last executing test programs: 1m3.206219371s ago: executing program 4 (id=5): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@grpid}, {@discard}]}, 0xfd, 0x26b, &(0x7f0000000100)="$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") r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r5, 0x6, &(0x7f0000000000)={0x2f, 0x0, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r9, r8, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0x10, 0x3, 0x3) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}}, 0x0) 1m0.367869286s ago: executing program 4 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@file_umask={'file_umask', 0x3d, 0x4bb}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@part={'part', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@type={'type', 0x3d, "66dc3f23"}}, {@file_umask={'file_umask', 0x3d, 0x8}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'max_inline'}}, {@uid_lt={'uid<', r0}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_user={'obj_user', 0x3d, '+%\'$-$'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x62, 0x64, 0x63, 0x66, 0x63, 0x65], 0x2d, [0x0, 0x61, 0x34, 0x61], 0x2d, [0x36, 0x61, 0x63, 0x66], 0x2d, [0x31, 0x66, 0x63, 0x31], 0x2d, [0x30, 0x39, 0x32, 0x32, 0x33, 0x35, 0x32, 0x65]}}}]}, 0x4, 0x338, &(0x7f0000000a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file1\x00') syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f0000000540)={[{@thread_pool={'thread_pool', 0x3d, 0x2}}, {@datasum}, {@max_inline={'max_inline', 0x3d, [0x36, 0x30, 0x37, 0x33, 0x25, 0x25]}}, {@autodefrag}, {@noacl}, {@nobarrier}, {@notreelog}, {@user_subvol_rm}, {@ssd}, {@noenospc_debug}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@rescan_uuid_tree}, {@nodiscard}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x8800) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="adcd1a9a3fc36e961ed00fe41b07d695bb2ddba81cb20a4552b345b523d6685b2f", 0x21) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000480)={r1, r7, 0x9, 0x1d, &(0x7f0000000200)="00fe15a829089a2526ed66d6cf8ceaa9cd0d1b5c1210fcf56e4e0e233c", 0xb2, 0x2, 0xfffb, 0x7, 0x8, 0x7, 0xffffffff, 'syz0\x00'}) 55.601627893s ago: executing program 4 (id=17): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000080)=0x3, 0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x9}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000400b536f969a83cdf440818110000", @ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0xbc3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x3, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) syz_io_uring_setup(0x10b, &(0x7f0000000980)={0x0, 0x45885, 0x8, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x5e22}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 51.73609347s ago: executing program 4 (id=24): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000009a00014f194e20006490"], 0x9e) 51.156151886s ago: executing program 32 (id=24): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000009a00014f194e20006490"], 0x9e) 10.17368494s ago: executing program 3 (id=138): prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x2}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x7) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x90001) ptrace$setopts(0x4200, r0, 0x7fffffffffffffff, 0x46) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) timer_create(0x5, &(0x7f0000000100)={0x0, 0x3a, 0x1, @tid=r0}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000200)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000000240)) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000280)=r0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x4002, 0x0) r7 = io_uring_setup(0x1b16, &(0x7f0000000300)={0x0, 0xe1a7, 0x40, 0x3, 0x165}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x347, 0x3, 0x7, 0x895a}, {0x0, 0x7, 0x0, 0x2}, {0x2, 0xf, 0x0, 0x9}, {0x4, 0x8c, 0xe, 0x40}, {0xfff, 0x5, 0x5, 0xffff}, {0x4, 0x20, 0x8, 0x5}, {0xc, 0x0, 0x2b, 0x3}, {0xfff8, 0x8, 0x0, 0x8ee}]}) timer_gettime(r1, &(0x7f0000000400)) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000440)=0x2, 0x4) getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000004c0)={{r9, r10+60000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) r11 = syz_open_dev$usbfs(&(0x7f0000000540), 0x6, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000580)={0x9, 0x1, "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"}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r8) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r12, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7a}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10000) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r13, 0x800448f0, &(0x7f0000000800)={0x1, 0x5, "76130c", 0x1, 0x10}) timer_getoverrun(0x0) 9.022238431s ago: executing program 1 (id=142): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") (fail_nth: 23) 8.630655041s ago: executing program 3 (id=143): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000100005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) 8.451727566s ago: executing program 1 (id=145): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x84) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000036000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.236652732s ago: executing program 3 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x1010a1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') fanotify_init(0x0, 0x2) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, 0x7, 0x3ff) write$sysctl(r3, &(0x7f0000000040)='6\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 7.964055464s ago: executing program 0 (id=148): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/439], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.388866237s ago: executing program 1 (id=149): r0 = socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = eventfd2(0xffff8003, 0x80801) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$6lowpan_control(r2, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x4c050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='iocharset', &(0x7f0000000180)='iocharset', 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'wlan0\x00', 0x1000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000280)=0x3ff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 6.108457679s ago: executing program 2 (id=150): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000242f00fc000000000000000000000000000004ff020000000000000000000000000001"], 0x0) 5.880744158s ago: executing program 2 (id=152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000004", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 5.826513042s ago: executing program 5 (id=153): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.760031476s ago: executing program 5 (id=154): prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) r2 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async, rerun: 32) ptrace(0x8, r2) (async, rerun: 32) wait4(r2, 0x0, 0x8, 0x0) 4.759847505s ago: executing program 2 (id=155): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff10000400000000000000000000000000000ff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.345876748s ago: executing program 5 (id=156): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$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") 3.796639481s ago: executing program 5 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000440)={0x0, 0x53, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r3, r4, 0x20, 0x5, 0x4000000, 0x7, {0x20000, 0x0, 0x0, 0x800, 0x3ff, 0x0, 0x0, 0xb8e, 0x0, 0x0, 0x25, 0xfffffffd, 0x8, 0x0, "d20bddda7de75aec79ff0300d28000000b0000000000001000000900"}}) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2000c6, &(0x7f0000001340)=ANY=[], 0x1, 0xac5, &(0x7f0000001480)="$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") openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x0, 0x30) syz_mount_image$hpfs(&(0x7f0000009e80), &(0x7f0000009e40)='./file0\x00', 0x41, &(0x7f000000a680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c63686b64736b3d616c776179732c6572726f72733d636f6e74696e75652c6561733d6e6f2cf693d46a", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x9e09, &(0x7f000000a700)="$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") syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x0) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000180)) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 2.523792471s ago: executing program 1 (id=158): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033feff0095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r7, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r4}, 0x20) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 2.468192465s ago: executing program 0 (id=159): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000002095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 2.42061214s ago: executing program 1 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc1, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d030100000000009500000000004e007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) 2.40738116s ago: executing program 3 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0xc8dc49c3c93a0328, 0x0) read$dsp(r3, 0x0, 0x0) r4 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r4, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x1, 0x20000001) connect$netlink(r4, &(0x7f0000000000)=@unspec, 0xc) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x70, 0x10, 0x401, 0xfffffffe, 0x2, {0x0, 0x0, 0x0, 0x0, 0x40043}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0xc}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x5}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="0d8d3ceaa8c0"}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) 2.200125427s ago: executing program 2 (id=162): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff020000000000000000000000ff02014f194e20006490"], 0x9e) 2.199931367s ago: executing program 0 (id=163): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$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") (fail_nth: 24) 2.116227104s ago: executing program 5 (id=164): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000200005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) 1.9067479s ago: executing program 3 (id=165): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="280000000000000029000000050000002f02020100000000fe8000000000000000000000000000bb18000097ff00000029000000360000002e0000000000000018"], 0x58}, 0x0) 940.825596ms ago: executing program 0 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/108, 0x6c) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000003c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), 0x0, 0x0, 0xf5, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) write(r7, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) 593.774193ms ago: executing program 1 (id=167): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@minixdf}, {}, {@nodioread_nolock}, {@errors_continue}, {@lazytime}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000004) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x9725}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000300)=ANY=[], 0xfdef) r6 = accept4$packet(r2, 0x0, &(0x7f0000000340), 0x180000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001080)={'tunl0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x7, 0x10, 0xbb2, 0x4, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x65, 0x0, 0x2, 0x0, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r8, r10, 0x25, 0x4, @void}, 0x10) sendmmsg$inet(r6, &(0x7f0000001580)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000400)="d4cc8566895eb6209e99cdf1515d8cf922514ac57190550c1f2ef0b95afe9cc5047f9e2df8c79ceaa444dff785336d3ae0fddf261ab5ed24df9b024f973051613f058d34257857fed3ecda99fb8c7edc9a57088498e99645a9f9ed3ea7545aa63d7de01beb38166e9b4977d81893bcecf90165da229a68e50b5e37385adf4110bb1a13dd8c62d36f84aa6a46389ae442c84c5dc958beb0cb8a8a02a03205fe55974e3322e846b5fb24117056e431494b0bca", 0xb2}, {&(0x7f0000000500)="a02e01748a0da62cb5d5e7a4d6e493f62b3ff7ea7008e013c1e3373b5a22c7b5d734b44ed30be0ea30a1ee75664ba96114c3a4db8cae5aa133bdd0e36557a8717b050ef38f4fe83a86075a04967a975802706597c1efa6c33f4abe60f78b39d5800f31b26f67feea4877c1a48b61f0333416e73b763596e2ddfa2cf74dec0e97e518ee6ee3832d1160ad0d12106d6ca83c6c4e41734dec458da87048781a48c4852e6a75f9d2d09853", 0xa9}], 0x2, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x85, [@loopback, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x0, [{@loopback, 0x71}]}, @end, @noop]}}}], 0x48}}, {{&(0x7f0000000680)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000fc0)=[{&(0x7f00000006c0)="e418c4d72c8617aa13e7734c8b3d67ceb32c95317540400495fa45a2d61f42954454418054c10b2ebdac5459c52a33756f7dbf9cbbeb8f1c5d71c97d2932a049911788044a7ba3faa169", 0x4a}, {&(0x7f0000000d00)="bcc57147c1b016342cdc7a52721731a2c2057d3069a451884a729533c4da65c1d1211f1aa51753c370c214bd48938f6c7a5a1be9c3a304d6db615e41d53a473f85886a417c3c1c1322af57f849d74aa4af73e7528d941bf3623f0b544b5e338a04", 0x61}, {&(0x7f0000000d80)="4f8561f9032f4c88356718031f6df671089b407c3dcddfa3a77aa5cd0342eb232d254dd95a2fbc6cf5aa0f532b79faa4c83ff76281dbd6f3dada367d2bd24132ee9f1dabd1966f9a9300de847015789fb00ea11a1e340720039b656b7879b7457197a171838e9c43fc7db8f6842ba57507863b6ef3215bf0cd10b33e20971aadd7102d7a5627e65058143a6523626cd04ebfcf57d5ff6da8c0453802d39ce6812cfccbcd96d96c53601a3ba8ebbe65a44cbf06ad835ffe6398271355b3325b6162b3ef5c5296243fd4f2dbda4bdec84bcf7bfef79a54560be9888a7adc823b2eaba7da4031fe", 0xe6}, {&(0x7f0000000740)="0aee9613916955721d2a92796e58b80d0c7c26305dce88864b", 0x19}, {&(0x7f0000000e80)="bae87dd0516d26195375de6c56df66907ec7a48ba6ccb0c40f13bab15359a174c907b523b6ac573c6b41d66ca4e6f165bc20f0a00c924aca6010dd82c36beeaf6de96ed9f3c9a460afff52929bac30bb3e0317d6ff4f20f7", 0x58}, {&(0x7f0000000f00)="2d587fe993397dcba63205db654a49509928a086687ef3f146317a4237cef548a765887817ef34993ca6f8a689cc524d91a2e4e5c2d505f90afce94d8e2be229102ad8772ad089b01058d0d7201d81fe46032851e441ec54c6aca5790fba7291397d3547ee87f5f9a83bfe33984876afa3e308b1688054d0932eb7060dc14d450b6c36ea87b6b2c7d566b1bc1a261452b7aff155e32c9f9282386bab5b85d82a058852576ef4c0cbd03eaf3e2bad8e372dd7d3af71ededac5735123e48", 0xbd}], 0x6, &(0x7f00000010c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010101, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x54, 0x0, 0x7, {[@rr={0x7, 0x13, 0xa7, [@remote, @multicast2, @multicast2, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0xf4, [@remote]}, @lsrr={0x83, 0x1f, 0x5b, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101, @loopback]}, @generic={0x44, 0x8, "30adc2c3feaf"}]}}}], 0xb0}}, {{&(0x7f0000001180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001280)=[{&(0x7f00000011c0)="73554b71c5f3895ff1453b1663453c36dc9e076629d6dcc5139b09aef5f38469abca6c8a1463b8bcee4022", 0x2b}, {&(0x7f0000001200)="868ecd7c89653e3729a5e1ab2ec0f8b5b00fced425afc058d5bfe4beec23d61c472355cde5f0c6ff764e8b813ba687ad8c4f043716c65ce8d7c373d7c8f4c1e7561665657bb5a7c5b26611eba6c651fac61dffbcc386", 0x56}], 0x2, &(0x7f0000001640)=ANY=[@ANYBLOB="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"/567], 0x1b8}}], 0x3, 0x80) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r11, 0x4008550d, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 593.337003ms ago: executing program 0 (id=168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000020", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 545.927537ms ago: executing program 2 (id=169): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000000000e4ff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 402.845238ms ago: executing program 3 (id=170): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a000009050502000000000009058b", @ANYRES16], 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) 208.105313ms ago: executing program 5 (id=171): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x1010a1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') fanotify_init(0x0, 0x2) preadv(r4, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1, 0x7, 0x3ff) write$sysctl(r4, &(0x7f0000000040)='6\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 187.821525ms ago: executing program 0 (id=172): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$eJzs3E1rE1sYwPEnmTST9tKX1YV7Nz7oRjdDjUsVGqUFMaCkHVEXwpRONSQmZSZoIoJZu+rnKC7dCeIX6N4P4K4I0lVXjjSZjJOYvhhiUtP/D8Kcc545k3PmJPCcwGTv4fbz0qZvbTo1SWZUkiJNORBZkKJ0JMJjulVOR+1yMytNubL4Yv/t6qPHd3P5/HJBdSW3di2rqnMXPr58/e7ip9o/D97PmabsLjzZ+5b9svvv7n9739eeFX0t+lqp1tTR9Wq15qyXXd0o+iVL9X7ZdXxXixXf9brim+Xq1lZDncrG7MyW5/q+OpWGJqWhtapmwlFV1LIsnZ05LGfkHEn/dg97p1Bwcn1D5+rOTTbPyzmGiEz/sqb2znhGBAAAxuno/D8ZndPJ/1O9+b/ICfn/m/CsuQ9Dz/8NifL/ktvK/2teQ52nTjGe/+NY9lJ3/r90ql7JPzcgDCrRjFVudYU8LzfdvxP5PwAAAAAAAAAAAAAAAAAAAAAAf4ODIJgPgmD+8JgUkSCsmyJixOp9uvKE+ASIr38Qe5nhAh+z/pgAsQf3MiJfm3W7bidax3Z85U5+eVFbYg/+7dfrthHFr7bj2h2fkpkwnu0bT8vlS+34Yez2vXw8vl23p2WjZ6xGV605zNsAAAAAAMBEszSyEDVmJNrfW5aa0htv7d9bhZSIdH4f6Nnfp+T/1AgnAgAAAAAAjuQ3XpWcctn1RlMwRvheAxdEBut+PTCHMgxDRGItZrhU8XMKqyLDm3JaTpyynuqCprid0Y524T7nBu6eOSOfulMWbgztgkFCpN0yFa5Zz7cAAAAAwGT5uR8Y90gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi/RvHXZeOeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBW/AgAAP//blKy6w==") 0s ago: executing program 2 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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") openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000400000000004000000", @ANYRES32=0x0, @ANYBLOB="0000297c08115f998f155c000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000840)={[{@noblock_validity}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}], [{@dont_appraise}]}, 0x1, 0x488, &(0x7f0000000940)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 72.529032][ T4256] cgroup: Unknown subsys name 'net' [ 72.635029][ T4256] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.149228][ T4256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.238113][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.247640][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.255971][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.263885][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.271612][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.279555][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.288210][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.296520][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.299638][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.304258][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.317970][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.318925][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.327356][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.332877][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.340453][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.347978][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.355517][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.360822][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.367403][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.375063][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.382136][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.389035][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.396446][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.402979][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.416935][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.444420][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.445303][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.452727][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.466562][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.521766][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.825255][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 76.999571][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 77.026606][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.033954][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.043610][ T4266] device bridge_slave_0 entered promiscuous mode [ 77.055436][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.062870][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.071187][ T4266] device bridge_slave_1 entered promiscuous mode [ 77.102239][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 77.157329][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.173897][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.232280][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 77.285310][ T4266] team0: Port device team_slave_0 added [ 77.306757][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 77.329766][ T4266] team0: Port device team_slave_1 added [ 77.335717][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.343324][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.352381][ T4282] device bridge_slave_0 entered promiscuous mode [ 77.364775][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.372436][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.381000][ T4282] device bridge_slave_1 entered promiscuous mode [ 77.388081][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.395480][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.403854][ T4278] device bridge_slave_0 entered promiscuous mode [ 77.415837][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.423354][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.431467][ T4278] device bridge_slave_1 entered promiscuous mode [ 77.487865][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.495142][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.521196][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.562906][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.570009][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.596525][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.609994][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.629372][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.651445][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.661096][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.668209][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.676404][ T4267] device bridge_slave_0 entered promiscuous mode [ 77.685820][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.715382][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.722777][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.731066][ T4267] device bridge_slave_1 entered promiscuous mode [ 77.805403][ T4266] device hsr_slave_0 entered promiscuous mode [ 77.813168][ T4266] device hsr_slave_1 entered promiscuous mode [ 77.829642][ T4282] team0: Port device team_slave_0 added [ 77.835715][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.843004][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.851248][ T4269] device bridge_slave_0 entered promiscuous mode [ 77.862557][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.874035][ T4278] team0: Port device team_slave_0 added [ 77.882266][ T4278] team0: Port device team_slave_1 added [ 77.890031][ T4282] team0: Port device team_slave_1 added [ 77.895984][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.903981][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.912081][ T4269] device bridge_slave_1 entered promiscuous mode [ 77.930549][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.990349][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.997345][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.023959][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.048039][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.055132][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.081620][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.094724][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.111533][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.118890][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.144912][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.164563][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.171643][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.197818][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.210510][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.222189][ T4267] team0: Port device team_slave_0 added [ 78.260579][ T4267] team0: Port device team_slave_1 added [ 78.293960][ T4278] device hsr_slave_0 entered promiscuous mode [ 78.300928][ T4278] device hsr_slave_1 entered promiscuous mode [ 78.307496][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.316440][ T4278] Cannot create hsr debugfs directory [ 78.352523][ T4269] team0: Port device team_slave_0 added [ 78.393403][ T4269] team0: Port device team_slave_1 added [ 78.407352][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.414587][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.440678][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.454912][ T4282] device hsr_slave_0 entered promiscuous mode [ 78.462081][ T4282] device hsr_slave_1 entered promiscuous mode [ 78.469337][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.476908][ T4282] Cannot create hsr debugfs directory [ 78.499325][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.506343][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.533120][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 78.538776][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 78.539362][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 78.552237][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.588501][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 78.594828][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 78.638320][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.645316][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.671768][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.705452][ T4267] device hsr_slave_0 entered promiscuous mode [ 78.712728][ T4267] device hsr_slave_1 entered promiscuous mode [ 78.719885][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.727471][ T4267] Cannot create hsr debugfs directory [ 78.738895][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.745964][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.772445][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.910236][ T4269] device hsr_slave_0 entered promiscuous mode [ 78.917015][ T4269] device hsr_slave_1 entered promiscuous mode [ 78.923973][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.932121][ T4269] Cannot create hsr debugfs directory [ 79.065937][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.093746][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.128393][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.138664][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.197620][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.226038][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.237942][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.251477][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.295243][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.305793][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.343153][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.354099][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.412419][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.444155][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.455038][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.465260][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.565069][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.600900][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.616409][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.626131][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.643260][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.664540][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.674636][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.684239][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.702864][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.741580][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.751473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.761251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.771737][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.779194][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.788222][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.797224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.805537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.842166][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.860766][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.871580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.880766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.893130][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.900322][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.908865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.917604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.926982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.935902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.945666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.954733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.963777][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.970960][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.985324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.994090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.004752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.013456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.023801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.067340][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.075555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.084800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.094352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.103270][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.110438][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.120236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.129129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.137511][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.144657][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.154196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.163330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.172013][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.179168][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.194051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.217877][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.229688][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.245232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.254379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.264053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.274934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.284885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.294296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.303701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.312384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.321815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.342426][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.353126][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.377510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.387109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.397525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.413852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.425193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.437541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.454240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.465515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.480763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.495764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.523019][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.539488][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.554823][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.563668][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.577419][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.586792][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.589130][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 80.602097][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 80.602192][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 80.625528][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.649263][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.670453][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 80.676571][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 80.689118][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.713654][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.723465][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.739656][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.750349][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.757519][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.781416][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.789434][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.841240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.860415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.874910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.885139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.899555][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.906707][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.916100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.925744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.946049][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.991797][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.000912][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.009038][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.019091][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.027920][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.039912][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.056410][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.064471][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.095653][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.111079][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.125212][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.135205][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.149838][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.157014][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.165880][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.175315][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.184695][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.191908][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.200307][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.209781][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.218757][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.265314][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.275258][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.284900][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.299926][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.309803][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.317343][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.350167][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.362653][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.374644][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.384151][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.396483][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.406467][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.415032][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.425855][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.435485][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.444454][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.453852][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.463357][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.472560][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.482014][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.544890][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.555812][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.565283][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.577380][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.587926][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.596959][ T4266] device veth0_vlan entered promiscuous mode [ 81.621277][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.633816][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.656101][ T4266] device veth1_vlan entered promiscuous mode [ 81.676617][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.685773][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.695003][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.705382][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.723113][ T4278] device veth0_vlan entered promiscuous mode [ 81.748942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.757712][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.779937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.824918][ T4278] device veth1_vlan entered promiscuous mode [ 81.838618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.846819][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.880054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.906278][ T4266] device veth0_macvtap entered promiscuous mode [ 81.947844][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.971558][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.994840][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.009637][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.031034][ T4266] device veth1_macvtap entered promiscuous mode [ 82.071717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.083071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.129762][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.140704][ T4278] device veth0_macvtap entered promiscuous mode [ 82.151530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.165245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.175846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.207342][ T4278] device veth1_macvtap entered promiscuous mode [ 82.227484][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.243641][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.253037][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.263278][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.283731][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.302197][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.311345][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.320517][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.345007][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.358573][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.376259][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.423912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.435322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.445604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.453500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.469249][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.483699][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.496616][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.531185][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.542753][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.555918][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.570434][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.577946][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.589541][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.604221][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.613764][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.636645][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.668694][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 82.673950][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 82.674761][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 82.690785][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.750468][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 82.750476][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 82.833592][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.843207][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.852367][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.854249][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.872792][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.882160][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.892129][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.932513][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.941710][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.951741][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.961190][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.970013][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.977898][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.025356][ T4269] device veth0_vlan entered promiscuous mode [ 83.061569][ T4282] device veth0_vlan entered promiscuous mode [ 83.067984][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.077845][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.078705][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.095872][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.104545][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.136115][ T4269] device veth1_vlan entered promiscuous mode [ 83.144741][ T4267] device veth0_vlan entered promiscuous mode [ 83.169730][ T4282] device veth1_vlan entered promiscuous mode [ 83.178148][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.190696][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.199900][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.208204][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.216997][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.227042][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.236401][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.259202][ T4267] device veth1_vlan entered promiscuous mode [ 83.283825][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.302994][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.366696][ T4269] device veth0_macvtap entered promiscuous mode [ 83.373019][ T4385] loop1: detected capacity change from 0 to 512 [ 83.402290][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.416953][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.428607][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.436887][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.446964][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.451050][ T4385] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.457334][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.480267][ T4385] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.485102][ T4282] device veth0_macvtap entered promiscuous mode [ 83.497782][ T4282] device veth1_macvtap entered promiscuous mode [ 83.508046][ T4385] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 83.518049][ T4385] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 83.528963][ T4385] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.2: Failed to acquire dquot type 1 [ 83.546041][ T4267] device veth0_macvtap entered promiscuous mode [ 83.559436][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.567472][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.580448][ T4269] device veth1_macvtap entered promiscuous mode [ 83.592778][ T4385] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 40: padding at end of block bitmap is not set [ 83.609611][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.625508][ T4385] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 83.630402][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.651034][ T4385] EXT4-fs (loop1): 1 truncate cleaned up [ 83.657167][ T4385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.657699][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.677459][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.689615][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.701196][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.715106][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.726337][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.746757][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.765519][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.785781][ T4267] device veth1_macvtap entered promiscuous mode [ 83.806825][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.824384][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.836249][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.852463][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.866632][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.906913][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.924978][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.935904][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.960670][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.976997][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.990362][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.003679][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.015932][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.027286][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.046294][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.059578][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.075603][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.085749][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.102098][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.116798][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.136883][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.146961][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.156437][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.167178][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.185486][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.210573][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.221340][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.230596][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.253838][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.271036][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.287565][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.303130][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.313938][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.324574][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.347641][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.371731][ T4391] loop2: detected capacity change from 0 to 128 [ 84.385041][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.396172][ T4391] ADFS-fs (loop2): unrecognised mount option "" or missing value [ 84.406378][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.452432][ T4390] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 84.472416][ T4390] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 84.518096][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.537598][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.549032][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.562944][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.573330][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.584354][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.609866][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.621599][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.634320][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.645904][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.655808][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.664739][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.675489][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.687959][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.700854][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.720144][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.732987][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.743296][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.743954][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.762115][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 84.762710][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.768138][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 84.768168][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 84.790616][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.802021][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.812657][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.823872][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.828661][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 84.837109][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.839840][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 84.863107][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.875754][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.901577][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.911711][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.922467][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.931316][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.953070][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.963796][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.963849][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.966651][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.986916][ T126] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 85.010114][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.033186][ T126] usb 3-1: config 0 descriptor?? [ 85.136917][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.149356][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.168169][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.207280][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.230112][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.275264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.285364][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.297773][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.317891][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.337653][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.348745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.365489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.393101][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.421946][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.440571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.449834][ T4390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.479113][ T4390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.101232][ T4396] loop0: detected capacity change from 0 to 32768 [ 86.157478][ T4396] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4396) [ 86.239620][ T4396] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 86.270964][ T126] ath6kl: Failed to read usb control message: -71 [ 86.282943][ T4396] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 86.285819][ T126] ath6kl: Unable to read the bmi data from the device: -71 [ 86.308807][ T4396] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 86.338031][ T126] ath6kl: Unable to recv target info: -71 [ 86.356847][ T126] ath6kl: Failed to init ath6kl core: -71 [ 86.368568][ T4396] BTRFS info (device loop0): use lzo compression, level 0 [ 86.375911][ T4396] BTRFS info (device loop0): using free space tree [ 86.437393][ T126] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 86.474046][ T126] usb 3-1: USB disconnect, device number 2 [ 86.521277][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 86.536149][ T4398] loop3: detected capacity change from 0 to 32768 [ 86.587293][ T4401] loop4: detected capacity change from 0 to 128 [ 86.639790][ T4401] ======================================================= [ 86.639790][ T4401] WARNING: The mand mount option has been deprecated and [ 86.639790][ T4401] and is ignored by this kernel. Remove the mand [ 86.639790][ T4401] option from the mount to silence this warning. [ 86.639790][ T4401] ======================================================= [ 86.736959][ T4398] XFS (loop3): Mounting V5 Filesystem [ 86.763521][ T4401] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 86.803923][ T4396] BTRFS info (device loop0): enabling ssd optimizations [ 86.831247][ T130] cfg80211: failed to load regulatory.db [ 86.884589][ T4427] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 86.933395][ T4398] XFS (loop3): Starting recovery (logdev: internal) [ 87.062435][ T26] audit: type=1800 audit(1765581135.857:2): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 87.280963][ T4398] XFS (loop3): Ending recovery (logdev: internal) [ 87.379524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.582745][ T4440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 87.718556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.766703][ T4398] XFS (loop3): User initiated shutdown received. [ 87.835497][ T4398] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 87.859150][ T4398] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 87.945770][ T4269] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 88.185240][ T4282] XFS (loop3): Unmounting Filesystem [ 88.198051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.208281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 88.216503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 88.349920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.358549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.366773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.375462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 88.383721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 88.535219][ T4445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 88.549285][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 88.557920][ T4445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'. [ 89.011272][ T4453] loop4: detected capacity change from 0 to 64 [ 89.020292][ T4453] hfs: unable to change iocharset [ 89.025658][ T4453] hfs: unable to parse mount options [ 89.263243][ T4453] loop4: detected capacity change from 0 to 32768 [ 89.315638][ T4453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.11 (4453) [ 89.335070][ T4453] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.345748][ T4453] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 89.354656][ T4453] BTRFS info (device loop4): max_inline at 4096 [ 89.360982][ T4453] BTRFS info (device loop4): enabling auto defrag [ 89.367410][ T4453] BTRFS info (device loop4): turning off barriers [ 89.373907][ T4453] BTRFS info (device loop4): disabling tree log [ 89.380280][ T4453] BTRFS info (device loop4): enabling ssd optimizations [ 89.387231][ T4453] BTRFS info (device loop4): force clearing of disk cache [ 89.394700][ T4453] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.404212][ T4453] BTRFS info (device loop4): use zstd compression, level 3 [ 89.411543][ T4453] BTRFS info (device loop4): using free space tree [ 89.680117][ T4463] loop1: detected capacity change from 0 to 64 [ 89.849441][ T4463] Trying to free block not in datazone [ 89.899982][ T26] audit: type=1804 audit(1765581138.687:3): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13" name="/newroot/3/file2/file1" dev="loop1" ino=5 res=1 errno=0 [ 89.931430][ T4459] loop0: detected capacity change from 0 to 2048 [ 90.448905][ T4453] BTRFS info (device loop4): rebuilding free space tree [ 90.587015][ T4453] BTRFS info (device loop4): checking UUID tree [ 90.753752][ T4484] loop3: detected capacity change from 0 to 1024 [ 90.875756][ T4485] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.058111][ T4484] comedi comedi0: No channels found! [ 91.987690][ T4499] syz.1.15 (4499): /proc/4489/oom_adj is deprecated, please use /proc/4489/oom_score_adj instead. [ 92.831028][ T4483] loop2: detected capacity change from 0 to 1024 [ 93.536895][ T4483] EXT4-fs: failed to create workqueue [ 94.374425][ T4483] EXT4-fs (loop2): mount failed [ 94.694488][ T32] hfsplus: b-tree write err: -5, ino 4 [ 95.105858][ T4520] fuse: Unknown parameter 'grp_id' [ 95.120003][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 95.122936][ T4521] loop8: detected capacity change from 0 to 7 [ 96.856938][ T4521] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 96.884710][ T4492] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.996141][ T4521] loop8: partition table partially beyond EOD, truncated [ 97.006320][ T4521] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 97.022091][ T4521] loop8: p2 start 956478 is beyond EOD, truncated [ 97.047723][ T4492] syz.4.11 (4492) used greatest stack depth: 20064 bytes left [ 97.265215][ T4276] udevd[4276]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 97.303692][ T4349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.398642][ T4377] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.433551][ T4268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 69 /dev/loop4 scanned by udevd (4268) [ 97.480610][ T4349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.611674][ T4349] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.616834][ T4377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 97.650001][ T4377] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 97.678380][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.723367][ T4377] usb 1-1: config 0 descriptor?? [ 97.750596][ T4531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.805153][ T4349] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.091574][ T4539] loop1: detected capacity change from 0 to 128 [ 98.986558][ T4539] affs: No valid root block on device loop1 [ 99.412353][ T4539] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 99.424665][ T4533] loop2: detected capacity change from 0 to 7 [ 99.488495][ T4533] Dev loop2: unable to read RDB block 7 [ 99.494192][ T4533] loop2: unable to read partition table [ 99.518644][ T4533] loop2: partition table beyond EOD, truncated [ 99.698452][ T4533] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 99.838636][ T4549] loop3: detected capacity change from 0 to 4096 [ 100.017846][ T4549] NILFS (loop3): unrecognized mount option "f3>J1$_a-LK٥!8ަ?PW&](j)u)%<TllUJ24V}1LJqbmՇg0K=AUZO58vt<֑7՛\c P+mj^[6.z00000000000000000000003" [ 100.677125][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.687544][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.697444][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.706942][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.715570][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.723360][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.204394][ T4570] loop2: detected capacity change from 0 to 512 [ 101.285456][ T4570] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.32: inode has both inline data and extents flags [ 101.391105][ T4570] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.32: couldn't read orphan inode 15 (err -117) [ 101.426000][ T4570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.479671][ T4579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'. [ 102.028444][ T26] audit: type=1800 audit(1765581150.817:4): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.32" name="file2" dev="loop2" ino=18 res=0 errno=0 [ 102.048723][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.321152][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 102.748359][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 102.831794][ T4377] usbhid 1-1:0.0: can't add hid device: -32 [ 102.862883][ T4377] usbhid: probe of 1-1:0.0 failed with error -32 [ 103.180031][ T4588] loop2: detected capacity change from 0 to 8192 [ 103.264821][ T4588] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.278542][ T4588] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 103.288968][ T4588] REISERFS (device loop2): using ordered data mode [ 103.295632][ T4588] reiserfs: using flush barriers [ 103.314544][ T4588] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.333872][ T4588] REISERFS (device loop2): checking transaction log (loop2) [ 103.352925][ T4588] REISERFS (device loop2): Using r5 hash to sort names [ 103.369009][ T4588] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 103.622853][ T4588] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM)" [ 104.070845][ T4586] loop1: detected capacity change from 0 to 512 [ 104.098525][ T4586] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.277599][ T126] usb 1-1: USB disconnect, device number 2 [ 104.303710][ T4586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.361813][ T4560] chnl_net:caif_netlink_parms(): no params data found [ 104.456641][ T4586] EXT4-fs (loop1): mount failed [ 104.668017][ T4600] x_tables: duplicate underflow at hook 2 [ 104.828676][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 104.849255][ T4602] netlink: 76 bytes leftover after parsing attributes in process `syz.3.38'. [ 105.043939][ T4608] loop0: detected capacity change from 0 to 1024 [ 105.063982][ T4349] device hsr_slave_0 left promiscuous mode [ 105.098616][ T4349] device hsr_slave_1 left promiscuous mode [ 105.116423][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.155732][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.194036][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.195026][ T4610] loop2: detected capacity change from 0 to 128 [ 105.224415][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.224634][ T4611] hfsplus: bad catalog entry type [ 105.260840][ T4349] device bridge_slave_1 left promiscuous mode [ 105.267321][ T4613] loop1: detected capacity change from 0 to 128 [ 105.289397][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.347017][ T4349] device bridge_slave_0 left promiscuous mode [ 105.368704][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.566861][ T4349] device veth1_macvtap left promiscuous mode [ 105.584367][ T4349] device veth0_macvtap left promiscuous mode [ 105.607073][ T4349] device veth1_vlan left promiscuous mode [ 105.618189][ T4349] device veth0_vlan left promiscuous mode [ 105.636856][ T4619] process 'syz.1.43' launched './file0' with NULL argv: empty string added [ 105.881552][ T4629] loop3: detected capacity change from 0 to 512 [ 105.906613][ T4631] loop1: detected capacity change from 0 to 128 [ 105.915590][ T4629] EXT4-fs: Ignoring removed i_version option [ 105.930561][ T4629] EXT4-fs: Ignoring removed bh option [ 106.010531][ T4629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.043881][ T4629] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.339775][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 106.909465][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 107.306801][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 107.448075][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 107.604777][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.777369][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.517990][ T4689] loop8: detected capacity change from 0 to 7 [ 108.535127][ T4268] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 108.562318][ T4268] loop8: partition table partially beyond EOD, truncated [ 108.583150][ T4693] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.608671][ T4268] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 108.625476][ T4268] loop8: p2 start 956478 is beyond EOD, truncated [ 108.661527][ T4689] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 108.672376][ T4689] loop8: partition table partially beyond EOD, truncated [ 108.698192][ T4689] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 108.709948][ T4689] loop8: p2 start 956478 is beyond EOD, truncated [ 108.789062][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 108.855915][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 108.988412][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 110.195853][ T4466] hfsplus: b-tree write err: -5, ino 4 [ 110.422678][ T4349] bond0 (unregistering): Released all slaves [ 110.647830][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.670765][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.690803][ T4560] device bridge_slave_0 entered promiscuous mode [ 110.704528][ T4560] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.714072][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.742601][ T4702] loop3: detected capacity change from 0 to 32768 [ 110.751813][ T4560] device bridge_slave_1 entered promiscuous mode [ 110.753183][ T4702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.73 (4702) [ 110.783067][ T4702] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.793730][ T4702] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 110.802561][ T4702] BTRFS info (device loop3): using free space tree [ 111.012151][ T4560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.036434][ T4560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.298731][ T4702] BTRFS info (device loop3): enabling ssd optimizations [ 111.346691][ T4560] team0: Port device team_slave_0 added [ 111.585194][ T4560] team0: Port device team_slave_1 added [ 112.651707][ T26] audit: type=1800 audit(1765581160.557:5): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 112.901754][ T4560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.927187][ T4560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.014828][ T4560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.065675][ T4560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.537243][ T4560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.572149][ T4730] loop2: detected capacity change from 0 to 7 [ 113.607154][ T4276] Dev loop2: unable to read RDB block 7 [ 113.622460][ T4276] loop2: unable to read partition table [ 113.664239][ T4276] loop2: partition table beyond EOD, truncated [ 113.697565][ T4560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.792382][ T4730] Dev loop2: unable to read RDB block 7 [ 113.809691][ T4730] loop2: unable to read partition table [ 113.868956][ T4730] loop2: partition table beyond EOD, truncated [ 113.875236][ T4730] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 114.180676][ T4560] device hsr_slave_0 entered promiscuous mode [ 114.194159][ T4282] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.274361][ T4560] device hsr_slave_1 entered promiscuous mode [ 114.351350][ T4560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.391415][ T4560] Cannot create hsr debugfs directory [ 116.316386][ T4803] loop2: detected capacity change from 0 to 128 [ 116.431569][ T4803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.467155][ T4803] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.500759][ T4809] FAULT_INJECTION: forcing a failure. [ 117.500759][ T4809] name failslab, interval 1, probability 0, space 0, times 1 [ 117.514004][ T4809] CPU: 0 PID: 4809 Comm: syz.3.82 Not tainted syzkaller #0 [ 117.521236][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.531389][ T4809] Call Trace: [ 117.534684][ T4809] [ 117.537627][ T4809] dump_stack_lvl+0x168/0x22e [ 117.542338][ T4809] ? asm_sysvec_call_function_single+0x16/0x20 [ 117.548519][ T4809] ? show_regs_print_info+0x12/0x12 [ 117.553735][ T4809] ? asm_sysvec_call_function_single+0x16/0x20 [ 117.559923][ T4809] should_fail_ex+0x399/0x4d0 [ 117.564630][ T4809] should_failslab+0x5/0x20 [ 117.569150][ T4809] slab_pre_alloc_hook+0x59/0x310 [ 117.574188][ T4809] kmem_cache_alloc+0x56/0x2f0 [ 117.578959][ T4809] ? inet_frag_find+0x945/0x2070 [ 117.583907][ T4809] inet_frag_find+0x945/0x2070 [ 117.588693][ T4809] ? ip6frag_obj_hashfn+0x20/0x20 [ 117.593734][ T4809] ? inet_frag_find+0x127/0x2070 [ 117.598683][ T4809] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 117.603969][ T4809] ? asm_sysvec_call_function_single+0x16/0x20 [ 117.610159][ T4809] nf_ct_frag6_gather+0x76f/0x1e60 [ 117.615320][ T4809] ? ipv6_defrag+0x3a0/0x3a0 [ 117.619936][ T4809] ? ip6_cork_release+0x14e/0x170 [ 117.624967][ T4809] ipv6_defrag+0x2a5/0x3a0 [ 117.629395][ T4809] ? defrag6_net_exit+0xb0/0xb0 [ 117.634298][ T4809] nf_hook_slow+0xb9/0x200 [ 117.638823][ T4809] __ip6_local_out+0x76e/0x880 [ 117.643662][ T4809] ? __ip6_local_out+0x60c/0x880 [ 117.648618][ T4809] ? ip6_dst_hoplimit+0x340/0x340 [ 117.653659][ T4809] ? __ip6_local_out+0x880/0x880 [ 117.658607][ T4809] ? read_lock_is_recursive+0x10/0x10 [ 117.664001][ T4809] ip6_local_out+0x26/0x120 [ 117.668511][ T4809] ? ip6_send_skb+0x10b/0x380 [ 117.673198][ T4809] ip6_send_skb+0x1d1/0x380 [ 117.677722][ T4809] rawv6_push_pending_frames+0x6dd/0x8c0 [ 117.683367][ T4809] ? ip6_append_data+0x1ea/0x3e0 [ 117.688322][ T4809] ? raw6_getfrag+0x300/0x300 [ 117.693028][ T4809] ? rawv6_send_hdrinc+0x1750/0x1750 [ 117.698350][ T4809] rawv6_sendmsg+0x1266/0x1730 [ 117.703125][ T4809] ? compat_rawv6_ioctl+0x60/0x60 [ 117.708160][ T4809] ? aa_sk_perm+0x7e5/0x920 [ 117.712674][ T4809] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 117.719102][ T4809] ? aa_file_perm+0x3ef/0xec0 [ 117.723786][ T4809] ? inet_sendmsg+0x78/0x2f0 [ 117.728396][ T4809] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 117.733690][ T4809] ? security_socket_sendmsg+0x7c/0xa0 [ 117.739166][ T4809] sock_write_iter+0x2b5/0x3a0 [ 117.743952][ T4809] ? sock_read_iter+0x370/0x370 [ 117.748827][ T4809] ? common_file_perm+0x171/0x1c0 [ 117.753864][ T4809] ? fsnotify_perm+0x5a/0x550 [ 117.758574][ T4809] do_iter_write+0x62d/0xaf0 [ 117.763189][ T4809] ? vfs_iter_write+0xa0/0xa0 [ 117.767874][ T4809] ? __import_iovec+0x315/0x500 [ 117.772746][ T4809] ? import_iovec+0x6f/0xa0 [ 117.777264][ T4809] do_writev+0x24e/0x410 [ 117.781529][ T4809] ? do_readv+0x3e0/0x3e0 [ 117.785878][ T4809] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 117.791868][ T4809] ? lock_chain_count+0x20/0x20 [ 117.796728][ T4809] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 117.802721][ T4809] ? lockdep_hardirqs_on+0x94/0x140 [ 117.807927][ T4809] do_syscall_64+0x4c/0xa0 [ 117.812355][ T4809] ? clear_bhb_loop+0x60/0xb0 [ 117.817047][ T4809] ? clear_bhb_loop+0x60/0xb0 [ 117.821782][ T4809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.827685][ T4809] RIP: 0033:0x7f4f1f58f749 [ 117.832121][ T4809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.851828][ T4809] RSP: 002b:00007f4f1d7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 117.860427][ T4809] RAX: ffffffffffffffda RBX: 00007f4f1f7e6090 RCX: 00007f4f1f58f749 [ 117.868408][ T4809] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 117.876388][ T4809] RBP: 00007f4f1d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.884366][ T4809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.892341][ T4809] R13: 00007f4f1f7e6128 R14: 00007f4f1f7e6090 R15: 00007ffc466567e8 [ 117.900332][ T4809] [ 118.931098][ T4560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.956375][ T4803] syz.2.83 (pid 4803) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 118.980704][ T4560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.022655][ T4560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.077574][ T4560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.446147][ T4560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.492869][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.518863][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.571717][ T4560] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.602095][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.624041][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.665685][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.673143][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.742606][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.773851][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.796153][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.839028][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.846298][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.898697][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.922345][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.955802][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.991012][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.072119][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.107817][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.169394][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.208849][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.229784][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.268178][ T4560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.304517][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.321153][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.335827][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.555105][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 120.793360][ T4840] loop3: detected capacity change from 0 to 512 [ 121.010695][ T4840] EXT4-fs (loop3): 1 orphan inode deleted [ 121.028791][ T75] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 121.072285][ T75] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:4: Failed to release dquot type 1 [ 121.090122][ T4840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.142320][ T4840] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.232776][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.244352][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.308796][ T4560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.575642][ T4870] loop2: detected capacity change from 0 to 128 [ 122.579678][ T4871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 123.195358][ T4878] FAULT_INJECTION: forcing a failure. [ 123.195358][ T4878] name failslab, interval 1, probability 0, space 0, times 0 [ 123.260254][ T4878] CPU: 1 PID: 4878 Comm: syz.1.96 Not tainted syzkaller #0 [ 123.267543][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.277664][ T4878] Call Trace: [ 123.280985][ T4878] [ 123.283964][ T4878] dump_stack_lvl+0x168/0x22e [ 123.288731][ T4878] ? show_regs_print_info+0x12/0x12 [ 123.293992][ T4878] ? load_image+0x3b0/0x3b0 [ 123.298564][ T4878] ? __might_sleep+0xd0/0xd0 [ 123.303215][ T4878] ? __lock_acquire+0x7c50/0x7c50 [ 123.308287][ T4878] ? __alloc_pages+0x287/0x4e0 [ 123.313114][ T4878] should_fail_ex+0x399/0x4d0 [ 123.317860][ T4878] should_failslab+0x5/0x20 [ 123.322415][ T4878] slab_pre_alloc_hook+0x59/0x310 [ 123.327469][ T4878] kmem_cache_alloc+0x56/0x2f0 [ 123.332247][ T4878] ? ptlock_alloc+0x1c/0x60 [ 123.336777][ T4878] ptlock_alloc+0x1c/0x60 [ 123.341125][ T4878] pte_alloc_one+0xc5/0x2f0 [ 123.345648][ T4878] ? pfn_modify_allowed+0x560/0x560 [ 123.350866][ T4878] ? count_memcg_event_mm+0x358/0x3b0 [ 123.356267][ T4878] ? __lock_acquire+0x7c50/0x7c50 [ 123.361486][ T4878] ? count_memcg_event_mm+0x8f/0x3b0 [ 123.366793][ T4878] ? put_page+0x270/0x270 [ 123.371154][ T4878] __pte_alloc+0x21/0x150 [ 123.375505][ T4878] handle_mm_fault+0x35c0/0x3e60 [ 123.380464][ T4878] ? mt_find+0x145/0x810 [ 123.384764][ T4878] ? numa_migrate_prep+0x250/0x250 [ 123.389906][ T4878] ? lock_chain_count+0x20/0x20 [ 123.394880][ T4878] ? lock_mm_and_find_vma+0xae/0x2f0 [ 123.400226][ T4878] do_user_addr_fault+0x51f/0xb10 [ 123.405285][ T4878] exc_page_fault+0x60/0x100 [ 123.409894][ T4878] asm_exc_page_fault+0x22/0x30 [ 123.414772][ T4878] RIP: 0033:0x7f4720a509e6 [ 123.419215][ T4878] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 123.438853][ T4878] RSP: 002b:00007f4721ab84a0 EFLAGS: 00010206 [ 123.444940][ T4878] RAX: 0000000000009001 RBX: 00007f4721ab8540 RCX: 00000000000000c0 [ 123.452921][ T4878] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f4721ab85e0 [ 123.460902][ T4878] RBP: 0000000000000102 R08: 00007f47169f7000 R09: 0000000000009000 [ 123.468888][ T4878] R10: 0000000000000000 R11: 00007f4721ab8550 R12: 0000000000000001 [ 123.476958][ T4878] R13: 00007f4720c2fc40 R14: 0000000000000000 R15: 00007f4721ab85e0 [ 123.484955][ T4878] [ 123.518692][ T4878] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 123.536573][ T4878] loop1: detected capacity change from 0 to 128 [ 124.485799][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 124.894222][ T4898] loop3: detected capacity change from 0 to 128 [ 125.276446][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.288102][ T4773] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.308076][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.372378][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.391616][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.412324][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.440979][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.476633][ T4560] device veth0_vlan entered promiscuous mode [ 125.488771][ T4773] usb 3-1: Using ep0 maxpacket: 16 [ 125.495757][ T4773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.541382][ T4560] device veth1_vlan entered promiscuous mode [ 125.547599][ T4773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.598992][ T4773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.635593][ T4773] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 125.657009][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.686148][ T4773] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 125.716761][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.734387][ T4773] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.739639][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.748531][ T4773] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.770344][ T4773] usb 3-1: Manufacturer: syz [ 125.805640][ T4773] usb 3-1: config 0 descriptor?? [ 125.813424][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.836262][ T4560] device veth0_macvtap entered promiscuous mode [ 126.070105][ T4560] device veth1_macvtap entered promiscuous mode [ 126.337726][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.452183][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.719417][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.779108][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.871829][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.908547][ T4773] rc_core: IR keymap rc-hauppauge not found [ 126.914833][ T4773] Registered IR keymap rc-empty [ 126.920435][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.942040][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 126.968376][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.988391][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.008456][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.018523][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.042227][ T4773] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 127.059017][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.092852][ T4773] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 127.145819][ T4560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.175311][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.211779][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.228553][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.248334][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.261648][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.271820][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.288356][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.318449][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.325807][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.348432][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.358636][ T4560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.378409][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.396142][ T4560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.438372][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.446691][ T4560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.503004][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.511424][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.529726][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.548908][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.566590][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.584382][ T4941] loop9: detected capacity change from 0 to 7 [ 127.585582][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.599697][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.603408][ T4276] Dev loop9: unable to read RDB block 7 [ 127.641704][ T4560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.650738][ T4773] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.660364][ T4276] loop9: unable to read partition table [ 127.667437][ T4560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.677999][ T4276] loop9: partition table beyond EOD, truncated [ 127.688166][ T4773] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 127.700708][ T4560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.710825][ T4773] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 127.719512][ T4560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.750746][ T4773] usb 3-1: USB disconnect, device number 3 [ 127.787953][ T4941] Dev loop9: unable to read RDB block 7 [ 127.812649][ T4941] loop9: unable to read partition table [ 127.836374][ T4941] loop9: partition table beyond EOD, truncated [ 127.878991][ T4941] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 128.024360][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.054570][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.128305][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.164475][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.229697][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.267600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.312052][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 128.458712][ T4953] loop1: detected capacity change from 0 to 1024 [ 128.477343][ T4953] EXT4-fs: Ignoring removed nobh option [ 128.506810][ T4953] EXT4-fs: Ignoring removed bh option [ 128.549287][ T4953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.569768][ T4960] netlink: 76 bytes leftover after parsing attributes in process `syz.5.26'. [ 128.624941][ T4964] netlink: 76 bytes leftover after parsing attributes in process `syz.2.114'. [ 128.656730][ T4953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.869859][ T4446] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.920422][ T4976] loop3: detected capacity change from 0 to 128 [ 129.085365][ T4446] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 129.106729][ T4446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.115871][ T4446] usb 1-1: Product: syz [ 129.124824][ T4446] usb 1-1: Manufacturer: syz [ 129.131370][ T4446] usb 1-1: SerialNumber: syz [ 129.155652][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 129.181419][ T4446] usb 1-1: config 0 descriptor?? [ 129.491601][ T4446] usb 1-1: USB disconnect, device number 3 [ 129.636447][ T26] audit: type=1326 audit(1765581178.427:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 129.792461][ T26] audit: type=1326 audit(1765581178.477:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 130.672281][ T26] audit: type=1326 audit(1765581178.477:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 130.695720][ T26] audit: type=1326 audit(1765581178.507:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 130.750553][ T26] audit: type=1326 audit(1765581178.507:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 130.774720][ T26] audit: type=1326 audit(1765581178.547:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 130.875727][ T26] audit: type=1326 audit(1765581178.547:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 131.065357][ T5002] overlayfs: unrecognized mount option "verity=require:subj_role=" or missing value [ 131.109148][ T26] audit: type=1326 audit(1765581178.547:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb6f538f749 code=0x7ffc0000 [ 131.170395][ T5015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 131.175429][ T5009] overlayfs: conflicting lowerdir path [ 131.263508][ T26] audit: type=1326 audit(1765581178.597:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.1.116" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4720b8f749 code=0x0 [ 131.868118][ T5019] loop3: detected capacity change from 0 to 2048 [ 131.982553][ T5019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.169834][ T26] audit: type=1800 audit(1765581180.967:15): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.122" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 132.190406][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.751413][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.758458][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.951141][ T5040] loop3: detected capacity change from 0 to 128 [ 136.440011][ T5040] FAT-fs (loop3): Unrecognized mount option "00000000000000000000000" or missing value [ 137.437184][ T5052] loop9: detected capacity change from 0 to 7 [ 137.460016][ T5052] Dev loop9: unable to read RDB block 7 [ 137.465774][ T5052] loop9: unable to read partition table [ 137.478465][ T5052] loop9: partition table beyond EOD, truncated [ 137.498417][ T5052] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 137.697011][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 138.026403][ T5070] overlayfs: missing 'lowerdir' [ 138.175382][ T5074] netlink: 76 bytes leftover after parsing attributes in process `syz.3.135'. [ 139.958267][ T5100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.139'. [ 140.019129][ T5098] Bluetooth: MGMT ver 1.22 [ 140.030179][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 140.048006][ T5098] binder: 5097:5098 ioctl 40104593 200000000440 returned -22 [ 140.139126][ T5103] loop1: detected capacity change from 0 to 128 [ 140.838410][ T4275] Bluetooth: hci1: command 0x0401 tx timeout [ 143.441854][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 144.177131][ T5153] loop5: detected capacity change from 0 to 16 [ 145.062801][ T5151] loop2: detected capacity change from 0 to 7 [ 145.084579][ T5151] Dev loop2: unable to read RDB block 7 [ 145.098449][ T5151] loop2: unable to read partition table [ 145.104338][ T5151] loop2: partition table beyond EOD, truncated [ 145.138406][ T5151] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 145.282165][ T4527] kernel write not supported for file [eventfd] (pid: 4527 comm: kworker/0:11) [ 146.939003][ T5192] FAULT_INJECTION: forcing a failure. [ 146.939003][ T5192] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.952812][ T5192] CPU: 0 PID: 5192 Comm: syz.0.163 Not tainted syzkaller #0 [ 146.960189][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.970259][ T5192] Call Trace: [ 146.973551][ T5192] [ 146.976510][ T5192] dump_stack_lvl+0x168/0x22e [ 146.981220][ T5192] ? show_regs_print_info+0x12/0x12 [ 146.986441][ T5192] ? load_image+0x3b0/0x3b0 [ 146.990968][ T5192] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 146.996974][ T5192] ? lock_chain_count+0x20/0x20 [ 147.001847][ T5192] ? _raw_spin_lock_irq+0xab/0xe0 [ 147.006886][ T5192] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 147.012272][ T5192] ? folio_batch_add_and_move+0x14a/0x250 [ 147.018015][ T5192] should_fail_ex+0x399/0x4d0 [ 147.022719][ T5192] copy_page_from_iter_atomic+0x218/0x1240 [ 147.028562][ T5192] ? pipe_zero+0x140/0x140 [ 147.033007][ T5192] ? PageHeadHuge+0x8f/0x1c0 [ 147.037622][ T5192] ? shmem_write_begin+0x1b4/0x3f0 [ 147.042762][ T5192] generic_perform_write+0x34c/0x5a0 [ 147.048085][ T5192] ? generic_file_direct_write+0x330/0x330 [ 147.053911][ T5192] ? __file_remove_privs+0x5b0/0x5b0 [ 147.059218][ T5192] ? rwsem_write_trylock+0x12f/0x1b0 [ 147.064524][ T5192] ? clear_nonspinnable+0x60/0x60 [ 147.069570][ T5192] ? generic_write_checks_count+0x3d9/0x4c0 [ 147.075494][ T5192] __generic_file_write_iter+0x148/0x2a0 [ 147.081151][ T5192] generic_file_write_iter+0xab/0x2e0 [ 147.086544][ T5192] vfs_write+0x44c/0x960 [ 147.090813][ T5192] ? file_end_write+0x250/0x250 [ 147.095686][ T5192] ? __fget_files+0x44a/0x4d0 [ 147.100387][ T5192] ? __fdget_pos+0x1d4/0x360 [ 147.105009][ T5192] ? ksys_write+0x71/0x240 [ 147.109447][ T5192] ksys_write+0x143/0x240 [ 147.113801][ T5192] ? __ia32_sys_read+0x80/0x80 [ 147.118593][ T5192] ? lockdep_hardirqs_on+0x94/0x140 [ 147.123897][ T5192] do_syscall_64+0x4c/0xa0 [ 147.128334][ T5192] ? clear_bhb_loop+0x60/0xb0 [ 147.133027][ T5192] ? clear_bhb_loop+0x60/0xb0 [ 147.137809][ T5192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.143717][ T5192] RIP: 0033:0x7fb6f538e1ff [ 147.148146][ T5192] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 147.167769][ T5192] RSP: 002b:00007fb6f61f4df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 147.176205][ T5192] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007fb6f538e1ff [ 147.184305][ T5192] RDX: 0000000000010000 RSI: 00007fb6eb1f7000 RDI: 0000000000000005 [ 147.192287][ T5192] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002ab [ 147.200294][ T5192] R10: 0000200000000d02 R11: 0000000000000293 R12: 0000000000000005 [ 147.208283][ T5192] R13: 00007fb6f61f4ef0 R14: 00007fb6f61f4eb0 R15: 00007fb6eb1f7000 [ 147.216294][ T5192] [ 147.219334][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.416049][ T5209] loop8: detected capacity change from 0 to 7 [ 148.444555][ T5208] loop1: detected capacity change from 0 to 512 [ 148.447963][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 148.463149][ T5209] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 148.502621][ T5209] loop8: partition table partially beyond EOD, truncated [ 148.544008][ T5209] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 148.590307][ T5208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.618988][ T5209] loop8: p2 start 956478 is beyond EOD, truncated [ 148.635461][ T5208] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 148.702993][ T5208] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 148.753509][ T5208] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 148.776347][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 148.821665][ T5208] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 148.898466][ T4527] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.910001][ T5208] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.967096][ T5208] [ 148.969501][ T5208] ====================================================== [ 148.976544][ T5208] WARNING: possible circular locking dependency detected [ 148.983592][ T5208] syzkaller #0 Not tainted [ 148.988021][ T5208] ------------------------------------------------------ [ 148.995067][ T5208] syz.1.167/5208 is trying to acquire lock: [ 149.000981][ T5208] ffff8880544734b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x316/0x1b60 [ 149.010537][ T5208] [ 149.010537][ T5208] but task is already holding lock: [ 149.017921][ T5208] ffff88802edce208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 149.027372][ T5208] [ 149.027372][ T5208] which lock already depends on the new lock. [ 149.027372][ T5208] [ 149.037802][ T5208] [ 149.037802][ T5208] the existing dependency chain (in reverse order) is: [ 149.046861][ T5208] [ 149.046861][ T5208] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 149.052571][ T5221] loop2: detected capacity change from 0 to 64 [ 149.054976][ T5208] down_read+0x42/0x2d0 [ 149.055012][ T5208] v2_read_dquot+0x4a/0x110 [ 149.055033][ T5208] dquot_acquire+0x152/0x520 [ 149.055051][ T5208] ext4_acquire_dquot+0x2d9/0x4a0 [ 149.081953][ T5208] dqget+0x778/0xeb0 [ 149.086422][ T5208] __dquot_initialize+0x328/0xcb0 [ 149.091993][ T5208] ext4_process_orphan+0x54/0x300 [ 149.097586][ T5208] ext4_orphan_cleanup+0xbd3/0x1400 [ 149.103346][ T5208] ext4_fill_super+0x7bdf/0x8150 [ 149.108822][ T5208] get_tree_bdev+0x3f1/0x610 [ 149.113959][ T5208] vfs_get_tree+0x88/0x270 [ 149.118925][ T5208] do_new_mount+0x24a/0xa40 [ 149.123962][ T5208] __se_sys_mount+0x2d6/0x3c0 [ 149.129177][ T5208] do_syscall_64+0x4c/0xa0 [ 149.134138][ T5208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.140577][ T5208] [ 149.140577][ T5208] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 149.148243][ T5208] __mutex_lock+0x120/0xaf0 [ 149.153287][ T5208] dquot_commit+0x5a/0x410 [ 149.158266][ T5208] ext4_write_dquot+0x1f0/0x360 [ 149.163646][ T5208] mark_all_dquot_dirty+0x1e3/0x400 [ 149.169378][ T5208] __dquot_free_space+0x7ec/0xbc0 [ 149.174942][ T5208] ext4_free_blocks+0x1bab/0x2640 [ 149.180503][ T5208] ext4_ext_remove_space+0x1f0d/0x4490 [ 149.186497][ T5208] ext4_ext_truncate+0x211/0x370 [ 149.191962][ T5208] ext4_truncate+0xa0b/0x1230 [ 149.197184][ T5208] ext4_evict_inode+0xb35/0x1100 [ 149.202661][ T5208] evict+0x485/0x870 [ 149.207097][ T5208] ext4_orphan_cleanup+0xbd3/0x1400 [ 149.212846][ T5208] ext4_fill_super+0x7bdf/0x8150 [ 149.218404][ T5208] get_tree_bdev+0x3f1/0x610 [ 149.223526][ T5208] vfs_get_tree+0x88/0x270 [ 149.228475][ T5208] do_new_mount+0x24a/0xa40 [ 149.233511][ T5208] __se_sys_mount+0x2d6/0x3c0 [ 149.238719][ T5208] do_syscall_64+0x4c/0xa0 [ 149.243675][ T5208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.250104][ T5208] [ 149.250104][ T5208] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 149.257941][ T5208] __lock_acquire+0x2cf8/0x7c50 [ 149.263354][ T5208] lock_acquire+0x1b4/0x490 [ 149.268397][ T5208] down_read+0x42/0x2d0 [ 149.273092][ T5208] ext4_map_blocks+0x316/0x1b60 [ 149.278479][ T5208] ext4_getblk+0x1ab/0x6d0 [ 149.283454][ T5208] ext4_bread+0x26/0x170 [ 149.288238][ T5208] ext4_quota_read+0x180/0x380 [ 149.293531][ T5208] find_tree_dqentry+0x1cd/0xf30 [ 149.299004][ T5208] find_tree_dqentry+0x6b0/0xf30 [ 149.304478][ T5208] find_tree_dqentry+0x6b0/0xf30 [ 149.309951][ T5208] find_tree_dqentry+0x6b0/0xf30 [ 149.315420][ T5208] qtree_read_dquot+0x558/0x7f0 [ 149.320802][ T5208] v2_read_dquot+0xc0/0x110 [ 149.325933][ T5208] dquot_acquire+0x152/0x520 [ 149.331052][ T5208] ext4_acquire_dquot+0x2d9/0x4a0 [ 149.336607][ T5208] dqget+0x778/0xeb0 [ 149.341042][ T5208] __dquot_initialize+0x328/0xcb0 [ 149.346599][ T5208] ext4_process_orphan+0x54/0x300 [ 149.352159][ T5208] ext4_orphan_cleanup+0xbd3/0x1400 [ 149.357946][ T5208] ext4_fill_super+0x7bdf/0x8150 [ 149.363410][ T5208] get_tree_bdev+0x3f1/0x610 [ 149.368527][ T5208] vfs_get_tree+0x88/0x270 [ 149.373565][ T5208] do_new_mount+0x24a/0xa40 [ 149.378790][ T5208] __se_sys_mount+0x2d6/0x3c0 [ 149.384003][ T5208] do_syscall_64+0x4c/0xa0 [ 149.389016][ T5208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.395532][ T5208] [ 149.395532][ T5208] other info that might help us debug this: [ 149.395532][ T5208] [ 149.405779][ T5208] Chain exists of: [ 149.405779][ T5208] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 149.405779][ T5208] [ 149.419450][ T5208] Possible unsafe locking scenario: [ 149.419450][ T5208] [ 149.426902][ T5208] CPU0 CPU1 [ 149.432268][ T5208] ---- ---- [ 149.437636][ T5208] lock(&s->s_dquot.dqio_sem); [ 149.442499][ T5208] lock(&dquot->dq_lock); [ 149.449442][ T5208] lock(&s->s_dquot.dqio_sem); [ 149.456831][ T5208] lock(&ei->i_data_sem/2); [ 149.461440][ T5208] [ 149.461440][ T5208] *** DEADLOCK *** [ 149.461440][ T5208] [ 149.469850][ T5208] 3 locks held by syz.1.167/5208: [ 149.474921][ T5208] #0: ffff88802edce0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 149.485059][ T5208] #1: ffff88807193c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 149.494484][ T5208] #2: ffff88802edce208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 149.504597][ T5208] [ 149.504597][ T5208] stack backtrace: [ 149.510496][ T5208] CPU: 1 PID: 5208 Comm: syz.1.167 Not tainted syzkaller #0 [ 149.517821][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.527924][ T5208] Call Trace: [ 149.531223][ T5208] [ 149.534166][ T5208] dump_stack_lvl+0x168/0x22e [ 149.538877][ T5208] ? load_image+0x3b0/0x3b0 [ 149.543417][ T5208] ? show_regs_print_info+0x12/0x12 [ 149.548640][ T5208] ? print_circular_bug+0x12b/0x1a0 [ 149.553878][ T5208] check_noncircular+0x274/0x310 [ 149.558842][ T5208] ? add_chain_block+0x940/0x940 [ 149.563798][ T5208] ? lockdep_lock+0xdc/0x1e0 [ 149.568410][ T5208] ? mark_lock+0x94/0x320 [ 149.572759][ T5208] ? _find_first_zero_bit+0xcf/0x100 [ 149.578054][ T5208] __lock_acquire+0x2cf8/0x7c50 [ 149.582933][ T5208] ? verify_lock_unused+0x140/0x140 [ 149.588238][ T5208] ? mark_lock+0x94/0x320 [ 149.592593][ T5208] ? verify_lock_unused+0x140/0x140 [ 149.597806][ T5208] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 149.603808][ T5208] ? lock_chain_count+0x20/0x20 [ 149.608680][ T5208] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 149.614590][ T5208] lock_acquire+0x1b4/0x490 [ 149.619109][ T5208] ? ext4_map_blocks+0x316/0x1b60 [ 149.624153][ T5208] ? __might_sleep+0xd0/0xd0 [ 149.628766][ T5208] ? read_lock_is_recursive+0x10/0x10 [ 149.634156][ T5208] ? percpu_counter_add_batch+0x13b/0x160 [ 149.639896][ T5208] ? rcu_is_watching+0x11/0xa0 [ 149.644686][ T5208] down_read+0x42/0x2d0 [ 149.648862][ T5208] ? ext4_map_blocks+0x316/0x1b60 [ 149.653914][ T5208] ext4_map_blocks+0x316/0x1b60 [ 149.658779][ T5208] ? __stack_depot_save+0x435/0x460 [ 149.664086][ T5208] ? __kasan_kmalloc+0x8e/0xa0 [ 149.668867][ T5208] ? __kmalloc+0xb0/0x240 [ 149.673209][ T5208] ? find_tree_dqentry+0x56/0xf30 [ 149.678345][ T5208] ? ext4_issue_zeroout+0x250/0x250 [ 149.683575][ T5208] ? qtree_read_dquot+0x558/0x7f0 [ 149.688627][ T5208] ? ext4_process_orphan+0x54/0x300 [ 149.693850][ T5208] ? ext4_orphan_cleanup+0xbd3/0x1400 [ 149.699239][ T5208] ? ext4_fill_super+0x7bdf/0x8150 [ 149.704361][ T5208] ? get_tree_bdev+0x3f1/0x610 [ 149.709138][ T5208] ? vfs_get_tree+0x88/0x270 [ 149.713741][ T5208] ? do_new_mount+0x24a/0xa40 [ 149.718523][ T5208] ? __se_sys_mount+0x2d6/0x3c0 [ 149.723398][ T5208] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.729602][ T5208] ext4_getblk+0x1ab/0x6d0 [ 149.734067][ T5208] ? ext4_get_block_unwritten+0x100/0x100 [ 149.739827][ T5208] ext4_bread+0x26/0x170 [ 149.744111][ T5208] ext4_quota_read+0x180/0x380 [ 149.748900][ T5208] find_tree_dqentry+0x1cd/0xf30 [ 149.753853][ T5208] ? ext4_show_options+0x50/0x50 [ 149.758805][ T5208] ? ext4_quota_read+0x305/0x380 [ 149.763767][ T5208] find_tree_dqentry+0x6b0/0xf30 [ 149.768738][ T5208] find_tree_dqentry+0x6b0/0xf30 [ 149.773713][ T5208] find_tree_dqentry+0x6b0/0xf30 [ 149.778687][ T5208] qtree_read_dquot+0x558/0x7f0 [ 149.783560][ T5208] ? read_lock_is_recursive+0x10/0x10 [ 149.788962][ T5208] ? remove_tree+0x2150/0x2150 [ 149.793749][ T5208] ? trace_contention_end+0x5f/0x170 [ 149.799057][ T5208] ? preempt_count_add+0x8d/0x190 [ 149.804108][ T5208] ? down_read+0x1a8/0x2d0 [ 149.808551][ T5208] v2_read_dquot+0xc0/0x110 [ 149.813073][ T5208] dquot_acquire+0x152/0x520 [ 149.817676][ T5208] ? __ext4_journal_start_sb+0x1dd/0x3d0 [ 149.823336][ T5208] ext4_acquire_dquot+0x2d9/0x4a0 [ 149.828390][ T5208] dqget+0x778/0xeb0 [ 149.832299][ T5208] __dquot_initialize+0x328/0xcb0 [ 149.837335][ T5208] ? dquot_initialize+0x20/0x20 [ 149.842203][ T5208] ? ext4_get_projid+0x140/0x140 [ 149.847163][ T5208] ext4_process_orphan+0x54/0x300 [ 149.852213][ T5208] ext4_orphan_cleanup+0xbd3/0x1400 [ 149.857434][ T5208] ? ext4_orphan_del+0xb90/0xb90 [ 149.862390][ T5208] ? errseq_check_and_advance+0x62/0x120 [ 149.868037][ T5208] ext4_fill_super+0x7bdf/0x8150 [ 149.872988][ T5208] ? bdev_name+0x2c1/0x3f0 [ 149.877426][ T5208] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 149.883683][ T5208] ? snprintf+0xd7/0x120 [ 149.887937][ T5208] ? preempt_count_add+0x8d/0x190 [ 149.892974][ T5208] ? vscnprintf+0x80/0x80 [ 149.897312][ T5208] ? set_blocksize+0x1d0/0x470 [ 149.902091][ T5208] ? sb_set_blocksize+0xa5/0xe0 [ 149.906958][ T5208] get_tree_bdev+0x3f1/0x610 [ 149.911563][ T5208] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 149.917817][ T5208] vfs_get_tree+0x88/0x270 [ 149.922243][ T5208] do_new_mount+0x24a/0xa40 [ 149.926757][ T5208] __se_sys_mount+0x2d6/0x3c0 [ 149.931451][ T5208] ? __x64_sys_mount+0xc0/0xc0 [ 149.936233][ T5208] ? lockdep_hardirqs_on+0x94/0x140 [ 149.941458][ T5208] ? __x64_sys_mount+0x1c/0xc0 [ 149.946270][ T5208] do_syscall_64+0x4c/0xa0 [ 149.950806][ T5208] ? clear_bhb_loop+0x60/0xb0 [ 149.955500][ T5208] ? clear_bhb_loop+0x60/0xb0 [ 149.960191][ T5208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.966097][ T5208] RIP: 0033:0x7f4720b90eea [ 149.970519][ T5208] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.990230][ T5208] RSP: 002b:00007f4721ab8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.998657][ T5208] RAX: ffffffffffffffda RBX: 00007f4721ab8ef0 RCX: 00007f4720b90eea [ 150.006640][ T5208] RDX: 0000200000000040 RSI: 00002000000001c0 RDI: 00007f4721ab8eb0 [ 150.014631][ T5208] RBP: 0000200000000040 R08: 00007f4721ab8ef0 R09: 0000000000008413 [ 150.022625][ T5208] R10: 0000000000008413 R11: 0000000000000246 R12: 00002000000001c0 [ 150.030609][ T5208] R13: 00007f4721ab8eb0 R14: 000000000000056a R15: 0000200000000080 [ 150.038603][ T5208] [ 150.079707][ T4527] usb 4-1: Using ep0 maxpacket: 8 [ 150.086395][ T4527] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 150.105376][ T4527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.124128][ T4527] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.142828][ T4527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.170278][ T4527] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 150.189252][ T4527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.210923][ T4527] usb 4-1: config 0 descriptor?? [ 150.228066][ T5213] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.241714][ T5208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.167: bg 0: block 34: padding at end of block bitmap is not set [ 150.278750][ T5208] __quota_error: 1 callbacks suppressed [ 150.278765][ T5208] Quota error (device loop1): write_blk: dquota write failed [ 150.305042][ T5208] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 150.698068][ T4771] usb 4-1: USB disconnect, device number 2 [ 150.698173][ T4275] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 150.741322][ T5208] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.167: Failed to acquire dquot type 1 [ 150.795672][ T5208] EXT4-fs (loop1): 1 truncate cleaned up [ 150.823555][ T5208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.961962][ T5230] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 151.242615][ T4266] EXT4-fs (loop1): unmounting filesystem.