xfffffffd, 0x2, 0x3, 0x5, 0xd, 0x2}, {0x8, 0x3, 0x5265, 0x1, 0xa9b9, 0x10}, {0x40, 0xff8, 0x6, 0x3b97, 0x8}]}, [{0x2, 0xa403, 0x8, 0x2, 0xd, 0x76d}, {0x9, 0x6c4d, 0x6, 0x8, 0x9}, {0x1c000000, 0x80, 0xfffffff7, 0x9, 0xfffffffe, 0x101}, {0x0, 0x9, 0x2, 0x100, 0x67eb, 0xfffffff0}, {0x4, 0x0, 0x10000, 0x40, 0xcbe, 0xffffffff}, {0x3, 0x2, 0x4, 0x0, 0x8, 0x7f4}, {0xfff, 0x3ff, 0x10, 0xffffffff, 0xfffffff8, 0x8000}, {0x100, 0x0, 0x6, 0x3604, 0x10000, 0xf99}, {0x1, 0x0, 0x80, 0x0, 0x5, 0x7}, {0x7a, 0x2, 0xd9, 0x5, 0x800, 0x3}, {0x2, 0x4, 0x4, 0x8, 0x38c5ed5c, 0x94}, {0x0, 0x3, 0x1, 0x1000, 0x7, 0x6}, {0x19d03185, 0x8, 0x10, 0x32bbb26b, 0x5c, 0x4}, {0x1, 0x7ff, 0x2, 0xa75, 0xc, 0x9}, {0x7ff, 0xf56, 0xa, 0x1, 0x93b, 0x5}, {0x3a, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x400}, {0x1, 0x7, 0x1000, 0x26ae, 0x18c, 0x7ff}, {0x3ff, 0x8, 0xca, 0x5, 0xfffffffd, 0xf5a}, {0x5, 0x5, 0x1, 0x6, 0xa, 0x6}, {0x7, 0xbd, 0x6, 0x10, 0x0, 0x5}, {0x4, 0x83, 0xa1, 0xa, 0xfff, 0x10000}, {0xffff, 0xc, 0x8001, 0xc182, 0x92c, 0x6}, {0xbc, 0xfff, 0x1000, 0xff, 0x6, 0x1}, {0x1ff, 0x0, 0x8, 0x4, 0x2f, 0xbd8}, {0x4078, 0xffffffff, 0x3, 0x1, 0x6, 0xb31b}, {0x7fffffff, 0x3, 0x4, 0x1, 0x1829, 0x200}, {0xffffffff, 0xfffffffc, 0x4, 0xaf48, 0xc, 0x9}, {0x0, 0xf, 0xffffffff, 0x6, 0x3, 0x7fff}, {0x3, 0x9, 0x6f1, 0x0, 0x7fff, 0x93}, {0x2, 0x10001, 0xf7, 0x9, 0xf8, 0x2}, {0x3, 0x4, 0x6, 0x6, 0x2, 0xbfb8}, {0xd, 0x3, 0x4, 0x7, 0xb3ca, 0xfffffff7}, {0x9, 0x400, 0x5d, 0x80, 0x39d80, 0x7fffffff}, {0x80000001, 0x1a, 0x1ff, 0x0, 0x44, 0x9a3}, {0x7, 0x7ff, 0xd, 0x6, 0x6, 0x7fff}, {0xffff, 0xca2, 0x8, 0x5, 0x3, 0x406d}, {0x52, 0x7ff, 0x7, 0x46, 0x1, 0x1}, {0x7fffffff, 0x3, 0x1, 0x8, 0x1, 0xb}, {0x9, 0x770, 0x0, 0x4, 0x7, 0x54563112}, {0x5, 0xbd, 0xffff, 0x7f, 0xda, 0x5}, {0x3, 0xaf72, 0x9f11, 0x7f, 0x8}, {0x1, 0x8000, 0x3, 0x1, 0x1, 0x1}, {0x9fac, 0x2, 0xe51c, 0x100, 0x609c, 0x3ff}, {0x9, 0x4d, 0x2, 0x1, 0x2, 0x7}, {0x409, 0x9, 0x9, 0x4, 0x33c05f70, 0x3}, {0x5, 0x7, 0x4, 0x9, 0xb, 0x1}, {0xffff, 0x101, 0x7f, 0x3, 0xcd6}, {0x6, 0x1, 0x4, 0x2, 0x9, 0x6}, {0x8, 0x1, 0x7, 0x8, 0x17, 0x4}, {0x3, 0xfffffffc, 0x8, 0x629c, 0x2ff, 0xf}, {0x7, 0x0, 0x101, 0x4d5088c1, 0x9}, {0x7e7, 0x400, 0x10000, 0x3, 0x7, 0x7ff}, {0x400, 0x8, 0x9, 0xd, 0x5, 0xc986}, {0x4, 0x9, 0x4, 0x31, 0xfffffff8, 0x6}, {0x9, 0x7, 0x9, 0x0, 0x7f, 0x5}, {0xffff, 0x8001, 0xb, 0x81, 0x6, 0x580}, {0x7fffffff, 0x8, 0xd804, 0x1afe, 0x3, 0x2}, {0x80, 0x3c557b9d, 0x6, 0x8, 0x4, 0xfffffffc}, {0x101, 0x9, 0x41, 0x3, 0x77, 0xf}, {0xfffffc01, 0x1, 0x704, 0xfffff4ce, 0x1, 0x7}, {0x3, 0x2, 0x7, 0x7f, 0x0, 0xfffeffff}, {0xffffaeaf, 0x800, 0x4, 0x0, 0x0, 0xd}, {0x4, 0x10001, 0x6, 0x73f, 0xffff0b2b, 0x6}, {0x7, 0x5f7e, 0x7fffffff, 0xfffffff8, 0x6, 0x3b}, {0xa, 0x9, 0x4, 0xa000, 0xa0b, 0xd102}, {0x401, 0x9, 0x3, 0xfffffffd, 0x10000, 0x9}, {0x7, 0x7, 0x0, 0x2, 0x39faea07}, {0x6a9, 0x67, 0x6, 0x80000000, 0x5, 0xa9d0}, {0x0, 0x0, 0x9, 0xc636, 0x8, 0x3}, {0x7fffffff, 0x42d6, 0x4f, 0x7c6, 0x4, 0x7}, {0x2f96, 0x5, 0x5, 0x3, 0xd67, 0x200}, {0x8, 0x47a5, 0x7fff, 0x8, 0x7, 0x7}, {0x4, 0x800, 0x59, 0x5d5, 0x2, 0x9}, {0x3, 0xfffffffa, 0x7, 0x9896, 0xffffffde, 0x80000000}, {0x6, 0x7, 0x4, 0x8, 0x0, 0x4}, {0xffffff0a, 0x8, 0x3, 0xfffffff8, 0xeb37, 0xb756}, {0x8, 0x9, 0x10000, 0x79, 0x1, 0xaecc}, {0x4, 0xd3, 0x4, 0x7, 0x8, 0xf}, {0x8, 0x2, 0x6, 0x3, 0x3, 0x5b57e38e}, {0x0, 0x8, 0x5, 0x4, 0x2b2f, 0x3}, {0x632, 0x3, 0xba6, 0x3, 0x0, 0x6}, {0x5, 0x91d, 0x3, 0x93, 0x1, 0x3}, {0x3, 0x45f8, 0x3, 0x9, 0x81, 0x7}, {0x8, 0xce4, 0xb74a, 0xf20, 0x1000, 0x2}, {0x6576, 0xa29, 0x7, 0x81, 0xffffffff, 0xfffffffb}, {0x7fffffff, 0x9, 0x7, 0x3, 0x9, 0xfff}, {0x40, 0x6, 0xfff, 0x8, 0x9, 0x7}, {0x10000, 0x9, 0x3, 0x2, 0xfffffff1}, {0xfffffffe, 0xfffffff3, 0x3, 0x0, 0x81, 0x6e41dad2}, {0x3, 0xdc9, 0x3, 0x100, 0x4, 0xfee}, {0xfffffffa, 0x4, 0x1, 0x10000, 0x5, 0xe}, {0x5, 0xdfb, 0xff, 0x10, 0xffffffe3, 0x9}, {0xa9, 0x2, 0x2, 0x4, 0x4, 0x2}, {0x978a, 0x400, 0x200000, 0x401, 0xd4e, 0x8}, {0x6b, 0x3, 0xa, 0x6, 0xf, 0x7}, {0x7, 0x9, 0x27ea, 0xc4, 0xfffffff9, 0x9}, {0x7, 0x5, 0xb, 0x9, 0x5, 0x7}, {0x9c, 0xbde, 0xfff, 0x100, 0x10001, 0x3}, {0x7, 0x3ff, 0x101, 0x6, 0x2, 0xff}, {0x9, 0x4, 0x92e, 0x0, 0x4, 0x44}, {0x2, 0x4, 0x1ff, 0x5, 0x400, 0x6}, {0x8001, 0x3, 0x38, 0x6, 0x4, 0x80}, {0x5, 0xc5, 0x2, 0x5}, {0x800, 0x10, 0x7fff, 0x0, 0xff, 0xfffffffd}, {0x8, 0x6, 0x0, 0xc08c, 0x5, 0x7}, {0x9, 0xffffffff, 0x8, 0x8, 0x3, 0x5}, {0x84, 0x7, 0x40, 0xc5, 0x80, 0x96e5}, {0x7, 0x4, 0x243, 0x2, 0x6, 0x6}, {0x10, 0x42bd, 0x9, 0x4, 0x6, 0x9}, {0x4, 0x7fffffff, 0x2, 0xca4, 0x7, 0x9}, {0x800, 0x7, 0x3ff, 0x0, 0x9, 0x1}, {0x4, 0x30d, 0x8, 0x8, 0x5, 0xa}, {0x6ed, 0x6, 0x6, 0x8, 0x1, 0xffff0000}, {0xfff, 0x7, 0x0, 0x9, 0xa7, 0x4d4}, {0x0, 0x4, 0x6, 0x8000, 0x3, 0xb}, {0xb, 0x8, 0x10000, 0x9, 0x3, 0xd962}, {0x0, 0x4, 0x6, 0x8, 0xea, 0xffff0001}, {0x7e96, 0x8, 0x3, 0x6, 0xf2, 0x84a2}, {0x100000, 0x9, 0x8, 0xc, 0x825f, 0x6bd4}, {0xfffffffb, 0x6, 0x40, 0x80, 0x0, 0xd}, {0x800, 0xf57, 0x2ff, 0x83d, 0x3, 0x1}, {0x80, 0x7, 0x9, 0x2, 0xdffb, 0x2}, {0xf, 0xffffffff, 0x8, 0x5, 0xeb6, 0x6}, {0x8, 0x6, 0xb7d, 0x3, 0x2, 0xc318}, {0x0, 0x7, 0x1, 0x6f7, 0x8, 0x6}, {0x8001, 0x7a98, 0xdad, 0x9, 0xffffffff, 0x5}, {0x1000, 0xfffffff9, 0x81, 0xffff, 0x5c0, 0xb574}, {0x6, 0x6f, 0x1, 0x1, 0x6, 0x9}], [{0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x5, 0x1}, {}, {}, {0x4}, {}, {0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x3}, {0x2, 0xbdbf2fd227b13bce}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x8cbf16db83ff8631}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x3}, {0x4}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x3, 0x25524dea, 0x8, 0xf, 0xa4e1ca71}, 0xb8, 0x0, [{0x3, 0x4, 0x0, 0x6, 0x1a32}, {0x8, 0x0, 0x4a144c51, 0x4, 0x1000, 0x4}, {0x3, 0xd087, 0x1, 0xfffffff8, 0x100, 0x6}, {0x101, 0x7, 0x6, 0xffffffff, 0x89, 0x60}, {0x7fffffff, 0x4, 0x3, 0x8}, {0xfffffffa, 0x6, 0xfffffff9, 0xe, 0x20000, 0x3}, {0xc03, 0x7fff, 0x10, 0x6, 0x910, 0xa}, {0x1000, 0xfff, 0x7, 0x280c, 0x80}]}, [{0x40, 0xffffffff, 0x3b8, 0x7, 0x4, 0x2}, {0x2, 0xffffffff, 0x7, 0x6, 0xfff, 0x800}, {0x6, 0x9, 0x8001, 0x4, 0xb, 0x7}, {0x5, 0xff, 0x18, 0x9, 0x6, 0xc}, {0x819c, 0x1ff, 0x6, 0x2, 0xffffffff, 0xc}, {0x10001, 0x1, 0x4, 0x6bf3, 0xbec, 0xffff}, {0xd, 0xba02, 0x6, 0x100, 0xe85f, 0x9}, {0xfffffff7, 0x2618, 0x2, 0x80000001, 0xff, 0xffffff80}, {0x9, 0x8, 0xf92b, 0x6, 0x7, 0x7}, {0x4, 0x4d, 0x101, 0x7, 0x7, 0x1}, {0x1, 0x2, 0x2, 0x9, 0x7, 0x2}, {0x9, 0x6, 0x5, 0x8, 0x0, 0x400}, {0x9, 0x3, 0xc1, 0x4, 0x6, 0xd}, {0x101, 0xb, 0xa27, 0x4, 0xfffffff7, 0x6}, {0x8, 0x101, 0xf, 0x22, 0x7, 0x8}, {0xfffff0ce, 0x7, 0x0, 0x6, 0xe7, 0xffffe000}, {0x1, 0x31f1605a, 0x4, 0x0, 0x7db4, 0x898}, {0xbc8, 0x7f, 0xfffffff7, 0x88, 0x4, 0x7}, {0x5, 0x3, 0x1ff, 0x7, 0x3, 0x3}, {0x8, 0xa2e, 0x1, 0xd0ae, 0x4, 0x7c}, {0x5, 0x5, 0x5a34, 0x8, 0x4, 0x9}, {0x7fff, 0x3, 0x7f800, 0x4, 0x6, 0xfffffffa}, {0xf, 0x0, 0x4, 0x8, 0x9, 0xf3a4}, {0xcf, 0x2, 0x9, 0x6, 0x1ff, 0x1}, {0xb, 0x7, 0x5, 0x8, 0x9, 0xbb4}, {0x7, 0x4, 0x2, 0x8, 0x2, 0x6}, {0x2, 0xff, 0x3, 0x9, 0x1, 0x3}, {0xff, 0x9, 0x3, 0x9, 0x0, 0xb1}, {0x6, 0x7, 0x0, 0x6, 0xfffff675, 0x9}, {0x4, 0x3da4fbca, 0x401, 0xe, 0x2, 0x5f2}, {0x9, 0x7ff, 0xbe5, 0x6, 0x8, 0x7}, {0x3d, 0x1000, 0x3, 0x2, 0x3e, 0x3ff}, {0x4, 0x83e, 0x7, 0x46, 0x8000, 0xfffffffe}, {0x5, 0x3, 0x3, 0x3, 0x7fff, 0x76}, {0x6, 0x0, 0x7, 0x5a53, 0x5, 0x3}, {0x3, 0x0, 0x6, 0x1, 0x8, 0xffffffcd}, {0x7, 0x80, 0xfff, 0x3, 0x8, 0x2}, {0x6, 0x9, 0x100, 0xffe00000, 0xe743, 0x2}, {0x6, 0xdd9e, 0x7, 0x9, 0x5, 0xfffffffb}, {0xffff, 0x0, 0x4071, 0x8, 0x7, 0x80}, {0xfffffffe, 0x1, 0x9f, 0x3, 0xf35, 0x3}, {0x3, 0x0, 0x9, 0x83, 0x688, 0x4}, {0x3ff, 0x4, 0x7, 0x101, 0x2, 0x1}, {0xf8b5, 0x4, 0x81, 0x8, 0x3ff, 0xc63}, {0x8, 0x7, 0x5, 0xb, 0x8, 0x80000001}, {0xf, 0x517a, 0xda, 0x6, 0xe9, 0xb7}, {0x9, 0x200, 0xfffffffc, 0x6, 0x1ff, 0xbb7}, {0x3, 0x5, 0xfb6, 0x0, 0x3, 0x4}, {0x2, 0x7ff, 0x9, 0x4, 0x5, 0x7fffffff}, {0x6, 0x9, 0x9, 0x7, 0x3, 0x5}, {0xffffff81, 0x65068ef2, 0x4, 0xffffffff, 0x7f, 0x7}, {0x67, 0x80, 0x3, 0xc0, 0xcf0c, 0x8}, {0x3, 0x5, 0x1, 0x9, 0xed, 0xe}, {0x8000, 0x3, 0xfffffffe, 0x3, 0x5, 0xffffff90}, {0x401, 0xd, 0xfffffffa, 0xfffffffc, 0xce8, 0x3}, {0x186, 0xf, 0x101, 0x1000, 0x7fffffff, 0x80000001}, {0x6, 0xfffffff9, 0xe, 0x4, 0x0, 0x6}, {0x6, 0x4, 0x3, 0x4, 0xae, 0xfffffffd}, {0x8, 0x71c, 0x60000000, 0xffff0c3a, 0x3, 0x5}, {0x2, 0xe, 0x400, 0xfffffff9, 0x6, 0x2}, {0x2, 0x0, 0x6, 0x1, 0x5, 0x20aa}, {0x5, 0x5, 0x7, 0x5ed9, 0x8, 0xc9800000}, {0x8001, 0x5, 0x0, 0x80, 0x3, 0x57}, {0x5, 0x1, 0xcdf9, 0x5, 0x2, 0x8}, {0x80000000, 0x6, 0x1, 0x0, 0x7, 0x9}, {0x9, 0x6, 0x3, 0x9, 0xc8, 0x4}, {0x7, 0x9, 0x7e63, 0x8001, 0x6b89, 0x6}, {0x4, 0x10000, 0x7, 0x8000, 0x7fffffff, 0x2}, {0x8, 0x969, 0x101, 0x73de, 0x0, 0x4}, {0x8, 0xfff, 0x8, 0x200, 0x33, 0x4}, {0x71, 0x1, 0x1, 0xff, 0x7fff, 0x37f4fb9f}, {0x7, 0x0, 0x1ff, 0x2, 0x800, 0x2}, {0x131e, 0xff, 0x400, 0x3, 0x2, 0x5}, {0xc, 0x4, 0x8947, 0x80000000, 0x40}, {0x5, 0x7, 0x40000000, 0xc, 0x0, 0x3ff}, {0x9e6, 0x6, 0x8, 0x1, 0xea, 0x80000000}, {0x2, 0x6, 0x86b, 0x31a6, 0x2, 0x15}, {0x5, 0x2, 0x300, 0x8, 0x3, 0x9}, {0x9, 0x4, 0x9, 0x4, 0x3ff, 0x1424}, {0x7, 0x4, 0xfffffff8, 0x8, 0x9, 0x2}, {0x9, 0x6, 0x0, 0x9, 0xea618400, 0x6}, {0x3, 0xffff, 0x0, 0x0, 0x6eaaf720, 0x7}, {0x64, 0x4, 0x1ff, 0x1, 0x7, 0x2}, {0x8, 0xe84, 0x24, 0x9, 0x2, 0x7}, {0x31, 0x10, 0x6, 0x5, 0x4, 0x10001}, {0x3, 0x3, 0x1, 0x3ff, 0x2, 0x5}, {0xf, 0x6, 0x2, 0x3ff, 0x8, 0x9}, {0x6, 0x9, 0x5, 0x8, 0x877, 0x5}, {0xfffffffb, 0x1, 0x4, 0x7, 0x7, 0x7fffffff}, {0x6, 0xb0, 0x1000, 0x1, 0x9, 0x3}, {0x2, 0x1000, 0x0, 0x1000, 0x5, 0x2e63}, {0x8, 0x398, 0x7, 0x5e4, 0x1, 0x3}, {0x9, 0x82, 0x705, 0x6, 0x2, 0x29}, {0x5, 0xb, 0x1, 0xffff, 0x8, 0x6}, {0xf7, 0x6, 0xa, 0x10001, 0x0, 0x8}, {0x4, 0x0, 0x1, 0x6, 0x5, 0x7f}, {0x200, 0x7c1, 0xb513, 0x62, 0x9, 0xd3}, {0xc, 0xfffffffa, 0x5, 0x4, 0xc4f, 0x3}, {0x1, 0x5, 0x5, 0x19, 0x401}, {0x1, 0x1, 0xf2, 0x6, 0x6}, {0x6, 0x3, 0x4, 0x9, 0xffffffff, 0x10f}, {0x7, 0x0, 0x1, 0x1, 0x40, 0x800}, {0x2, 0x6, 0x0, 0x8, 0xfffffffc}, {0xfffffff8, 0x0, 0x5, 0x4000000, 0xa, 0x200}, {0x1, 0x67056e4f, 0x2, 0x6, 0x0, 0x6}, {0x0, 0x449, 0x3, 0x101, 0x0, 0x7}, {0x0, 0x2, 0xfff, 0x6977, 0x8, 0xff}, {0x2, 0x4, 0x8, 0x9, 0x91, 0x8}, {0x10001, 0x0, 0xa7, 0x7, 0x0, 0x4c}, {0x3, 0x8, 0x1a2, 0xfffffffe, 0x1, 0xb18a}, {0xcb8a, 0xb, 0x6, 0x4, 0x5, 0x2}, {0x1, 0x3, 0x6, 0x9229, 0x7, 0x200}, {0x793, 0x7, 0x4, 0x97c, 0xa}, {0x2969, 0x9, 0x7, 0x81, 0x4, 0x9}, {0xe, 0x3, 0x852, 0x1, 0x4, 0x400}, {0x5993, 0x100, 0x7, 0x200, 0x5, 0x1822ee2}, {0x0, 0x3, 0x3ff, 0x0, 0x9, 0x2}, {0x5a, 0x9, 0x9, 0xfffff1a4, 0x0, 0x168e}, {0x10, 0x7, 0x1, 0x80000000, 0x13, 0x400}, {0x6, 0x0, 0x3, 0x200, 0x2, 0xecd}, {0x0, 0x4, 0x5, 0xb73, 0x6}, {0x14000, 0x3, 0x3, 0xfffffffd, 0x3, 0xfb}, {0x42, 0xf94, 0x4, 0x7ce, 0x100, 0x1}, {0xffff, 0x426c, 0x4, 0x8, 0x6, 0x4}, {0x9, 0x5, 0x10, 0x8, 0x8, 0x1}, {0x1798804c, 0xffffffff, 0x31f, 0xb0, 0xffffffff, 0xc}, {0x81, 0x2, 0x400, 0xfffffffc, 0x1, 0x9}, {0x0, 0x1ff, 0x8cd, 0x2, 0xf, 0x9}], [{0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x67045289c058198d}, {0x3, 0x1}, {0x3, 0x3}, {0x5}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x715a7bf9fa44bb}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x5}, {0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x3}, {0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {}, {}, {0x3}, {0x8}, {0x5, 0x3}, {0x5}, {}, {0x5}, {}, {0x4}, {}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0xffffffff, 0x1000000b, 0x7, 0x5}, 0x3, 0x32}, [{0x0, 0x8000, 0xb8, 0xa68, 0x4, 0x6}, {0x0, 0x8, 0x8, 0x8, 0x0, 0x67f0eed3}, {0x80000001, 0xf, 0x4, 0x9b4, 0x582, 0x8}, {0x3, 0x81, 0x5, 0x7, 0xd67a, 0x5}, {0xff, 0xd, 0x5, 0x4, 0x5, 0x9}, {0x1e7, 0xffffffff, 0x6c, 0x3, 0x2, 0x1}, {0x1, 0x1, 0x2, 0x7fffffff, 0x180000, 0x401}, {0xdd7f, 0x6, 0x6, 0x0, 0x1, 0x4}, {0x64, 0x2948, 0x0, 0x26dd, 0x6, 0x6c6ba7ca}, {0x7, 0x5, 0x1, 0x7dec, 0x7fff, 0x80000001}, {0x3, 0x8, 0x3, 0x9, 0xa51, 0xffffff80}, {0x3, 0x1, 0x7f, 0x1, 0xfffffe01, 0x2}, {0x6, 0x5a7f, 0x5, 0x9, 0x4}, {0x7, 0x2, 0x0, 0xf70000, 0x9, 0xfff}, {0x2d60, 0x2, 0x0, 0x81, 0x5d3, 0x3}, {0x9, 0x10000, 0x136, 0x1, 0x4}, {0xd000, 0x8000, 0x1, 0x9, 0x7641, 0x8}, {0xe53, 0x8, 0x1, 0xc, 0x7, 0xa858}, {0xd9, 0x5, 0x3666, 0x80000000, 0x7, 0x5}, {0xff, 0x23, 0x4, 0x10001, 0x3c, 0x100}, {0x4, 0x51, 0xe, 0x91, 0x4, 0x5}, {0xc00, 0x8, 0x4, 0x7, 0x0, 0x1bde}, {0x1, 0x4053, 0x0, 0x101, 0xfffffffb, 0x9e7}, {0x4a1a0e74, 0x5, 0x5, 0x7, 0x1, 0xe}, {0x10001, 0x0, 0x400, 0x4, 0x7, 0xc57b}, {0x5, 0xc9, 0x1, 0x6, 0x6, 0x6}, {0x377, 0x0, 0x5, 0x1, 0x8, 0x8}, {0xd, 0xfffffff9, 0x3, 0x8, 0x0, 0x9}, {0xd, 0x5, 0x7, 0x600, 0x566, 0x1}, {0x1, 0xfffff624, 0x9028, 0x7, 0x4, 0x9}, {0x3, 0x80, 0x2, 0x6, 0x3317, 0x4}, {0x0, 0xd, 0x780e, 0x80000001, 0x7f, 0xffffffff}, {0x9, 0xc917, 0x9, 0x1, 0x2, 0x1}, {0x4, 0x8, 0x10000, 0x4ca, 0x2, 0x7}, {0xb, 0x0, 0x2, 0x9, 0x6, 0x1}, {0x83db, 0x8, 0xd, 0x0, 0x4, 0x6}, {0x5, 0x27ec, 0x4, 0x2, 0x5, 0x5}, {0xa67, 0x80800000, 0x1, 0x5, 0x0, 0xfffffffc}, {0x200, 0x300, 0x65ea, 0x8, 0x3, 0x2}, {0x1000, 0xe, 0xffffffff, 0x0, 0x100, 0x8}, {0x800, 0xfffffffb, 0x4, 0x1, 0x4, 0x6}, {0x80000000, 0x4, 0x1000000, 0x4, 0x2, 0x2}, {0xd, 0x400, 0x3, 0x6, 0x2, 0x8}, {0x6, 0x2, 0x7, 0x53, 0x8000, 0xb7}, {0x9, 0x10001, 0x2, 0xfffffffe, 0x1, 0x5}, {0x3, 0x8, 0x200, 0x401, 0x3}, {0xbbc, 0x2, 0x9c, 0xfffffffc, 0xff, 0x5}, {0x0, 0x8001, 0x5, 0x7, 0x4, 0x6}, {0xa8b7, 0x4, 0x200, 0x3, 0xffffc80b, 0x8}, {0x80000000, 0x0, 0x4, 0x8001, 0x6, 0x4}, {0xc, 0x100, 0x7, 0x5, 0xff, 0xa150}, {0x401, 0x4, 0x7f, 0x4, 0x6, 0x7ff}, {0x4, 0x4, 0xa9, 0x3, 0x1, 0x4}, {0x9, 0xfffffffb, 0xfffffffc, 0x8, 0x0, 0x8}, {0xfffffffa, 0x4, 0x8, 0x5, 0x0, 0xe7}, {0x1, 0x9, 0xffffffff, 0x8000, 0x4, 0x6ad}, {0x7fffffff, 0xfffff800, 0x2, 0x10000, 0x8000}, {0x1, 0x0, 0x200, 0x20000000, 0x5, 0x1e}, {0x1, 0x200, 0x7f, 0x7, 0x9, 0x1bf9}, {0xe00000, 0x3, 0x10000, 0x9, 0x6, 0x4}, {0x314, 0x40, 0x1, 0x0, 0x0, 0x7}, {0x7, 0x4, 0x9, 0x80000001, 0x2, 0x5}, {0x5, 0x9, 0xffffffd8, 0x0, 0x3d6, 0x3}, {0x3, 0x10001, 0x2, 0x9, 0x5, 0x1}, {0x5, 0x8, 0xdab1, 0x101, 0x10, 0x1}, {0x0, 0x5700, 0x3, 0x2f540000, 0x4, 0x80000000}, {0xd, 0x2, 0x4, 0x547, 0x14d, 0x1}, {0x6, 0x0, 0xffffffff, 0x2, 0x1000, 0x200}, {0x6, 0x2, 0x7, 0x5, 0x10001, 0x6}, {0x55, 0x2, 0xd, 0x8, 0x80000000, 0x5}, {0xc00000, 0x7, 0xfa30, 0xff, 0x7, 0x5e}, {0x40000000, 0x1, 0x7fffffff, 0x6, 0x2, 0x3}, {0x9, 0x2, 0x5, 0x9, 0x6, 0x5}, {0xde, 0x4, 0x8, 0x2, 0x9, 0x4}, {0xd, 0xfff, 0xd82, 0x3, 0x80, 0x1}, {0x3, 0x800, 0x3, 0x5, 0x7fff, 0xfff}, {0x1, 0x1, 0x2, 0x7ff, 0x8001, 0x1000}, {0x1, 0x931e, 0x7, 0x40, 0xfffffffb, 0x5}, {0x4, 0x10001, 0x6a, 0x100, 0x380, 0x5}, {0x0, 0xffffffff, 0xc, 0x80, 0x2, 0xffffff01}, {0x4, 0x7, 0x1, 0x46, 0x9b2, 0x848e}, {0x6c8, 0xffff, 0x6, 0x4, 0x1, 0xd}, {0xa, 0xd, 0xc, 0x8000, 0x9, 0xfff}, {0x4, 0x7f, 0xd, 0xfffffff9, 0x6, 0x6}, {0xd3, 0x7ff, 0x9, 0x1, 0x8, 0x6}, {0x3ff, 0x1, 0x3e25, 0x9, 0xc0d, 0x2}, {0x7, 0x5f, 0x2, 0xbda9, 0xfffffff7, 0x2}, {0x4, 0x4, 0x0, 0x8, 0x101}, {0xbfc3, 0x6, 0x5, 0x7, 0x4, 0x1}, {0x5c9, 0xbf3, 0x9, 0x4, 0x4, 0x101}, {0x6, 0x8e, 0xffff, 0x8, 0xe503, 0x8001}, {0xa, 0xfc4e, 0x4, 0x26e, 0xe, 0xd}, {0x101, 0x9, 0x7, 0x5}, {0x13da, 0x2e, 0x1ff, 0xfffffff8, 0xf6a, 0x1c700}, {0x3, 0x7, 0x91d, 0x2, 0x8d8b, 0x528f56e0}, {0x863d, 0x0, 0x0, 0x3ff, 0x100, 0x8}, {0x101, 0x2, 0x57, 0x7, 0x3, 0x4}, {0x7d9, 0x8, 0x4, 0x9, 0x7ff, 0x8}, {0x200, 0x5, 0xf414, 0x100, 0xf5d0, 0xe}, {0x8, 0x8, 0x6, 0xd, 0x7, 0x5}, {0x1, 0xee33, 0xcade, 0x567d, 0x6, 0x400}, {0x8, 0x1, 0x4, 0x8, 0x9, 0x1}, {0x5ce, 0x1, 0x0, 0x1, 0x4, 0x4}, {0x2, 0x40, 0x3, 0x4, 0x0, 0x4}, {0x1, 0x4, 0x9, 0x8, 0x9, 0x8000}, {0x4, 0x9, 0x7, 0x1, 0xfffffff8, 0x3}, {0xfffffff2, 0xf2b, 0x3, 0xfffffffd, 0x4, 0x8}, {0x3, 0x2, 0x9dd5, 0x55, 0xfffffffb, 0x4}, {0x81, 0xb6, 0x9, 0xc0000000, 0x4, 0x1}, {0x8, 0x800000, 0xfffffffa, 0xe3, 0x4, 0x9}, {0xffc0, 0x1, 0x10000, 0x1, 0x80000001, 0x5dac}, {0x7f, 0x401, 0x542b, 0x1, 0xdf, 0x7e58}, {0xc, 0xfffffff9, 0x40, 0xd376, 0x9b8, 0x88f}, {0x200, 0x2, 0x4, 0x1, 0x2, 0x8000}, {0x8, 0x48, 0x38a8, 0xfffffffe, 0x0, 0x6}, {0x4, 0x0, 0x6e39, 0x6, 0x0, 0xfff}, {0x7f, 0x7fff, 0xd, 0x80, 0x40, 0x80}, {0x6, 0xa, 0xfffffff8, 0x1, 0x5, 0x1000200}, {0x5d, 0x6, 0x7, 0xfffff9f3, 0x2, 0x8000}, {0x7, 0x6, 0x2, 0x80000000, 0x8, 0xffff}, {0xfffffffe, 0x1, 0x1, 0x401, 0xffffff80}, {0x1, 0x800, 0x7fffffff, 0x8, 0x0, 0xffffff51}, {0x2c06, 0x7, 0x1, 0xfffffffe, 0xfffffffa, 0x9}, {0x4, 0xde3, 0x51abd46b, 0x6, 0x7}, {0x2e, 0xff, 0x8001, 0xfbb, 0xe8, 0x27b}, {0xfffffffe, 0xc6, 0xe28, 0x7, 0x8, 0x7}, {0x57, 0x4, 0x9, 0x136, 0x6, 0x8}, {0x9, 0x2, 0x5, 0x81, 0x6, 0x5}], [{0x5}, {0x3}, {}, {0x2}, {0x2, 0x1}, {0x4}, {0x7, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x2}, {0x2}, {0x6}, {0x5, 0x3}, {0x5, 0x1}, {0x5}, {0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3}, {0x6, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0xfc2e60ab117d82fc}, {0x4}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x3040}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r6 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2}) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r11, &(0x7f00000001c0)='c', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r12, 0x1, 0xff, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c2f1000", @ANYRES16=r9, @ANYBLOB="bc982bbd7000ffdbdf250300000006000a004e24000008000b00", @ANYRES32=r12, @ANYBLOB="060001004e23000008000b00", @ANYRES32=r13, @ANYBLOB="06000a004e2300000500040002000000060001004e21000006000a004e200000050002000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4805) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 26.66573249s ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000140)=0x8) 23.323882528s ago: executing program 0 (id=189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_xfrm(r0, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x400}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, 0x0, 0x4054) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 23.219005253s ago: executing program 1 (id=190): add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) 22.447425146s ago: executing program 3 (id=192): socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) 21.333144216s ago: executing program 3 (id=194): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") timer_create(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000), 0x0) 15.205714677s ago: executing program 0 (id=198): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000140)=0x8) 14.965304118s ago: executing program 1 (id=199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) unshare(0x2040400) r1 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r3, @ANYBLOB="000000006f0018000500100002000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) unshare(0x1e020200) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@shortname_win95}, {@shortname_lower}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@fat=@nfs}, {@uni_xlate}, {@utf8no}, {@rodir}, {@fat=@usefree}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@rodir}]}, 0x81, 0x2a6, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 13.531314691s ago: executing program 0 (id=200): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000180)='2', 0x1, 0xfecc) fallocate(r0, 0x10, 0x7, 0x10001) write$binfmt_misc(r1, &(0x7f0000001600)="cdc7afea6bae72b642dbcbbb125562252df92ab1f93a8659f50b0bf5d24aba2ca0cb7ecc67888551b20ea50f5e17cea4d9a38fe6dad7ace21d1ffcbce15e0b9af9a45ffec1aca4876bc5db0b7b6996da4ee39ac339a7127a496bb1f07c560aa610c73329cf940765afcd0b9275d4b0b10ea075103cb73342de6c12e298f7d6116e7830e9e5800c62ae10c79419a6cf13c1fce728d70c3f58c3f72c1e70282c61b00f54e82b0dec7f86b6cb0df3d31b87e1524efb1315cc796102c878354c0acd2ae7347f434ad277d034ccd07875d908ef49e563aa963f48392e95ba84d55b5d1c24d38c80e19ff88da73d340a14c9a08486830aea0586219e1910e3cee2ed979dd77275b33bd69ad1b20281722f7e52dc3176452bacae24086b09c34a499b2a8e4f5e6a4315805c4179252364fee3acaac425fb6ab8744626edb62f443c768ec1c3e470771a4f32c0aee174bb94cf240257a3bba002dc6fab014c6b96716fd3ba3753a00fefb44967b8c9b6d78059519789929eee6de4b4afd687d6e74f3a0115a23364bdf6c1211e39cd319575431ff2f02a9963a72dc5d97db5fa87a44272444e37c0a5a96bee33beae38fe67b73db1bde62783028cb5740d490e8d196056ca1d002c06387d26d380fe6b61be6356eeaa8c8f4fd3f088efc3fe558eea9c802a1fb42e2db0244c79e4b219919bddb5cd4ee7ee879ed17788c91e87e5acab827f6c77ca65d69ce1a23c293b4f25d8cea8392b8194a0184b9c373e1c2fc47bc9e2c8f7039aa4dce5f69059a529ab7bc20a9d13237557c92bdd9d5fb6defff2756d2854582271ce94d61652fed2528fff59ba8c70d406aaa17e69627dd9ab4a9cebb2420e6a12b81f4a76bd5ec0f8969dcde4e94cda9649a95473ad9b0192adf91c1655f92773bf97c255e5e5edb6f314a4a5880e3b69d8de411af5ae90a1103cc351eeeb46072e998bb48931641d7f9056df117168b723b559e4ae2b8f080ec704e4e6b6bc8b683c82809fbfe33eca6ef6402d3ce33a7a5c93e662966237d0d1cf1f9471105b369f98b65818fb5dfe5d7c12478b3a6c09e844a6022341bdfc8dc4213613fc741d582e54d7115a00338dd5cd678ae03150fde46ab55e875af302b5ddb86fcb6617e8806807b79209cc6a12c72ba19ad9ed15148b4bdd7b840998e6de299305155056d31ad269caa7a076fcf1333e5da9926daee7fa21e1bfe92dd7cb2f40abaaa17c5381ead4ac58fd27ce62f86dba1937c18a533907a75b2325ec2b4e2c615bf28a227a97129ae53e57be4111c0b19bb9e68479842a226344b5d7891500298b9c998d238fb1435fc61394660d8fed2276da9bd71f1fa2d3f139c8a97f21601c008b6d239b86ace85aa6519683d524a14017120a56860f1d3fe0102aa4ea32a55c99956117f80ca656c2c1f9b8f7183e21101c4eb1dfbd3dd043ac", 0x401) bpf$PROG_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x7, 0x691) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04040a000000007a00cbe49202"], 0xd) r2 = socket(0x10, 0x3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000001c0)={0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}]}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xf3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setreuid(0xee01, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg$unix(r2, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/239, 0xef}, {0x0}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000001540)=""/186, 0xba}], 0x5}}], 0x1, 0x10, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 12.272505357s ago: executing program 3 (id=201): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r6, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0x40000000, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, 0xffffffffffffffff}) fremovexattr(r7, &(0x7f0000000000)=ANY=[@ANYBLOB]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203000d0c00000000000000000000000300060000000e0002000000e0000009140000000000000002000100000000000000000200000000030005003c00000002000000e00000010000000000000000010015004e20000001001400"], 0x60}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x2, 0x2, 0x5, 0x0, 0x400}, 0x20) 11.98156681s ago: executing program 4 (id=202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x4800c0, 0xc6) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40442, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x257e, &(0x7f0000000240)={0x0, 0x8fea, 0x20, 0x0, 0x1df, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd, 0xa96, 0x0, 0xe, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000004c0)=0x2500060) io_uring_enter(r1, 0x3516, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffe41) 11.960293831s ago: executing program 1 (id=203): socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) 11.004847553s ago: executing program 1 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) listen(r8, 0x3) bind$inet(r7, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r7, 0x3) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c840}, 0x840) 10.376087701s ago: executing program 4 (id=205): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = getpgrp(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140), &(0x7f00000000c0)='GPL\x00'}, 0x94) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x6b34, 0xffffffffffffff01, 0x700000, 0x7fffffff}) read$FUSE(r8, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r9, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0xfffb, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, r10, 0x5, 0x2}}}, 0x90) 8.009494106s ago: executing program 4 (id=206): readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/60, 0x3c) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x87, @broadcast, 0x4e24, 0x4, 'fo\x00', 0x2, 0x2, 0x5c}, {@local, 0x4e21, 0x10000, 0x3c5, 0x2, 0xff}}, 0x44) (async, rerun: 32) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) poll(&(0x7f0000000200)=[{r0, 0xc0}, {r1, 0x1088}, {r0, 0x2608}, {r0, 0x5}, {r2, 0x400}], 0x5, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000580)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000400)=""/187, 0xbb}], 0x3, &(0x7f0000000500)=""/84, 0x54}, 0x102) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x3f7, 0x20, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4040040) (async) fcntl$getflags(r1, 0x408) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000980)={0x0, "0bbb031de4ee508b1e1a7512333c8441"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001980)={{r3}, r4, 0x1a, @inherit={0x78, &(0x7f0000000900)={0x0, 0x6, 0x4, 0xffffffffffffff21, {0x22, 0x0, 0x7fffffff, 0x9, 0x1000}, [0x1, 0x9, 0x2, 0x4, 0x0, 0xffffffffffff35a5]}}, @devid=r5}) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002980), 0x200, 0x0) ioctl$BLKOPENZONE(r6, 0x40101286, &(0x7f00000029c0)={0x0, 0x8}) (async) lsetxattr(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)=@random={'security.', '\\]:+](%\x00'}, &(0x7f0000002a80)='/\x00', 0x2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b00), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x808050}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x60, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002f40)={0x5c, 0x0, &(0x7f0000002e40)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002d80)={@flat=@handle={0x73682a85, 0x1100}, @ptr={0x70742a85, 0x0, &(0x7f0000002c80)=""/215, 0xd7, 0x2, 0x1d}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000002e00)={0x0, 0x18, 0x40}}, 0x1000}, @acquire], 0x52, 0x0, &(0x7f0000002ec0)="5c3807987165504da7370d138bf7c8216991ea4a44de3cf0c18d998d8c7a78cf8e9eefdc2f62854e5f32b22bbd21c471cd8b53d33564927ff582f7d792b8071d5329eea788c7b298990b0807a19affd7973a"}) (async, rerun: 64) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x35) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000030c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/7, 0x7, 0x1, &(0x7f0000002fc0)=""/222, 0xde}, &(0x7f0000003100)=0x40) (async) io_setup(0x800, &(0x7f0000003140)=0x0) (async, rerun: 32) r11 = eventfd(0x4) (async, rerun: 32) r12 = syz_open_dev$ttys(0xc, 0x2, 0x0) io_submit(r10, 0x3, &(0x7f0000004400)=[&(0x7f0000003280)={0x0, 0x0, 0x0, 0x6, 0xa5, r1, &(0x7f0000003180)="8633885fc2fb60d87531f32d7b4210940340e61dc3d613952d8a9cee7c49065c3ede9edc64ce4efa79545b19211680c20808c54c39954f227f47607070572d0f23e976dac011a206b065ecf072b8e3a461271fcaf93c5dd7d70436b219e06b38d0da266acd4eff991b98369799c587e4b54c055de2c8e2475ad677d5de8e8705d34fee143fbe8d3d4c25f9acaf063db3aa529e3b4f1bc293db36ca15d4073e6bef7ad38e4cf6454e2f4d9725569488fa8288a8743ae8cb1dc6b5871884d435c11082c1c92bc791d3a907f76141ceb2", 0xcf, 0x7, 0x0, 0x0, r11}, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f00000032c0)="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", 0x1000, 0x7, 0x0, 0x2, r9}, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x3, 0x7, r12, &(0x7f0000004300)="6fc533ec9c611e93f2ba8479f1f13623c26d61595f22d82f28f50fd5e1e33fbd86729d6fb211529291ec8e60a985c9950e088d666b6e372305ec2970eeae886dfed1e1521b674f24864f0cf68f02802a677ba1c0846f145a0ac740e754e94b822b2a01941df6384eed4e1e2d3906b6da9781beb825703ec6acab454110dcb64327601abf0ef8ec9e80ed8cb8ea508079069122b452a9e908546cc6764f", 0x9d, 0x10, 0x0, 0x3, r9}]) (async) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000004440)) 6.765839001s ago: executing program 3 (id=207): add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) 5.284676167s ago: executing program 1 (id=208): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xfffffffe, 0xcc, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r4, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1661}]}]}, 0x44}}, 0x48040) 5.281980627s ago: executing program 0 (id=209): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") timer_create(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000), 0x0) 3.681348047s ago: executing program 0 (id=210): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, r0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x6, 0x1, 0x0, 0x0) 3.553863803s ago: executing program 4 (id=211): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x29, 0x2, 0x0, &(0x7f0000000080)) 3.457620108s ago: executing program 4 (id=212): socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) 2.27115583s ago: executing program 4 (id=213): getpgid(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x20) 2.149361405s ago: executing program 3 (id=214): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = getpgrp(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140), &(0x7f00000000c0)='GPL\x00'}, 0x94) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x6b34, 0xffffffffffffff01, 0x700000, 0x7fffffff}) read$FUSE(r8, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r9, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0xfffb, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, r10, 0x5, 0x2}}}, 0x90) 0s ago: executing program 3 (id=215): socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1510c2, 0x11) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r4, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x10, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x17, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000123", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000da410000f0ffffff1800000086010000000000000c0a000018490000feffffff00000000000000008500000093000000000804000000000092a48000100000006d105000040000000f49020002000000"], &(0x7f0000001e80)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x17, r2, 0x8, &(0x7f00000023c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x0, 0xd, 0x6, 0x7ff}, 0x10, 0x0, r3, 0x0, &(0x7f0000002500)=[r2, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x40000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r10, 0x25, 0x4, @void}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001600,mask=MAY_EXEC,audit,smackfshat=/dev/fuse\x00,obj_role=/dev/ptmx\x00,obj_user=/dev/fuse\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',obj_type=v/dri/card#\x00,\x00']) write$FUSE_INIT(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 63.417693][ T5747] cgroup: Unknown subsys name 'net' [ 63.553390][ T5747] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.921885][ T5747] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.525853][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.534865][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.536305][ T5767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.542889][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.557586][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.565463][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.566743][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.581370][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.581412][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.596647][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.597945][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.605239][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.614130][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.620079][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.626399][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.633237][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.640633][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.646919][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.653590][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.660956][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.670665][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.674832][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.681957][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.689002][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.167921][ T5759] chnl_net:caif_netlink_parms(): no params data found [ 67.199217][ T5757] chnl_net:caif_netlink_parms(): no params data found [ 67.271959][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 67.331628][ T5758] chnl_net:caif_netlink_parms(): no params data found [ 67.356254][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.363548][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.371165][ T5759] bridge_slave_0: entered allmulticast mode [ 67.378076][ T5759] bridge_slave_0: entered promiscuous mode [ 67.391398][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.398926][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.406120][ T5759] bridge_slave_1: entered allmulticast mode [ 67.413395][ T5759] bridge_slave_1: entered promiscuous mode [ 67.473004][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.480205][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.487513][ T5757] bridge_slave_0: entered allmulticast mode [ 67.494236][ T5757] bridge_slave_0: entered promiscuous mode [ 67.533581][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.540910][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.548291][ T5757] bridge_slave_1: entered allmulticast mode [ 67.555017][ T5757] bridge_slave_1: entered promiscuous mode [ 67.578017][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.590065][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.622987][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.630500][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.639107][ T5760] bridge_slave_0: entered allmulticast mode [ 67.645922][ T5760] bridge_slave_0: entered promiscuous mode [ 67.653573][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.661373][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.668737][ T5760] bridge_slave_1: entered allmulticast mode [ 67.675481][ T5760] bridge_slave_1: entered promiscuous mode [ 67.692362][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.704894][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.763850][ T5759] team0: Port device team_slave_0 added [ 67.805370][ T5759] team0: Port device team_slave_1 added [ 67.813473][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.825579][ T5757] team0: Port device team_slave_0 added [ 67.835040][ T5757] team0: Port device team_slave_1 added [ 67.841222][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.848702][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.855874][ T5758] bridge_slave_0: entered allmulticast mode [ 67.863370][ T5758] bridge_slave_0: entered promiscuous mode [ 67.883105][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.912299][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.919827][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.927682][ T5758] bridge_slave_1: entered allmulticast mode [ 67.934356][ T5758] bridge_slave_1: entered promiscuous mode [ 67.973597][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.980748][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.006735][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.041658][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.049250][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.075218][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.089621][ T5760] team0: Port device team_slave_0 added [ 68.096921][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.103943][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.130867][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.152394][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.162292][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.169830][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.195895][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.215365][ T5760] team0: Port device team_slave_1 added [ 68.238849][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.275306][ T5758] team0: Port device team_slave_0 added [ 68.285403][ T5758] team0: Port device team_slave_1 added [ 68.307763][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.314753][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.341264][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.354500][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.361750][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.388342][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.470677][ T5759] hsr_slave_0: entered promiscuous mode [ 68.477617][ T5759] hsr_slave_1: entered promiscuous mode [ 68.488982][ T5757] hsr_slave_0: entered promiscuous mode [ 68.495328][ T5757] hsr_slave_1: entered promiscuous mode [ 68.501792][ T5757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.509820][ T5757] Cannot create hsr debugfs directory [ 68.515939][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.523054][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.549482][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.562044][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.569364][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.595827][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.659008][ T5760] hsr_slave_0: entered promiscuous mode [ 68.665592][ T5760] hsr_slave_1: entered promiscuous mode [ 68.672013][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.680865][ T5760] Cannot create hsr debugfs directory [ 68.757817][ T5080] Bluetooth: hci3: command tx timeout [ 68.757829][ T5771] Bluetooth: hci0: command tx timeout [ 68.758093][ T5771] Bluetooth: hci1: command tx timeout [ 68.763517][ T5080] Bluetooth: hci2: command tx timeout [ 68.775924][ T5758] hsr_slave_0: entered promiscuous mode [ 68.786865][ T5758] hsr_slave_1: entered promiscuous mode [ 68.792931][ T5758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.801038][ T5758] Cannot create hsr debugfs directory [ 69.104083][ T5759] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.118576][ T5759] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.129884][ T5759] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.140265][ T5759] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.222325][ T5757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.233111][ T5757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.246256][ T5757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.270906][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.348694][ T5760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.365586][ T5760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.396708][ T5760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.413565][ T5760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.458626][ T5758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.473665][ T5758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.487868][ T5758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.499536][ T5758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.564197][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.619335][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.630617][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.645789][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.653185][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.688880][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.696053][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.721510][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.752766][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.759960][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.789057][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.796219][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.894485][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.931386][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.985144][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.011819][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.052098][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.059343][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.123316][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.130556][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.152515][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.159757][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.178043][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.185217][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.285436][ T5760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.297205][ T5760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.345238][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.395400][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.477518][ T5759] veth0_vlan: entered promiscuous mode [ 70.536382][ T5759] veth1_vlan: entered promiscuous mode [ 70.562961][ T5757] veth0_vlan: entered promiscuous mode [ 70.595461][ T5757] veth1_vlan: entered promiscuous mode [ 70.624550][ T5759] veth0_macvtap: entered promiscuous mode [ 70.663217][ T5759] veth1_macvtap: entered promiscuous mode [ 70.673348][ T5757] veth0_macvtap: entered promiscuous mode [ 70.705937][ T5757] veth1_macvtap: entered promiscuous mode [ 70.725473][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.755431][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.782131][ T5759] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.791653][ T5759] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.800959][ T5759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.810419][ T5759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.827599][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.838852][ T5766] Bluetooth: hci1: command tx timeout [ 70.838926][ T5771] Bluetooth: hci3: command tx timeout [ 70.844265][ T5766] Bluetooth: hci0: command tx timeout [ 70.856967][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.857015][ T5080] Bluetooth: hci2: command tx timeout [ 70.868554][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.890972][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.908357][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.919696][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.932730][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.961702][ T5757] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.970779][ T5757] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.980012][ T5757] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.990053][ T5757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.003621][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.152654][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.169379][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.183489][ T5760] veth0_vlan: entered promiscuous mode [ 71.211527][ T5760] veth1_vlan: entered promiscuous mode [ 71.267473][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.276988][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.291672][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.300815][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.329739][ T5760] veth0_macvtap: entered promiscuous mode [ 71.365284][ T5758] veth0_vlan: entered promiscuous mode [ 71.377531][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.396149][ T5760] veth1_macvtap: entered promiscuous mode [ 71.403589][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.461866][ T5758] veth1_vlan: entered promiscuous mode [ 71.505416][ T5847] syz.2.3[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.513206][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.533864][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.544225][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.560691][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.574364][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.592842][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.610098][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.625546][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.646241][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.665399][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.698860][ T5760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.709406][ T5760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.736492][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.743531][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.771132][ T5760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.780864][ T5760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.801246][ T5850] loop1: detected capacity change from 0 to 128 [ 71.858648][ T5758] veth0_macvtap: entered promiscuous mode [ 71.913448][ T5850] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.950782][ T5758] veth1_macvtap: entered promiscuous mode [ 71.955198][ T5850] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.971397][ T5847] loop2: detected capacity change from 0 to 32768 [ 72.197329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 72.711101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.811954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.426489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.547716][ T5080] Bluetooth: hci2: command tx timeout [ 73.553156][ T5080] Bluetooth: hci3: command tx timeout [ 73.560336][ T5080] Bluetooth: hci1: command tx timeout [ 73.566260][ T5766] Bluetooth: hci0: command tx timeout [ 73.639696][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.641226][ T5847] JBD2: Ignoring recovery information on journal [ 73.676020][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.686090][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.696965][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.706922][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.717473][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.729991][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.745366][ T5847] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 73.748254][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.765147][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.788684][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.821121][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.832217][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.848807][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.862469][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.895946][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.924080][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.939661][ T5758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.955237][ T5758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.964098][ T5758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.972891][ T5758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.029840][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.062892][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.067887][ T5847] Zero length message leads to an empty skb [ 74.143584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.506549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 74.553055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.839258][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.866848][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.927681][ T5759] ocfs2: Unmounting device (7,2) on (node local) [ 74.974109][ T5862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.011770][ T5862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.474551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.474706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.578473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.035184][ T5864] [U] [ 76.399764][ T5766] Bluetooth: hci2: command tx timeout [ 76.405237][ T5766] Bluetooth: hci3: command tx timeout [ 76.415983][ T5766] Bluetooth: hci0: command tx timeout [ 76.422009][ T5766] Bluetooth: hci1: command tx timeout [ 76.649627][ T5757] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.647547][ T5872] loop2: detected capacity change from 0 to 32768 [ 79.683117][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.720303][ T5872] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 79.879281][ T5872] XFS (loop2): Ending clean mount [ 79.940905][ T5888] loop1: detected capacity change from 0 to 4096 [ 79.968881][ T5872] XFS (loop2): Quotacheck needed: Please wait. [ 80.072186][ T5893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.204128][ T5872] XFS (loop2): Quotacheck: Done. [ 80.276264][ T5759] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 81.389399][ T5907] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 81.807110][ T5915] loop3: detected capacity change from 0 to 32768 [ 81.872414][ T5915] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 81.889509][ T5925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16'. [ 81.902074][ T5925] unsupported nlmsg_type 40 [ 81.938414][ T5915] XFS (loop3): null uuid in log - IRIX style log [ 81.945819][ T5915] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x41. [ 81.960395][ T5915] XFS (loop3): failed to locate log tail [ 81.966212][ T5915] XFS (loop3): log mount/recovery failed: error -5 [ 81.981913][ T5915] XFS (loop3): log mount failed [ 81.991800][ T174] cfg80211: failed to load regulatory.db [ 82.116940][ T5929] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 82.263234][ T5805] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 83.813470][ T5939] sctp: failed to load transform for md5: -2 [ 83.918339][ T5805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.950052][ T5805] usb 2-1: config 2 has an invalid interface number: 111 but max is 0 [ 84.014632][ T5805] usb 2-1: config 2 has no interface number 0 [ 84.046556][ T5805] usb 2-1: config 2 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 32, setting to 8 [ 84.128892][ T5805] usb 2-1: config 2 interface 111 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 84.172255][ T5805] usb 2-1: config 2 interface 111 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 84.228628][ T5805] usb 2-1: config 2 interface 111 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 0 [ 84.256664][ T5805] usb 2-1: config 2 interface 111 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 84.296508][ T5805] usb 2-1: config 2 interface 111 altsetting 0 has an invalid endpoint with address 0xDA, skipping [ 84.426754][ T5935] syz.3.18 (5935) used greatest stack depth: 17960 bytes left [ 84.641890][ T5949] loop3: detected capacity change from 0 to 1024 [ 84.711695][ T5949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.754562][ T5949] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.043551][ T5959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23'. [ 85.061193][ T5805] usb 2-1: New USB device found, idVendor=0471, idProduct=20dd, bcdDevice=6c.b2 [ 85.076542][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.089035][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 85.110383][ T5805] usb 2-1: can't set config #2, error -71 [ 85.389842][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 85.676372][ T5805] usb 2-1: USB disconnect, device number 2 [ 85.677482][ T5760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.699207][ T5968] loop2: detected capacity change from 0 to 4096 [ 86.968005][ T5971] sctp: failed to load transform for md5: -2 [ 87.057520][ T5968] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 87.065595][ T5968] UDF-fs: Scanning with blocksize 512 failed [ 87.157322][ T5968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.676546][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.889669][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.901800][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.925401][ T42] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 87.968637][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.015769][ T42] usb 4-1: config 0 descriptor?? [ 88.359152][ T5991] loop0: detected capacity change from 0 to 1024 [ 88.481859][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.498856][ T5991] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.520096][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.528800][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.536252][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.555317][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.563936][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.596758][ T42] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 88.742181][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.776340][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.817464][ T42] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -32 [ 88.889493][ T42] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -32 [ 89.015856][ T42] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 89.166653][ T42] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 89.305575][ T42] playstation: probe of 0003:054C:0DF2.0001 failed with error -32 [ 89.373701][ T42] usb 4-1: USB disconnect, device number 2 [ 89.414478][ T6008] loop1: detected capacity change from 0 to 4096 [ 89.426044][ T5758] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.433442][ T6008] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.466865][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.467318][ T6008] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 89.522373][ T5750] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.635036][ T6010] loop0: detected capacity change from 0 to 4096 [ 89.679896][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 89.699181][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.726047][ T9] usb 3-1: config 0 descriptor?? [ 89.761918][ T6010] Bluetooth: MGMT ver 1.22 [ 90.197923][ T6010] loop0: detected capacity change from 4096 to 0 [ 90.212267][ T6012] loop1: detected capacity change from 0 to 32768 [ 90.233965][ T6019] syz.0.35: attempt to access beyond end of device [ 90.233965][ T6019] loop0: rw=0, sector=568, nr_sectors = 8 limit=0 [ 90.260577][ T6019] ntfs3: loop0: failed to read volume at offset 0x47000 [ 90.285880][ T6012] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.36 (6012) [ 90.373128][ T6014] kvm_intel: kvm [6009]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x4f9a [ 90.390062][ T6014] kvm: kvm [6009]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x8d7a [ 90.400885][ T6012] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 90.422385][ T6027] loop3: detected capacity change from 0 to 512 [ 90.432513][ T6014] kvm: kvm [6009]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xf15a [ 90.439095][ T6012] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 90.469400][ T6027] ======================================================= [ 90.469400][ T6027] WARNING: The mand mount option has been deprecated and [ 90.469400][ T6027] and is ignored by this kernel. Remove the mand [ 90.469400][ T6027] option from the mount to silence this warning. [ 90.469400][ T6027] ======================================================= [ 90.507038][ T6012] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.534661][ T6012] BTRFS info (device loop1): use zstd compression, level 3 [ 90.555440][ T6027] FAT-fs (loop3): Unrecognized mount option "do|s" or missing value [ 90.565735][ T6012] BTRFS info (device loop1): using free space tree [ 90.723030][ T6012] BTRFS info (device loop1): enabling ssd optimizations [ 90.739576][ T6012] BTRFS info (device loop1): auto enabling async discard [ 90.764515][ T5758] syz-executor: attempt to access beyond end of device [ 90.764515][ T5758] loop0: rw=0, sector=552, nr_sectors = 8 limit=0 [ 90.790959][ T9] usb 3-1: Cannot set MAC address [ 90.803028][ T5758] ntfs3: loop0: failed to read volume at offset 0x45000 [ 90.804420][ T9] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 90.823046][ T5758] syz-executor: attempt to access beyond end of device [ 90.823046][ T5758] loop0: rw=0, sector=16, nr_sectors = 8 limit=0 [ 90.846031][ T5758] ntfs3: loop0: failed to read volume at offset 0x2000 [ 90.858183][ T9] usb 3-1: USB disconnect, device number 2 [ 90.868666][ T5758] syz-executor: attempt to access beyond end of device [ 90.868666][ T5758] loop0: rw=2049, sector=32, nr_sectors = 8 limit=0 [ 90.907436][ T5758] Buffer I/O error on dev loop0, logical block 4, lost sync page write [ 90.918051][ T5758] ntfs3: loop0: ino=3, ntfs_set_state failed, -5. [ 90.924607][ T5758] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.933919][ T5758] syz-executor: attempt to access beyond end of device [ 90.933919][ T5758] loop0: rw=2049, sector=32, nr_sectors = 8 limit=0 [ 90.956809][ T5758] Buffer I/O error on dev loop0, logical block 4, lost sync page write [ 90.965259][ T5758] ntfs3: loop0: ino=3, ntfs_set_state failed, -5. [ 90.972384][ T5758] syz-executor: attempt to access beyond end of device [ 90.972384][ T5758] loop0: rw=0, sector=32, nr_sectors = 8 limit=0 [ 91.011403][ T2918] kworker/u4:7: attempt to access beyond end of device [ 91.011403][ T2918] loop0: rw=2049, sector=32, nr_sectors = 8 limit=0 [ 91.055619][ T2918] Buffer I/O error on dev loop0, logical block 4, lost sync page write [ 91.065317][ T2918] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -5. [ 91.090528][ T5758] syz-executor: attempt to access beyond end of device [ 91.090528][ T5758] loop0: rw=0, sector=32, nr_sectors = 8 limit=0 [ 91.120273][ T5758] syz-executor: attempt to access beyond end of device [ 91.120273][ T5758] loop0: rw=0, sector=32, nr_sectors = 8 limit=0 [ 91.601050][ T42] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.905586][ T42] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 91.986356][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 92.106362][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 41407, setting to 1023 [ 92.334482][ T42] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 92.443212][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.585632][ T42] usb 1-1: Product: syz [ 92.661445][ T42] usb 1-1: Manufacturer: syz [ 92.750727][ T42] usb 1-1: SerialNumber: syz [ 92.929666][ T42] usb 1-1: config 0 descriptor?? [ 93.023744][ T42] hub 1-1:0.0: bad descriptor, ignoring hub [ 93.125769][ T42] hub: probe of 1-1:0.0 failed with error -5 [ 93.386219][ T42] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 93.399468][ T5757] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.503319][ T5766] Bluetooth: hci3: hcon ffff88802f8ea000 sent 1 < count 32765 [ 93.511167][ T5766] Bluetooth: hci3: hcon ffff88802f8ea000 sent 0 < count 14 [ 93.542646][ T42] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 93.579112][ T6059] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.607546][ T42] usbtouchscreen: probe of 1-1:0.0 failed with error -22 [ 93.630989][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.669544][ T42] usb 1-1: USB disconnect, device number 2 [ 94.055320][ T6073] loop0: detected capacity change from 0 to 1024 [ 94.286628][ T5805] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.526561][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 96.314906][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.333594][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.350771][ T6080] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 96.369004][ T5805] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 96.390446][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.452372][ T5805] usb 4-1: config 0 descriptor?? [ 98.422982][ T6084] sched: RT throttling activated [ 98.917406][ T5805] usb 4-1: can't set config #0, error -71 [ 98.933497][ T5805] usb 4-1: USB disconnect, device number 3 [ 100.417242][ T6101] loop3: detected capacity change from 0 to 1024 [ 101.036578][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.147311][ T6105] loop0: detected capacity change from 0 to 32768 [ 101.175371][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.195526][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.257377][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 101.291949][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 101.299660][ T9] usb 2-1: config 0 has no interfaces? [ 101.320530][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 101.352819][ T6105] JBD2: Ignoring recovery information on journal [ 101.406903][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 101.435455][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 101.454535][ T6105] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.456778][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.484297][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 101.515585][ T9] usb 2-1: Product: syz [ 101.530658][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 101.532719][ T9] usb 2-1: Manufacturer: syz [ 101.605553][ T9] usb 2-1: SerialNumber: syz [ 101.629063][ T9] usb 2-1: config 0 descriptor?? [ 101.680822][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 101.748786][ T6107] loop2: detected capacity change from 0 to 32768 [ 101.754980][ T6105] (syz.0.53,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 101.806917][ T6105] (syz.0.53,6105,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 101.821080][ T6107] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.54 (6107) [ 101.839062][ T6105] (syz.0.53,6105,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 101.874401][ T6105] (syz.0.53,6105,0):ocfs2_quota_read:201 ERROR: status = -5 [ 101.885536][ T6107] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 101.908874][ T6103] FAULT_INJECTION: forcing a failure. [ 101.908874][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.924362][ T6107] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 101.936562][ T6105] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5 [ 101.946982][ T6103] CPU: 0 PID: 6103 Comm: syz.1.49 Not tainted syzkaller #0 [ 101.954217][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.964281][ T6103] Call Trace: [ 101.967560][ T6103] [ 101.970505][ T6103] dump_stack_lvl+0x16c/0x230 [ 101.975204][ T6103] ? show_regs_print_info+0x20/0x20 [ 101.980405][ T6103] ? load_image+0x3b0/0x3b0 [ 101.984908][ T6103] ? __might_fault+0xaa/0x120 [ 101.989576][ T6103] ? __lock_acquire+0x7c80/0x7c80 [ 101.994605][ T6103] should_fail_ex+0x39d/0x4d0 [ 101.999293][ T6103] _copy_from_user+0x2f/0xe0 [ 102.003888][ T6103] memdup_user+0x64/0xc0 [ 102.008128][ T6103] raw_ioctl+0x1983/0x3b70 [ 102.012538][ T6103] ? tomoyo_path_number_perm+0x477/0x590 [ 102.018176][ T6103] ? __kmem_cache_free+0xba/0x1f0 [ 102.023204][ T6103] ? tomoyo_path_number_perm+0x4dc/0x590 [ 102.028834][ T6103] ? tomoyo_path_number_perm+0x1ba/0x590 [ 102.034469][ T6103] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.039924][ T6103] ? make_qualifier+0x250/0x250 [ 102.044799][ T6103] ? __fget_files+0x28/0x4d0 [ 102.049394][ T6103] ? bpf_lsm_file_ioctl+0x9/0x10 [ 102.054326][ T6103] ? security_file_ioctl+0x80/0xa0 [ 102.059437][ T6103] ? make_qualifier+0x250/0x250 [ 102.064288][ T6103] __se_sys_ioctl+0xfd/0x170 [ 102.068875][ T6103] do_syscall_64+0x55/0xb0 [ 102.073292][ T6103] ? clear_bhb_loop+0x40/0x90 [ 102.077966][ T6103] ? clear_bhb_loop+0x40/0x90 [ 102.082641][ T6103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.088526][ T6103] RIP: 0033:0x7f42b1f8f749 [ 102.092948][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.112556][ T6103] RSP: 002b:00007f42b2d90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.120970][ T6103] RAX: ffffffffffffffda RBX: 00007f42b21e5fa0 RCX: 00007f42b1f8f749 [ 102.128949][ T6103] RDX: 0000200000000400 RSI: 0000000040085503 RDI: 0000000000000003 [ 102.136919][ T6103] RBP: 00007f42b2d90090 R08: 0000000000000000 R09: 0000000000000000 [ 102.144890][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.152869][ T6103] R13: 00007f42b21e6038 R14: 00007f42b21e5fa0 R15: 00007ffc1ab58638 [ 102.160849][ T6103] [ 102.163940][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.166807][ T6105] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 102.179356][ T6107] BTRFS info (device loop2): setting nodatacow, compression disabled [ 102.179381][ T6107] BTRFS info (device loop2): turning on flush-on-commit [ 102.179394][ T6107] BTRFS info (device loop2): using free space tree [ 102.188422][ T6105] (syz.0.53,6105,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 102.212333][ T6105] (syz.0.53,6105,1):ocfs2_mknod:314 ERROR: status = -5 [ 102.228428][ T42] usb 2-1: USB disconnect, device number 3 [ 102.275314][ T6105] (syz.0.53,6105,0):ocfs2_mknod:502 ERROR: status = -5 [ 102.334160][ T6105] (syz.0.53,6105,1):ocfs2_create:676 ERROR: status = -5 [ 102.371076][ T6107] BTRFS info (device loop2): enabling ssd optimizations [ 102.381791][ T6110] (syz.0.53,6110,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 102.401046][ T6107] BTRFS info (device loop2): auto enabling async discard [ 102.409024][ T6110] (syz.0.53,6110,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 102.421963][ T6110] (syz.0.53,6110,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 102.431786][ T6110] (syz.0.53,6110,1):ocfs2_quota_read:201 ERROR: status = -5 [ 102.442449][ T6110] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5 [ 102.452930][ T6110] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 102.464206][ T6110] (syz.0.53,6110,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 102.475178][ T6110] (syz.0.53,6110,1):ocfs2_mknod:314 ERROR: status = -5 [ 102.482748][ T6110] (syz.0.53,6110,1):ocfs2_mknod:502 ERROR: status = -5 [ 102.490872][ T6110] (syz.0.53,6110,1):ocfs2_create:676 ERROR: status = -5 [ 102.606842][ T6132] loop2: detected capacity change from 32768 to 64 [ 102.616248][ T78] kworker/u4:4: attempt to access beyond end of device [ 102.616248][ T78] loop2: rw=6145, sector=10440, nr_sectors = 8 limit=64 [ 102.630900][ T78] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 102.643193][ T78] kworker/u4:4: attempt to access beyond end of device [ 102.643193][ T78] loop2: rw=6145, sector=10448, nr_sectors = 8 limit=64 [ 102.657353][ T78] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 102.670752][ T78] kworker/u4:4: attempt to access beyond end of device [ 102.670752][ T78] loop2: rw=6145, sector=13440, nr_sectors = 8 limit=64 [ 102.686052][ T78] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 102.699518][ T6133] BTRFS error (device loop2: state A): Transaction aborted (error -5) [ 102.708841][ T6133] BTRFS: error (device loop2: state A) in __btrfs_run_delayed_items:1161: errno=-5 IO failure [ 102.719768][ T6133] BTRFS info (device loop2: state EA): forced readonly [ 102.726990][ T6133] BTRFS warning (device loop2: state EA): Skipping commit of aborted transaction. [ 102.736270][ T6133] BTRFS: error (device loop2: state EA) in cleanup_transaction:2004: errno=-5 IO failure [ 102.747953][ T6133] BTRFS error (device loop2: state EMA): Remounting read-write after error is not allowed [ 102.793493][ T6137] loop1: detected capacity change from 0 to 128 [ 102.818086][ T6137] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.831148][ T6137] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.182006][ T5758] ocfs2: Unmounting device (7,0) on (node local) [ 104.436644][ T5766] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.442937][ T6126] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 104.454639][ T6116] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 104.570275][ T5757] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.728639][ T5766] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.751306][ T6126] Bluetooth: hci3: Opcode 0x0406 failed: -110 [ 106.801778][ T6126] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.820965][ T6126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.828182][ T6126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.835366][ T6126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.850077][ T6126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.862995][ T6126] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.869200][ T6126] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.879130][ T6126] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.091292][ T5759] BTRFS info (device loop2: state EA): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 109.314751][ T5766] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.321267][ T5766] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.361692][ T6163] loop0: detected capacity change from 0 to 65536 [ 109.556283][ T6165] loop3: detected capacity change from 0 to 512 [ 110.521602][ T6165] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.778780][ T5771] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.779357][ T5766] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.793275][ T6172] sctp: failed to load transform for md5: -2 [ 111.800033][ T6174] sctp: failed to load transform for md5: -2 [ 111.904768][ T6165] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #15: comm syz.3.64: corrupted inode contents [ 111.953943][ T6163] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop0": -EINTR [ 112.076581][ T6165] EXT4-fs (loop3): Remounting filesystem read-only [ 112.175109][ T6165] EXT4-fs (loop3): 1 orphan inode deleted [ 112.219540][ T6165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.379351][ T5760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.664943][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.902681][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.066751][ T5801] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.079920][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.163290][ T6191] loop0: detected capacity change from 0 to 32768 [ 113.210488][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.269238][ T5801] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 113.306549][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.337527][ T5801] usb 4-1: config 0 descriptor?? [ 113.401672][ T5928] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5928) [ 113.421326][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.423749][ T6199] loop1: detected capacity change from 0 to 128 [ 113.443177][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.462021][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.493593][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.511266][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.526909][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.573373][ T6199] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.693459][ T6199] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.777863][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.135954][ T5771] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.136137][ T5801] ath6kl: Failed to submit usb control message: -110 [ 115.142126][ T5771] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.158093][ T5801] ath6kl: unable to send the bmi data to the device: -110 [ 115.165352][ T5801] ath6kl: Unable to send get target info: -110 [ 115.270973][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.294666][ T5801] ath6kl: Failed to init ath6kl core: -110 [ 115.302625][ T5801] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 115.505773][ T42] usb 4-1: USB disconnect, device number 4 [ 115.556735][ T5771] Bluetooth: hci3: command tx timeout [ 116.175048][ T6196] chnl_net:caif_netlink_parms(): no params data found [ 116.271363][ T6227] loop3: detected capacity change from 0 to 256 [ 116.336883][ T5928] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.667577][ T5757] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.687006][ T5801] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.765255][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.772777][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.780839][ T6196] bridge_slave_0: entered allmulticast mode [ 116.787883][ T6196] bridge_slave_0: entered promiscuous mode [ 116.810695][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.821955][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.831031][ T6196] bridge_slave_1: entered allmulticast mode [ 116.839368][ T11] IPVS: stopping master sync thread 6080 ... [ 116.849443][ T6196] bridge_slave_1: entered promiscuous mode [ 116.886709][ T5801] usb 4-1: Using ep0 maxpacket: 32 [ 116.914931][ T5801] usb 4-1: config 1 has an invalid interface number: 11 but max is 0 [ 116.918400][ T5765] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.924557][ T5801] usb 4-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 116.955732][ T5801] usb 4-1: config 1 has no interface number 0 [ 116.977045][ T5801] usb 4-1: config 1 interface 11 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.001458][ T5801] usb 4-1: config 1 interface 11 has no altsetting 0 [ 117.044223][ T5801] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=12.a6 [ 117.064100][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.078250][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.096335][ T5801] usb 4-1: Product: syz [ 117.103589][ T5801] usb 4-1: Manufacturer: 攱䀕䒓㈴ℵ悦쵲賐㡥⣀캔걳緥➃뺱瓙ꎙ錊鲎 [ 117.112080][ T5765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.113979][ T5805] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.135983][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.141861][ T5765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.145479][ T5801] usb 4-1: SerialNumber: syz [ 117.162541][ T5765] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.194598][ T5765] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.209740][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.223057][ T5765] usb 1-1: config 0 descriptor?? [ 117.337586][ T6196] team0: Port device team_slave_0 added [ 117.348859][ T6196] team0: Port device team_slave_1 added [ 117.348924][ T5805] usb 2-1: device descriptor read/64, error -71 [ 117.386953][ T11] hsr_slave_0: left promiscuous mode [ 117.394004][ T11] hsr_slave_1: left promiscuous mode [ 117.411110][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.423798][ T6227] loop3: detected capacity change from 0 to 1024 [ 117.460183][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.482879][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.514429][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.537900][ T5801] usb 4-1: Expected 3 endpoints, found: 0 [ 117.546889][ T11] bridge_slave_1: left allmulticast mode [ 117.560622][ T11] bridge_slave_1: left promiscuous mode [ 117.568101][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.593184][ T5801] usb 4-1: USB disconnect, device number 5 [ 117.620933][ T11] bridge_slave_0: left allmulticast mode [ 117.636861][ T5771] Bluetooth: hci3: command tx timeout [ 117.646473][ T11] bridge_slave_0: left promiscuous mode [ 117.652352][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.660411][ T5805] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.767001][ T11] veth1_macvtap: left promiscuous mode [ 117.783604][ T11] veth0_macvtap: left promiscuous mode [ 117.798143][ T11] veth1_vlan: left promiscuous mode [ 117.814089][ T11] veth0_vlan: left promiscuous mode [ 117.836808][ T5805] usb 2-1: device descriptor read/64, error -71 [ 117.971174][ T5805] usb usb2-port1: attempt power cycle [ 118.099001][ T6236] loop0: detected capacity change from 0 to 32768 [ 118.141009][ T6236] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.152080][ T6236] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 118.155651][ T6186] hfsplus: bad catalog file entry [ 118.173576][ T6236] BTRFS info (device loop0): force clearing of disk cache [ 118.217764][ T6236] BTRFS info (device loop0): enabling auto defrag [ 118.234639][ T6236] BTRFS info (device loop0): max_inline at 0 [ 118.246859][ T6236] BTRFS info (device loop0): enabling disk space caching [ 118.284127][ T6236] BTRFS info (device loop0): disk space caching is enabled [ 118.380216][ T6264] futex_wake_op: syz.3.73 tries to shift op by -1; fix this program [ 118.406917][ T5805] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.447143][ T5805] usb 2-1: device descriptor read/8, error -71 [ 118.480113][ T6236] BTRFS info (device loop0): enabling ssd optimizations [ 118.516044][ T6236] BTRFS info (device loop0): rebuilding free space tree [ 118.734304][ T5805] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.741696][ T6236] BTRFS info (device loop0): disabling free space tree [ 118.759388][ T6236] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.795247][ T6236] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.807241][ T5805] usb 2-1: device descriptor read/8, error -71 [ 118.974431][ T5805] usb usb2-port1: unable to enumerate USB device [ 119.121104][ T11] team0 (unregistering): Port device team_slave_1 removed [ 119.134668][ T5765] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 119.156914][ T5765] plantronics 0003:047F:FFFF.0002: parse failed [ 119.163297][ T5765] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 119.192436][ T11] team0 (unregistering): Port device team_slave_0 removed [ 119.239917][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.284734][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.384703][ T5805] usb 1-1: USB disconnect, device number 3 [ 119.718084][ T5771] Bluetooth: hci3: command tx timeout [ 119.864089][ T6281] 9pnet_virtio: no channels available for device syz [ 119.924326][ T11] bond0 (unregistering): Released all slaves [ 119.933163][ T5758] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.227012][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.234030][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.260018][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.302243][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.338831][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.372802][ T6286] loop3: detected capacity change from 0 to 128 [ 120.379327][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.422065][ T6284] loop1: detected capacity change from 0 to 1024 [ 120.475723][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.477009][ T6286] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.605772][ T6286] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.619893][ T6293] loop0: detected capacity change from 0 to 128 [ 120.677740][ T6060] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.996854][ T5771] Bluetooth: hci3: command tx timeout [ 122.035921][ T1124] hfsplus: b-tree write err: -5, ino 4 [ 123.141816][ T6196] hsr_slave_0: entered promiscuous mode [ 123.192889][ T6196] hsr_slave_1: entered promiscuous mode [ 123.262354][ T6299] loop0: detected capacity change from 0 to 1024 [ 123.339183][ T6299] hfsplus: failed to load root directory [ 123.496699][ T6302] loop1: detected capacity change from 0 to 1024 [ 124.541719][ T6312] input: syz1 as /devices/virtual/input/input6 [ 124.729490][ T5760] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.890118][ T6196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.148382][ T6196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.168143][ T6196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.195227][ T6196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.267165][ T6335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.554395][ T6323] sctp: failed to load transform for md5: -2 [ 126.968359][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.049678][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.113061][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.120304][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.157839][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.165013][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.223393][ T6196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.494392][ T6196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.529269][ T6357] sctp: failed to load transform for md5: -2 [ 129.535860][ T6359] sctp: failed to load transform for md5: -2 [ 129.604317][ T6364] loop1: detected capacity change from 0 to 1764 [ 130.167666][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.366658][ T6388] loop3: detected capacity change from 0 to 128 [ 130.417446][ T6388] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.528455][ T6388] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.339003][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.356676][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.168279][ T6196] veth0_vlan: entered promiscuous mode [ 135.175374][ T6410] loop0: detected capacity change from 0 to 1024 [ 135.249487][ T6196] veth1_vlan: entered promiscuous mode [ 135.388441][ T6196] veth0_macvtap: entered promiscuous mode [ 135.501508][ T6412] loop1: detected capacity change from 0 to 64 [ 135.808693][ T6196] veth1_macvtap: entered promiscuous mode [ 136.093377][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.190694][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.226526][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.251737][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.253423][ T6419] loop1: detected capacity change from 0 to 128 [ 136.262451][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.292155][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.304938][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.322675][ T6419] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.336228][ T5760] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.352039][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.365114][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.375481][ T6419] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.410216][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.422398][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.466682][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.495259][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.515651][ T6425] 9pnet_virtio: no channels available for device syz [ 136.525165][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.754226][ T6196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.901008][ T6196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.035906][ T6196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.138341][ T6196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.303628][ T5757] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.599391][ T6186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.656570][ T6186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.085959][ T6436] sctp: failed to load transform for md5: -2 [ 139.093928][ T6438] sctp: failed to load transform for md5: -2 [ 139.393450][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.417376][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.689056][ T6472] loop1: detected capacity change from 0 to 1024 [ 143.879018][ T6483] loop1: detected capacity change from 0 to 16 [ 143.929671][ T6483] erofs: (device loop1): mounted with root inode @ nid 36. [ 144.189330][ T6487] FAULT_INJECTION: forcing a failure. [ 144.189330][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.226607][ T6487] CPU: 0 PID: 6487 Comm: syz.0.105 Not tainted syzkaller #0 [ 144.233955][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.244035][ T6487] Call Trace: [ 144.247343][ T6487] [ 144.250296][ T6487] dump_stack_lvl+0x16c/0x230 [ 144.255112][ T6487] ? show_regs_print_info+0x20/0x20 [ 144.260354][ T6487] ? load_image+0x3b0/0x3b0 [ 144.264879][ T6487] ? __might_fault+0xaa/0x120 [ 144.269573][ T6487] ? __lock_acquire+0x7c80/0x7c80 [ 144.274620][ T6487] should_fail_ex+0x39d/0x4d0 [ 144.279342][ T6487] _copy_from_user+0x2f/0xe0 [ 144.283961][ T6487] binder_ioctl_write_read+0xb25/0x8700 [ 144.289544][ T6487] ? __lock_acquire+0x1334/0x7c80 [ 144.294625][ T6487] ? do_syscall_64+0x55/0xb0 [ 144.299247][ T6487] ? verify_lock_unused+0x140/0x140 [ 144.304473][ T6487] ? kasan_set_track+0x5f/0x70 [ 144.309275][ T6487] ? binder_debug+0x1a0/0x1a0 [ 144.313983][ T6487] ? slab_free_freelist_hook+0x130/0x1b0 [ 144.319673][ T6487] ? __kmem_cache_free+0xba/0x1f0 [ 144.324737][ T6487] ? tomoyo_path_number_perm+0x477/0x590 [ 144.330396][ T6487] ? security_file_ioctl+0x70/0xa0 [ 144.335527][ T6487] ? __se_sys_ioctl+0x48/0x170 [ 144.340312][ T6487] ? do_syscall_64+0x55/0xb0 [ 144.344926][ T6487] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.351081][ T6487] ? binder_get_thread+0x16d/0x6c0 [ 144.356306][ T6487] ? __lock_acquire+0x7c80/0x7c80 [ 144.361353][ T6487] ? __rwlock_init+0x150/0x150 [ 144.366153][ T6487] ? _raw_spin_unlock+0x28/0x40 [ 144.371025][ T6487] ? binder_get_thread+0x177/0x6c0 [ 144.376165][ T6487] binder_ioctl+0x3f9/0x1950 [ 144.380781][ T6487] ? tomoyo_path_number_perm+0x4dc/0x590 [ 144.386435][ T6487] ? tomoyo_path_number_perm+0x1ba/0x590 [ 144.392187][ T6487] ? binder_poll+0x370/0x370 [ 144.396848][ T6487] ? __fget_files+0x28/0x4d0 [ 144.401474][ T6487] ? bpf_lsm_file_ioctl+0x9/0x10 [ 144.406429][ T6487] ? security_file_ioctl+0x80/0xa0 [ 144.411569][ T6487] ? binder_poll+0x370/0x370 [ 144.416209][ T6487] __se_sys_ioctl+0xfd/0x170 [ 144.420849][ T6487] do_syscall_64+0x55/0xb0 [ 144.425291][ T6487] ? clear_bhb_loop+0x40/0x90 [ 144.429987][ T6487] ? clear_bhb_loop+0x40/0x90 [ 144.434687][ T6487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.440603][ T6487] RIP: 0033:0x7f71cbd8f749 [ 144.445053][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.464682][ T6487] RSP: 002b:00007f71ccc16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.469624][ T6492] loop3: detected capacity change from 0 to 256 [ 144.473111][ T6487] RAX: ffffffffffffffda RBX: 00007f71cbfe5fa0 RCX: 00007f71cbd8f749 [ 144.473128][ T6487] RDX: 0000200000000500 RSI: 00000000c0306201 RDI: 0000000000000004 [ 144.473137][ T6487] RBP: 00007f71ccc16090 R08: 0000000000000000 R09: 0000000000000000 [ 144.473146][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.473154][ T6487] R13: 00007f71cbfe6038 R14: 00007f71cbfe5fa0 R15: 00007ffeb2593738 [ 144.473178][ T6487] [ 144.522419][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.538518][ T6487] binder: 6486:6487 ioctl c0306201 200000000500 returned -14 [ 144.783276][ T6492] FAT-fs (loop3): Directory bread(block 64) failed [ 144.804934][ T6492] FAT-fs (loop3): Directory bread(block 65) failed [ 144.825881][ T6497] netlink: 'syz.1.106': attribute type 4 has an invalid length. [ 144.849271][ T6492] FAT-fs (loop3): Directory bread(block 66) failed [ 144.855868][ T6492] FAT-fs (loop3): Directory bread(block 67) failed [ 144.891839][ T6492] FAT-fs (loop3): Directory bread(block 68) failed [ 144.923826][ T6492] FAT-fs (loop3): Directory bread(block 69) failed [ 144.948912][ T6492] FAT-fs (loop3): Directory bread(block 70) failed [ 144.967587][ T6492] FAT-fs (loop3): Directory bread(block 71) failed [ 147.126650][ T6492] FAT-fs (loop3): Directory bread(block 72) failed [ 147.136669][ T6492] FAT-fs (loop3): Directory bread(block 73) failed [ 148.838007][ T6522] sctp: failed to load transform for md5: -2 [ 148.844617][ T6524] sctp: failed to load transform for md5: -2 [ 149.255198][ T6537] block device autoloading is deprecated and will be removed. [ 150.387761][ T6550] binder_alloc: 6549: pid 6549 spamming oneway? 1 buffers allocated for a total size of 4096 [ 150.449611][ T6550] binder: 6549:6550 ioctl c0306201 200000000200 returned -14 [ 151.082495][ T6569] loop3: detected capacity change from 0 to 1024 [ 151.951416][ T6563] sctp: failed to load transform for md5: -2 [ 151.951820][ T6566] sctp: failed to load transform for md5: -2 [ 156.273685][ T6597] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.283211][ T6597] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.292153][ T6597] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.301148][ T6597] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.399995][ T6600] loop0: detected capacity change from 0 to 64 [ 157.779606][ T6606] sctp: failed to load transform for md5: -2 [ 157.786183][ T6608] sctp: failed to load transform for md5: -2 [ 163.269046][ T6665] FAULT_INJECTION: forcing a failure. [ 163.269046][ T6665] name failslab, interval 1, probability 0, space 0, times 1 [ 163.282942][ T6665] CPU: 1 PID: 6665 Comm: syz.4.128 Not tainted syzkaller #0 [ 163.290287][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.300371][ T6665] Call Trace: [ 163.303666][ T6665] [ 163.306611][ T6665] dump_stack_lvl+0x16c/0x230 [ 163.311315][ T6665] ? show_regs_print_info+0x20/0x20 [ 163.316632][ T6665] ? load_image+0x3b0/0x3b0 [ 163.321156][ T6665] ? __might_sleep+0xe0/0xe0 [ 163.325770][ T6665] ? __lock_acquire+0x7c80/0x7c80 [ 163.330831][ T6665] should_fail_ex+0x39d/0x4d0 [ 163.335539][ T6665] should_failslab+0x9/0x20 [ 163.340077][ T6665] slab_pre_alloc_hook+0x59/0x310 [ 163.345138][ T6665] ? __request_module+0x2c2/0x5b0 [ 163.350188][ T6665] ? __request_module+0x2c2/0x5b0 [ 163.355237][ T6665] __kmem_cache_alloc_node+0x53/0x260 [ 163.360643][ T6665] ? __request_module+0x2c2/0x5b0 [ 163.365688][ T6665] __kmalloc_node_track_caller+0xa2/0x230 [ 163.371441][ T6665] kstrdup+0x3b/0x80 [ 163.375367][ T6665] __request_module+0x2c2/0x5b0 [ 163.380247][ T6665] ? module_enforce_rwx_sections+0x150/0x150 [ 163.386248][ T6665] ? __wake_up+0x11f/0x190 [ 163.390683][ T6665] ? __wake_up_bit+0x1e0/0x1e0 [ 163.395458][ T6665] ? _raw_read_unlock_irqrestore+0x86/0x110 [ 163.401378][ T6665] ? _raw_read_unlock_irqrestore+0xae/0x110 [ 163.407296][ T6665] ? _raw_read_unlock+0x40/0x40 [ 163.412174][ T6665] ? rcu_read_unlock+0x8c/0xa0 [ 163.416955][ T6665] ? __lock_acquire+0x7c80/0x7c80 [ 163.422001][ T6665] netlink_create+0x1b2/0x5c0 [ 163.426713][ T6665] __sock_create+0x4a6/0x940 [ 163.431337][ T6665] __sys_socket+0xd7/0x1a0 [ 163.435768][ T6665] __x64_sys_socket+0x7a/0x90 [ 163.440460][ T6665] do_syscall_64+0x55/0xb0 [ 163.444888][ T6665] ? clear_bhb_loop+0x40/0x90 [ 163.449593][ T6665] ? clear_bhb_loop+0x40/0x90 [ 163.454292][ T6665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.460203][ T6665] RIP: 0033:0x7f125978f749 [ 163.464642][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.484360][ T6665] RSP: 002b:00007f125a69b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 163.492804][ T6665] RAX: ffffffffffffffda RBX: 00007f12599e5fa0 RCX: 00007f125978f749 [ 163.500800][ T6665] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000010 [ 163.508789][ T6665] RBP: 00007f125a69b090 R08: 0000000000000000 R09: 0000000000000000 [ 163.516784][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.524773][ T6665] R13: 00007f12599e6038 R14: 00007f12599e5fa0 R15: 00007fff0ac88758 [ 163.532781][ T6665] [ 166.014271][ T6670] sctp: failed to load transform for md5: -2 [ 166.561354][ T6688] loop0: detected capacity change from 0 to 128 [ 166.641536][ T6688] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.664053][ T6688] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.668831][ T6707] loop4: detected capacity change from 0 to 64 [ 168.860482][ T6707] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 168.999996][ T6712] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 169.165567][ T6715] bad cache= option: no%e [ 169.165567][ T6715] [ 169.165735][ T6715] CIFS: VFS: bad cache= option: no%e [ 169.452752][ T5758] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.956042][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 170.098336][ T6727] loop3: detected capacity change from 0 to 1024 [ 170.113485][ T6724] loop0: detected capacity change from 0 to 4096 [ 170.198765][ T6724] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 170.215030][ T6724] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=1) [ 170.376758][ T5801] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.292759][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.362423][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.392176][ T5801] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 172.445678][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.509043][ T5801] usb 5-1: config 0 descriptor?? [ 172.720020][ T6744] tipc: Started in network mode [ 172.725272][ T6744] tipc: Node identity 00000000000000008, cluster identity 4711 [ 172.772948][ T6748] loop3: detected capacity change from 0 to 128 [ 175.281903][ T6748] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.319618][ T6748] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.331863][ T5801] usbhid 5-1:0.0: can't add hid device: -71 [ 175.372768][ T5801] usbhid: probe of 5-1:0.0 failed with error -71 [ 175.410733][ T6761] loop1: detected capacity change from 0 to 128 [ 175.448562][ T5801] usb 5-1: USB disconnect, device number 2 [ 176.805942][ T6761] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.076859][ T6761] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.479190][ T6783] bad cache= option: no%e [ 180.479190][ T6783] [ 180.485774][ T6783] CIFS: VFS: bad cache= option: no%e [ 180.595399][ T5757] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.681828][ T6791] loop1: detected capacity change from 0 to 1024 [ 180.706561][ T6792] syzkaller1: entered promiscuous mode [ 180.713700][ T5760] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.725529][ T6792] syzkaller1: entered allmulticast mode [ 182.947671][ T6801] sctp: failed to load transform for md5: -2 [ 183.273547][ T6813] loop1: detected capacity change from 0 to 128 [ 183.364127][ T6813] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.386892][ T6813] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.634564][ T5757] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.045435][ T6841] loop3: detected capacity change from 0 to 32768 [ 190.096544][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.119633][ T6841] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.141650][ T6861] loop4: detected capacity change from 0 to 128 [ 190.174988][ T6861] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.219458][ T6861] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.252035][ T6841] XFS (loop3): Ending clean mount [ 190.265476][ T6846] loop0: detected capacity change from 0 to 32768 [ 190.273040][ T6841] XFS (loop3): Quotacheck needed: Please wait. [ 190.283621][ T6846] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.157 (6846) [ 190.331704][ T6846] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.693039][ T6846] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 191.718622][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.720663][ T6846] BTRFS info (device loop0): turning on flush-on-commit [ 191.737005][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.784991][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 191.794504][ T6846] BTRFS info (device loop0): max_inline at 0 [ 191.810370][ T6841] XFS (loop3): Quotacheck: Done. [ 191.821703][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.824037][ T6846] BTRFS info (device loop0): enabling disk space caching [ 191.857933][ T9] usb 2-1: config 0 descriptor?? [ 191.891146][ T6846] BTRFS info (device loop0): setting nodatasum [ 191.916723][ T6846] BTRFS info (device loop0): turning off barriers [ 191.937429][ T27] audit: type=1800 audit(1765291472.911:2): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.154" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 191.968797][ T6841] XFS (loop3): User initiated shutdown received. [ 191.975271][ T6846] BTRFS info (device loop0): disabling tree log [ 191.995261][ T6841] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 191.996801][ T6846] BTRFS info (device loop0): enabling ssd optimizations [ 192.046521][ T6846] BTRFS info (device loop0): force clearing of disk cache [ 192.056519][ T6841] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 192.066495][ T6846] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.136783][ T6846] BTRFS info (device loop0): use zstd compression, level 3 [ 192.144127][ T6846] BTRFS info (device loop0): max_inline at 0 [ 192.173011][ T6846] BTRFS info (device loop0): disk space caching is enabled [ 192.297533][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 192.313223][ T9] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 192.365700][ T6846] BTRFS info (device loop0): rebuilding free space tree [ 192.397166][ T9] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 192.405732][ T9] hid-steam 0003:28DE:1142.0003: No HID_FEATURE_REPORT submitted - nothing to read [ 192.446265][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 192.474574][ T6846] BTRFS info (device loop0): disabling free space tree [ 192.490349][ T9] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 192.502104][ T6846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.530177][ T6846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.628900][ T6846] BTRFS info (device loop0): checking UUID tree [ 192.640804][ T6846] BTRFS warning (device loop0): failed to start uuid_rescan task [ 192.670688][ T6846] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 192.685837][ T5760] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.864303][ T6846] BTRFS error (device loop0): open_ctree failed: -4 [ 193.575399][ T6911] loop3: detected capacity change from 0 to 128 [ 193.733358][ T6196] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.873431][ T6911] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.881167][ T5805] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 194.096884][ T6911] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.456923][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.463293][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.306820][ T9] usb 2-1: USB disconnect, device number 8 [ 197.331569][ T9] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 198.249621][ T6938] loop0: detected capacity change from 0 to 128 [ 198.348433][ T6938] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.462473][ T6938] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.078846][ T6947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.469060][ T5760] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.770192][ T6961] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 202.925338][ T6961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.968415][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 204.803975][ T5758] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.974891][ T6985] loop0: detected capacity change from 0 to 1024 [ 205.115570][ T6969] bond1 (unregistering): Released all slaves [ 206.015450][ T6994] loop4: detected capacity change from 0 to 128 [ 206.222150][ T6994] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.264834][ T6998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.274889][ T6994] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.070501][ T7009] bad cache= option: no%e [ 207.070501][ T7009] [ 207.077228][ T7009] CIFS: VFS: bad cache= option: no%e [ 207.336715][ T5868] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.901656][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.931476][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.941808][ T5868] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 207.959543][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.199934][ T5868] usb 4-1: config 0 descriptor?? [ 209.205207][ T7017] sctp: failed to load transform for md5: -2 [ 209.205867][ T7019] sctp: failed to load transform for md5: -2 [ 209.471893][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 209.520852][ T5868] usbhid: probe of 4-1:0.0 failed with error -71 [ 209.550135][ T5868] usb 4-1: USB disconnect, device number 6 [ 211.602102][ T6196] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.632254][ T7049] loop1: detected capacity change from 0 to 1024 [ 211.869398][ T7053] loop4: detected capacity change from 0 to 128 [ 212.242370][ T7053] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.437352][ T7053] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.327443][ T7069] tipc: Enabling of bearer rejected, failed to enable media [ 216.372462][ T7071] loop0: detected capacity change from 0 to 128 [ 216.423500][ T7071] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.459205][ T7071] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.849068][ T7079] loop3: detected capacity change from 0 to 128 [ 217.969560][ T7079] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 217.984078][ T7079] EXT4-fs: failed to create workqueue [ 218.036856][ T7079] EXT4-fs (loop3): mount failed [ 218.253612][ T7090] loop3: detected capacity change from 0 to 512 [ 218.290303][ T174] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 218.360357][ T7090] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 218.443075][ T7090] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 218.487077][ T7090] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.191: Corrupt directory, running e2fsck is recommended [ 218.504165][ T6196] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.536953][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.566551][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.568403][ T7090] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 218.598784][ T174] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 218.607395][ T7090] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.191: corrupted in-inode xattr: invalid ea_ino [ 218.617700][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.637676][ T7090] EXT4-fs (loop3): Remounting filesystem read-only [ 218.645644][ T7090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.674685][ T174] usb 2-1: config 0 descriptor?? [ 218.697925][ T5760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.895787][ T7105] netlink: 'syz.4.193': attribute type 10 has an invalid length. [ 219.912201][ T5758] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.914972][ T7105] netlink: 55 bytes leftover after parsing attributes in process `syz.4.193'. [ 220.027552][ T174] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 220.038152][ T174] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 220.140357][ T174] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 220.152974][ T174] hid-steam 0003:28DE:1142.0005: No HID_FEATURE_REPORT submitted - nothing to read [ 220.291628][ T174] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 221.095764][ T174] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 221.326637][ T174] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 221.400894][ T7116] loop4: detected capacity change from 0 to 1024 [ 221.536824][ T174] usb 2-1: device descriptor read/64, error -32 [ 221.869085][ T174] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 226.109378][ T7124] loop0: detected capacity change from 0 to 128 [ 226.179781][ T7124] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.195301][ T7128] loop3: detected capacity change from 0 to 128 [ 226.285315][ T7124] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.314048][ T7128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.345953][ T7128] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.368636][ T7131] netlink: 67 bytes leftover after parsing attributes in process `syz.1.199'. [ 228.854844][ T5749] usb 2-1: USB disconnect, device number 9 [ 228.874108][ T5749] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 228.916304][ T7131] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 228.965230][ T7136] loop1: detected capacity change from 0 to 256 [ 229.026344][ T7136] FAT-fs (loop1): Unrecognized mount option "nonu" or missing value [ 229.228260][ T7140] loop4: detected capacity change from 0 to 1024 [ 230.860725][ T5758] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.232793][ T7157] loop0: detected capacity change from 0 to 1024 [ 233.252651][ T7157] EXT4-fs: Ignoring removed orlov option [ 233.297681][ T7157] EXT4-fs: inline encryption not supported [ 233.321061][ T5760] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.366186][ T7157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.123338][ T7164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.605784][ T5771] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.741078][ T7168] sctp: failed to load transform for md5: -2 [ 235.747802][ T7170] sctp: failed to load transform for md5: -2 [ 235.907567][ T5758] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.006580][ T788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 236.065581][ T7186] loop0: detected capacity change from 0 to 128 [ 236.126985][ T7186] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.164120][ T7186] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.164986][ T7190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 236.218475][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.227723][ T7190] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 236.239191][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.471965][ T788] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 237.517516][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.538822][ T788] usb 4-1: config 0 descriptor?? [ 237.645129][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 238.929048][ T788] usbhid 4-1:0.0: can't add hid device: -71 [ 238.935098][ T788] usbhid: probe of 4-1:0.0 failed with error -71 [ 238.983513][ T788] usb 4-1: USB disconnect, device number 7 [ 241.845422][ T5758] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.257676][ T7215] FAULT_INJECTION: forcing a failure. [ 242.257676][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.259751][ T7215] [ 242.259758][ T7215] ====================================================== [ 242.259763][ T7215] WARNING: possible circular locking dependency detected [ 242.259778][ T7215] syzkaller #0 Not tainted [ 242.259785][ T7215] ------------------------------------------------------ [ 242.259790][ T7215] syz.3.215/7215 is trying to acquire lock: [ 242.259797][ T7215] ffffffff8cd24160 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 242.259842][ T7215] [ 242.259842][ T7215] but task is already holding lock: [ 242.259846][ T7215] ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 242.259884][ T7215] [ 242.259884][ T7215] which lock already depends on the new lock. [ 242.259884][ T7215] [ 242.259888][ T7215] [ 242.259888][ T7215] the existing dependency chain (in reverse order) is: [ 242.259892][ T7215] [ 242.259892][ T7215] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 242.259911][ T7215] _raw_spin_lock_nested+0x32/0x50 [ 242.259929][ T7215] raw_spin_rq_lock_nested+0x2a/0x140 [ 242.259947][ T7215] task_fork_fair+0x62/0x1f0 [ 242.259959][ T7215] sched_cgroup_fork+0x333/0x3c0 [ 242.259978][ T7215] copy_process+0x21e4/0x3d70 [ 242.259991][ T7215] kernel_clone+0x21b/0x840 [ 242.260004][ T7215] user_mode_thread+0xde/0x130 [ 242.260017][ T7215] rest_init+0x27/0x300 [ 242.260034][ T7215] arch_call_rest_init+0xe/0x10 [ 242.260048][ T7215] start_kernel+0x459/0x4e0 [ 242.260061][ T7215] x86_64_start_reservations+0x2a/0x30 [ 242.260081][ T7215] copy_bootdata+0x0/0xe0 [ 242.260100][ T7215] secondary_startup_64_no_verify+0x179/0x17b [ 242.260118][ T7215] [ 242.260118][ T7215] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 242.260137][ T7215] _raw_spin_lock_irqsave+0xa8/0xf0 [ 242.260152][ T7215] try_to_wake_up+0x60/0x1140 [ 242.260171][ T7215] __wake_up_common+0x2a4/0x4e0 [ 242.260185][ T7215] __wake_up+0x112/0x190 [ 242.260198][ T7215] tty_port_default_wakeup+0xa2/0xf0 [ 242.260211][ T7215] serial8250_tx_chars+0x6bd/0x8a0 [ 242.260226][ T7215] serial8250_handle_irq+0x534/0x6e0 [ 242.260242][ T7215] serial8250_default_handle_irq+0xb8/0x1a0 [ 242.260260][ T7215] serial8250_interrupt+0x9f/0x1c0 [ 242.260275][ T7215] __handle_irq_event_percpu+0x276/0x930 [ 242.260294][ T7215] handle_irq_event+0x8b/0x1e0 [ 242.260311][ T7215] handle_edge_irq+0x247/0xb30 [ 242.260325][ T7215] __common_interrupt+0x13b/0x230 [ 242.260341][ T7215] common_interrupt+0xb4/0xd0 [ 242.260353][ T7215] asm_common_interrupt+0x26/0x40 [ 242.260370][ T7215] lock_acquire+0xa/0x410 [ 242.260384][ T7215] down_read+0x46/0x2e0 [ 242.260395][ T7215] validate_mm+0x1a8/0x420 [ 242.260411][ T7215] do_vmi_align_munmap+0x148a/0x1660 [ 242.260427][ T7215] do_vmi_munmap+0x252/0x2d0 [ 242.260442][ T7215] mmap_region+0x741/0x2020 [ 242.260456][ T7215] do_mmap+0x92f/0x10a0 [ 242.260470][ T7215] vm_mmap_pgoff+0x1c0/0x400 [ 242.260486][ T7215] ksys_mmap_pgoff+0x520/0x700 [ 242.260501][ T7215] do_syscall_64+0x55/0xb0 [ 242.260512][ T7215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.260527][ T7215] [ 242.260527][ T7215] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 242.260546][ T7215] _raw_spin_lock_irqsave+0xa8/0xf0 [ 242.260561][ T7215] __wake_up+0xf8/0x190 [ 242.260573][ T7215] tty_port_default_wakeup+0xa2/0xf0 [ 242.260586][ T7215] serial8250_tx_chars+0x6bd/0x8a0 [ 242.260602][ T7215] serial8250_handle_irq+0x534/0x6e0 [ 242.260619][ T7215] serial8250_default_handle_irq+0xb8/0x1a0 [ 242.260635][ T7215] serial8250_interrupt+0x9f/0x1c0 [ 242.260649][ T7215] __handle_irq_event_percpu+0x276/0x930 [ 242.260667][ T7215] handle_irq_event+0x8b/0x1e0 [ 242.260685][ T7215] handle_edge_irq+0x247/0xb30 [ 242.260698][ T7215] __common_interrupt+0x13b/0x230 [ 242.260712][ T7215] common_interrupt+0xb4/0xd0 [ 242.260731][ T7215] asm_common_interrupt+0x26/0x40 [ 242.260746][ T7215] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 242.260761][ T7215] uart_write+0x45b/0x5d0 [ 242.260772][ T7215] n_tty_write+0xd27/0x11d0 [ 242.260791][ T7215] file_tty_write+0x54b/0x980 [ 242.260805][ T7215] vfs_write+0x43b/0x940 [ 242.260822][ T7215] ksys_write+0x147/0x250 [ 242.260838][ T7215] do_syscall_64+0x55/0xb0 [ 242.260849][ T7215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.260864][ T7215] [ 242.260864][ T7215] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 242.260883][ T7215] _raw_spin_lock_irqsave+0xa8/0xf0 [ 242.260898][ T7215] serial8250_console_write+0x16d/0x17a0 [ 242.260915][ T7215] console_flush_all+0x6cd/0xd00 [ 242.260930][ T7215] console_unlock+0xae/0x340 [ 242.260944][ T7215] vprintk_emit+0x477/0x600 [ 242.260958][ T7215] _printk+0xd0/0x110 [ 242.260975][ T7215] register_console+0x91b/0xe60 [ 242.260989][ T7215] univ8250_console_init+0x45/0x50 [ 242.261002][ T7215] console_init+0x17b/0x5e0 [ 242.261015][ T7215] start_kernel+0x2c0/0x4e0 [ 242.261027][ T7215] x86_64_start_reservations+0x2a/0x30 [ 242.261047][ T7215] copy_bootdata+0x0/0xe0 [ 242.261065][ T7215] secondary_startup_64_no_verify+0x179/0x17b [ 242.261082][ T7215] [ 242.261082][ T7215] -> #0 (console_owner){-...}-{0:0}: [ 242.261100][ T7215] __lock_acquire+0x2ddb/0x7c80 [ 242.261113][ T7215] lock_acquire+0x197/0x410 [ 242.261126][ T7215] console_flush_all+0x693/0xd00 [ 242.261141][ T7215] console_unlock+0xae/0x340 [ 242.261155][ T7215] vprintk_emit+0x477/0x600 [ 242.261169][ T7215] _printk+0xd0/0x110 [ 242.261185][ T7215] should_fail_ex+0x37e/0x4d0 [ 242.261202][ T7215] strncpy_from_user+0x36/0x2e0 [ 242.261214][ T7215] strncpy_from_user_nofault+0x71/0x140 [ 242.261232][ T7215] bpf_bprintf_prepare+0xb9b/0x1400 [ 242.261249][ T7215] bpf_trace_printk+0xdc/0x190 [ 242.261268][ T7215] bpf_prog_7c77c7e0f6645ad8+0x3d/0x3f [ 242.261283][ T7215] bpf_trace_run2+0x1d1/0x3c0 [ 242.261295][ T7215] __bpf_trace_contention_begin+0xdd/0x130 [ 242.261315][ T7215] trace_contention_begin+0xe9/0x110 [ 242.261331][ T7215] __pv_queued_spin_lock_slowpath+0xe0/0x9d0 [ 242.261347][ T7215] do_raw_spin_lock+0x24e/0x2c0 [ 242.261363][ T7215] raw_spin_rq_lock_nested+0xad/0x140 [ 242.261380][ T7215] __schedule+0x2dd/0x44d0 [ 242.261398][ T7215] schedule+0xbd/0x170 [ 242.261416][ T7215] exit_to_user_mode_loop+0x47/0x110 [ 242.261433][ T7215] exit_to_user_mode_prepare+0xf6/0x180 [ 242.261450][ T7215] syscall_exit_to_user_mode+0x1a/0x50 [ 242.261465][ T7215] do_syscall_64+0x61/0xb0 [ 242.261476][ T7215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.261490][ T7215] [ 242.261490][ T7215] other info that might help us debug this: [ 242.261490][ T7215] [ 242.261494][ T7215] Chain exists of: [ 242.261494][ T7215] console_owner --> &p->pi_lock --> &rq->__lock [ 242.261494][ T7215] [ 242.261515][ T7215] Possible unsafe locking scenario: [ 242.261515][ T7215] [ 242.261518][ T7215] CPU0 CPU1 [ 242.261522][ T7215] ---- ---- [ 242.261525][ T7215] lock(&rq->__lock); [ 242.261533][ T7215] lock(&p->pi_lock); [ 242.261542][ T7215] lock(&rq->__lock); [ 242.261551][ T7215] lock(console_owner); [ 242.261559][ T7215] [ 242.261559][ T7215] *** DEADLOCK *** [ 242.261559][ T7215] [ 242.261562][ T7215] 4 locks held by syz.3.215/7215: [ 242.261570][ T7215] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 242.261609][ T7215] #1: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 242.261659][ T7215] #2: ffffffff8cd24240 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 242.261694][ T7215] #3: ffffffff8cc0ba50 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 242.261736][ T7215] [ 242.261736][ T7215] stack backtrace: [ 242.261741][ T7215] CPU: 1 PID: 7215 Comm: syz.3.215 Not tainted syzkaller #0 [ 242.261755][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.261769][ T7215] Call Trace: [ 242.261776][ T7215] [ 242.261783][ T7215] dump_stack_lvl+0x16c/0x230 [ 242.261806][ T7215] ? load_image+0x3b0/0x3b0 [ 242.261825][ T7215] ? show_regs_print_info+0x20/0x20 [ 242.261850][ T7215] ? print_circular_bug+0x12b/0x1a0 [ 242.261869][ T7215] check_noncircular+0x2bd/0x3c0 [ 242.261888][ T7215] ? print_deadlock_bug+0x5d0/0x5d0 [ 242.261903][ T7215] ? lockdep_lock+0xe0/0x220 [ 242.261922][ T7215] __lock_acquire+0x2ddb/0x7c80 [ 242.261949][ T7215] ? verify_lock_unused+0x140/0x140 [ 242.261974][ T7215] lock_acquire+0x197/0x410 [ 242.261989][ T7215] ? console_flush_all+0x10f/0xd00 [ 242.262009][ T7215] ? __lock_acquire+0x7c80/0x7c80 [ 242.262022][ T7215] ? do_raw_spin_lock+0x121/0x2c0 [ 242.262039][ T7215] ? read_lock_is_recursive+0x20/0x20 [ 242.262055][ T7215] ? __rwlock_init+0x150/0x150 [ 242.262071][ T7215] ? do_raw_spin_unlock+0x121/0x230 [ 242.262089][ T7215] console_flush_all+0x693/0xd00 [ 242.262103][ T7215] ? console_flush_all+0x10f/0xd00 [ 242.262120][ T7215] ? console_flush_all+0x10f/0xd00 [ 242.262142][ T7215] ? is_console_locked+0x20/0x20 [ 242.262164][ T7215] console_unlock+0xae/0x340 [ 242.262182][ T7215] ? other_cpu_in_panic+0xf0/0xf0 [ 242.262198][ T7215] ? trace_event_buffer_commit+0x264/0x7e0 [ 242.262220][ T7215] vprintk_emit+0x477/0x600 [ 242.262237][ T7215] ? printk_sprint+0x460/0x460 [ 242.262252][ T7215] ? trace_event_raw_event_bpf_trace_printk+0x152/0x210 [ 242.262272][ T7215] ? __probestub_bpf_trace_printk+0x10/0x10 [ 242.262298][ T7215] _printk+0xd0/0x110 [ 242.262317][ T7215] ? load_image+0x3b0/0x3b0 [ 242.262335][ T7215] ? mark_lock+0x94/0x320 [ 242.262351][ T7215] ? __lock_acquire+0x1260/0x7c80 [ 242.262368][ T7215] should_fail_ex+0x37e/0x4d0 [ 242.262389][ T7215] strncpy_from_user+0x36/0x2e0 [ 242.262406][ T7215] strncpy_from_user_nofault+0x71/0x140 [ 242.262426][ T7215] bpf_bprintf_prepare+0xb9b/0x1400 [ 242.262444][ T7215] ? verify_lock_unused+0x140/0x140 [ 242.262462][ T7215] ? __bpf_trace_lock+0x140/0x140 [ 242.262483][ T7215] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 242.262500][ T7215] ? mark_lock+0x94/0x320 [ 242.262516][ T7215] ? bpf_trace_printk+0xc2/0x190 [ 242.262538][ T7215] bpf_trace_printk+0xdc/0x190 [ 242.262559][ T7215] ? bpf_probe_write_user+0xe0/0xe0 [ 242.262584][ T7215] ? mark_lock+0x94/0x320 [ 242.262602][ T7215] bpf_prog_7c77c7e0f6645ad8+0x3d/0x3f [ 242.262618][ T7215] bpf_trace_run2+0x1d1/0x3c0 [ 242.262633][ T7215] ? bpf_trace_run2+0xde/0x3c0 [ 242.262647][ T7215] ? bpf_trace_run1+0x3b0/0x3b0 [ 242.262661][ T7215] ? __bpf_trace_contention_begin+0xce/0x130 [ 242.262685][ T7215] __bpf_trace_contention_begin+0xdd/0x130 [ 242.262707][ T7215] ? __bpf_trace_lock+0x140/0x140 [ 242.262735][ T7215] ? verify_lock_unused+0x140/0x140 [ 242.262756][ T7215] trace_contention_begin+0xe9/0x110 [ 242.262775][ T7215] __pv_queued_spin_lock_slowpath+0xe0/0x9d0 [ 242.262798][ T7215] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 242.262821][ T7215] do_raw_spin_lock+0x24e/0x2c0 [ 242.262841][ T7215] ? __rwlock_init+0x150/0x150 [ 242.262862][ T7215] raw_spin_rq_lock_nested+0xad/0x140 [ 242.262884][ T7215] __schedule+0x2dd/0x44d0 [ 242.262905][ T7215] ? __lock_acquire+0x7c80/0x7c80 [ 242.262920][ T7215] ? file_end_write+0x159/0x250 [ 242.262944][ T7215] ? asan.module_dtor+0x20/0x20 [ 242.262963][ T7215] ? __fget_files+0x44a/0x4d0 [ 242.262984][ T7215] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 242.263001][ T7215] ? lock_chain_count+0x20/0x20 [ 242.263016][ T7215] ? ksys_write+0x1f2/0x250 [ 242.263036][ T7215] schedule+0xbd/0x170 [ 242.263056][ T7215] exit_to_user_mode_loop+0x47/0x110 [ 242.263076][ T7215] exit_to_user_mode_prepare+0xf6/0x180 [ 242.263095][ T7215] syscall_exit_to_user_mode+0x1a/0x50 [ 242.263112][ T7215] do_syscall_64+0x61/0xb0 [ 242.263125][ T7215] ? clear_bhb_loop+0x40/0x90 [ 242.263142][ T7215] ? clear_bhb_loop+0x40/0x90 [ 242.263159][ T7215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.263176][ T7215] RIP: 0033:0x7f2e5f38e1ff [ 242.263190][ T7215] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 242.263202][ T7215] RSP: 002b:00007f2e5d5f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 242.263216][ T7215] RAX: 0000000000000001 RBX: 000000000000000f RCX: 00007f2e5f38e1ff [ 242.263223][ T7215] RDX: 0000000000000001 RSI: 00007f2e5d5f6090 RDI: 000000000000000f [ 242.263230][ T7215] RBP: 00007f2e5d5f6090 R08: 0000000000000000 R09: 00007f2e5d5f5df7 [ 242.263237][ T7215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 242.263244][ T7215] R13: 00007f2e5f5e6218 R14: 00007f2e5f5e6180 R15: 00007ffe25015bf8 [ 242.263259][ T7215] [ 243.507171][ T7215] CPU: 1 PID: 7215 Comm: syz.3.215 Not tainted syzkaller #0 [ 243.514442][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.524487][ T7215] Call Trace: [ 243.527753][ T7215] [ 243.530671][ T7215] dump_stack_lvl+0x16c/0x230 [ 243.535342][ T7215] ? show_regs_print_info+0x20/0x20 [ 243.540530][ T7215] ? load_image+0x3b0/0x3b0 [ 243.545019][ T7215] ? mark_lock+0x94/0x320 [ 243.549334][ T7215] ? __lock_acquire+0x1260/0x7c80 [ 243.554342][ T7215] should_fail_ex+0x39d/0x4d0 [ 243.559012][ T7215] strncpy_from_user+0x36/0x2e0 [ 243.563848][ T7215] strncpy_from_user_nofault+0x71/0x140 [ 243.569385][ T7215] bpf_bprintf_prepare+0xb9b/0x1400 [ 243.574564][ T7215] ? verify_lock_unused+0x140/0x140 [ 243.579750][ T7215] ? __bpf_trace_lock+0x140/0x140 [ 243.584776][ T7215] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 243.589872][ T7215] ? mark_lock+0x94/0x320 [ 243.594188][ T7215] ? bpf_trace_printk+0xc2/0x190 [ 243.599112][ T7215] bpf_trace_printk+0xdc/0x190 [ 243.603892][ T7215] ? bpf_probe_write_user+0xe0/0xe0 [ 243.609084][ T7215] ? mark_lock+0x94/0x320 [ 243.613402][ T7215] bpf_prog_7c77c7e0f6645ad8+0x3d/0x3f [ 243.618853][ T7215] bpf_trace_run2+0x1d1/0x3c0 [ 243.623517][ T7215] ? bpf_trace_run2+0xde/0x3c0 [ 243.628262][ T7215] ? bpf_trace_run1+0x3b0/0x3b0 [ 243.633094][ T7215] ? __bpf_trace_contention_begin+0xce/0x130 [ 243.639060][ T7215] __bpf_trace_contention_begin+0xdd/0x130 [ 243.644851][ T7215] ? __bpf_trace_lock+0x140/0x140 [ 243.649866][ T7215] ? verify_lock_unused+0x140/0x140 [ 243.655111][ T7215] trace_contention_begin+0xe9/0x110 [ 243.660388][ T7215] __pv_queued_spin_lock_slowpath+0xe0/0x9d0 [ 243.666359][ T7215] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 243.672765][ T7215] do_raw_spin_lock+0x24e/0x2c0 [ 243.677622][ T7215] ? __rwlock_init+0x150/0x150 [ 243.682406][ T7215] raw_spin_rq_lock_nested+0xad/0x140 [ 243.687877][ T7215] __schedule+0x2dd/0x44d0 [ 243.692282][ T7215] ? __lock_acquire+0x7c80/0x7c80 [ 243.697299][ T7215] ? file_end_write+0x159/0x250 [ 243.702139][ T7215] ? asan.module_dtor+0x20/0x20 [ 243.706981][ T7215] ? __fget_files+0x44a/0x4d0 [ 243.711647][ T7215] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 243.717711][ T7215] ? lock_chain_count+0x20/0x20 [ 243.722565][ T7215] ? ksys_write+0x1f2/0x250 [ 243.727067][ T7215] schedule+0xbd/0x170 [ 243.731129][ T7215] exit_to_user_mode_loop+0x47/0x110 [ 243.736403][ T7215] exit_to_user_mode_prepare+0xf6/0x180 [ 243.741950][ T7215] syscall_exit_to_user_mode+0x1a/0x50 [ 243.747397][ T7215] do_syscall_64+0x61/0xb0 [ 243.751800][ T7215] ? clear_bhb_loop+0x40/0x90 [ 243.756471][ T7215] ? clear_bhb_loop+0x40/0x90 [ 243.761146][ T7215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.767059][ T7215] RIP: 0033:0x7f2e5f38e1ff [ 243.771467][ T7215] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.791062][ T7215] RSP: 002b:00007f2e5d5f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.799467][ T7215] RAX: 0000000000000001 RBX: 000000000000000f RCX: 00007f2e5f38e1ff [ 243.807434][ T7215] RDX: 0000000000000001 RSI: 00007f2e5d5f6090 RDI: 000000000000000f [ 243.815409][ T7215] RBP: 00007f2e5d5f6090 R08: 0000000000000000 R09: 00007f2e5d5f5df7 [ 243.823383][ T7215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 243.831345][ T7215] R13: 00007f2e5f5e6218 R14: 00007f2e5f5e6180 R15: 00007ffe25015bf8 [ 243.839312][ T7215]