last executing test programs:

19.512430615s ago: executing program 0 (id=164):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r1, 0x0, 0x0, 0xee, 0x1)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000011, 0x11, r2, 0x62ee7000) (fail_nth: 1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x58, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x44)

17.034760672s ago: executing program 0 (id=169):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8983, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'xfrm0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000240)="29a73daa0bdcb542f1", 0x9, 0x4004, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0xe0}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0xffffffffffffff81, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010425bbe52cf523000072d51ff35a00000000", @ANYRES16=r2, @ANYRES16=r4, @ANYRES16=r5], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket(0xa, 0x3, 0x87)
ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x890b, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={<r7=>0x0, 0x400, 0x1000}, &(0x7f00000000c0)=0x8)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000400)={r7, 0x1, 0x3, 0x4, 0x3, 0x3}, &(0x7f00000001c0)=0x14)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.434634493s ago: executing program 0 (id=178):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='sysv\x00', 0x30408b0, &(0x7f00000003c0)='/dev/net/tun\x00')
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4)

10.227042453s ago: executing program 0 (id=182):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x158, 0xa0, 0x328, 0xa0, 0x328, 0x404, 0x404, 0x404, 0x404, 0x404, 0x6, &(0x7f0000000580), {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x3d}, 0xff, 0xffffff00, 'geneve1\x00', 'sit0\x00', {}, {0xff}, 0x6c, 0x1, 0x43}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x8, 0x2}}}, {{@ip={@multicast2, @broadcast, 0xff000000, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x1d, 0x2, 0xa}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9d}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_hsr\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x0, 0x32}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x61, @rand_addr=0x64010100, 0x4e21}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'hsr0\x00', {0xff}, {}, 0x2f, 0x1, 0x2}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x3f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x9, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=ANY=[@ANYBLOB="28000000fddbdf25ac141425000000000000000000000000000004d20200ff0c"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x7)
dup2(r5, r3)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

10.162315885s ago: executing program 2 (id=183):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
syz_emit_ethernet(0x6da, &(0x7f0000002ac0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "e739c2", 0x6a4, 0x2f, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[@hopopts={0x2e, 0xc, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x1}, @generic={0x4, 0x15, "dc51011d246054102f4c23ccd63f5974574279c940"}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x3, 0x31, "a581cedf1b07e147816ff5570c42193805ab7e640f32f9b76f27ef172d80028f15e59f8fcf7f571f6d9b784f9540b1196a"}]}, @srh={0x11, 0xa, 0x4, 0x5, 0xb, 0x50, 0x7, [@loopback, @private0, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x87, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x3c, 0xa, 0x4, 0x5, 0x9, 0x40, 0x10, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}, @dstopts={0x2e, 0x49, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0x3, [0x7, 0x3]}}, @generic={0x8, 0xce, "72380df65c0c04eaac960a4a037e26fca3e4a1de8934715e07347c9abbf695edeaabb4be3e3d9fc6275a39995b53a1c87c67f43823a0b28839eeb1fc6ce3e48d9ec7f8baccc18d28c37ed1bbc0324dabb2454959166f4ef8021946b3f57aad7c0bfe1a5ec4d388412bc6553b44755cb420a048f5bd4980f7bbcad2d6d2ab858f5f472e312fea5efc356eaed2e88dd4e3058f8820a418d29ee65ca4b167eabcebf9b196b6cf56881e77e500a6a8cbb3928abfabcd92602d1f65054843462a907e16cb01840d11291d7d18f76f4cff"}, @generic={0x9, 0xf9, "25ba17d3244e64c4f327cc2094e627279345e4f9c6b8494e7de01999b6df4514e45a81dc18066c3d5d9788fd8d3035ffba08bf515b863f8e6be5a6fbd8590f69afc76ffee8eafc899e9cf7684c39ddb45a8ffb12473c41ca3f25f8d5246d4da6a4042a4449e2ca6fcddb28bb4fdcae250d0c59dca89c9499182b0924577d23b697f4ca67751a3e14b6547879490330aa49ba50cd210be6513fd929eb20db6c5fe1f7e9963cf6a25e114c9b0d95f88a6f878a751690c7888e33f11a6daa7a1c62d46b2cdb50758f1969fdc93b12d2a159a9c35002f68e9e69d711ac0226329845e43c27ad466557c516672be120ff5ce6fda2d2d23f28bb3e79"}, @jumbo={0xc2, 0x4, 0xb}, @generic={0x3, 0x3e, "691d3bd192391b2067c9eb1a2e582ce32b291798c8c6954718bbd9bc4bfef1670ab2811d0cc9c050018f062a46ba8305732e2f72293576fbc10fb305820d"}, @pad1]}, @srh={0x2, 0x10, 0x4, 0x8, 0x5, 0x50, 0x8, [@loopback, @private2, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @empty, @empty]}, @fragment={0x5e, 0x0, 0x2, 0x0, 0x0, 0x1, 0x67}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb3, 0x0, [0x6], "892a6517d8a85e39c76113e2769b42b789f62a80894a6d49bc59321c4496f9dde7f417ba09c18b870602df02e842ed85beae29ec68259a4520d1299517dfb0f32a387aec6c005b254c967ce6e75f8a1bded2b964a4c5eb20ed16df8ef912b61632cbf76ee7752ffbc3f2403f3d8689e5d863b6bca5e4a6e1bb19bed81dc4b4864431dc0bee632da52f58df77565cb5e551d17fd04091a33eadf07066817f644be1143ec145b42e356d5495d24a0e45937b5a45"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x36], "0531adeedc47adeb2f024d7e918310481575f3bc1557c70eca3cae136177a63e193235b764b72c67b0e148acc810bf5df7c09a59967dc6cf246a0d777ef642d24fc9d6aaaf2e7cb3af4b3a191c5bb523b9e2ff6cd126496cc8fd1b2a2efb5e521c68b3b1c686cc40ccfaf21fdc4bf99344e5bdfdcba8c711753545abcf751eac385e483e9cccaed299f0b59c0b165cd8933335bd183539b9d660721ad664e4a85ba10f3caa219f1b32d98e7c"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "9ce194e2c1daece1e0a754f440d37a979818f0e8c1ddbba393d54f002b7d4dc866a6c2a080ebed6875f282daa909ef38474cc17141ef"}, {0x8, 0x88be, 0x1, {{0xe, 0x1, 0x6, 0x3, 0x1, 0x1, 0x1, 0xae}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x9, 0x3, 0x0, 0x2, 0x4, 0x7}, 0x2, {0x9, 0x800, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "7b1c5e2efadb7c318fe689f6331fbf7454b39a4d85d97f38fdfe078e45694f2439a616ab585aedc3b001e1fc6443ada1018ebd53d2a3fe87104994973d432b420fc1f29e58cda15ee10e6cea2026c2566e0a2afaa08adf0c18224161412f9fe32f94d6cf2167d781668fb3a5f0686db57c85519a93a2039a40eaf1c11e38eafb3a8d01afc778b5dd14185e6918bc3a6c1808add660ba517161159c18c01563e8ca4f8634ec3d4516e5bef433fb36f5"}}}}}}}, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16], 0x1, 0xc4d, &(0x7f0000000f40)="$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")
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
sendfile(r5, r5, 0x0, 0x800000009)
sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000001508000140000000010900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000050)
io_setup(0x8, &(0x7f0000004200))
r6 = fcntl$getown(r2, 0x9)
syz_open_procfs(r6, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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")

9.446338479s ago: executing program 4 (id=184):
r0 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file2\x00', 0x2000000, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x5, 0x2e5, &(0x7f0000000240)="$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") (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) (async)
r5 = syz_open_procfs(r3, &(0x7f0000000180)='net/netfilter\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = syz_pidfd_open(r3, 0x0)
setns(r6, 0x24020000) (async)
umount2(&(0x7f0000000040)='.\x00', 0x2)
dup(r1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000ac0)={0x752, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

9.092998055s ago: executing program 4 (id=185):
r0 = socket$inet_dccp(0x2, 0x6, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000300)="0f4453000f0566b8010000000f01d90fc79c3f0026dbd3baf80c66b88cb2918466efbafc0c66b80000000066efbaf80c66b882fabc8066efbafc0cb000ee66b9800000c00f326635010000000f30d9fc83bd000015", 0x55}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) (async)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x4271a, 0x3, 0x0, 0x5]}, &(0x7f0000000080)=0x78)

9.017990437s ago: executing program 1 (id=186):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x24000, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x5, 0x483, &(0x7f0000000a40)="$eJzs201vG0Ucx/HfbGJ34xZwn9yCKmEJiaIiSuy0pE8ghZa0SH2gbYJAKEEhcYLVxInitGoqaCtx6BEoEgiJAxx6QagKElzgwAFuvAMu3HrggjlxAqHdzHrXjtuk+CFx8v1IiSe7/92dnZmdnc2OBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApJdf6evOmNXOBQAAaKWzFy90Z7n/AwCwoQzw/A8AALCRGDn6REY/floyZ/y/F7mn84XLVwdP9NferMv4W3b48d6Pm8n2HDj4Qu+h4PPB2zfa4zp3caAvfXx6amY2VyzmxtKDhfzo9FhuxXuod/tq+/wCSE9dujw2Pl5MZ/f3VKy+mry3aXMqebQ3dezpIHbwRH//xUhMZ+x/H32J+43w43J0S0alj++as5Ic1V8Wy7SdZuvyT2KffxKDJ/r9E5nMjxTmvJUmKAinskziQRm1oC7qskPy8mXijXlmi8lRUUY7UyVzTlJHUA7P+v8YXn4HTkOy8dC8fA5JSqsN6mwN2yRHB2V0+3BSr3llFtR/p/T+amcOTdcpR3dltPelkjnv9wfe9eR1m6dfT79aGJ+OxBpjr6h2vz+00hrvm1w5Outf8SVzYbUzg5bzBktDMjowcMUfV8gflz52tPfkqYHoCGPXMvvxYvfb9EruybHI0MGs0hgCAAAAAAAAWO9c42hYRp9/6/p/p+07IGwQxtHzMvrrVMl/NR6dl9ARmd9R1u7vfpqb/y73+PTM/Gx+4t25musTbt87xbnZkdHaq9XlXXwV/w5fbh5DnWLG0SEZ3fh3ITxu0nhp2w2EB7pzLMyba6rW+u3m0cX5LME7hCP9u6Lpmll+iPdjSXtc+iegMYxx1Cej8R9227kfCS3pg2zcdzL688s9Ns6Je0HBZZr0f7vj+clctxf7s4y++ieI9aeZabON3R7GZrxYR0YfnamM3WJjd4SxWS/2pIx+Ga4duzOM7fFiP5DRzB/pIDbhxT5pY1Nh7P7R6cmxphXwGuf1/9dltO3FtAnq0paX7WY7yrF33gv7+5vVO7pPn19v/5+MLLtp2+E9r70O7/bbnt9endrt9ZaMvvl+j41bbCtxu36r/ztsr2/IaOLXytiEjd0WxmZWXLBtwqv/t2WULSyUy8bWv62ByP0/Uv9PVLeOJtX/1siypD3upsacOiQV569dGpmczM2SIEGCRDmx2j0TWsG7/38mozfP/1Ye79j7vx1Wh+O/v6+H9/8j1Ttq0v1/W2TZETsaiXVK7tzUTCwlucX5a8/lp0YmchO5Qk82c7j78IHeTCwejO3CVN1FtS7F7LPalQ+/Lj+fVY7/ao//E9U7alL9b48sS1SMV+o+ddj6/11Gb/20UH6OftD4P3jOeuapxc/y9dmk+t8RWZa0x32kMacOAAAAAAAAAAAAAAAAAG0tZhzdlpE71GmC70atZP7fki9MNWn+VyqybKxF31eou1ABoA04cvSFjPaqZG54C7ZIZ6KfWNf+CwAA//8n8SDK")
r0 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7})
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x48065}, 0x20004000)
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r6 = fanotify_init(0xf00, 0x1)
fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r7, &(0x7f0000000040)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xd, 0x3, 0x0, [{@broadcast, 0x101}, {@remote, 0x83e}, {@multicast2, 0x8001}, {@multicast2, 0x80000000}]}]}}}], 0x38}}], 0x1, 0x46000)
mount$fuseblk(0x0, 0x0, 0x0, 0x80, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@fowner_eq}]}})

7.379977478s ago: executing program 1 (id=187):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x2, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x8001, 0xd)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32], 0x30}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0)

7.29399926s ago: executing program 2 (id=188):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x2, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) (fail_nth: 1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32], 0x30}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0)

6.478655255s ago: executing program 4 (id=189):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x0, 0x27f})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r3 = socket$key(0xf, 0x3, 0x2)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r4 = socket(0x28, 0x5, 0x0)
r5 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
listen(r4, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$key(r3, 0x0, 0x40080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%-010d \x00'}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)

4.528936323s ago: executing program 0 (id=190):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

4.511748823s ago: executing program 3 (id=191):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0xfffffd17)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x4)
sendmmsg(r1, 0x0, 0x0, 0x9200000000001800)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)

3.108127091s ago: executing program 4 (id=192):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2})
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000180)=')', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x38, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/208, 0xd0, <r5=>0x0, &(0x7f0000000400)=""/202, 0xca}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe60, 0x10, 0x0, 0x0, r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

3.089099841s ago: executing program 3 (id=193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.818718366s ago: executing program 3 (id=194):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r3, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0)

2.818444486s ago: executing program 2 (id=195):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011"], 0x4a) (fail_nth: 1)

2.782243757s ago: executing program 1 (id=196):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011"], 0x4a)

2.775809537s ago: executing program 4 (id=197):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x24000, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x5, 0x483, &(0x7f0000000a40)="$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")
r0 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7})
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x48065}, 0x20004000)
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r6 = fanotify_init(0xf00, 0x1)
fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r7, &(0x7f0000000040)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xd, 0x3, 0x0, [{@broadcast, 0x101}, {@remote, 0x83e}, {@multicast2, 0x8001}, {@multicast2, 0x80000000}]}]}}}], 0x38}}], 0x1, 0x46000)
mount$fuseblk(0x0, 0x0, 0x0, 0x80, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@fowner_eq}]}})

2.721350518s ago: executing program 0 (id=198):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = fsopen(&(0x7f0000000080)='nilfs2\x00', 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x884400, 0x0, 0x0, 0x0, &(0x7f0000000000))
mknod$loop(&(0x7f00000024c0)='./bus/file0\x00', 0x80, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000380)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x5, 0x34, 0x66, 0x6000, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x43}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x2, 0x0, 0x1, 0x5, 0x3, 0x3, 0x0, 0x347b, 0x5, 0x4e20, 0x4e22}, 0x0, 0x2}}}}}}}}, 0x4e)
mkdir(&(0x7f00000002c0)='./control\x00', 0x0)
rename(&(0x7f0000000200)='./control\x00', &(0x7f0000000300)='./bus\x00')
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000480)={0x1, 0x1, 0x1000, 0x4e, &(0x7f0000000340)="4e6b500eb84b2d710da7772f6bbce42ce14fc92bfbcd2416ef9e95450829cdd21fd5ed7e56332da2d020666ba03f132176c8c79a4642f229edb056ac137c16766f23981fd2ea7b22ce0db20fc244", 0x87, 0x0, &(0x7f00000003c0)="ce549e3414407d65253996adb4de49d6184fda53ad5473bcbb2667185e77025692cd10ed546e37c62668da4f588a7a404c87b6bd1c745772e31bec02eacbed7f3b2ac46f6cb5b107ff0b197313fbef09f636c82b8be19c847c97f88b42f5354620c9c0bea327ce5fa77186c174daa7b442eb4d6d30ad20bee6cbdb551f6402346730f1177397cb"})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
writev(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)="da1e4d6db2a96cfddd197f194ac2fc9415196070efedcfb569bfac5893bb3329c733647e0514c209fdef58449a808147dfcd23766d05dba2032927ba65c6738b420b3d87818f22ee0c630332eb899b51d6320d5cc8d8d059b73db39d71ea960b4202da695b920bce8d13d4ba5f40d689ffc51891382402ecd1e0d7b2d0540d2a8be47a1b99e20bde0c75b474d6c25370f9e487a9891545b954a629be58872564237ec6c9119d340630a9304ac6769542c90f6c", 0xb3}], 0x1)
mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x124)
fcntl$notify(r7, 0x402, 0x4)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0xd)
r9 = syz_clone(0x6040100, &(0x7f0000000500)="b1d4313c196daec3ca0d5ebf8139e5d4944bd4c0e616562a0071afade279d7bf520cdc33a2c89e22f2cb0e15a57aa7e1b19edb3fe15a9caac3e3eab68ca48004a9df49d3cc0e7769f925544ce1d830b8e846401901be90", 0x57, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000580)="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")
syz_open_procfs(r9, &(0x7f0000000680)='smaps_rollup\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x110021, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000800))

1.56498889s ago: executing program 1 (id=199):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xd2, &(0x7f0000000040), &(0x7f0000000240)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYBLOB="2c77e664", @ANYRESHEX, @ANYBLOB=',\x00'])
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520813", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.56433058s ago: executing program 3 (id=200):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0x3fffff, 0x3, 0x0, 0x0, 0x0, 0xeffffffffffffffb, 0xffffffffffff23c2, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100000067, 0x4, 0x100000000], 0x3000, 0x280384})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

1.56324828s ago: executing program 4 (id=201):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f0000000300)=ANY=[@ANYBLOB="12015002020000082505a1a440000140d7090400000102052406000105240003000d240f01010400000700cee50706241a090002062407080900042402070905810300040e3cea0904010000020d00000904010102020d00000905820220001001060905030285008008f6c1e9c39f7ab25cd28fd250c5ebdeb60396fe15a894abcd9be9b15e72a3a09f479c7d1b96ef492fa45988389883ef80c756ffc500000000000093a9d0aa627e382b77409bd2ab4fcc0200000000000000fd4991132cd31ab404da70028b069f7d"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@mpls_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x1, 0x1300}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}]}, 0x24}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call, @alu={0x4, 0x0, 0x3, 0x8, 0xb, 0xfffffffffffffff0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1c14744, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@abort}, {@errors_remount}]}, 0xff, 0x49b, &(0x7f0000000680)="$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")
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x23, 0x2, 0x1, "b43d70dde5b7e214dba25fc29ee6c9000000c67f00", 0x32315559})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0xfffffff7, 0x4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@errors_remount}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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")
fchdir(0xffffffffffffffff)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0)

1.423361443s ago: executing program 2 (id=202):
mount$binder(0x0, 0x0, &(0x7f0000002200), 0x1206871, &(0x7f0000002240)={[{@stats}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007b1000/0x1000)=nil)
io_setup(0x8, &(0x7f0000002740)=<r1=>0x0)
io_getevents(r1, 0x4, 0x13, &(0x7f0000000000), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc04c561a, &(0x7f0000000080)={0x8, "b8be609444e79baecbad2e93bf61faa93d91022407e430797ac305218258d8d3", 0x0, 0x6, 0x1, 0x50007, 0x4040820, 0xe})
r3 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_destroy(r1)
io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x0)

780.285005ms ago: executing program 2 (id=203):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x1, 0x0, 0x27f})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r3 = socket$key(0xf, 0x3, 0x2)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r4 = socket(0x28, 0x5, 0x0)
r5 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
listen(r4, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$key(r3, 0x0, 0x40080)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%-010d \x00'}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)

371.247743ms ago: executing program 3 (id=204):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

370.438114ms ago: executing program 2 (id=205):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="660fae3bc744240268000000c7442406000000000f011424d9cac0f9c9f3446e66baf80cb8f44d7d86ef66bafc0cedc4021947c966baf80c66460f3a41cc0eef66bafc0cec460f01d63495001c56400f06", 0x51}], 0x1, 0x31, 0x0, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=r4, @ANYBLOB="000325bd7000fbdbdf254f000000080003007984aceaececb863719efdb82cf0154a4c964fc08920f40697c331b26f74c288a4c2a853a7ac56d75ea526178ab2d49c35b95b4899454d8a9c0c027741db6118761d0760d31655e5c02e09b1", @ANYRES32=r5, @ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x7fffffff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

295.044945ms ago: executing program 1 (id=206):
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x4, @desc3}) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=<r3=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@userptr={0x9, 0x2, 0x4, 0x0, 0x7ff, {0x0, 0x2710}, {0x2, 0x0, 0xc9, 0x6, 0x4, 0x0, "c5fce60c"}, 0x6ecc, 0x2, {&(0x7f0000000100)}, 0x9b56, 0x0, r3}) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) (rerun: 64)

166.627897ms ago: executing program 3 (id=207):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2})
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000180)=')', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x38, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/208, 0xd0, <r5=>0x0, &(0x7f0000000400)=""/202, 0xca}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe60, 0x10, 0x0, 0x0, r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

0s ago: executing program 1 (id=208):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000400000000000000008000f0001000000", 0x24)

kernel console output (not intermixed with test programs):

934225][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.947842][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.957951][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.969383][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.983491][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.996046][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.007922][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.020318][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.032322][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.057934][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.068642][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.078153][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.089923][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.099289][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.115061][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.126921][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[   90.132598][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.144862][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.155063][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.167320][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.179838][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.194364][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.209885][ T4274] Bluetooth: hci2: command 0x0419 tx timeout
[   90.209938][ T4274] Bluetooth: hci1: command 0x0419 tx timeout
[   90.209967][ T4274] Bluetooth: hci3: command 0x0419 tx timeout
[   90.209993][ T4274] Bluetooth: hci0: command 0x0419 tx timeout
[   90.243553][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.255819][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.269081][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.285399][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.307509][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.312048][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.330865][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.342146][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.342624][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.354230][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.354250][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.354268][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.354277][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.354288][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.355839][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.442129][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.451505][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.462460][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.471088][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.480435][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.518910][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.530699][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.541734][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.544417][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.560992][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.572451][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.586119][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.599827][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.612429][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.624236][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.640014][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.650754][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.662887][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.674390][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.685281][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.701552][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.714525][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.724875][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.745141][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.762686][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.773573][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.792056][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.048513][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.058379][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.171776][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.367036][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.513647][ T4389] loop0: detected capacity change from 0 to 8192
[   91.561375][ T4389] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[   91.600016][   T26] libceph: connect (1)[c::]:6789 error -101
[   91.638860][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.677763][   T26] libceph: mon0 (1)[c::]:6789 connect error
[   91.698830][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.784167][   T26] libceph: connect (1)[c::]:6789 error -101
[   91.860431][   T26] libceph: mon0 (1)[c::]:6789 connect error
[   91.936569][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.945602][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.954495][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   91.963549][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   91.972377][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   91.981095][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   91.990394][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.000794][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.010860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.065017][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.295040][ T4394] loop2: detected capacity change from 0 to 2048
[   92.331657][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.354511][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.384702][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.399802][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.579292][ T4327] libceph: connect (1)[c::]:6789 error -101
[   92.612610][ T4327] libceph: mon0 (1)[c::]:6789 connect error
[   92.705272][ T4394] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359
[   92.767935][ T4400] loop0: detected capacity change from 0 to 8192
[   92.806333][ T4400] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[   92.867826][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.914791][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.003476][ T4394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.267901][   T22] libceph: connect (1)[c::]:6789 error -101
[   93.284826][   T22] libceph: mon0 (1)[c::]:6789 connect error
[   93.511546][   T27] audit: type=1800 audit(1757271564.857:2): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1367 res=0 errno=0
[   93.563273][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.594957][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.688548][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.730173][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.746704][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.798333][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.009293][ T4319] libceph: connect (1)[c::]:6789 error -101
[   94.015785][ T4319] libceph: mon0 (1)[c::]:6789 connect error
[   94.023160][ T4409] loop4: detected capacity change from 0 to 2048
[   94.048740][ T4409] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359
[   94.164227][ T4409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.190466][ T4413] loop3: detected capacity change from 0 to 128
[   94.289919][ T4327] libceph: connect (1)[c::]:6789 error -101
[   94.592383][ T4416] loop1: detected capacity change from 0 to 2048
[   94.814944][ T4327] libceph: mon0 (1)[c::]:6789 connect error
[   95.013049][ T4419] use of bytesused == 0 is deprecated and will be removed in the future,
[   95.023854][ T4419] use the actual size instead.
[   95.551171][ T4415] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.832295][ T4319] libceph: connect (1)[c::]:6789 error -101
[   95.833511][ T4328] libceph: connect (1)[c::]:6789 error -101
[   95.839780][ T4388] ceph: No mds server is up or the cluster is laggy
[   95.868331][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[   95.913598][   T27] audit: type=1800 audit(1757271567.247:3): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=1367 res=0 errno=0
[   95.938616][ T4319] libceph: mon0 (1)[c::]:6789 connect error
[   96.222016][ T4327] libceph: connect (1)[c::]:6789 error -101
[   96.248225][ T4327] libceph: mon0 (1)[c::]:6789 connect error
[   96.322915][ T4404] loop0: detected capacity change from 0 to 32768
[   96.385443][ T4428] loop1: detected capacity change from 0 to 128
[   96.471355][ T4404] XFS (loop0): Mounting V5 Filesystem
[   96.489508][ T4348] libceph: connect (1)[c::]:6789 error -101
[   96.495704][ T4348] libceph: mon0 (1)[c::]:6789 connect error
[   96.524647][ T4435] loop3: detected capacity change from 0 to 512
[   96.600884][ T4435] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.618566][ T4435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   96.648967][ T4421] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   96.674938][ T4404] XFS (loop0): Ending clean mount
[   96.748309][ T4404] XFS (loop0): Quotacheck needed: Please wait.
[   96.924070][ T4406] ceph: No mds server is up or the cluster is laggy
[   96.943074][ T4435] EXT4-fs (loop3): 1 truncate cleaned up
[   96.950250][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   97.174838][ T4404] XFS (loop0): Quotacheck: Done.
[   97.442377][   T27] audit: type=1800 audit(1757271568.737:4): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10" name="file1" dev="loop3" ino=15 res=0 errno=0
[   97.469265][ T4319] libceph: connect (1)[c::]:6789 error -101
[   97.534366][ T4319] libceph: mon0 (1)[c::]:6789 connect error
[   97.577543][ T4435] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.10: corrupted in-inode xattr
[   97.620071][ T4435] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1732: inode #15: comm syz.3.10: unable to update i_inline_off
[   97.669744][ T4435] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   97.686634][ T4435] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.10: corrupted in-inode xattr
[   97.988771][ T4450] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[   99.281493][ T4271] XFS (loop0): Unmounting Filesystem
[   99.725424][ T4446] loop2: detected capacity change from 0 to 8192
[  100.522086][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  100.779029][ T4455] loop4: detected capacity change from 0 to 512
[  100.934937][ T4455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  100.946990][ T4455] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.059504][ T4319] libceph: connect (1)[c::]:6789 error -101
[  101.066211][ T4319] libceph: mon0 (1)[c::]:6789 connect error
[  101.192904][ T4464] loop3: detected capacity change from 0 to 2048
[  101.228376][ T4464] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359
[  101.858385][ T4466] loop1: detected capacity change from 0 to 8192
[  102.535784][ T4464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.170665][ T4466] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[  103.507798][ T4319] libceph: connect (1)[c::]:6789 error -101
[  103.535893][ T4319] libceph: mon0 (1)[c::]:6789 connect error
[  103.623080][ T4479] loop2: detected capacity change from 0 to 128
[  103.734971][   T27] audit: type=1800 audit(1757271575.077:5): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  103.844711][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  104.004100][ T4485] loop0: detected capacity change from 0 to 128
[  104.898068][ T4319] libceph: connect (1)[c::]:6789 error -101
[  104.905307][ T4319] libceph: mon0 (1)[c::]:6789 connect error
[  104.936783][ T4459] ceph: No mds server is up or the cluster is laggy
[  106.386843][ T4488] random: crng reseeded on system resumption
[  107.342747][ T4495] loop1: detected capacity change from 0 to 2048
[  107.379644][ T4495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.269543][ T4505] loop4: detected capacity change from 0 to 512
[  108.341509][ T4505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  108.513138][ T4505] EXT4-fs (loop4): 1 truncate cleaned up
[  108.563103][ T4505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  108.746782][   T27] audit: type=1800 audit(1757271580.097:6): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.25" name="file1" dev="loop4" ino=15 res=0 errno=0
[  108.968163][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  109.287066][ T4520] FAULT_INJECTION: forcing a failure.
[  109.287066][ T4520] name failslab, interval 1, probability 0, space 0, times 1
[  109.339510][ T4512] loop3: detected capacity change from 0 to 8192
[  109.360426][ T4520] CPU: 1 PID: 4520 Comm: syz.1.38 Not tainted syzkaller #0
[  109.371476][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  109.382908][ T4520] Call Trace:
[  109.386424][ T4520]  <TASK>
[  109.389930][ T4520]  dump_stack_lvl+0x168/0x22e
[  109.395185][ T4520]  ? show_regs_print_info+0x12/0x12
[  109.401335][ T4520]  ? load_image+0x3b0/0x3b0
[  109.406938][ T4520]  ? __lock_acquire+0x7c50/0x7c50
[  109.413634][ T4520]  ? ksys_write+0x1bd/0x240
[  109.419133][ T4520]  should_fail_ex+0x399/0x4d0
[  109.424829][ T4520]  should_failslab+0x5/0x20
[  109.430364][ T4520]  slab_pre_alloc_hook+0x59/0x310
[  109.435799][ T4520]  ? resv_map_alloc+0x4d/0x2b0
[  109.441408][ T4520]  __kmem_cache_alloc_node+0x4f/0x260
[  109.448202][ T4520]  ? resv_map_alloc+0x4d/0x2b0
[  109.453454][ T4520]  kmalloc_trace+0x26/0xe0
[  109.459008][ T4520]  resv_map_alloc+0x4d/0x2b0
[  109.465935][ T4520]  hugetlbfs_get_inode+0x64/0x510
[  109.471447][ T4520]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  109.479866][ T4520]  hugetlb_file_setup+0x211/0x610
[  109.486700][ T4520]  ksys_mmap_pgoff+0x218/0x6f0
[  109.492517][ T4520]  do_syscall_64+0x4c/0xa0
[  109.497421][ T4520]  ? clear_bhb_loop+0x60/0xb0
[  109.504393][ T4520]  ? clear_bhb_loop+0x60/0xb0
[  109.510756][ T4520]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.518556][ T4520] RIP: 0033:0x7ff04238ebe9
[  109.524642][ T4520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.550138][ T4520] RSP: 002b:00007ff043153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  109.559647][ T4520] RAX: ffffffffffffffda RBX: 00007ff0425c6180 RCX: 00007ff04238ebe9
[  109.568942][ T4520] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000
[  109.577950][ T4520] RBP: 00007ff043153090 R08: ffffffffffffffff R09: 0000000000000000
[  109.587360][ T4520] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001
[  109.597009][ T4520] R13: 00007ff0425c6218 R14: 00007ff0425c6180 R15: 00007ffffa441068
[  109.605934][ T4520]  </TASK>
[  109.979225][ T4528] loop4: detected capacity change from 0 to 2048
[  110.081842][ T4512] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[  110.118841][ T4523] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.145682][ T4421] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  110.598792][ T4328] libceph: connect (1)[c::]:6789 error -101
[  110.605148][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  110.695144][ T4532] loop3: detected capacity change from 0 to 2048
[  110.713850][ T4532] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359
[  110.796179][ T4532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.917118][ T4328] libceph: connect (1)[c::]:6789 error -101
[  111.269549][ T4536] loop0: detected capacity change from 0 to 8192
[  111.578087][ T4536] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[  112.266617][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  112.487138][   T27] audit: type=1800 audit(1757271583.837:7): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.29" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  112.726804][ T4545] FAULT_INJECTION: forcing a failure.
[  112.726804][ T4545] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  112.773387][ T4545] CPU: 0 PID: 4545 Comm: syz.2.31 Not tainted syzkaller #0
[  112.781709][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  112.786994][   T22] libceph: connect (1)[c::]:6789 error -101
[  112.792401][ T4545] Call Trace:
[  112.792412][ T4545]  <TASK>
[  112.792426][ T4545]  dump_stack_lvl+0x168/0x22e
[  112.792456][ T4545]  ? show_regs_print_info+0x12/0x12
[  112.816792][ T4545]  ? load_image+0x3b0/0x3b0
[  112.831525][ T4545]  ? __lock_acquire+0x7c50/0x7c50
[  112.836839][ T4545]  ? verify_lock_unused+0x140/0x140
[  112.844114][ T4545]  should_fail_ex+0x399/0x4d0
[  112.849662][ T4545]  _copy_from_user+0x2c/0x170
[  112.854994][ T4545]  ___sys_sendmsg+0x155/0x290
[  112.860495][ T4545]  ? __sys_sendmsg+0x270/0x270
[  112.872584][ T4545]  ? __lock_acquire+0x7c50/0x7c50
[  112.880756][ T4545]  ? __fdget+0x17c/0x200
[  112.885772][ T4545]  __se_sys_sendmsg+0x19e/0x270
[  112.891051][ T4545]  ? __x64_sys_sendmsg+0x80/0x80
[  112.898194][ T4545]  ? syscall_user_dispatch+0x45/0x90
[  112.904444][ T4545]  do_syscall_64+0x4c/0xa0
[  112.910189][ T4545]  ? clear_bhb_loop+0x60/0xb0
[  112.916249][ T4545]  ? clear_bhb_loop+0x60/0xb0
[  112.921784][ T4545]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.928583][ T4545] RIP: 0033:0x7f598258ebe9
[  112.934290][ T4545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.961538][ T4545] RSP: 002b:00007f5983389038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.972192][ T4545] RAX: ffffffffffffffda RBX: 00007f59827c6090 RCX: 00007f598258ebe9
[  112.982019][ T4545] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  112.993181][ T4545] RBP: 00007f5983389090 R08: 0000000000000000 R09: 0000000000000000
[  113.004972][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.014496][ T4545] R13: 00007f59827c6128 R14: 00007f59827c6090 R15: 00007ffcb148c9b8
[  113.023570][ T4545]  </TASK>
[  113.067477][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  113.224197][ T4382] libceph: connect (1)[c::]:6789 error -101
[  113.265514][ T4382] libceph: mon0 (1)[c::]:6789 connect error
[  113.477683][ T4548] loop0: detected capacity change from 0 to 2048
[  113.525722][ T4382] libceph: connect (1)[c::]:6789 error -101
[  113.536628][ T4382] libceph: mon0 (1)[c::]:6789 connect error
[  113.579135][  T126] libceph: connect (1)[c::]:6789 error -101
[  113.585698][  T126] libceph: mon0 (1)[c::]:6789 connect error
[  113.620418][ T4556] loop1: detected capacity change from 0 to 2048
[  113.632184][ T4548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  113.643010][ T4530] ceph: No mds server is up or the cluster is laggy
[  113.692359][ T4556] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359
[  113.782965][ T4556] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.799490][ T4546] ceph: No mds server is up or the cluster is laggy
[  113.915494][ T4277] libceph: connect (1)[c::]:6789 error -101
[  113.941132][ T4277] libceph: mon0 (1)[c::]:6789 connect error
[  113.970783][   T27] audit: type=1800 audit(1757271585.317:8): pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  114.133633][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  114.220199][ T4277] libceph: connect (1)[c::]:6789 error -101
[  114.251208][ T4277] libceph: mon0 (1)[c::]:6789 connect error
[  114.344464][ T4567] loop4: detected capacity change from 0 to 2048
[  114.391653][ T4567] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359
[  114.439438][ T4567] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.457473][ T4277] libceph: connect (1)[c::]:6789 error -101
[  114.466783][ T4277] libceph: mon0 (1)[c::]:6789 connect error
[  114.523918][   T27] audit: type=1800 audit(1757271585.867:9): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.36" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  114.558106][ T4328] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  114.587509][ T4277] libceph: connect (1)[c::]:6789 error -101
[  114.604908][ T4277] libceph: mon0 (1)[c::]:6789 connect error
[  114.720702][ T4574] random: crng reseeded on system resumption
[  115.148284][ T4382] libceph: connect (1)[c::]:6789 error -101
[  115.175811][ T4382] libceph: mon0 (1)[c::]:6789 connect error
[  115.251061][ T4553] ceph: No mds server is up or the cluster is laggy
[  115.307799][ T4328] usb 4-1: Using ep0 maxpacket: 16
[  115.332354][ T4382] libceph: connect (1)[c::]:6789 error -101
[  115.356018][ T4382] libceph: mon0 (1)[c::]:6789 connect error
[  115.563087][ T4564] ceph: No mds server is up or the cluster is laggy
[  118.213918][ T4328] usb 4-1: unable to read config index 0 descriptor/all
[  118.236503][ T4328] usb 4-1: can't read configurations, error -71
[  118.393833][ T4584] loop4: detected capacity change from 0 to 8192
[  118.427423][ T4584] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[  118.609557][ T4374] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  118.836695][ T4374] usb 2-1: device descriptor read/64, error -71
[  118.888923][ T4573] loop0: detected capacity change from 0 to 2048
[  118.908117][ T4573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.117415][ T4374] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  119.285791][ T4594] netlink: 'syz.3.43': attribute type 4 has an invalid length.
[  119.286710][ T4374] usb 2-1: device descriptor read/64, error -71
[  119.325894][ T4596] loop0: detected capacity change from 0 to 128
[  119.641340][ T4374] usb usb2-port1: attempt power cycle
[  120.066769][ T4374] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  120.127269][ T4374] usb 2-1: device descriptor read/8, error -71
[  120.417222][ T4374] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.468372][ T4374] usb 2-1: device descriptor read/8, error -71
[  120.589118][ T4374] usb usb2-port1: unable to enumerate USB device
[  120.811818][ T4386] libceph: connect (1)[c::]:6789 error -101
[  120.844448][ T4386] libceph: mon0 (1)[c::]:6789 connect error
[  120.927070][ T4616] FAULT_INJECTION: forcing a failure.
[  120.927070][ T4616] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.949288][ T4616] CPU: 0 PID: 4616 Comm: syz.0.50 Not tainted syzkaller #0
[  120.957330][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  120.967860][ T4616] Call Trace:
[  120.971510][ T4616]  <TASK>
[  120.974668][ T4616]  dump_stack_lvl+0x168/0x22e
[  120.979436][ T4616]  ? show_regs_print_info+0x12/0x12
[  120.984852][ T4616]  ? load_image+0x3b0/0x3b0
[  120.989745][ T4616]  ? __lock_acquire+0x7c50/0x7c50
[  120.996031][ T4616]  should_fail_ex+0x399/0x4d0
[  121.001287][ T4616]  _copy_from_user+0x2c/0x170
[  121.006889][ T4616]  __sys_bpf+0x265/0x6d0
[  121.011462][ T4616]  ? bpf_link_show_fdinfo+0x340/0x340
[  121.017438][ T4616]  ? lock_chain_count+0x20/0x20
[  121.022790][ T4616]  __x64_sys_bpf+0x78/0x90
[  121.028210][ T4616]  do_syscall_64+0x4c/0xa0
[  121.033000][ T4616]  ? clear_bhb_loop+0x60/0xb0
[  121.038200][ T4616]  ? clear_bhb_loop+0x60/0xb0
[  121.043756][ T4616]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  121.050398][ T4616] RIP: 0033:0x7fd37cf8ebe9
[  121.055526][ T4616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.076468][ T4616] RSP: 002b:00007fd37dd53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  121.085024][ T4616] RAX: ffffffffffffffda RBX: 00007fd37d1c6090 RCX: 00007fd37cf8ebe9
[  121.094310][ T4616] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000
[  121.103436][ T4616] RBP: 00007fd37dd53090 R08: 0000000000000000 R09: 0000000000000000
[  121.112489][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.120921][ T4616] R13: 00007fd37d1c6128 R14: 00007fd37d1c6090 R15: 00007ffca9f9c658
[  121.130165][ T4616]  </TASK>
[  121.144532][ T4328] libceph: connect (1)[c::]:6789 error -101
[  121.155053][ T4615] loop4: detected capacity change from 0 to 2048
[  121.175985][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  121.211005][ T4615] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359
[  121.295164][ T4615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.364036][   T27] audit: type=1800 audit(1757271592.707:10): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.49" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  121.460738][   T27] audit: type=1800 audit(1757271592.777:11): pid=4621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.52" name="file0" dev="fuse" ino=2 res=0 errno=0
[  121.717887][ T4386] libceph: connect (1)[c::]:6789 error -101
[  121.727995][ T4386] libceph: mon0 (1)[c::]:6789 connect error
[  121.926737][ T4320] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  122.074039][ T4610] ceph: No mds server is up or the cluster is laggy
[  122.250030][ T4320] usb 2-1: Using ep0 maxpacket: 16
[  122.978692][ T4320] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  123.023942][ T4320] usb 2-1: config 0 has no interface number 0
[  123.056022][ T4320] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  123.131672][ T4320] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  123.142634][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  123.153802][ T4320] usb 2-1: Product: syz
[  123.159104][ T4320] usb 2-1: SerialNumber: syz
[  123.176071][ T4320] usb 2-1: config 0 descriptor??
[  123.242249][ T4320] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  123.518646][ T4320] usb 2-1: USB disconnect, device number 6
[  123.946902][ T4640] loop2: detected capacity change from 0 to 256
[  123.960485][ T4640] exfat: Unknown parameter 'ÿÿ'
[  124.698498][ T4647] FAULT_INJECTION: forcing a failure.
[  124.698498][ T4647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.713786][ T4647] CPU: 0 PID: 4647 Comm: syz.3.59 Not tainted syzkaller #0
[  124.722454][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  124.733740][ T4647] Call Trace:
[  124.737094][ T4647]  <TASK>
[  124.740451][ T4647]  dump_stack_lvl+0x168/0x22e
[  124.746617][ T4647]  ? show_regs_print_info+0x12/0x12
[  124.752743][ T4647]  ? load_image+0x3b0/0x3b0
[  124.757389][ T4647]  ? __lock_acquire+0x7c50/0x7c50
[  124.762803][ T4647]  ? snprintf+0xd7/0x120
[  124.767698][ T4647]  should_fail_ex+0x399/0x4d0
[  124.773441][ T4647]  _copy_to_user+0x2c/0x130
[  124.778651][ T4647]  simple_read_from_buffer+0xe3/0x150
[  124.785059][ T4647]  proc_fail_nth_read+0x19a/0x210
[  124.790218][ T4647]  ? proc_fault_inject_write+0x2f0/0x2f0
[  124.796236][ T4647]  ? fsnotify_perm+0x248/0x550
[  124.801499][ T4647]  ? proc_fault_inject_write+0x2f0/0x2f0
[  124.808501][ T4647]  vfs_read+0x2c0/0x920
[  124.813651][ T4647]  ? kernel_read+0x1e0/0x1e0
[  124.819691][ T4647]  ? __fget_files+0x28/0x4d0
[  124.824937][ T4647]  ? __fget_files+0x44a/0x4d0
[  124.830385][ T4647]  ? __fdget_pos+0x2ae/0x360
[  124.835267][ T4647]  ? ksys_read+0x71/0x240
[  124.840011][ T4647]  ksys_read+0x143/0x240
[  124.844585][ T4647]  ? vfs_write+0x960/0x960
[  124.849693][ T4647]  ? lockdep_hardirqs_on+0x94/0x140
[  124.855996][ T4647]  do_syscall_64+0x4c/0xa0
[  124.860553][ T4647]  ? clear_bhb_loop+0x60/0xb0
[  124.866736][ T4647]  ? clear_bhb_loop+0x60/0xb0
[  124.875986][ T4647]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  124.886662][ T4647] RIP: 0033:0x7f86dc18d5fc
[  124.892820][ T4647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  124.916514][ T4647] RSP: 002b:00007f86dd047030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  124.927573][ T4647] RAX: ffffffffffffffda RBX: 00007f86dc3c6180 RCX: 00007f86dc18d5fc
[  124.936830][ T4647] RDX: 000000000000000f RSI: 00007f86dd0470a0 RDI: 000000000000000b
[  124.945855][ T4647] RBP: 00007f86dd047090 R08: 0000000000000000 R09: 0000000000000000
[  124.954826][ T4647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.964759][ T4647] R13: 00007f86dc3c6218 R14: 00007f86dc3c6180 R15: 00007ffd27dc9c68
[  124.973842][ T4647]  </TASK>
[  124.979446][ T4374] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  125.196591][ T4374] usb 2-1: Using ep0 maxpacket: 8
[  125.406534][ T4274] Bluetooth: hci5: command 0x1003 tx timeout
[  125.413797][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  126.647848][ T4374] usb 2-1: config 3 has an invalid interface number: 38 but max is 0
[  126.657059][ T4374] usb 2-1: config 3 has no interface number 0
[  126.663546][ T4374] usb 2-1: config 3 interface 38 has no altsetting 0
[  126.696706][ T4374] usb 2-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=8c.64
[  126.736480][ T4374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.748524][ T4374] usb 2-1: Product: syz
[  126.753180][ T4374] usb 2-1: Manufacturer: syz
[  126.768026][ T4374] usb 2-1: SerialNumber: syz
[  126.998861][ T4374] r8152-cfgselector 2-1: Unknown version 0x0000
[  127.205874][ T4374] r8152-cfgselector 2-1: Unknown version 0x0000
[  127.252715][ T4374] r8152-cfgselector 2-1: USB disconnect, device number 7
[  128.135265][ T4671] loop0: detected capacity change from 0 to 8
[  128.154659][ T4670] FAULT_INJECTION: forcing a failure.
[  128.154659][ T4670] name failslab, interval 1, probability 0, space 0, times 0
[  128.182201][ T4670] CPU: 1 PID: 4670 Comm: syz.2.66 Not tainted syzkaller #0
[  128.192645][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  128.207263][ T4670] Call Trace:
[  128.212182][ T4670]  <TASK>
[  128.215559][ T4670]  dump_stack_lvl+0x168/0x22e
[  128.220912][ T4670]  ? show_regs_print_info+0x12/0x12
[  128.227750][ T4670]  ? load_image+0x3b0/0x3b0
[  128.234351][ T4670]  ? __might_sleep+0xd0/0xd0
[  128.240221][ T4670]  ? __lock_acquire+0x7c50/0x7c50
[  128.246031][ T4670]  should_fail_ex+0x399/0x4d0
[  128.252080][ T4670]  should_failslab+0x5/0x20
[  128.257766][ T4670]  slab_pre_alloc_hook+0x59/0x310
[  128.263035][ T4655] loop3: detected capacity change from 0 to 32768
[  128.267166][ T4670]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  128.267211][ T4670]  __kmem_cache_alloc_node+0x4f/0x260
[  128.267234][ T4670]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  128.267254][ T4670]  __kmalloc+0xa0/0x240
[  128.267279][ T4670]  tomoyo_realpath_from_path+0xdf/0x5d0
[  128.267313][ T4670]  tomoyo_path_number_perm+0x1e3/0x600
[  128.313267][ T4670]  ? tomoyo_path_number_perm+0x1b6/0x600
[  128.319827][ T4670]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  128.326668][ T4670]  ? ksys_write+0x1bd/0x240
[  128.331429][ T4670]  ? common_file_perm+0x171/0x1c0
[  128.336987][ T4670]  ? __fget_files+0x28/0x4d0
[  128.340604][ T4655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.61 (4655)
[  128.342411][ T4670]  security_file_ioctl+0x6c/0xa0
[  128.362391][ T4670]  __se_sys_ioctl+0x48/0x170
[  128.367889][ T4670]  do_syscall_64+0x4c/0xa0
[  128.384080][ T4670]  ? clear_bhb_loop+0x60/0xb0
[  128.389409][ T4670]  ? clear_bhb_loop+0x60/0xb0
[  128.395832][ T4670]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  128.403615][ T4670] RIP: 0033:0x7f598258ebe9
[  128.410413][ T4670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.434846][ T4670] RSP: 002b:00007f59833aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.445839][ T4670] RAX: ffffffffffffffda RBX: 00007f59827c5fa0 RCX: 00007f598258ebe9
[  128.455158][ T4670] RDX: 00002000000001c0 RSI: 00000000c06864ce RDI: 0000000000000003
[  128.464901][ T4670] RBP: 00007f59833aa090 R08: 0000000000000000 R09: 0000000000000000
[  128.473520][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.482417][ T4670] R13: 00007f59827c6038 R14: 00007f59827c5fa0 R15: 00007ffcb148c9b8
[  128.491738][ T4670]  </TASK>
[  128.505665][ T4670] ERROR: Out of memory at tomoyo_realpath_from_path.
[  128.553051][ T4671] SQUASHFS error: Unable to read directory block [629:4f]
[  128.562765][ T4668] loop1: detected capacity change from 0 to 2048
[  128.577573][ T4655] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.644327][ T4655] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  128.682644][ T4655] BTRFS info (device loop3): using free space tree
[  128.701919][ T4668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  128.826637][ T4328] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.890337][ T4686] loop2: detected capacity change from 0 to 8192
[  128.913118][ T4686] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[  129.206557][ T4328] usb 5-1: Using ep0 maxpacket: 16
[  129.220343][ T4328] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  129.311269][ T4328] usb 5-1: config 0 has no interface number 0
[  129.347129][ T4328] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  129.382486][ T4328] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  129.420345][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  129.459932][ T4328] usb 5-1: Product: syz
[  129.467278][ T4655] BTRFS info (device loop3): enabling ssd optimizations
[  129.510079][ T4328] usb 5-1: SerialNumber: syz
[  129.604225][ T4328] usb 5-1: config 0 descriptor??
[  129.638729][   T27] audit: type=1800 audit(1757271600.987:12): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.61" name="file1" dev="loop3" ino=260 res=0 errno=0
[  129.753337][ T4328] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  130.471715][ T4277] usb 5-1: USB disconnect, device number 2
[  130.855656][ T4709] loop2: detected capacity change from 0 to 2048
[  131.032002][ T4709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.075615][ T4275] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.155856][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  133.219156][ T4730] Zero length message leads to an empty skb
[  133.250921][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  133.259396][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  133.822830][ T4741] FAULT_INJECTION: forcing a failure.
[  133.822830][ T4741] name failslab, interval 1, probability 0, space 0, times 0
[  133.871767][ T4743] loop2: detected capacity change from 0 to 512
[  133.921301][ T4741] CPU: 0 PID: 4741 Comm: syz.0.79 Not tainted syzkaller #0
[  133.931046][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  133.944696][ T4741] Call Trace:
[  133.948391][ T4741]  <TASK>
[  133.952084][ T4741]  dump_stack_lvl+0x168/0x22e
[  133.957083][ T4741]  ? show_regs_print_info+0x12/0x12
[  133.963579][ T4741]  ? load_image+0x3b0/0x3b0
[  133.968392][ T4741]  ? __might_sleep+0xd0/0xd0
[  133.973386][ T4741]  ? __lock_acquire+0x7c50/0x7c50
[  133.979598][ T4741]  ? aa_file_perm+0x3ef/0xec0
[  133.984413][ T4741]  should_fail_ex+0x399/0x4d0
[  133.989463][ T4741]  should_failslab+0x5/0x20
[  133.995068][ T4741]  slab_pre_alloc_hook+0x59/0x310
[  134.002609][ T4741]  ? kernfs_fop_write_iter+0x155/0x4c0
[  134.010151][ T4741]  __kmem_cache_alloc_node+0x4f/0x260
[  134.016790][ T4741]  ? kernfs_fop_write_iter+0x155/0x4c0
[  134.023501][ T4741]  __kmalloc+0xa0/0x240
[  134.028034][ T4741]  kernfs_fop_write_iter+0x155/0x4c0
[  134.034763][ T4741]  vfs_write+0x44c/0x960
[  134.040641][ T4741]  ? file_end_write+0x250/0x250
[  134.047568][ T4741]  ? __fget_files+0x44a/0x4d0
[  134.052462][ T4741]  ? __fdget_pos+0x2ae/0x360
[  134.060706][ T4741]  ? ksys_write+0x71/0x240
[  134.067529][ T4741]  ksys_write+0x143/0x240
[  134.073490][ T4741]  ? __ia32_sys_read+0x80/0x80
[  134.081361][ T4741]  ? lockdep_hardirqs_on+0x94/0x140
[  134.088594][ T4741]  do_syscall_64+0x4c/0xa0
[  134.095190][ T4741]  ? clear_bhb_loop+0x60/0xb0
[  134.100978][ T4741]  ? clear_bhb_loop+0x60/0xb0
[  134.106402][ T4741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.113166][ T4741] RIP: 0033:0x7fd37cf8ebe9
[  134.118116][ T4741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.139950][ T4741] RSP: 002b:00007fd37dd74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.149620][ T4741] RAX: ffffffffffffffda RBX: 00007fd37d1c5fa0 RCX: 00007fd37cf8ebe9
[  134.158154][ T4741] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004
[  134.166668][ T4741] RBP: 00007fd37dd74090 R08: 0000000000000000 R09: 0000000000000000
[  134.175256][ T4741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.184767][ T4741] R13: 00007fd37d1c6038 R14: 00007fd37d1c5fa0 R15: 00007ffca9f9c658
[  134.194887][ T4741]  </TASK>
[  134.267626][ T4743] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.80: casefold flag without casefold feature
[  134.323826][ T4713] loop4: detected capacity change from 0 to 40427
[  134.374545][ T4713] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 512)
[  134.413365][ T4749] FAULT_INJECTION: forcing a failure.
[  134.413365][ T4749] name failslab, interval 1, probability 0, space 0, times 0
[  134.462528][ T4743] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.80: couldn't read orphan inode 15 (err -117)
[  134.480955][ T4713] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  134.491601][ T4749] CPU: 0 PID: 4749 Comm: syz.1.81 Not tainted syzkaller #0
[  134.500691][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  134.512681][ T4749] Call Trace:
[  134.516186][ T4749]  <TASK>
[  134.519268][ T4749]  dump_stack_lvl+0x168/0x22e
[  134.524095][ T4749]  ? show_regs_print_info+0x12/0x12
[  134.530303][ T4749]  ? load_image+0x3b0/0x3b0
[  134.535053][ T4749]  ? __might_sleep+0xd0/0xd0
[  134.540669][ T4749]  ? __lock_acquire+0x7c50/0x7c50
[  134.546621][ T4749]  should_fail_ex+0x399/0x4d0
[  134.552813][ T4749]  should_failslab+0x5/0x20
[  134.558824][ T4749]  slab_pre_alloc_hook+0x59/0x310
[  134.565513][ T4749]  kmem_cache_alloc+0x56/0x2f0
[  134.571186][ T4749]  ? create_new_namespaces+0x34/0x6f0
[  134.577312][ T4749]  create_new_namespaces+0x34/0x6f0
[  134.582904][ T4749]  ? apparmor_capable+0x12c/0x190
[  134.588771][ T4749]  ? bpf_lsm_capable+0x5/0x10
[  134.594026][ T4749]  ? security_capable+0x85/0xb0
[  134.599481][ T4749]  unshare_nsproxy_namespaces+0x116/0x160
[  134.609002][ T4749]  ksys_unshare+0x4bc/0x890
[  134.613925][ T4749]  ? sighand_ctor+0x40/0x40
[  134.619029][ T4749]  ? lock_chain_count+0x20/0x20
[  134.624929][ T4749]  ? syscall_user_dispatch+0x45/0x90
[  134.630967][ T4749]  __x64_sys_unshare+0x34/0x40
[  134.636048][ T4749]  do_syscall_64+0x4c/0xa0
[  134.640772][ T4749]  ? clear_bhb_loop+0x60/0xb0
[  134.646276][ T4749]  ? clear_bhb_loop+0x60/0xb0
[  134.651046][ T4749]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.657607][ T4749] RIP: 0033:0x7ff04238ebe9
[  134.662169][ T4749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.681177][ T4732] loop3: detected capacity change from 0 to 32768
[  134.685636][ T4749] RSP: 002b:00007ff043174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  134.685667][ T4749] RAX: ffffffffffffffda RBX: 00007ff0425c6090 RCX: 00007ff04238ebe9
[  134.685680][ T4749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  134.685692][ T4749] RBP: 00007ff043174090 R08: 0000000000000000 R09: 0000000000000000
[  134.685703][ T4749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.685714][ T4749] R13: 00007ff0425c6128 R14: 00007ff0425c6090 R15: 00007ffffa441068
[  134.685742][ T4749]  </TASK>
[  134.705331][ T4732] XFS: ikeep mount option is deprecated.
[  134.733723][ T4743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  134.780657][ T4713] F2FS-fs (loop4): build fault injection attr: rate: 531, type: 0x3ffff
[  134.795361][ T4713] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x3bf
[  134.799217][ T4751] loop0: detected capacity change from 0 to 128
[  134.847197][ T4713] F2FS-fs (loop4): invalid crc value
[  134.888118][ T4713] F2FS-fs (loop4): Found nat_bits in checkpoint
[  134.921856][ T4713] F2FS-fs (loop4) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4407/0x6b20
[  134.938484][ T4713] F2FS-fs (loop4): Failed to initialize F2FS node manager (-12)
[  134.977403][ T4743] fscrypt (loop2, inode 18): Mutually exclusive encryption flags (0x15)
[  135.062542][ T4732] XFS (loop3): Mounting V5 Filesystem
[  135.242795][ T4732] XFS (loop3): Ending clean mount
[  135.309998][ T4732] XFS (loop3): Quotacheck needed: Please wait.
[  135.410045][ T4732] XFS (loop3): Quotacheck: Done.
[  135.632422][ T4275] XFS (loop3): Unmounting Filesystem
[  135.701728][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  135.732227][ T4766] FAULT_INJECTION: forcing a failure.
[  135.732227][ T4766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.761355][ T4766] CPU: 1 PID: 4766 Comm: syz.0.83 Not tainted syzkaller #0
[  135.769958][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  135.783680][ T4766] Call Trace:
[  135.788408][ T4766]  <TASK>
[  135.791806][ T4766]  dump_stack_lvl+0x168/0x22e
[  135.798651][ T4766]  ? show_regs_print_info+0x12/0x12
[  135.807747][ T4766]  ? load_image+0x3b0/0x3b0
[  135.814336][ T4766]  ? __lock_acquire+0x7c50/0x7c50
[  135.821495][ T4766]  should_fail_ex+0x399/0x4d0
[  135.827601][ T4766]  _copy_from_user+0x2c/0x170
[  135.834124][ T4766]  __sys_bind+0x1cf/0x3f0
[  135.842242][ T4766]  ? __ia32_sys_socketpair+0xb0/0xb0
[  135.849598][ T4766]  __x64_sys_bind+0x76/0x80
[  135.856664][ T4766]  do_syscall_64+0x4c/0xa0
[  135.863182][ T4766]  ? clear_bhb_loop+0x60/0xb0
[  135.870885][ T4766]  ? clear_bhb_loop+0x60/0xb0
[  135.878638][ T4766]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.886263][ T4766] RIP: 0033:0x7fd37cf8ebe9
[  135.891147][ T4766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.918060][ T4766] RSP: 002b:00007fd37dd74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  135.930697][ T4766] RAX: ffffffffffffffda RBX: 00007fd37d1c5fa0 RCX: 00007fd37cf8ebe9
[  135.944037][ T4766] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000004
[  135.954614][ T4766] RBP: 00007fd37dd74090 R08: 0000000000000000 R09: 0000000000000000
[  135.967016][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.977459][ T4766] R13: 00007fd37d1c6038 R14: 00007fd37d1c5fa0 R15: 00007ffca9f9c658
[  135.989352][ T4766]  </TASK>
[  136.345756][ T4771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'.
[  136.567311][ T4775] loop3: detected capacity change from 0 to 128
[  136.812210][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  137.866543][ T4320] usb 5-1: Using ep0 maxpacket: 8
[  137.915920][ T4320] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.980788][ T4320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  138.055924][ T4320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  138.064976][ T4788] FAULT_INJECTION: forcing a failure.
[  138.064976][ T4788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.089344][ T4788] CPU: 0 PID: 4788 Comm: syz.2.92 Not tainted syzkaller #0
[  138.097693][ T4788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  138.109943][ T4788] Call Trace:
[  138.113513][ T4788]  <TASK>
[  138.117159][ T4788]  dump_stack_lvl+0x168/0x22e
[  138.122452][ T4788]  ? show_regs_print_info+0x12/0x12
[  138.128863][ T4788]  ? load_image+0x3b0/0x3b0
[  138.135238][ T4788]  ? __lock_acquire+0x7c50/0x7c50
[  138.141792][ T4788]  should_fail_ex+0x399/0x4d0
[  138.149731][ T4788]  _copy_from_user+0x2c/0x170
[  138.155176][ T4788]  __sys_connect+0x132/0x410
[  138.160210][ T4788]  ? __sys_connect_file+0x170/0x170
[  138.165974][ T4788]  __x64_sys_connect+0x76/0x80
[  138.171728][ T4788]  do_syscall_64+0x4c/0xa0
[  138.176619][ T4788]  ? clear_bhb_loop+0x60/0xb0
[  138.181511][ T4788]  ? clear_bhb_loop+0x60/0xb0
[  138.186651][ T4788]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.194098][ T4788] RIP: 0033:0x7f598258ebe9
[  138.199521][ T4788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.226130][ T4788] RSP: 002b:00007f59833aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  138.235740][ T4788] RAX: ffffffffffffffda RBX: 00007f59827c5fa0 RCX: 00007f598258ebe9
[  138.245914][ T4788] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004
[  138.256488][ T4788] RBP: 00007f59833aa090 R08: 0000000000000000 R09: 0000000000000000
[  138.267211][ T4788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.277487][ T4788] R13: 00007f59827c6038 R14: 00007f59827c5fa0 R15: 00007ffcb148c9b8
[  138.287855][ T4788]  </TASK>
[  138.331520][ T4320] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.418120][ T4320] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  138.444846][ T4783] loop3: detected capacity change from 0 to 4096
[  138.468427][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.578676][ T4277] libceph: connect (1)[c::]:6789 error -101
[  138.596711][ T4277] libceph: mon0 (1)[c::]:6789 connect error
[  138.622839][ T4793] loop0: detected capacity change from 0 to 2048
[  138.635359][ T4793] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359
[  138.657024][ T4793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.679554][   T27] audit: type=1800 audit(1757271610.027:13): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.93" name="file1" dev="loop0" ino=1367 res=0 errno=0
[  138.744932][ T4320] usb 5-1: GET_CAPABILITIES returned 0
[  138.750959][ T4320] usbtmc 5-1:16.0: can't read capabilities
[  138.886856][ T4727] libceph: connect (1)[c::]:6789 error -101
[  138.893481][ T4727] libceph: mon0 (1)[c::]:6789 connect error
[  139.019610][ T4771] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32
[  139.079589][ T4320] usb 5-1: USB disconnect, device number 3
[  139.187821][ T4275] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  139.226710][ T4275] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  139.306157][ T4790] ceph: No mds server is up or the cluster is laggy
[  139.321699][ T4801] loop1: detected capacity change from 0 to 4096
[  139.356061][ T4801] ntfs: (device loop1): parse_options(): Unrecognized mount option mft_zone_mudtiplie000.
[  139.595281][ T4795] loop2: detected capacity change from 0 to 2048
[  139.668904][ T4805] FAULT_INJECTION: forcing a failure.
[  139.668904][ T4805] name failslab, interval 1, probability 0, space 0, times 0
[  139.806796][ T4805] CPU: 1 PID: 4805 Comm: syz.3.97 Not tainted syzkaller #0
[  139.814276][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  139.824812][ T4805] Call Trace:
[  139.828741][ T4805]  <TASK>
[  139.831882][ T4805]  dump_stack_lvl+0x168/0x22e
[  139.836599][ T4805]  ? show_regs_print_info+0x12/0x12
[  139.842031][ T4805]  ? load_image+0x3b0/0x3b0
[  139.847559][ T4805]  ? __might_sleep+0xd0/0xd0
[  139.852511][ T4805]  ? __lock_acquire+0x7c50/0x7c50
[  139.857774][ T4805]  should_fail_ex+0x399/0x4d0
[  139.860105][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'.
[  139.863291][ T4805]  should_failslab+0x5/0x20
[  139.863329][ T4805]  slab_pre_alloc_hook+0x59/0x310
[  139.863351][ T4805]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  139.863375][ T4805]  __kmem_cache_alloc_node+0x4f/0x260
[  139.863394][ T4805]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  139.903558][ T4805]  __kmalloc+0xa0/0x240
[  139.908176][ T4805]  tomoyo_realpath_from_path+0xdf/0x5d0
[  139.914748][ T4805]  tomoyo_path_number_perm+0x1e3/0x600
[  139.920495][ T4805]  ? tomoyo_path_number_perm+0x1b6/0x600
[  139.926542][ T4805]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  139.932467][ T4805]  ? ksys_write+0x1bd/0x240
[  139.937463][ T4805]  ? common_file_perm+0x171/0x1c0
[  139.943558][ T4805]  ? __fget_files+0x28/0x4d0
[  139.948661][ T4805]  security_file_ioctl+0x6c/0xa0
[  139.954086][ T4805]  __se_sys_ioctl+0x48/0x170
[  139.959224][ T4805]  do_syscall_64+0x4c/0xa0
[  139.964005][ T4805]  ? clear_bhb_loop+0x60/0xb0
[  139.968954][ T4805]  ? clear_bhb_loop+0x60/0xb0
[  139.974040][ T4805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.980038][ T4805] RIP: 0033:0x7f86dc18ebe9
[  139.984723][ T4805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.007930][ T4805] RSP: 002b:00007f86dd089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  140.016828][ T4805] RAX: ffffffffffffffda RBX: 00007f86dc3c5fa0 RCX: 00007f86dc18ebe9
[  140.025395][ T4805] RDX: 0000200000000580 RSI: 00000000c03864bc RDI: 0000000000000003
[  140.034022][ T4805] RBP: 00007f86dd089090 R08: 0000000000000000 R09: 0000000000000000
[  140.042612][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.051657][ T4805] R13: 00007f86dc3c6038 R14: 00007f86dc3c5fa0 R15: 00007ffd27dc9c68
[  140.060205][ T4805]  </TASK>
[  140.063466][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.065755][ T4807] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.145333][ T4795] NILFS (loop2): failed to count free inodes: err=-34
[  140.243579][ T4805] ERROR: Out of memory at tomoyo_realpath_from_path.
[  140.290430][ T4815] kAFS: No cell specified
[  140.390179][ T4817] loop1: detected capacity change from 0 to 128
[  141.786505][ T4728] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  142.406523][ T4728] usb 4-1: unable to get BOS descriptor or descriptor too short
[  142.530770][ T4833] kAFS: No cell specified
[  142.559303][ T4728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.559382][ T4728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  142.559408][ T4728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  142.559430][ T4728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  142.563659][ T4728] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  142.563690][ T4728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.563710][ T4728] usb 4-1: Product: Е
[  142.563740][ T4728] usb 4-1: SerialNumber: �
[  142.565740][ T4728] usb 4-1: config 0 descriptor??
[  142.570404][ T4825] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  142.574919][    C0] usb 4-1: NFC: Urb failure (status -71)
[  142.575178][ T4728] usb 4-1: NFC: Unable to get FW version
[  142.576168][ T4728] pn533_usb: probe of 4-1:0.0 failed with error -90
[  142.659424][ T4812] lo speed is unknown, defaulting to 1000
[  142.659905][ T4812] lo speed is unknown, defaulting to 1000
[  142.668792][ T4812] lo speed is unknown, defaulting to 1000
[  142.983193][ T4812] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  143.019710][ T4812] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  143.112455][ T4812] lo speed is unknown, defaulting to 1000
[  143.125549][ T4812] lo speed is unknown, defaulting to 1000
[  143.137662][ T4812] lo speed is unknown, defaulting to 1000
[  143.153024][ T4812] lo speed is unknown, defaulting to 1000
[  143.166247][ T4812] lo speed is unknown, defaulting to 1000
[  143.409763][ T4839] FAULT_INJECTION: forcing a failure.
[  143.409763][ T4839] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.625291][ T4839] CPU: 0 PID: 4839 Comm: syz.0.105 Not tainted syzkaller #0
[  143.633182][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  143.644983][ T4839] Call Trace:
[  143.648646][ T4839]  <TASK>
[  143.651701][ T4839]  dump_stack_lvl+0x168/0x22e
[  143.656966][ T4839]  ? show_regs_print_info+0x12/0x12
[  143.662477][ T4839]  ? load_image+0x3b0/0x3b0
[  143.667134][ T4839]  ? __lock_acquire+0x7c50/0x7c50
[  143.672556][ T4839]  ? verify_lock_unused+0x140/0x140
[  143.678131][ T4839]  should_fail_ex+0x399/0x4d0
[  143.683031][ T4839]  _copy_from_user+0x2c/0x170
[  143.688227][ T4839]  ___sys_sendmsg+0x155/0x290
[  143.693791][ T4839]  ? __sys_sendmsg+0x270/0x270
[  143.698887][ T4839]  ? lockdep_hardirqs_on+0x94/0x140
[  143.704888][ T4839]  ? __fdget+0x17c/0x200
[  143.709999][ T4839]  __se_sys_sendmsg+0x19e/0x270
[  143.715341][ T4839]  ? __x64_sys_sendmsg+0x80/0x80
[  143.720774][ T4839]  ? lockdep_hardirqs_on+0x94/0x140
[  143.726718][ T4839]  do_syscall_64+0x4c/0xa0
[  143.731646][ T4839]  ? clear_bhb_loop+0x60/0xb0
[  143.737137][ T4839]  ? clear_bhb_loop+0x60/0xb0
[  143.742265][ T4839]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.748616][ T4839] RIP: 0033:0x7fd37cf8ebe9
[  143.753317][ T4839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.776094][ T4839] RSP: 002b:00007fd37dd32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  143.786392][ T4839] RAX: ffffffffffffffda RBX: 00007fd37d1c6180 RCX: 00007fd37cf8ebe9
[  143.795955][ T4839] RDX: 0000000000080000 RSI: 0000200000000100 RDI: 0000000000000003
[  143.805253][ T4839] RBP: 00007fd37dd32090 R08: 0000000000000000 R09: 0000000000000000
[  143.814436][ T4839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.823401][ T4839] R13: 00007fd37d1c6218 R14: 00007fd37d1c6180 R15: 00007ffca9f9c658
[  143.832471][ T4839]  </TASK>
[  143.967533][ T4727] usb 4-1: USB disconnect, device number 4
[  144.012836][ T4265] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 8796093022222
[  144.061231][ T4265] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16)
[  144.118177][ T4265] Remounting filesystem read-only
[  144.123674][ T4265] NILFS (loop2): error -5 truncating bmap (ino=16)
[  144.238918][ T4851] loop1: detected capacity change from 0 to 8192
[  144.269517][ T4851] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[  144.342012][ T4328] libceph: connect (1)[c::]:6789 error -101
[  144.399811][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  144.492142][ T4856] loop0: detected capacity change from 0 to 2048
[  144.518239][ T4858] FAULT_INJECTION: forcing a failure.
[  144.518239][ T4858] name failslab, interval 1, probability 0, space 0, times 0
[  144.555443][ T4856] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359
[  144.612932][ T4858] CPU: 1 PID: 4858 Comm: syz.3.111 Not tainted syzkaller #0
[  144.620913][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  144.631537][ T4858] Call Trace:
[  144.635398][ T4858]  <TASK>
[  144.638500][ T4858]  dump_stack_lvl+0x168/0x22e
[  144.643319][ T4858]  ? show_regs_print_info+0x12/0x12
[  144.649285][ T4858]  ? load_image+0x3b0/0x3b0
[  144.655002][ T4858]  ? __might_sleep+0xd0/0xd0
[  144.659738][ T4858]  ? __lock_acquire+0x7c50/0x7c50
[  144.664993][ T4858]  should_fail_ex+0x399/0x4d0
[  144.670183][ T4858]  should_failslab+0x5/0x20
[  144.675091][ T4858]  slab_pre_alloc_hook+0x59/0x310
[  144.680419][ T4858]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  144.686524][ T4858]  __kmem_cache_alloc_node+0x4f/0x260
[  144.692216][ T4858]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  144.698868][ T4858]  __kmalloc+0xa0/0x240
[  144.703853][ T4858]  tomoyo_realpath_from_path+0xdf/0x5d0
[  144.711205][ T4858]  tomoyo_path_number_perm+0x1e3/0x600
[  144.717103][ T4858]  ? tomoyo_path_number_perm+0x1b6/0x600
[  144.723181][ T4858]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  144.728991][ T4858]  ? ksys_write+0x1bd/0x240
[  144.734066][ T4858]  ? common_file_perm+0x171/0x1c0
[  144.739508][ T4858]  ? __fget_files+0x28/0x4d0
[  144.744337][ T4858]  security_file_ioctl+0x6c/0xa0
[  144.750304][ T4858]  __se_sys_ioctl+0x48/0x170
[  144.755961][ T4858]  do_syscall_64+0x4c/0xa0
[  144.760980][ T4858]  ? clear_bhb_loop+0x60/0xb0
[  144.765786][ T4858]  ? clear_bhb_loop+0x60/0xb0
[  144.770590][ T4858]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.777086][ T4858] RIP: 0033:0x7f86dc18ebe9
[  144.781614][ T4858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.803000][ T4858] RSP: 002b:00007f86dd089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.813204][ T4858] RAX: ffffffffffffffda RBX: 00007f86dc3c5fa0 RCX: 00007f86dc18ebe9
[  144.821764][ T4858] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003
[  144.830509][ T4858] RBP: 00007f86dd089090 R08: 0000000000000000 R09: 0000000000000000
[  144.839265][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.847723][ T4858] R13: 00007f86dc3c6038 R14: 00007f86dc3c5fa0 R15: 00007ffd27dc9c68
[  144.856393][ T4858]  </TASK>
[  144.859805][    C1] vkms_vblank_simulate: vblank timer overrun
[  144.871839][ T4328] libceph: connect (1)[c::]:6789 error -101
[  144.878599][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  144.926559][ T4856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.010613][   T27] audit: type=1800 audit(1757271616.357:14): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.110" name="file1" dev="loop0" ino=1367 res=0 errno=0
[  145.446972][ T4320] libceph: connect (1)[c::]:6789 error -101
[  145.454039][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  145.522067][ T4853] ceph: No mds server is up or the cluster is laggy
[  145.614499][ T4858] ERROR: Out of memory at tomoyo_realpath_from_path.
[  145.727357][ T4265] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  145.822761][ T4858] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  145.854915][ T4861] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  145.862850][ T4861] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  145.874980][ T4861] vhci_hcd vhci_hcd.0: Device attached
[  145.950472][ T4862] vhci_hcd: connection closed
[  145.954832][    T9] vhci_hcd: stop threads
[  146.064571][    T9] vhci_hcd: release socket
[  146.201394][    T9] vhci_hcd: disconnect device
[  146.652104][ T4866] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  146.659259][ T4866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  146.668305][ T4866] vhci_hcd vhci_hcd.0: Device attached
[  147.166752][ T4320] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  147.392006][ T4867] vhci_hcd: connection closed
[  147.477634][ T4396] vhci_hcd: stop threads
[  147.935342][ T4396] vhci_hcd: release socket
[  147.941279][ T4396] vhci_hcd: disconnect device
[  147.981410][ T4320] usb 37-1: enqueue for inactive port 0
[  148.086186][ T4872] kAFS: No cell specified
[  148.264693][ T4875] siw: device registration error -23
[  148.287353][   T46] wlan1: Trigger new scan to find an IBSS to join
[  148.967812][ T4320] vhci_hcd: vhci_device speed not set
[  149.000839][ T4882] loop3: detected capacity change from 0 to 128
[  149.197301][ T4259] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  149.347289][ T4890] loop2: detected capacity change from 0 to 256
[  149.434054][ T4890] exfat: Deprecated parameter 'utf8'
[  150.054347][ T4886] loop0: detected capacity change from 0 to 4096
[  150.078387][ T4890] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d)
[  150.154136][ T4886] =======================================================
[  150.154136][ T4886] WARNING: The mand mount option has been deprecated and
[  150.154136][ T4886]          and is ignored by this kernel. Remove the mand
[  150.154136][ T4886]          option from the mount to silence this warning.
[  150.154136][ T4886] =======================================================
[  150.319424][ T4897] FAULT_INJECTION: forcing a failure.
[  150.319424][ T4897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.388222][ T4897] CPU: 1 PID: 4897 Comm: syz.4.121 Not tainted syzkaller #0
[  150.396377][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.406724][ T4897] Call Trace:
[  150.410101][ T4897]  <TASK>
[  150.413125][ T4897]  dump_stack_lvl+0x168/0x22e
[  150.418473][ T4897]  ? show_regs_print_info+0x12/0x12
[  150.424342][ T4897]  ? load_image+0x3b0/0x3b0
[  150.429490][ T4897]  ? __lock_acquire+0x7c50/0x7c50
[  150.436730][ T4897]  ? verify_lock_unused+0x140/0x140
[  150.442576][ T4897]  should_fail_ex+0x399/0x4d0
[  150.447732][ T4897]  _copy_from_user+0x2c/0x170
[  150.453457][ T4897]  ___sys_sendmsg+0x155/0x290
[  150.459075][ T4897]  ? __sys_sendmsg+0x270/0x270
[  150.464489][ T4897]  ? __lock_acquire+0x7c50/0x7c50
[  150.469892][ T4897]  ? __fdget+0x17c/0x200
[  150.474832][ T4897]  __se_sys_sendmsg+0x19e/0x270
[  150.480523][ T4897]  ? __x64_sys_sendmsg+0x80/0x80
[  150.486058][ T4897]  ? lockdep_hardirqs_on+0x94/0x140
[  150.494583][ T4897]  do_syscall_64+0x4c/0xa0
[  150.502213][ T4897]  ? clear_bhb_loop+0x60/0xb0
[  150.509570][ T4897]  ? clear_bhb_loop+0x60/0xb0
[  150.517529][ T4897]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.526733][ T4897] RIP: 0033:0x7f733c98ebe9
[  150.533387][ T4897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.555566][ T4897] RSP: 002b:00007f733d84a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.564806][ T4897] RAX: ffffffffffffffda RBX: 00007f733cbc5fa0 RCX: 00007f733c98ebe9
[  150.573714][ T4897] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000005
[  150.583532][ T4897] RBP: 00007f733d84a090 R08: 0000000000000000 R09: 0000000000000000
[  150.593466][ T4897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.602781][ T4897] R13: 00007f733cbc6038 R14: 00007f733cbc5fa0 R15: 00007ffe2c0b89f8
[  150.611487][ T4897]  </TASK>
[  150.669465][ T4901] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.732033][ T4886] NILFS error (device loop0): nilfs_readdir: zero-length directory entry
[  150.805627][ T4886] Remounting filesystem read-only
[  151.664763][ T4913] FAULT_INJECTION: forcing a failure.
[  151.664763][ T4913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.686769][ T4327] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  151.716466][ T4913] CPU: 1 PID: 4913 Comm: syz.4.125 Not tainted syzkaller #0
[  151.726452][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  151.737932][ T4913] Call Trace:
[  151.741571][ T4913]  <TASK>
[  151.744772][ T4913]  dump_stack_lvl+0x168/0x22e
[  151.749652][ T4913]  ? show_regs_print_info+0x12/0x12
[  151.755157][ T4913]  ? load_image+0x3b0/0x3b0
[  151.759847][ T4913]  ? __lock_acquire+0x7c50/0x7c50
[  151.765432][ T4913]  ? verify_lock_unused+0x140/0x140
[  151.771429][ T4913]  should_fail_ex+0x399/0x4d0
[  151.776207][ T4913]  _copy_from_user+0x2c/0x170
[  151.781167][ T4913]  ___sys_sendmsg+0x155/0x290
[  151.786478][ T4913]  ? __sys_sendmsg+0x270/0x270
[  151.791673][ T4913]  ? __lock_acquire+0x7c50/0x7c50
[  151.797168][ T4913]  ? __fdget+0x17c/0x200
[  151.801424][ T4913]  __se_sys_sendmsg+0x19e/0x270
[  151.806381][ T4913]  ? __x64_sys_sendmsg+0x80/0x80
[  151.811637][ T4913]  ? lockdep_hardirqs_on+0x94/0x140
[  151.817568][ T4913]  do_syscall_64+0x4c/0xa0
[  151.822441][ T4913]  ? clear_bhb_loop+0x60/0xb0
[  151.827148][ T4913]  ? clear_bhb_loop+0x60/0xb0
[  151.832042][ T4913]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  151.838037][ T4913] RIP: 0033:0x7f733c98ebe9
[  151.842656][ T4913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.863498][ T4913] RSP: 002b:00007f733d84a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.874125][ T4913] RAX: ffffffffffffffda RBX: 00007f733cbc5fa0 RCX: 00007f733c98ebe9
[  151.882640][ T4913] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000007
[  151.891525][ T4913] RBP: 00007f733d84a090 R08: 0000000000000000 R09: 0000000000000000
[  151.900383][ T4913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.908736][ T4913] R13: 00007f733cbc6038 R14: 00007f733cbc5fa0 R15: 00007ffe2c0b89f8
[  151.917897][ T4913]  </TASK>
[  152.048575][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  152.074814][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  152.142052][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  152.186602][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  152.238479][ T4327] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  152.276502][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.306482][ T4327] usb 4-1: Product: syz
[  152.317458][ T4327] usb 4-1: Manufacturer: syz
[  152.344476][ T4327] usb 4-1: SerialNumber: syz
[  152.412177][ T4327] usb 4-1: config 0 descriptor??
[  152.660548][ T4327] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  152.720469][ T4930] FAULT_INJECTION: forcing a failure.
[  152.720469][ T4930] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.748010][    C0] vkms_vblank_simulate: vblank timer overrun
[  152.820544][ T4930] CPU: 1 PID: 4930 Comm: syz.1.128 Not tainted syzkaller #0
[  152.828613][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  152.839417][ T4930] Call Trace:
[  152.843038][ T4930]  <TASK>
[  152.845720][ T4728] usb 4-1: USB disconnect, device number 5
[  152.846324][ T4930]  dump_stack_lvl+0x168/0x22e
[  152.852548][ T4908] FAULT_INJECTION: forcing a failure.
[  152.852548][ T4908] name failslab, interval 1, probability 0, space 0, times 0
[  152.857032][ T4930]  ? show_regs_print_info+0x12/0x12
[  152.857060][ T4930]  ? load_image+0x3b0/0x3b0
[  152.857086][ T4930]  ? __lock_acquire+0x7c50/0x7c50
[  152.857109][ T4930]  ? verify_lock_unused+0x140/0x140
[  152.857136][ T4930]  should_fail_ex+0x399/0x4d0
[  152.857166][ T4930]  _copy_from_user+0x2c/0x170
[  152.857195][ T4930]  ___sys_sendmsg+0x155/0x290
[  152.906577][ T4930]  ? __sys_sendmsg+0x270/0x270
[  152.911867][ T4930]  ? __fdget+0x17c/0x200
[  152.916410][ T4930]  __sys_sendmmsg+0x272/0x490
[  152.921306][ T4930]  ? __ia32_sys_sendmsg+0x80/0x80
[  152.926521][ T4930]  ? mutex_unlock+0x10/0x10
[  152.931477][ T4930]  ? __fget_files+0x44a/0x4d0
[  152.936629][ T4930]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  152.943423][ T4930]  ? lock_chain_count+0x20/0x20
[  152.948917][ T4930]  __x64_sys_sendmmsg+0x9c/0xb0
[  152.954144][ T4930]  do_syscall_64+0x4c/0xa0
[  152.959401][ T4930]  ? clear_bhb_loop+0x60/0xb0
[  152.965440][ T4930]  ? clear_bhb_loop+0x60/0xb0
[  152.970781][ T4930]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.977000][ T4930] RIP: 0033:0x7ff04238ebe9
[  152.982785][ T4930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.005308][ T4930] RSP: 002b:00007ff043195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  153.015149][ T4930] RAX: ffffffffffffffda RBX: 00007ff0425c5fa0 RCX: 00007ff04238ebe9
[  153.023546][ T4930] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003
[  153.033190][ T4930] RBP: 00007ff043195090 R08: 0000000000000000 R09: 0000000000000000
[  153.043002][ T4930] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001
[  153.053219][ T4930] R13: 00007ff0425c6038 R14: 00007ff0425c5fa0 R15: 00007ffffa441068
[  153.063755][ T4930]  </TASK>
[  153.080892][ T4908] CPU: 1 PID: 4908 Comm: syz.3.123 Not tainted syzkaller #0
[  153.089392][ T4908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  153.100253][ T4908] Call Trace:
[  153.103666][ T4908]  <TASK>
[  153.106946][ T4908]  dump_stack_lvl+0x168/0x22e
[  153.112119][ T4908]  ? show_regs_print_info+0x12/0x12
[  153.117795][ T4908]  ? load_image+0x3b0/0x3b0
[  153.123065][ T4908]  ? __might_sleep+0xd0/0xd0
[  153.128600][ T4908]  ? __lock_acquire+0x7c50/0x7c50
[  153.135367][ T4908]  ? trace_contention_end+0x5f/0x170
[  153.141510][ T4908]  should_fail_ex+0x399/0x4d0
[  153.146516][ T4908]  should_failslab+0x5/0x20
[  153.151509][ T4908]  slab_pre_alloc_hook+0x59/0x310
[  153.156770][ T4908]  ? kobject_uevent_env+0x270/0x8a0
[  153.162557][ T4908]  __kmem_cache_alloc_node+0x4f/0x260
[  153.168596][ T4908]  ? dev_uevent_filter+0xb0/0xb0
[  153.173843][ T4908]  ? kobject_uevent_env+0x270/0x8a0
[  153.180238][ T4908]  kmalloc_trace+0x26/0xe0
[  153.185862][ T4908]  ? dev_uevent_filter+0xb0/0xb0
[  153.191329][ T4908]  kobject_uevent_env+0x270/0x8a0
[  153.197026][ T4908]  ? gadget_unbind_driver+0x2fe/0x410
[  153.203340][ T4908]  ? gadget_bind_driver+0x750/0x750
[  153.209381][ T4908]  device_release_driver_internal+0x4be/0x850
[  153.216461][ T4908]  driver_detach+0x1ef/0x2d0
[  153.221376][ T4908]  bus_remove_driver+0x11c/0x230
[  153.227272][ T4908]  ? sysfs_remove_groups+0x8a/0xa0
[  153.234151][ T4908]  usb_gadget_unregister_driver+0x4a/0x70
[  153.240386][ T4908]  raw_release+0xd6/0x260
[  153.244947][ T4908]  ? raw_open+0x510/0x510
[  153.249496][ T4908]  __fput+0x22c/0x920
[  153.253974][ T4908]  task_work_run+0x1ca/0x250
[  153.259164][ T4908]  ? task_work_cancel+0x230/0x230
[  153.264666][ T4908]  ? __close_range+0x1c5/0x730
[  153.269966][ T4908]  ? exit_to_user_mode_loop+0x3b/0x110
[  153.275745][ T4908]  exit_to_user_mode_loop+0xe6/0x110
[  153.282313][ T4908]  exit_to_user_mode_prepare+0xb1/0x140
[  153.288104][ T4908]  syscall_exit_to_user_mode+0x16/0x40
[  153.293866][ T4908]  do_syscall_64+0x58/0xa0
[  153.298414][ T4908]  ? clear_bhb_loop+0x60/0xb0
[  153.303853][ T4908]  ? clear_bhb_loop+0x60/0xb0
[  153.309364][ T4908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.315839][ T4908] RIP: 0033:0x7f86dc18ebe9
[  153.320664][ T4908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.327343][ T4576] wlan1: Trigger new scan to find an IBSS to join
[  153.341418][ T4908] RSP: 002b:00007f86dd089038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  153.341448][ T4908] RAX: 0000000000000000 RBX: 00007f86dc3c5fa0 RCX: 00007f86dc18ebe9
[  153.341461][ T4908] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  153.341472][ T4908] RBP: 00007f86dd089090 R08: 0000000000000000 R09: 0000000000000000
[  153.341483][ T4908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.341495][ T4908] R13: 00007f86dc3c6038 R14: 00007f86dc3c5fa0 R15: 00007ffd27dc9c68
[  153.341523][ T4908]  </TASK>
[  153.453519][ T4937] FAULT_INJECTION: forcing a failure.
[  153.453519][ T4937] name failslab, interval 1, probability 0, space 0, times 0
[  153.486834][ T4937] CPU: 0 PID: 4937 Comm: syz.4.130 Not tainted syzkaller #0
[  153.495034][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  153.506435][ T4937] Call Trace:
[  153.510210][ T4937]  <TASK>
[  153.513601][ T4937]  dump_stack_lvl+0x168/0x22e
[  153.518680][ T4937]  ? show_regs_print_info+0x12/0x12
[  153.524182][ T4937]  ? load_image+0x3b0/0x3b0
[  153.529083][ T4937]  ? __might_sleep+0xd0/0xd0
[  153.534348][ T4937]  ? __lock_acquire+0x7c50/0x7c50
[  153.540806][ T4937]  should_fail_ex+0x399/0x4d0
[  153.546490][ T4937]  should_failslab+0x5/0x20
[  153.551682][ T4937]  slab_pre_alloc_hook+0x59/0x310
[  153.557281][ T4937]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  153.563660][ T4937]  __kmem_cache_alloc_node+0x4f/0x260
[  153.569515][ T4937]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  153.575436][ T4937]  __kmalloc+0xa0/0x240
[  153.579867][ T4937]  tomoyo_realpath_from_path+0xdf/0x5d0
[  153.585605][ T4937]  tomoyo_path_number_perm+0x1e3/0x600
[  153.591159][ T4937]  ? tomoyo_path_number_perm+0x1b6/0x600
[  153.597362][ T4937]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  153.603017][ T4937]  ? ksys_write+0x1bd/0x240
[  153.608082][ T4937]  ? common_file_perm+0x171/0x1c0
[  153.613288][ T4937]  ? __fget_files+0x28/0x4d0
[  153.618074][ T4937]  security_file_ioctl+0x6c/0xa0
[  153.623466][ T4937]  __se_sys_ioctl+0x48/0x170
[  153.628427][ T4937]  do_syscall_64+0x4c/0xa0
[  153.633321][ T4937]  ? clear_bhb_loop+0x60/0xb0
[  153.638553][ T4937]  ? clear_bhb_loop+0x60/0xb0
[  153.643544][ T4937]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.650276][ T4937] RIP: 0033:0x7f733c98ebe9
[  153.654728][ T4937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.676207][ T4937] RSP: 002b:00007f733d808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  153.685182][ T4937] RAX: ffffffffffffffda RBX: 00007f733cbc6180 RCX: 00007f733c98ebe9
[  153.694340][ T4937] RDX: 00002000000001c0 RSI: 00000000c040565e RDI: 000000000000000c
[  153.703120][ T4937] RBP: 00007f733d808090 R08: 0000000000000000 R09: 0000000000000000
[  153.712023][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.721416][ T4937] R13: 00007f733cbc6218 R14: 00007f733cbc6180 R15: 00007ffe2c0b89f8
[  153.730490][ T4937]  </TASK>
[  153.830708][ T4939] loop3: detected capacity change from 0 to 8192
[  153.842039][ T4937] ERROR: Out of memory at tomoyo_realpath_from_path.
[  153.864387][ T4941] loop1: detected capacity change from 0 to 128
[  153.881829][ T4939] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "euid<00000000000000000000"
[  154.082046][ T4947] 9pnet_fd: Insufficient options for proto=fd
[  155.914720][ T4959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  155.997745][ T4960] binder: 4958:4960 ioctl c018620c 200000000000 returned -1
[  156.010480][ T4355] wlan1: Creating new IBSS network, BSSID 7a:24:3d:a7:48:c9
[  156.106465][ T4320] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  156.192643][ T4968] FAULT_INJECTION: forcing a failure.
[  156.192643][ T4968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.213778][ T4968] CPU: 1 PID: 4968 Comm: syz.2.140 Not tainted syzkaller #0
[  156.224284][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  156.235447][ T4968] Call Trace:
[  156.238853][ T4968]  <TASK>
[  156.241820][ T4968]  dump_stack_lvl+0x168/0x22e
[  156.247151][ T4968]  ? show_regs_print_info+0x12/0x12
[  156.253358][ T4968]  ? load_image+0x3b0/0x3b0
[  156.258546][ T4968]  ? __lock_acquire+0x7c50/0x7c50
[  156.263693][ T4968]  ? verify_lock_unused+0x140/0x140
[  156.269207][ T4968]  should_fail_ex+0x399/0x4d0
[  156.274379][ T4968]  _copy_from_user+0x2c/0x170
[  156.279104][ T4968]  ___sys_sendmsg+0x155/0x290
[  156.284249][ T4968]  ? __sys_sendmsg+0x270/0x270
[  156.289604][ T4968]  ? __lock_acquire+0x7c50/0x7c50
[  156.294751][ T4968]  ? __fdget+0x17c/0x200
[  156.299576][ T4968]  __se_sys_sendmsg+0x19e/0x270
[  156.305081][ T4968]  ? __x64_sys_sendmsg+0x80/0x80
[  156.310674][ T4968]  ? lockdep_hardirqs_on+0x94/0x140
[  156.316799][ T4968]  do_syscall_64+0x4c/0xa0
[  156.322350][ T4968]  ? clear_bhb_loop+0x60/0xb0
[  156.328100][ T4968]  ? clear_bhb_loop+0x60/0xb0
[  156.333396][ T4968]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.340257][ T4968] RIP: 0033:0x7f598258ebe9
[  156.344950][ T4968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.365262][ T4968] RSP: 002b:00007f59833aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.374384][ T4968] RAX: ffffffffffffffda RBX: 00007f59827c5fa0 RCX: 00007f598258ebe9
[  156.383408][ T4968] RDX: 000000000004c815 RSI: 0000200000000140 RDI: 0000000000000005
[  156.392109][ T4968] RBP: 00007f59833aa090 R08: 0000000000000000 R09: 0000000000000000
[  156.400100][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.408280][ T4968] R13: 00007f59827c6038 R14: 00007f59827c5fa0 R15: 00007ffcb148c9b8
[  156.416733][ T4968]  </TASK>
[  156.536501][ T4320] usb 1-1: Using ep0 maxpacket: 16
[  156.544733][ T4320] usb 1-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30
[  156.557356][ T4320] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10
[  156.570117][ T4320] usb 1-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  156.584324][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0
[  156.591467][ T4320] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  156.601229][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.622360][ T4320] usb 1-1: config 0 descriptor??
[  157.045048][ T4320] elecom 0003:056E:00E6.0001: item fetching failed at offset 0/3
[  157.059398][ T4320] elecom: probe of 0003:056E:00E6.0001 failed with error -22
[  157.178016][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807cdb9400: rx timeout, send abort
[  157.189653][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cdb9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  157.243860][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880562eb800: rx timeout, send abort
[  157.255620][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880562eb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  157.288673][ T4955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.308089][ T4955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.368325][ T4320] usb 1-1: USB disconnect, device number 2
[  157.438721][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b5c3c00: rx timeout, send abort
[  157.450235][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b5c3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  157.921713][ T4976] loop1: detected capacity change from 0 to 4096
[  160.630722][    T7] libceph: connect (1)[c::]:6789 error -101
[  160.697902][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  160.734642][ T4985] loop3: detected capacity change from 0 to 2048
[  160.775886][   T27] audit: type=1326 audit(1757271632.117:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  160.777877][ T4993] loop0: detected capacity change from 0 to 128
[  160.839151][ T4985] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359
[  161.024533][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'.
[  161.076855][ T4277] libceph: connect (1)[c::]:6789 error -101
[  161.132439][ T4985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.686907][ T4277] libceph: mon0 (1)[c::]:6789 connect error
[  161.726933][ T4983] ceph: No mds server is up or the cluster is laggy
[  161.740332][   T27] audit: type=1326 audit(1757271632.187:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  161.854950][   T27] audit: type=1326 audit(1757271632.187:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  161.915775][   T27] audit: type=1326 audit(1757271632.187:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  161.974666][ T4997] loop2: detected capacity change from 0 to 512
[  162.041651][   T27] audit: type=1326 audit(1757271632.187:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  162.361003][ T5008] process 'syz.4.150' launched './file0' with NULL argv: empty string added
[  162.541755][   T27] audit: type=1326 audit(1757271632.187:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  162.613346][ T4997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  162.937740][ T4997] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  163.026687][   T27] audit: type=1326 audit(1757271632.187:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  163.178239][   T27] audit: type=1326 audit(1757271632.187:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  164.274215][ T5018] loop1: detected capacity change from 0 to 128
[  164.404651][ T5018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  164.422473][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  164.487518][ T5018] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  165.841011][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  166.043840][ T5031] loop3: detected capacity change from 0 to 1024
[  166.079015][ T5031] hfsplus: unable to find HFS+ superblock
[  166.346142][ T5033] loop1: detected capacity change from 0 to 32768
[  166.377867][ T5033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.158 (5033)
[  166.423106][ T5033] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.435195][ T5033] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  166.444801][ T5033] BTRFS info (device loop1): using free space tree
[  166.591750][ T4328] libceph: connect (1)[c::]:6789 error -101
[  166.602086][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  166.700276][ T5052] loop3: detected capacity change from 0 to 128
[  166.715868][ T5048] loop4: detected capacity change from 0 to 2048
[  166.823014][ T5048] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359
[  166.867442][  T128] libceph: connect (1)[c::]:6789 error -101
[  166.875936][  T128] libceph: mon0 (1)[c::]:6789 connect error
[  167.061787][ T5048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.135010][ T5033] BTRFS info (device loop1): enabling ssd optimizations
[  167.213333][   T27] audit: type=1800 audit(1757271638.557:23): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.160" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  168.275729][ T5054] loop0: detected capacity change from 0 to 4096
[  169.555301][ T5041] ceph: No mds server is up or the cluster is laggy
[  169.681799][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'.
[  169.700755][   T27] audit: type=1326 audit(1757271641.047:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  169.841171][   T27] audit: type=1326 audit(1757271641.047:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  169.870894][   T27] audit: type=1326 audit(1757271641.047:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  169.887025][ T4320] libceph: connect (1)[c::]:6789 error -101
[  169.897703][   T27] audit: type=1326 audit(1757271641.047:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  169.910082][ T5079] loop2: detected capacity change from 0 to 2048
[  169.935479][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  169.957684][   T27] audit: type=1326 audit(1757271641.047:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  169.983228][   T27] audit: type=1326 audit(1757271641.047:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  169.994087][ T5079] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359
[  170.008892][   T27] audit: type=1326 audit(1757271641.047:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  170.047540][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.216905][ T4328] libceph: connect (1)[c::]:6789 error -101
[  170.223648][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  170.272647][ T5082] FAULT_INJECTION: forcing a failure.
[  170.272647][ T5082] name failslab, interval 1, probability 0, space 0, times 0
[  170.287779][ T5082] CPU: 0 PID: 5082 Comm: syz.0.164 Not tainted syzkaller #0
[  170.296006][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  170.306375][ T5082] Call Trace:
[  170.309707][ T5082]  <TASK>
[  170.312861][ T5082]  dump_stack_lvl+0x168/0x22e
[  170.318217][ T5082]  ? show_regs_print_info+0x12/0x12
[  170.324171][ T5082]  ? load_image+0x3b0/0x3b0
[  170.329005][ T5082]  ? __might_sleep+0xd0/0xd0
[  170.334645][ T5082]  ? __lock_acquire+0x7c50/0x7c50
[  170.338110][   T27] audit: type=1326 audit(1757271641.047:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dc18ebe9 code=0x7ffc0000
[  170.340379][ T5082]  should_fail_ex+0x399/0x4d0
[  170.369755][ T5082]  should_failslab+0x5/0x20
[  170.374792][ T5082]  slab_pre_alloc_hook+0x59/0x310
[  170.380724][ T5082]  ? finish_task_switch+0x265/0x8f0
[  170.386594][ T5082]  kmem_cache_alloc+0x56/0x2f0
[  170.391947][ T5082]  ? mas_alloc_nodes+0x2ec/0x890
[  170.397206][ T5082]  mas_alloc_nodes+0x2ec/0x890
[  170.402101][ T5082]  ? __schedule+0x10f4/0x40b0
[  170.407172][ T5082]  mas_preallocate+0x161/0x3c0
[  170.412172][ T5082]  do_mas_align_munmap+0x1f3/0x1220
[  170.418396][ T5082]  ? do_mas_munmap+0x2b0/0x2b0
[  170.423481][ T5082]  ? mtree_range_walk+0x672/0x7b0
[  170.428839][ T5082]  ? mas_walk+0x15f/0x180
[  170.433499][ T5082]  ? mas_find+0x1e8/0x230
[  170.438069][ T5082]  do_mas_munmap+0x240/0x2b0
[  170.443320][ T5082]  mmap_region+0x6e5/0x1c70
[  170.447901][ T5082]  ? file_mmap_ok+0x170/0x170
[  170.452811][ T5082]  ? cap_mmap_addr+0x165/0x2e0
[  170.457994][ T5082]  ? file_mmap_ok+0x11c/0x170
[  170.463172][ T5082]  do_mmap+0x958/0xfd0
[  170.467784][ T5082]  ? mlock_future_check+0x100/0x100
[  170.473354][ T5082]  ? ima_file_mmap+0x8e/0x150
[  170.478617][ T5082]  ? ima_file_free+0x3e0/0x3e0
[  170.484135][ T5082]  ? common_file_perm+0x171/0x1c0
[  170.489434][ T5082]  vm_mmap_pgoff+0x1b2/0x2b0
[  170.494227][ T5082]  ? account_locked_vm+0xe0/0xe0
[  170.499657][ T5082]  ksys_mmap_pgoff+0x516/0x6f0
[  170.504634][ T5082]  ? lockdep_hardirqs_on+0x94/0x140
[  170.509855][ T5082]  do_syscall_64+0x4c/0xa0
[  170.514542][ T5082]  ? clear_bhb_loop+0x60/0xb0
[  170.519426][ T5082]  ? clear_bhb_loop+0x60/0xb0
[  170.524468][ T5082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.530851][ T5082] RIP: 0033:0x7fd37cf8ebe9
[  170.535471][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.556133][ T5082] RSP: 002b:00007fd37dd74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  170.565190][ T5082] RAX: ffffffffffffffda RBX: 00007fd37d1c5fa0 RCX: 00007fd37cf8ebe9
[  170.573196][ T5082] RDX: 0000000003000011 RSI: 0000000000004000 RDI: 0000200000ffa000
[  170.581711][ T5082] RBP: 00007fd37dd74090 R08: 0000000000000007 R09: 0000000062ee7000
[  170.589694][ T5082] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  170.598372][ T5082] R13: 00007fd37d1c6038 R14: 00007fd37d1c5fa0 R15: 00007ffca9f9c658
[  170.607075][ T5082]  </TASK>
[  170.636463][ T5079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.782284][   T27] audit: type=1800 audit(1757271642.127:32): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.163" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  171.637478][ T4328] libceph: connect (1)[c::]:6789 error -101
[  171.644127][ T4328] libceph: mon0 (1)[c::]:6789 connect error
[  172.033508][ T5090] loop4: detected capacity change from 0 to 512
[  172.283712][ T5090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  172.298286][ T5077] ceph: No mds server is up or the cluster is laggy
[  172.354211][ T5090] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  172.395129][ T5105] netlink: 48 bytes leftover after parsing attributes in process `syz.0.169'.
[  172.538156][ T5110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.169'.
[  172.551059][ T5110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.169'.
[  172.751608][ T5115] loop3: detected capacity change from 0 to 128
[  172.758167][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  172.770831][ T5114] FAULT_INJECTION: forcing a failure.
[  172.770831][ T5114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.791493][ T4421] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  172.863553][ T5114] CPU: 0 PID: 5114 Comm: syz.2.172 Not tainted syzkaller #0
[  172.871541][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  172.882349][ T5114] Call Trace:
[  172.886120][ T5114]  <TASK>
[  172.889236][ T5114]  dump_stack_lvl+0x168/0x22e
[  172.895558][ T5114]  ? show_regs_print_info+0x12/0x12
[  172.901254][ T5114]  ? load_image+0x3b0/0x3b0
[  172.906721][ T5114]  ? __lock_acquire+0x7c50/0x7c50
[  172.912593][ T5114]  ? verify_lock_unused+0x140/0x140
[  172.918459][ T5114]  should_fail_ex+0x399/0x4d0
[  172.923817][ T5114]  _copy_from_user+0x2c/0x170
[  172.929160][ T5114]  ___sys_sendmsg+0x155/0x290
[  172.935025][ T5114]  ? __sys_sendmsg+0x270/0x270
[  172.940984][ T5114]  ? __lock_acquire+0x7c50/0x7c50
[  172.946253][ T5114]  ? __fdget+0x17c/0x200
[  172.950634][ T5114]  __se_sys_sendmsg+0x19e/0x270
[  172.955720][ T5114]  ? __x64_sys_sendmsg+0x80/0x80
[  172.961242][ T5114]  ? lockdep_hardirqs_on+0x94/0x140
[  172.966958][ T5114]  do_syscall_64+0x4c/0xa0
[  172.971600][ T5114]  ? clear_bhb_loop+0x60/0xb0
[  172.976406][ T5114]  ? clear_bhb_loop+0x60/0xb0
[  172.981303][ T5114]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.987794][ T5114] RIP: 0033:0x7f598258ebe9
[  172.992809][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.014116][ T5114] RSP: 002b:00007f59833aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.023188][ T5114] RAX: ffffffffffffffda RBX: 00007f59827c5fa0 RCX: 00007f598258ebe9
[  173.031452][ T5114] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004
[  173.040173][ T5114] RBP: 00007f59833aa090 R08: 0000000000000000 R09: 0000000000000000
[  173.050184][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.059528][ T5114] R13: 00007f59827c6038 R14: 00007f59827c5fa0 R15: 00007ffcb148c9b8
[  173.068231][ T5114]  </TASK>
[  173.868002][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[  174.037683][   T27] audit: type=1326 audit(1757271645.387:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  174.478080][ T5135] loop3: detected capacity change from 0 to 4096
[  175.286631][ T5134] loop0: detected capacity change from 0 to 32768
[  175.354510][ T5134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.178 (5134)
[  175.386423][ T5130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'.
[  175.750678][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[  175.780630][ T5134] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.793657][ T5134] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  175.805871][ T5134] BTRFS info (device loop0): using free space tree
[  176.108255][   T27] audit: type=1326 audit(1757271645.417:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  176.189479][ T5130] netlink: 5 bytes leftover after parsing attributes in process `syz.2.175'.
[  176.514276][   T27] audit: type=1326 audit(1757271645.417:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  176.674983][   T27] audit: type=1326 audit(1757271645.417:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  176.703135][   T27] audit: type=1326 audit(1757271645.417:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  176.731100][   T27] audit: type=1326 audit(1757271645.417:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  176.768786][   T27] audit: type=1326 audit(1757271645.417:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  176.798871][   T27] audit: type=1326 audit(1757271645.417:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04238ebe9 code=0x7ffc0000
[  176.848871][ T5134] BTRFS info (device loop0): enabling ssd optimizations
[  179.070688][ T5161] loop1: detected capacity change from 0 to 1024
[  179.247233][ T4271] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.261441][ T5161] EXT4-fs: inline encryption not supported
[  179.395110][ T5161] EXT4-fs (loop1): orphan cleanup on readonly fs
[  179.475411][ T5161] EXT4-fs (loop1): 1 truncate cleaned up
[  179.479448][ T5093] libceph: connect (1)[c::]:6789 error -101
[  179.517940][ T5093] libceph: mon0 (1)[c::]:6789 connect error
[  179.542166][ T5178] loop2: detected capacity change from 0 to 2048
[  179.595266][ T5178] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359
[  179.713936][ T5178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.778459][ T5093] libceph: connect (1)[c::]:6789 error -101
[  179.785227][ T5093] libceph: mon0 (1)[c::]:6789 connect error
[  179.810099][   T27] audit: type=1800 audit(1757271651.157:41): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.183" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  179.976864][ T5161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  180.044976][ T5191] loop4: detected capacity change from 0 to 64
[  180.181237][ T5171] loop3: detected capacity change from 0 to 32768
[  180.221088][ T5171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.181 (5171)
[  180.284769][ T5171] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.342578][ T5171] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  180.343473][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  180.417016][ T5092] libceph: connect (1)[c::]:6789 error -101
[  180.452121][ T5171] BTRFS info (device loop3): allowing degraded mounts
[  180.468788][ T5092] libceph: mon0 (1)[c::]:6789 connect error
[  180.492561][ T5202] loop4: detected capacity change from 0 to 512
[  180.508603][ T5171] BTRFS info (device loop3): max_inline at 0
[  180.544980][ T5175] ceph: No mds server is up or the cluster is laggy
[  180.564471][ T5200] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  180.659484][ T5171] BTRFS info (device loop3): enabling disk space caching
[  180.705597][ T5206] loop1: detected capacity change from 0 to 128
[  180.752101][ T5171] BTRFS info (device loop3): setting nodatasum
[  180.768156][ T5208] sp0: Synchronizing with TNC
[  180.878722][ T5171] BTRFS info (device loop3): turning off barriers
[  181.019745][ T5171] BTRFS info (device loop3): turning on flush-on-commit
[  181.051531][ T5202] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4.
[  181.138935][ T5171] BTRFS info (device loop3): doing ref verification
[  181.188178][ T5171] BTRFS info (device loop3): force clearing of disk cache
[  181.258628][ T5171] BTRFS info (device loop3): enabling ssd optimizations
[  181.397065][ T5171] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  181.686687][ T5171] BTRFS info (device loop3): force lzo compression, level 0
[  181.695099][ T5171] BTRFS info (device loop3): disk space caching is enabled
[  182.557744][ T5171] BTRFS error (device loop3): open_ctree failed: -12
[  183.198060][ T5233] FAULT_INJECTION: forcing a failure.
[  183.198060][ T5233] name failslab, interval 1, probability 0, space 0, times 0
[  183.215975][ T5233] CPU: 1 PID: 5233 Comm: syz.2.188 Not tainted syzkaller #0
[  183.224160][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  183.235278][ T5233] Call Trace:
[  183.238891][ T5233]  <TASK>
[  183.241872][ T5233]  dump_stack_lvl+0x168/0x22e
[  183.246953][ T5233]  ? show_regs_print_info+0x12/0x12
[  183.253058][ T5233]  ? load_image+0x3b0/0x3b0
[  183.258085][ T5233]  ? __might_sleep+0xd0/0xd0
[  183.262979][ T5233]  ? __lock_acquire+0x7c50/0x7c50
[  183.269781][ T5233]  should_fail_ex+0x399/0x4d0
[  183.275645][ T5233]  should_failslab+0x5/0x20
[  183.280531][ T5233]  slab_pre_alloc_hook+0x59/0x310
[  183.285833][ T5233]  ? __get_vm_area_node+0x122/0x330
[  183.291410][ T5233]  __kmem_cache_alloc_node+0x4f/0x260
[  183.298296][ T5233]  ? __get_vm_area_node+0x122/0x330
[  183.305203][ T5233]  kmalloc_node_trace+0x22/0xe0
[  183.311481][ T5233]  __get_vm_area_node+0x122/0x330
[  183.317765][ T5233]  ? __local_bh_enable_ip+0x12a/0x1b0
[  183.323742][ T5233]  __vmalloc_node_range+0x357/0x1390
[  183.329424][ T5233]  ? netlink_sendmsg+0x5dd/0xbc0
[  183.334468][ T5233]  ? release_sock+0x2b/0x1b0
[  183.339342][ T5233]  ? netlink_insert+0x101f/0x13b0
[  183.344757][ T5233]  ? netlink_insert+0x274/0x13b0
[  183.350066][ T5233]  ? free_vm_area+0x50/0x50
[  183.355010][ T5233]  ? netlink_sendmsg+0x5dd/0xbc0
[  183.361142][ T5233]  vmalloc+0x75/0x80
[  183.365707][ T5233]  ? netlink_sendmsg+0x5dd/0xbc0
[  183.371141][ T5233]  netlink_sendmsg+0x5dd/0xbc0
[  183.376209][ T5233]  ? netlink_getsockopt+0x540/0x540
[  183.382035][ T5233]  ? aa_sock_msg_perm+0x94/0x150
[  183.387335][ T5233]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  183.392718][ T5233]  ? security_socket_sendmsg+0x7c/0xa0
[  183.398639][ T5233]  ? netlink_getsockopt+0x540/0x540
[  183.404376][ T5233]  kernel_sendmsg+0x214/0x310
[  183.409621][ T5233]  ? sock_sendmsg+0x310/0x310
[  183.415020][ T5233]  sock_no_sendpage+0x10a/0x160
[  183.420216][ T5233]  ? __receive_sock+0x90/0x90
[  183.425910][ T5233]  ? mark_lock+0x94/0x320
[  183.430636][ T5233]  kernel_sendpage+0x2cd/0x640
[  183.435798][ T5233]  sock_sendpage+0x7a/0xb0
[  183.440431][ T5233]  pipe_to_sendpage+0x225/0x310
[  183.446176][ T5233]  ? sock_fasync+0xf0/0xf0
[  183.451107][ T5233]  ? generic_splice_sendpage+0x150/0x150
[  183.457121][ T5233]  __splice_from_pipe+0x302/0x820
[  183.462375][ T5233]  ? generic_splice_sendpage+0x150/0x150
[  183.468618][ T5233]  generic_splice_sendpage+0xf5/0x150
[  183.474637][ T5233]  ? iter_file_splice_write+0xc50/0xc50
[  183.481001][ T5233]  ? common_file_perm+0x171/0x1c0
[  183.486621][ T5233]  ? fsnotify_perm+0x5a/0x550
[  183.492191][ T5233]  ? security_file_permission+0x75/0xa0
[  183.498376][ T5233]  ? iter_file_splice_write+0xc50/0xc50
[  183.505200][ T5233]  do_splice+0xe5a/0x1630
[  183.509850][ T5233]  ? __fget_files+0x28/0x4d0
[  183.515161][ T5233]  ? __fget_files+0x44a/0x4d0
[  183.520536][ T5233]  ? wait_for_space+0x2c0/0x2c0
[  183.526125][ T5233]  ? __fdget+0x17c/0x200
[  183.530774][ T5233]  __se_sys_splice+0x327/0x410
[  183.535923][ T5233]  ? __x64_sys_splice+0xf0/0xf0
[  183.541244][ T5233]  ? __x64_sys_splice+0x1d/0xf0
[  183.547741][ T5233]  do_syscall_64+0x4c/0xa0
[  183.553011][ T5233]  ? clear_bhb_loop+0x60/0xb0
[  183.558158][ T5233]  ? clear_bhb_loop+0x60/0xb0
[  183.563377][ T5233]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.569493][ T5233] RIP: 0033:0x7f598258ebe9
[  183.574291][ T5233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.595226][ T5233] RSP: 002b:00007f59833aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  183.604445][ T5233] RAX: ffffffffffffffda RBX: 00007f59827c5fa0 RCX: 00007f598258ebe9
[  183.613715][ T5233] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004
[  183.622794][ T5233] RBP: 00007f59833aa090 R08: 0000000000008001 R09: 000000000000000d
[  183.631749][ T5233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.640576][ T5233] R13: 00007f59827c6038 R14: 00007f59827c5fa0 R15: 00007ffcb148c9b8
[  183.649310][ T5233]  </TASK>
[  183.656571][ T5233] syz.2.188: vmalloc error: size 4416, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  183.671339][ T5233] CPU: 1 PID: 5233 Comm: syz.2.188 Not tainted syzkaller #0
[  183.679321][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  183.689829][ T5233] Call Trace:
[  183.693140][ T5233]  <TASK>
[  183.696276][ T5233]  dump_stack_lvl+0x168/0x22e
[  183.701184][ T5233]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  183.708264][ T5233]  ? show_regs_print_info+0x12/0x12
[  183.713742][ T5233]  ? load_image+0x3b0/0x3b0
[  183.718366][ T5233]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  183.725333][ T5233]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[  183.732383][ T5233]  warn_alloc+0x20c/0x300
[  183.736841][ T5233]  ? __get_vm_area_node+0x122/0x330
[  183.742308][ T5233]  ? zone_watermark_ok_safe+0x270/0x270
[  183.748052][ T5233]  ? rcu_is_watching+0x11/0xa0
[  183.753200][ T5233]  ? __get_vm_area_node+0x318/0x330
[  183.759068][ T5233]  ? __local_bh_enable_ip+0x12a/0x1b0
[  183.764748][ T5233]  __vmalloc_node_range+0x37c/0x1390
[  183.770699][ T5233]  ? release_sock+0x2b/0x1b0
[  183.776180][ T5233]  ? netlink_insert+0x101f/0x13b0
[  183.781719][ T5233]  ? netlink_insert+0x274/0x13b0
[  183.789168][ T5233]  ? free_vm_area+0x50/0x50
[  183.795801][ T5233]  ? netlink_sendmsg+0x5dd/0xbc0
[  183.801851][ T5233]  vmalloc+0x75/0x80
[  183.808100][ T5233]  ? netlink_sendmsg+0x5dd/0xbc0
[  183.818379][ T5233]  netlink_sendmsg+0x5dd/0xbc0
[  183.825478][ T5233]  ? netlink_getsockopt+0x540/0x540
[  183.831967][ T5233]  ? aa_sock_msg_perm+0x94/0x150
[  183.838472][ T5233]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  183.843971][ T5233]  ? security_socket_sendmsg+0x7c/0xa0
[  183.850806][ T5233]  ? netlink_getsockopt+0x540/0x540
[  183.856663][ T5233]  kernel_sendmsg+0x214/0x310
[  183.861735][ T5233]  ? sock_sendmsg+0x310/0x310
[  183.866704][ T5233]  sock_no_sendpage+0x10a/0x160
[  183.872068][ T5233]  ? __receive_sock+0x90/0x90
[  183.877050][ T5233]  ? mark_lock+0x94/0x320
[  183.882397][ T5233]  kernel_sendpage+0x2cd/0x640
[  183.887912][ T5233]  sock_sendpage+0x7a/0xb0
[  183.892824][ T5233]  pipe_to_sendpage+0x225/0x310
[  183.898219][ T5233]  ? sock_fasync+0xf0/0xf0
[  183.903541][ T5233]  ? generic_splice_sendpage+0x150/0x150
[  183.909769][ T5233]  __splice_from_pipe+0x302/0x820
[  183.915084][ T5233]  ? generic_splice_sendpage+0x150/0x150
[  183.920916][ T5233]  generic_splice_sendpage+0xf5/0x150
[  183.929061][ T5233]  ? iter_file_splice_write+0xc50/0xc50
[  183.935143][ T5233]  ? common_file_perm+0x171/0x1c0
[  183.941192][ T5233]  ? fsnotify_perm+0x5a/0x550
[  183.946617][ T5233]  ? security_file_permission+0x75/0xa0
[  183.953999][ T5233]  ? iter_file_splice_write+0xc50/0xc50
[  183.962231][ T5233]  do_splice+0xe5a/0x1630
[  183.967399][ T5233]  ? __fget_files+0x28/0x4d0
[  183.972198][ T5233]  ? __fget_files+0x44a/0x4d0
[  183.977464][ T5233]  ? wait_for_space+0x2c0/0x2c0
[  183.982465][ T5233]  ? __fdget+0x17c/0x200
[  183.987176][ T5233]  __se_sys_splice+0x327/0x410
[  183.993732][ T5233]  ? __x64_sys_splice+0xf0/0xf0
[  184.000232][ T5233]  ? __x64_sys_splice+0x1d/0xf0
[  184.005576][ T5233]  do_syscall_64+0x4c/0xa0
[  184.010118][ T5233]  ? clear_bhb_loop+0x60/0xb0
[  184.015183][ T5233]  ? clear_bhb_loop+0x60/0xb0
[  184.020140][ T5233]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  184.026868][ T5233] RIP: 0033:0x7f598258ebe9
[  184.032089][ T5233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.053384][ T5233] RSP: 002b:00007f59833aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  184.063864][ T5233] RAX: ffffffffffffffda RBX: 00007f59827c5fa0 RCX: 00007f598258ebe9
[  184.073109][ T5233] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004
[  184.081381][ T5233] RBP: 00007f59833aa090 R08: 0000000000008001 R09: 000000000000000d
[  184.089849][ T5233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.098315][ T5233] R13: 00007f59827c6038 R14: 00007f59827c5fa0 R15: 00007ffcb148c9b8
[  184.107877][ T5233]  </TASK>
[  184.111261][    C1] sched: RT throttling activated
[  184.115232][ T5233] Mem-Info:
[  184.124003][ T5233] active_anon:15812 inactive_anon:0 isolated_anon:0
[  184.124003][ T5233]  active_file:2810 inactive_file:39927 isolated_file:0
[  184.124003][ T5233]  unevictable:768 dirty:490 writeback:0
[  184.124003][ T5233]  slab_reclaimable:21012 slab_unreclaimable:93895
[  184.124003][ T5233]  mapped:36729 shmem:11523 pagetables:658
[  184.124003][ T5233]  sec_pagetables:0 bounce:0
[  184.124003][ T5233]  kernel_misc_reclaimable:0
[  184.124003][ T5233]  free:1331855 free_pcp:6184 free_cma:0
[  184.177011][ T5233] Node 0 active_anon:63248kB inactive_anon:0kB active_file:11240kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146916kB dirty:1956kB writeback:0kB shmem:44556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12680kB pagetables:2632kB sec_pagetables:0kB all_unreclaimable? no
[  184.222443][ T5233] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  184.257948][ T5233] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  184.287517][ T5233] lowmem_reserve[]: 0 2527 2528 2528 2528
[  184.293507][ T5233] Node 0 DMA32 free:1413352kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:63248kB inactive_anon:0kB active_file:11240kB inactive_file:159504kB unevictable:1536kB writepending:1956kB present:3129332kB managed:2593348kB mlocked:0kB bounce:0kB free_pcp:4956kB local_pcp:1328kB free_cma:0kB
[  184.328929][ T5233] lowmem_reserve[]: 0 0 1 1 1
[  184.334351][ T5233] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  184.366459][ T5233] lowmem_reserve[]: 0 0 0 0 0
[  184.372144][ T5233] Node 1 Normal free:3898708kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19776kB local_pcp:6816kB free_cma:0kB
[  184.408193][ T5233] lowmem_reserve[]: 0 0 0 0 0
[  184.413809][ T5233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  184.428508][ T5233] Node 0 DMA32: 2*4kB (UE) 274*8kB (UE) 641*16kB (U) 230*32kB (UME) 48*64kB (UME) 33*128kB (UME) 17*256kB (UM) 1*512kB (U) 3*1024kB (UME) 3*2048kB (M) 335*4096kB (UM) = 1413352kB
[  184.448843][ T5233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  184.461071][ T5233] Node 1 Normal: 225*4kB (UE) 54*8kB (UME) 30*16kB (UME) 56*32kB (UME) 23*64kB (UME) 11*128kB (UME) 4*256kB (UE) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3898708kB
[  184.480729][ T5233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  184.491054][ T5233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  184.502847][ T5233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  184.513633][ T5233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  184.524119][ T5233] 54239 total pagecache pages
[  184.529877][ T5233] 0 pages in swap cache
[  184.534973][ T5233] Free swap  = 124996kB
[  184.540841][ T5233] Total swap = 124996kB
[  184.546400][ T5233] 2097051 pages RAM
[  184.551505][ T5233] 0 pages HighMem/MovableOnly
[  184.558310][ T5233] 415113 pages reserved
[  184.563391][ T5233] 0 pages cma reserved
[  184.649177][ T5228] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  184.709816][ T5238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.188'.
[  184.854269][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'.
[  184.921856][ T5241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'.
[  184.998993][   T27] audit: type=1326 audit(1757271656.347:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.008645][   T27] audit: type=1326 audit(1757271656.347:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.015728][ T4361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  186.038259][   T27] audit: type=1326 audit(1757271656.347:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.074061][   T27] audit: type=1326 audit(1757271656.347:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.099320][   T27] audit: type=1326 audit(1757271656.347:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.123170][   T27] audit: type=1326 audit(1757271656.347:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.148671][   T27] audit: type=1326 audit(1757271656.347:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.188444][   T27] audit: type=1326 audit(1757271656.347:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733c98ebe9 code=0x7ffc0000
[  186.282634][ T5245] loop0: detected capacity change from 0 to 4096
[  186.377856][ T5250] sctp: [Deprecated]: syz.4.192 (pid 5250) Use of int in max_burst socket option.
[  186.377856][ T5250] Use struct sctp_assoc_value instead
[  186.446601][ T5253] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.646949][ T5255] syz.2.195 uses obsolete (PF_INET,SOCK_PACKET)
[  186.679556][ T5255] FAULT_INJECTION: forcing a failure.
[  186.679556][ T5255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.746320][ T5255] CPU: 1 PID: 5255 Comm: syz.2.195 Not tainted syzkaller #0
[  186.754047][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  186.765131][ T5255] Call Trace:
[  186.767488][ T5261] loop4: detected capacity change from 0 to 128
[  186.769471][ T5255]  <TASK>
[  186.779312][ T5255]  dump_stack_lvl+0x168/0x22e
[  186.784827][ T5255]  ? show_regs_print_info+0x12/0x12
[  186.790379][ T5255]  ? load_image+0x3b0/0x3b0
[  186.795722][ T5255]  ? __lock_acquire+0x7c50/0x7c50
[  186.801232][ T5255]  ? __lock_acquire+0x12e5/0x7c50
[  186.807098][ T5255]  should_fail_ex+0x399/0x4d0
[  186.812092][ T5255]  _copy_from_iter+0x1c5/0x10c0
[  186.817109][ T5255]  ? copyout_mc+0x110/0x110
[  186.821849][ T5255]  ? verify_lock_unused+0x140/0x140
[  186.827805][ T5255]  tun_get_user+0x1e2/0x3b90
[  186.832981][ T5255]  ? __lock_acquire+0x7c50/0x7c50
[  186.839819][ T5255]  ? rcu_read_unlock+0xa0/0xa0
[  186.855433][ T5255]  ? tun_get+0x1c/0x2e0
[  186.877358][ T5255]  ? __lock_acquire+0x7c50/0x7c50
[  186.883833][ T5255]  ? tun_get+0x1c/0x2e0
[  186.888223][ T5255]  tun_chr_write_iter+0x112/0x1f0
[  186.893557][ T5255]  vfs_write+0x44c/0x960
[  186.897853][ T5255]  ? file_end_write+0x250/0x250
[  186.903133][ T5255]  ? __fget_files+0x44a/0x4d0
[  186.909117][ T5255]  ? __fdget_pos+0x1d4/0x360
[  186.914258][ T5255]  ? ksys_write+0x71/0x240
[  186.919235][ T5255]  ksys_write+0x143/0x240
[  186.923780][ T5255]  ? __ia32_sys_read+0x80/0x80
[  186.929260][ T5255]  ? lockdep_hardirqs_on+0x94/0x140
[  186.935732][ T5255]  do_syscall_64+0x4c/0xa0
[  186.940871][ T5255]  ? clear_bhb_loop+0x60/0xb0
[  186.946038][ T5255]  ? clear_bhb_loop+0x60/0xb0
[  186.951198][ T5255]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.958075][ T5255] RIP: 0033:0x7f598258ebe9
[  186.962822][ T5255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.984668][ T5255] RSP: 002b:00007f59833aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  186.994272][ T5255] RAX: ffffffffffffffda RBX: 00007f59827c5fa0 RCX: 00007f598258ebe9
[  187.003356][ T5255] RDX: 000000000000004a RSI: 0000200000000340 RDI: 0000000000000003
[  187.013437][ T5255] RBP: 00007f59833aa090 R08: 0000000000000000 R09: 0000000000000000
[  187.022260][ T5255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.030962][ T5255] R13: 00007f59827c6038 R14: 00007f59827c5fa0 R15: 00007ffcb148c9b8
[  187.039852][ T5255]  </TASK>
[  187.916427][ T5272] loop1: detected capacity change from 0 to 128
[  187.948524][ T5275] FAULT_INJECTION: forcing a failure.
[  187.948524][ T5275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.986912][ T5275] CPU: 1 PID: 5275 Comm: syz.3.200 Not tainted syzkaller #0
[  187.996294][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  188.008558][ T5275] Call Trace:
[  188.012047][ T5275]  <TASK>
[  188.015223][ T5275]  dump_stack_lvl+0x168/0x22e
[  188.020390][ T5275]  ? show_regs_print_info+0x12/0x12
[  188.027172][ T5275]  ? load_image+0x3b0/0x3b0
[  188.032509][ T5275]  ? __lock_acquire+0x7c50/0x7c50
[  188.034969][ T5265] loop0: detected capacity change from 0 to 32768
[  188.037825][ T5275]  ? snprintf+0xd7/0x120
[  188.037880][ T5275]  should_fail_ex+0x399/0x4d0
[  188.037910][ T5275]  _copy_to_user+0x2c/0x130
[  188.037932][ T5275]  simple_read_from_buffer+0xe3/0x150
[  188.071192][ T5275]  proc_fail_nth_read+0x19a/0x210
[  188.076679][ T5275]  ? proc_fault_inject_write+0x2f0/0x2f0
[  188.083050][ T5275]  ? fsnotify_perm+0x248/0x550
[  188.088669][ T5275]  ? proc_fault_inject_write+0x2f0/0x2f0
[  188.094882][ T5275]  vfs_read+0x2c0/0x920
[  188.099970][ T5275]  ? kernel_read+0x1e0/0x1e0
[  188.105241][ T5275]  ? __fget_files+0x28/0x4d0
[  188.110942][ T5275]  ? __fget_files+0x44a/0x4d0
[  188.115928][ T5275]  ? __fdget_pos+0x2ae/0x360
[  188.122166][ T5275]  ? ksys_read+0x71/0x240
[  188.127065][ T5275]  ksys_read+0x143/0x240
[  188.131727][ T5275]  ? vfs_write+0x960/0x960
[  188.136706][ T5275]  ? lockdep_hardirqs_on+0x94/0x140
[  188.143030][ T5275]  do_syscall_64+0x4c/0xa0
[  188.148710][ T5275]  ? clear_bhb_loop+0x60/0xb0
[  188.154871][ T5275]  ? clear_bhb_loop+0x60/0xb0
[  188.159946][ T5275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.167289][ T5275] RIP: 0033:0x7f86dc18d5fc
[  188.172237][ T5275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  188.195040][ T5275] RSP: 002b:00007f86dd068030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  188.205761][ T5275] RAX: ffffffffffffffda RBX: 00007f86dc3c6090 RCX: 00007f86dc18d5fc
[  188.216866][ T5275] RDX: 000000000000000f RSI: 00007f86dd0680a0 RDI: 0000000000000005
[  188.227579][ T5275] RBP: 00007f86dd068090 R08: 0000000000000000 R09: 0000000000000000
[  188.237172][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.249436][ T5275] R13: 00007f86dc3c6128 R14: 00007f86dc3c6090 R15: 00007ffd27dc9c68
[  188.258664][ T5275]  </TASK>
[  188.459023][   T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  188.517791][ T5265] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  188.639071][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'.
[  188.649919][   T27] audit: type=1326 audit(1757271659.997:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598258ebe9 code=0x7ffc0000
[  188.838026][   T27] audit: type=1326 audit(1757271660.057:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f598258ebe9 code=0x7ffc0000
[  188.930461][ T5265] (syz.0.198,5265,0):ocfs2_rename:1687 ERROR: status = -39
[  189.138327][   T26] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  189.184105][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.232477][   T26] usb 5-1: config 0 descriptor??
[  189.260165][   T26] cp210x 5-1:0.0: cp210x converter detected
[  189.266006][ T5295] sctp: [Deprecated]: syz.3.207 (pid 5295) Use of int in max_burst socket option.
[  189.266006][ T5295] Use struct sctp_assoc_value instead
[  189.325342][ T5297] 
[  189.329207][ T5297] ======================================================
[  189.337657][ T5297] WARNING: possible circular locking dependency detected
[  189.346667][ T5297] syzkaller #0 Not tainted
[  189.351908][ T5297] ------------------------------------------------------
[  189.360790][ T5297] syz.0.198/5297 is trying to acquire lock:
[  189.367242][ T5297] ffff888073e914a0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x320
[  189.379498][ T5297] 
[  189.379498][ T5297] but task is already holding lock:
[  189.387496][ T5297] ffff888073e91538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x320
[  189.397434][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'.
[  189.399822][ T5297] 
[  189.399822][ T5297] which lock already depends on the new lock.
[  189.399822][ T5297] 
[  189.399831][ T5297] 
[  189.399831][ T5297] the existing dependency chain (in reverse order) is:
[  189.399837][ T5297] 
[  189.399837][ T5297] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  189.399868][ T5297]        down_read+0x42/0x2d0
[  189.422625][ T5304] FAULT_INJECTION: forcing a failure.
[  189.422625][ T5304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.429400][ T5297]        ocfs2_init_acl+0x2fb/0x720
[  189.429430][ T5297]        ocfs2_mknod+0x1463/0x2350
[  189.429447][ T5297]        ocfs2_mkdir+0x1b6/0x4a0
[  189.429462][ T5297]        vfs_mkdir+0x387/0x570
[  189.429475][ T5297]        do_mkdirat+0x1d0/0x430
[  189.429488][ T5297]        __x64_sys_mkdirat+0x85/0x90
[  189.429502][ T5297]        do_syscall_64+0x4c/0xa0
[  189.429520][ T5297]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.429543][ T5297] 
[  189.429543][ T5297] -> #3 (jbd2_handle){++++}-{0:0}:
[  189.429573][ T5297]        start_this_handle+0x1f49/0x2150
[  189.454909][ T5304] CPU: 1 PID: 5304 Comm: syz.3.209 Not tainted syzkaller #0
[  189.459213][ T5297]        jbd2__journal_start+0x2b7/0x5a0
[  189.464935][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  189.470124][ T5297]        jbd2_journal_start+0x26/0x30
[  189.475309][ T5304] Call Trace:
[  189.475318][ T5304]  <TASK>
[  189.480252][ T5297]        ocfs2_start_trans+0x372/0x6c0
[  189.485899][ T5304]  dump_stack_lvl+0x168/0x22e
[  189.491451][ T5297]        ocfs2_mknod+0xe6a/0x2350
[  189.496990][ T5304]  ? show_regs_print_info+0x12/0x12
[  189.504099][ T5297]        ocfs2_mkdir+0x1b6/0x4a0
[  189.511515][ T5304]  ? load_image+0x3b0/0x3b0
[  189.517918][ T5297]        vfs_mkdir+0x387/0x570
[  189.525636][ T5304]  ? __lock_acquire+0x7c50/0x7c50
[  189.532418][ T5297]        do_mkdirat+0x1d0/0x430
[  189.543597][ T5304]  should_fail_ex+0x399/0x4d0
[  189.550840][ T5297]        __x64_sys_mkdirat+0x85/0x90
[  189.554840][ T5304]  _copy_from_user+0x2c/0x170
[  189.558592][ T5297]        do_syscall_64+0x4c/0xa0
[  189.564771][ T5304]  ___sys_sendmsg+0x155/0x290
[  189.569615][ T5297]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.575160][ T5304]  ? __sys_sendmsg+0x270/0x270
[  189.581130][ T5297] 
[  189.581130][ T5297] -> #2 (
[  189.587212][ T5304]  ? lock_release+0xd4/0x910
[  189.592349][ T5297] &journal->j_trans_barrier
[  189.597988][ T5304]  ? __lock_acquire+0x7c50/0x7c50
[  189.604477][ T5297] ){.+.+}-{3:3}
[  189.609514][ T5304]  ? __fdget+0x17c/0x200
[  189.614520][ T5297] :
[  189.614528][ T5297]        down_read+0x42/0x2d0
[  189.620579][ T5304]  __se_sys_sendmsg+0x19e/0x270
[  189.625443][ T5297]        ocfs2_start_trans+0x366/0x6c0
[  189.630528][ T5304]  ? __x64_sys_sendmsg+0x80/0x80
[  189.635278][ T5297]        ocfs2_mknod+0xe6a/0x2350
[  189.642049][ T5304]  ? rcu_is_watching+0x11/0xa0
[  189.647336][ T5297]        ocfs2_mkdir+0x1b6/0x4a0
[  189.652616][ T5304]  do_syscall_64+0x4c/0xa0
[  189.657898][ T5297]        vfs_mkdir+0x387/0x570
[  189.663014][ T5304]  ? clear_bhb_loop+0x60/0xb0
[  189.668227][ T5297]        do_mkdirat+0x1d0/0x430
[  189.671676][ T5304]  ? clear_bhb_loop+0x60/0xb0
[  189.676340][ T5297]        __x64_sys_mkdirat+0x85/0x90
[  189.678754][ T5304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.684197][ T5297]        do_syscall_64+0x4c/0xa0
[  189.689414][ T5304] RIP: 0033:0x7f86dc18ebe9
[  189.695811][ T5297]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.701092][ T5304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.706300][ T5297] 
[  189.706300][ T5297] -> #1 (
[  189.711750][ T5304] RSP: 002b:00007f86dd089038 EFLAGS: 00000246
[  189.716882][ T5297] sb_internal
[  189.721571][ T5304]  ORIG_RAX: 000000000000002e
[  189.726537][ T5297] #5
[  189.731822][ T5304] RAX: ffffffffffffffda RBX: 00007f86dc3c5fa0 RCX: 00007f86dc18ebe9
[  189.737276][ T5297] ){.+.+}-{0:0}
[  189.742380][ T5304] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  189.747895][ T5297] :
[  189.747905][ T5297]        ocfs2_start_trans+0x267/0x6c0
[  189.753968][ T5304] RBP: 00007f86dd089090 R08: 0000000000000000 R09: 0000000000000000
[  189.759288][ T5297]        ocfs2_truncate_file+0x648/0x14d0
[  189.764040][ T5304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.770608][ T5297]        ocfs2_setattr+0x16a9/0x1cf0
[  189.793958][ T5304] R13: 00007f86dc3c6038 R14: 00007f86dc3c5fa0 R15: 00007ffd27dc9c68
[  189.799802][ T5297]        notify_change+0xc74/0xf40
[  189.807088][ T5304]  </TASK>
[  189.810723][ T5297]        do_truncate+0x197/0x220
[  189.914165][ T5297]        do_coredump+0x1fe2/0x22b0
[  189.921490][ T5297]        get_signal+0x10aa/0x1350
[  189.927941][ T5297]        arch_do_signal_or_restart+0xb0/0x1230
[  189.935936][ T5297]        exit_to_user_mode_loop+0x70/0x110
[  189.944142][ T5297]        exit_to_user_mode_prepare+0xb1/0x140
[  189.951687][ T5297]        irqentry_exit_to_user_mode+0x5/0x30
[  189.960194][ T5297]        exc_general_protection+0x164/0x1f0
[  189.967568][ T5297]        asm_exc_general_protection+0x22/0x30
[  189.974284][ T5297] 
[  189.974284][ T5297] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}:
[  189.983034][ T5297]        __lock_acquire+0x2cf8/0x7c50
[  189.989231][ T5297]        lock_acquire+0x1b4/0x490
[  189.995089][ T5297]        down_write+0x36/0x60
[  190.001145][ T5297]        ocfs2_try_remove_refcount_tree+0xb3/0x320
[  190.011877][ T5297]        ocfs2_truncate_file+0xdd4/0x14d0
[  190.019449][ T5297]        ocfs2_setattr+0x16a9/0x1cf0
[  190.025439][ T5297]        notify_change+0xc74/0xf40
[  190.031953][ T5297]        do_truncate+0x197/0x220
[  190.039178][ T5297]        do_coredump+0x1fe2/0x22b0
[  190.046202][ T5297]        get_signal+0x10aa/0x1350
[  190.053097][ T5297]        arch_do_signal_or_restart+0xb0/0x1230
[  190.061223][ T5297]        exit_to_user_mode_loop+0x70/0x110
[  190.069207][ T5297]        exit_to_user_mode_prepare+0xb1/0x140
[  190.076089][ T5297]        irqentry_exit_to_user_mode+0x5/0x30
[  190.082860][ T5297]        exc_general_protection+0x164/0x1f0
[  190.089621][ T5297]        asm_exc_general_protection+0x22/0x30
[  190.098102][ T5297] 
[  190.098102][ T5297] other info that might help us debug this:
[  190.098102][ T5297] 
[  190.109234][ T5297] Chain exists of:
[  190.109234][ T5297]   &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem
[  190.109234][ T5297] 
[  190.125896][ T5297]  Possible unsafe locking scenario:
[  190.125896][ T5297] 
[  190.135629][ T5297]        CPU0                    CPU1
[  190.141672][ T5297]        ----                    ----
[  190.148249][ T5297]   lock(&oi->ip_xattr_sem);
[  190.153842][ T5297]                                lock(jbd2_handle);
[  190.163987][ T5297]                                lock(&oi->ip_xattr_sem);
[  190.172440][ T5297]   lock(&oi->ip_alloc_sem);
[  190.177692][ T5297] 
[  190.177692][ T5297]  *** DEADLOCK ***
[  190.177692][ T5297] 
[  190.188046][ T5297] 2 locks held by syz.0.198/5297:
[  190.194898][ T5297]  #0: ffff888073e91808 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: do_truncate+0x183/0x220
[  190.209975][ T5297]  #1: ffff888073e91538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x320
[  190.228342][ T5297] 
[  190.228342][ T5297] stack backtrace:
[  190.236283][ T5297] CPU: 0 PID: 5297 Comm: syz.0.198 Not tainted syzkaller #0
[  190.248253][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  190.262397][ T5297] Call Trace:
[  190.266101][ T5297]  <TASK>
[  190.269456][ T5297]  dump_stack_lvl+0x168/0x22e
[  190.275618][ T5297]  ? load_image+0x3b0/0x3b0
[  190.281828][ T5297]  ? show_regs_print_info+0x12/0x12
[  190.287847][ T5297]  ? print_circular_bug+0x12b/0x1a0
[  190.294942][ T5297]  check_noncircular+0x274/0x310
[  190.300543][ T5297]  ? add_chain_block+0x940/0x940
[  190.306142][ T5297]  ? lockdep_lock+0xdc/0x1e0
[  190.311198][ T5297]  ? lockdep_unlock+0x133/0x2d0
[  190.316391][ T5297]  ? lockdep_lock+0x1e0/0x1e0
[  190.321280][ T5297]  ? _find_first_zero_bit+0xcf/0x100
[  190.328391][ T5297]  __lock_acquire+0x2cf8/0x7c50
[  190.334101][ T5297]  ? verify_lock_unused+0x140/0x140
[  190.340661][ T5297]  ? lockdep_hardirqs_on+0x94/0x140
[  190.348732][ T5297]  lock_acquire+0x1b4/0x490
[  190.353738][ T5297]  ? ocfs2_try_remove_refcount_tree+0xb3/0x320
[  190.361371][ T5297]  ? __might_sleep+0xd0/0xd0
[  190.366431][ T5297]  ? preempt_count_add+0x8d/0x190
[  190.372380][ T5297]  ? read_lock_is_recursive+0x10/0x10
[  190.379020][ T5297]  ? rwsem_write_trylock+0x12f/0x1b0
[  190.386183][ T5297]  ? clear_nonspinnable+0x60/0x60
[  190.391946][ T5297]  ? ocfs2_truncate_file+0xcfa/0x14d0
[  190.398225][ T5297]  down_write+0x36/0x60
[  190.405288][ T5297]  ? ocfs2_try_remove_refcount_tree+0xb3/0x320
[  190.413641][ T5297]  ocfs2_try_remove_refcount_tree+0xb3/0x320
[  190.421315][ T5297]  ? ocfs2_remove_refcount_tree+0xd50/0xd50
[  190.429364][ T5297]  ? preempt_count_add+0x8d/0x190
[  190.436365][ T5297]  ? up_write+0x1bb/0x420
[  190.443080][ T5297]  ? unmap_mapping_range+0x91/0x100
[  190.448939][ T5297]  ocfs2_truncate_file+0xdd4/0x14d0
[  190.455752][ T5297]  ? ocfs2_simple_size_update+0x470/0x470
[  190.463143][ T5297]  ? do_raw_spin_unlock+0x11d/0x230
[  190.469709][ T5297]  ? _raw_spin_unlock+0x24/0x40
[  190.475202][ T5297]  ? ocfs2_inode_lock_tracker+0x3e8/0x660
[  190.481826][ T5297]  ? ocfs2_inode_lock_atime+0x4e0/0x4e0
[  190.489915][ T5297]  ? ocfs2_rw_lock+0x134/0x240
[  190.496478][ T5297]  ? dquot_initialize+0x20/0x20
[  190.502961][ T5297]  ? ocfs2_create_new_inode_locks+0x640/0x640
[  190.510140][ T5297]  ? jbd2_journal_begin_ordered_truncate+0xb7/0x150
[  190.517303][ T5297]  ocfs2_setattr+0x16a9/0x1cf0
[  190.523042][ T5297]  ? ocfs2_extend_allocation+0x1840/0x1840
[  190.529538][ T5297]  ? ktime_get_coarse_real_ts64+0x36/0x120
[  190.536779][ T5297]  ? seqcount_lockdep_reader_access+0x172/0x1c0
[  190.543959][ T5297]  ? ocfs2_xattr_get+0x12e/0x220
[  190.550444][ T5297]  ? ocfs2_get_reflink_xattr_value_root+0xd0/0xd0
[  190.557376][ T5297]  ? ktime_get_coarse_real_ts64+0x10c/0x120
[  190.563917][ T5297]  ? current_time+0x197/0x2b0
[  190.568807][ T5297]  ? atime_needs_update+0x780/0x780
[  190.574243][ T5297]  ? evm_inode_setattr+0x91/0x790
[  190.579756][ T5297]  ? bpf_lsm_inode_setattr+0x5/0x10
[  190.585590][ T5297]  ? security_inode_setattr+0xd8/0x140
[  190.591539][ T5297]  ? try_break_deleg+0x79/0x120
[  190.597567][ T5297]  ? ocfs2_extend_allocation+0x1840/0x1840
[  190.604021][ T5297]  notify_change+0xc74/0xf40
[  190.609165][ T5297]  do_truncate+0x197/0x220
[  190.613697][ T5297]  ? put_page_bootmem+0x2c0/0x2c0
[  190.619151][ T5297]  ? filp_open+0x17e/0x1d0
[  190.624422][ T5297]  ? memcpy+0x3c/0x60
[  190.628866][ T5297]  ? i_uid_into_mnt+0x90/0x120
[  190.634199][ T5297]  do_coredump+0x1fe2/0x22b0
[  190.639200][ T5297]  ? nfs_ssc_unregister+0x30/0x30
[  190.644826][ T5297]  ? lock_chain_count+0x20/0x20
[  190.650176][ T5297]  ? _raw_spin_unlock_irq+0x1f/0x40
[  190.655801][ T5297]  ? lockdep_hardirqs_on+0x94/0x140
[  190.661235][ T5297]  get_signal+0x10aa/0x1350
[  190.665886][ T5297]  arch_do_signal_or_restart+0xb0/0x1230
[  190.672185][ T5297]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  190.678209][ T5297]  ? __send_signal_locked+0xb38/0xde0
[  190.683788][ T5297]  ? get_sigframe_size+0x10/0x10
[  190.688892][ T5297]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  190.695407][ T5297]  ? exit_to_user_mode_loop+0x3b/0x110
[  190.701289][ T5297]  exit_to_user_mode_loop+0x70/0x110
[  190.707752][ T5297]  exit_to_user_mode_prepare+0xb1/0x140
[  190.713687][ T5297]  irqentry_exit_to_user_mode+0x5/0x30
[  190.719973][ T5297]  exc_general_protection+0x164/0x1f0
[  190.725910][ T5297]  ? exc_page_fault+0x88/0x100
[  190.730816][ T5297]  asm_exc_general_protection+0x22/0x30
[  190.737135][ T5297] RIP: 0033:0x7fd37cf8ebf1
[  190.743168][ T5297] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  190.766829][ T5297] RSP: 002b:0000200000000550 EFLAGS: 00010217
[  190.774803][ T5297] RAX: 0000000000000000 RBX: 00007fd37d1c6090 RCX: 00007fd37cf8ebe9
[  190.784294][ T5297] RDX: 0000200000000140 RSI: 0000200000000550 RDI: 0000000006040000
[  190.793668][ T5297] RBP: 00007fd37d011e19 R08: 0000200000000580 R09: 0000200000000580
[  190.804032][ T5297] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000
[  190.813980][ T5297] R13: 00007fd37d1c6128 R14: 00007fd37d1c6090 R15: 00007ffca9f9c658
[  190.823486][ T5297]  </TASK>
[  190.839501][ T5273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.849876][ T5273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.850001][ T5302] device veth1_macvtap left promiscuous mode
[  190.911552][   T26] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  190.927145][   T26] cp210x 5-1:0.0: querying part number failed
[  190.949681][   T26] usb 5-1: cp210x converter now attached to ttyUSB0
[  191.121210][ T5273] loop4: detected capacity change from 0 to 512
[  191.129280][ T5273] EXT4-fs (loop4): ea_inode feature is not supported for Hurd
[  191.143119][ T5297] ocfs2: Unmounting device (7,0) on (node local)
[  191.214316][ T4499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.279378][ T4499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.343823][ T4499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.401422][ T4499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.886288][ T5318] loop4: detected capacity change from 0 to 1024
[  191.942264][ T5318] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.201: Invalid block bitmap block 0 in block_group 0
[  192.049602][ T5318] EXT4-fs (loop4): Remounting filesystem read-only
[  192.088114][ T5318] __quota_error: 6 callbacks suppressed
[  192.088131][ T5318] Quota error (device loop4): write_blk: dquota write failed
[  192.105247][ T5318] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  192.120732][ T5318] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.201: Failed to acquire dquot type 0
[  192.180756][ T4499] device hsr_slave_0 left promiscuous mode
[  192.190594][ T5318] EXT4-fs (loop4): Remounting filesystem read-only
[  192.199302][ T4499] device hsr_slave_1 left promiscuous mode
[  192.206519][ T5318] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.201: Freeing blocks not in datazone - block = 0, count = 4096
[  192.222398][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.223287][ T5318] EXT4-fs (loop4): Remounting filesystem read-only
[  192.236608][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.247180][ T5318] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.201: Invalid inode bitmap blk 0 in block_group 0
[  192.265208][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.265845][ T5318] EXT4-fs (loop4): Remounting filesystem read-only
[  192.284699][ T4360] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7
[  192.286489][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.295194][ T4360] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:6: Failed to release dquot type 0
[  192.316675][ T5318] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  192.316921][ T4499] device bridge_slave_1 left promiscuous mode
[  192.333030][ T5318] EXT4-fs (loop4): Remounting filesystem read-only
[  192.333157][ T4360] EXT4-fs (loop4): Remounting filesystem read-only
[  192.346487][ T5318] EXT4-fs (loop4): 1 orphan inode deleted
[  192.347662][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.353153][ T5318] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  192.372973][ T4499] device bridge_slave_0 left promiscuous mode
[  192.380416][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.391758][ T4499] device veth1_macvtap left promiscuous mode
[  192.399597][ T4499] device veth0_macvtap left promiscuous mode
[  192.418557][ T5318] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  192.436610][ T4499] device veth1_vlan left promiscuous mode
[  192.451044][ T4499] device veth0_vlan left promiscuous mode
[  192.671464][ T4499] team0 (unregistering): Port device team_slave_1 removed
[  192.684806][ T4499] team0 (unregistering): Port device team_slave_0 removed
[  192.720308][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.758746][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.830489][ T4499] bond0 (unregistering): Released all slaves
[  193.057204][   T22] usb 5-1: USB disconnect, device number 4
[  193.086548][   T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  193.088977][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  193.107905][   T22] cp210x 5-1:0.0: device disconnected
[  194.688621][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.695538][ T1276] ieee802154 phy1 wpan1: encryption failed: -22