last executing test programs: 1m21.969619813s ago: executing program 1 (id=57): r0 = socket$inet6(0xa, 0x1, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x50) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1m21.024150097s ago: executing program 1 (id=68): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x60}, 0x94) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 1m20.686652981s ago: executing program 1 (id=61): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m20.456322089s ago: executing program 1 (id=63): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVhRcVQ1VaNUQk5T8qYREtTkoVTUQa5m7z2zd87deTjedbzp7yd558z8z/POw3PuvXMuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/8ORW95xXrP4uy976Mc/vef9nz/4mbnbn/zOl24JYXL+8Y4s3HH+ia91V45/5GcHHv/mNzasefhkb14uj4dV1T+d+Z0vxFqfWR3CDzpC6E4DawezQE9+fzDW96bBENaEhUCtxNRAViJtOPy8P4RDYSFQq+pH/SEMFgJbHr7/vq9UE3f0h3BhCKGStvHLStZGfxq4qDcLDKSBG7uzwP+cytQCP+zMAnDG4puh9qKfm6zPMLJ4uQavv54l69irKx1eV0yMNM73283L3KmC3vSByTN62krVsSxKb4+j3m0r4N1W2s63edqKX6TybyinFkKV0Llj6ppt+2b2xkc6w9hYV6Oalul5fuS5z24/nfSKeR3GDowsyevwzq8/9blvPX3l3Xd98QNX3/vi86Nn2s3jhU1aTC+3SshfcyvmeYw2+TxZAW+/0rekUV+6QghffuJv/6RZvDT/H2k+/48v53jbWZc71npyKJubx0cGY+LEUDY3BwAAgBVjJew1nf3O5RPN6ivN/0fbO/4fD/nnk/lstEdD2DSfuHk4hAvmH88CR2JznxwO4a3zqcn6wOYkcDSEN8wnLqlVlZToiyVGk8CzQ3lgUxI4FgOTSeDbMXBbEvhCDMwlge0xcDQJvDcGwnT9OP54KB9H24H+GNiabcS5eBbCC0OxtWRbPVqrCgAAYInks8Oe+ruFcx3ONEOcXs71t8oQz8BumKGS1JDOYGvTqoY1dLeqobNVDbVxzzYffqnmjlY1l07D6KjPsPuzv/uz0ERp/j/efP5fWaQjHaXj/yFcNf835u7MIzO1+NbJugwAAADAGVi1+YYtzeKl+f+m9s7/j/tEugqZw4NxN8TO4RDG6wNZtZeXA9lR71V5AAAAAFaC2vH42rHw6fw2O0U7nU+X80+eZv544H/Tovl//cF3Xdesv6X5/2R75/8P1N9mnTgWe/HV4RD6CoEHYi+rgXmjMfDEe+oD+fiPxQ1wa6wqPzGhVtWtscTWGBhPAocalXioVuKC+kD+ZNUav7k2jum8RCEAAAAAZ13cHRCPy8fz/x/Zd/x9zcqV5v9bT+/8//l5cOn0/plVIazrDqEr/WHAgwPZwoAxMNiRJ346kNXVlVZ1YCCEK6oDS6t6Ml//vztdY/Dh/qyqGLjgbd997qJq4u/6Q1hXDPzi44c3VBN7k0Ct8Y/1h/CW6mjTxr/flzXekzZ+Z18Iby4EalV9si+EamO9aVX3V/LrGKRV3VsJ4bxCoFbVxkoI+wMAK1T8r3RH8cE9+2/auW1mZmr3MibiPvz+cM30zNTY9htndlQa9GlH0ue6ZYwOlMfUcDmkxKP5EkVHXr5sqJ107XeC48W+5PvxSycO5vfjd6Ge+XFO9NTdvTQd8jveXm4iFL5JvVpDHihWsvAkluqP+XvDqtC3b8/U7rFPb9u7d/f67G+72Seyv3FQ2bZan26rgcX6dg68PC4uVrJu7/W71u3Zf9Pa6eu3XTt17dQNE+Pv3LBxw8T4xo3rqqMaz/62GOrFi1WdDPXU4bM/1Dd2Fyo5G58aEhISKy0xe/PhVc0+fkrz/13N5//xUyd+8ufrMzQ6/j8SD/Nnjy8c5t8aA4faPf4/0uhofu3EgNEkMBsDsw7zAwAA8NoQd0fG3Y5xr3Xv4Ut/06xcaf4/297v/5do/f/a0vUfarTM/yWxxHij9f/TZf5r6//PNlr/P13mv7b+/6FXYf3/fbVAsklesP4/AADwWnD21v9vubx/eoGAUoaWy/unFwgoZWi5jH+7Fwg47fX/J657/JnQRGn+f1t7838L9wMAAMC54/Z/eu4tzeKl+f+h9ub/Z3/9v9Do/P/RRoHJRgsDWv8PAACAFarR+n+nhv/iY83Kleb/c+3N/+NpF511uWOtJ4eyNe1CuqbdiaHaTwYAAABgZegMY2M9beatWxl18ytv85F8KdBm6aIHLv+va5vVV5r/H21v/l/3u4w7v/7U57719JV3n7zrix+4+t4Xnx9dOP4PAAAALJ9290sAAAAAAAAAAAAAAACvvn2f+NcTzeKl3/+Hq+Yfb/T7/3jdv/j7gtfX5Y61tl7/L7+/5cP37J9fsvDBoRDeXgzsPLhzTcivzX9xMXDf1ZecX00cTEv85LH3/qqa+EQa+ODa171UTVyRBLbGRRLfkAbiVRVfWp0E4vKK/54G4vaYSwO9eeDLq7NxdKTb6teD2bbqSLfVfwyGMFwI1LbVDwazNjrSAd6RBGoD/FQaiAP8SB7oTHt1z6qsVzEwGIv+zaqsVwAAnLPit8CecM30zNR4/Aofb9/YXX8b1S1ZdqBcbVebzT+aL0125OXLhtpJd6XfRReuNd4TKtUhrC99XS1m6Zgf5dLU0mLTvb7BkFut9rZcm6638Yj6sxGNbb9xZkdPy4Ff2jrLRHfLLOtLk51ils75TdpGLW30pY0Rtblt2uhyvN8Zxsa6klzvisGRUKfVK6Ld3+sX1/lr9Coo5jkw0/OHZvWV5v8j7c3/K8VxvZRfDGA2XlnvL4ct8w8AAADL68ubf39X/PeT4Y/+Z7O8pfn/aHvz/7hjLD8UnO3tOBqv/3/zcAjzl9YfyQJHYnOfHA7hrfOpyVgiu6D+h2KJ8SxwJO4wuSSW2DpZX1VfDMwlgWeH8sDRJHAsBvK9FN8N+a6c24dC2DCfuqq+xK5YYiQJfDQGRpPAWAyMJ4HVMbApCfxmdR6YTAL/EgNhun5b/cPqfFsBAACcjnye1VN/N6TzvLnuVhk6WmUYaJWhs1WGSqsMjUYR738vZugpHo/PM8SHetJa+5NaShnixfBPu1+lDOGh+pxpwVLTtTNJRupzxgxb5g6uDk2U5v/j7c3/B+pvs9aPxfn/wvX/ssADsXtfjaeOj8bAE++pD+Q7Bo7Fye6ttaom8xL5pP3WWGJTDIwmgV0xsCkJbL0qDxw6vz6Qz7Rrjd9ca3w6L1EIAAAAwFkXdxDE3TRx/v/ffX/462blSvP/Te3N/2N7q4qNfSHW+szqEH7QsdCbWmDtYBaI+zEG48/j3zQYwprCDo5aiamBrERv0nD4eX/2C/XetKof9Wc/Poj3tzx8/31fqSbu6A/hwsLel1obv6xkbfSngYt6s8BAGrixOwvEPT+1wA87swCcsdpewfiCyk91qRlZvFyD199r5Zqg6fBK+0AXybfYb66WSyV9IN+nWnN6T1upOpZF6e1x1LttJb7bRrzbil+k8m8opxZCldC5Y+qabftm9sZHir9kLVmm57n4K9V20kvwOpx95b1trZJ2YDz5+BhfvNzir8OOWN2dX3/qc996+sq77/riB66+98XnR9vuRgPxh8I3XPe/Q8cLm3e5VUL+mltxnyeTPk9W4n8Do562EMItcxe80Cxemv9Ptjf/705u5/0+bsw9wyG8o7BxH4yb/33D2edgIZB9Sp5XDmSH3J8eavjJCQAAAEuttrujtr9gOr/NTghP58nl/JOnmT/ur9i0aP52+/2ZCy/8x2bx0vx/a/P5f1/STcf/Hf9nmTj+v6hzfVd0X/rA7Bntii5Vx7Jw/H9R5/q7zfH/RTn+7/j/Yhz/b8Hx/0Wd609b6VvSLl+6Qgj937/8oWbx0vx/V3vzf+v/Lb5oX239v62N1v/b1Wj9v1nr/wEAAMuqwUJz6TyvtHpfKUO6el8pQ8sFAlsuMWj9v9Ne/2/grz7+u9BEaf4/2978P74cVhVbXynr/41e1aCq22Jgl4UBAQAAOBc12kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAq+vZ4wPvbxZ/92UP/fin97z/8wc/M3f7k9/50i0hTM8/3pGFO84/8bXuyvGP/OzA49/8xoY1D5+s5OV68ts/qssdaz05FMKhwiODMXFiqHpnIbDlw/fs764mHhwK4e3FwM6DO9dUE98eCuHiYuC+qy85v5o4mJb4yWPv/VU18Yk08MG1r3upmrgiD3Sk3b17ddbdjrS7X1kdwnAhUOvudavrq6q1cWUe6Ezb+PvBrI0YGIxF7xrM2oiBmVhiui+Edd0hdKVV/XMlq6orrerHlayqrrSqz1dCuCKE0J1W9VhvVlV3OvJ/682qioEL3vbd5y6qJg71hrCuGPjFxw9vqCY+lQRqjf9pbwhvqb5k0sa/15M13pM2fkdPCG8OIfSmJV7szkr0piWe7A7hvEKg1vifd4ewP/CaED98dhQf3LP/pp3bZmamdi9jojdvqz9cMz0zNbb9xpkdlaRPjXQU0qcOlOOdbY790ec+u716e+Tly4baSXfn5XrmuzzRU3f30qXqfccy9T72a6BYycLzUao/5u8Nq0Lfvj1Tu8c+vW3v3t3rs7/tZp/I/nbl0WxbrV+qbdWuV7qtLi5Wsm7v9bvW7dl/09rp67ddO3Xt1A0T4+/csHHDxPjGjeuqoxrP/i7FUA+X413LPNQ3dhcqORsfABISEist0Vn36TZ+rv+XXfqiv9DRnlCZ/4AuTSuKWTrmR7kUg97cPL6Ugy5NSUojWl+aOJSyTLTOcmlpMrGQpT/LMv+9rjQ5LNbUOb9J4/3OMDbW8H+6kfq7xc3320U2b7seyTddu2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//19BHGg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000140)={0x10}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000180)={0x4, 0x5, 0x3, 0xfff, 0x2, [0x1ff, 0x0, 0x81, 0x1]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$setstatus(r5, 0x4, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m19.242116839s ago: executing program 1 (id=66): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x7, 0x18, 0x9, 0x3, 0x8, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 1m16.996954026s ago: executing program 1 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m16.513558434s ago: executing program 32 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.649545826s ago: executing program 2 (id=234): r0 = creat(&(0x7f0000000500)='./file0\x00', 0xdcd0447a6912180f) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003eaff00000000000002000300030000000903000038000000fcffffff0e000000000020"], 0x38) close(r0) creat(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x125) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x1f}}) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000540)=ANY=[@ANYRES64], 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000033000100285e7000fbdbdb2502000000080001e3eb1e5d00"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {0x0, 0x872}, 0x14, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x1, 0xfffffff8, 0x2, 0x8, 0xffffffff, 0x5, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x2], [0x3, 0xfffffffc, 0x0, 0xe, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10002, 0x40000, 0x0, 0xc0800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4c6, 0x2, 0x0, 0x476f], [0x1, 0x7c, 0x0, 0x4, 0x3, 0x0, 0x0, 0x100, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffff5, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x10004, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r7, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @loopback, 0x4}, 0x80, 0x0, 0xfffffffffffffe42}, 0xff00) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r6, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) 9.646909072s ago: executing program 2 (id=237): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002002003400004802c0001800e000100696d6d65e469617465000000180002800c00028005000100c40000000800014000000009100001805102010072656469720000000900010073797a30000000000900020073797a320000000014000000020a0300000000000000000002000004140000001100010000000000000000000000000a"], 0xa8}}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r6, 0x3000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffe23, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 8.315829676s ago: executing program 4 (id=240): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r3, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x80}}, 0xc80) (fail_nth: 10) 7.238416376s ago: executing program 4 (id=241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth1_vlan\x00', &(0x7f0000000c80)=@ethtool_gfeatures}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r8, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) r9 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0110000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10004, r4, 0x60000}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 5.980883067s ago: executing program 2 (id=242): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x793, &(0x7f0000001600)="$eJzs3MFLXNcaAPDvXp0YE/PGB2/x3ibvQQIJhIwaN8nq+TZvFwgEuk1FRxGvTnDGVG0gprtCIY2bthRKu++y20JI/4DuSqCF7gulTe2i7WbKHUdt4owZ45hJ098PrnPOveee73z3Xo/3gncC+Mv6T/4jiRiKiGsRUWyuTyPiWKN0PGJ9q93m49tT+ZJEvX79hyTfLTbrxZ2+kubnyWjsEv+MiIeFiAtv7Y1bXV2bn8yy8lKzPlJbuDlSXV27OLcwOVueLS+OjV8ZvTw+fnl0vGu5nn3tyuD9L/+/sfHVZ7V7p/svJjHRyDuauXUt0B9sHZNCTDy1fvEogvVQ0kGb/oM0BgDgSOT3+X3Ne7NCFKNv9y5tr302AQAAAC+v+kC9U7923BIAAAB4ySTR6xEAAAAAR2v7/wC23+09qvdg2/n+fxEx3Cp+f+Md4ojjUYiIE5vJE68fJFu7waGs342IBxMtrr/Dv6Q8ulsc7E6PdNuDfP6ZaDX/pDvzT7SYf/q3vzvhkNrPf7vx+9rMf9c6jPH5R/8qtI1/t7ry9ulW8ZOd+Emb+K93GP/exjv3222rfxJxruXfn+SJWPt8P8TIzFzW6ldrZ7gPfzv/qH3+ESf2xE+SRtRk//xvdpj/m5s/za/vE//8mf3P/1b8gSf2y6+Jd5vjSCPifvMzr288FePMwtdf7I2crG/Hn25z/Fue//G+nR4+7jD/bz8dWOmwKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEUSVraKadpqRRxMiL+ESfSrFKtXZipLC9O59sihqOQzsxl5dGIKG7Vk7w+1ijv1i/l5cHd+nhE/P2bwa2gc1m5NFXJpnudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADtORsRQJGkpItKI+LmYpqVSr0cFAAAAdN1wrwcAAAAAHDnP/wAAAPDqe97n/6TL4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeadeuXs2X+ubj21N5ffrW6vJ85dbF6XJ1vrSwPFWaqizdLM1WKrNZuTRVWXhWf2lEjF2J5ZWRWrlaG6murt1YqCwv1m7MLUzOlm+UCy8kKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5qqLEkA6WISBvlNC2VIk5FxHAUkpm5rDwaEX+LiEfFwkBeH+v1oAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi66ura/GSWlZf+3IX6i0inLyK612FfdKGfSCJeklPQovBB86zs1yZZj+j5UNPmQA/Tz8GujTvPOCy9Lvy7R/MRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9VV1dm5/MsvJStdcjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLfS75KIyJdzxbNDT289lvxSjMGt8hsfXn9vZbJWWxrL1/9YbGyPiNr7zfWXIuJUc8c7LzYLAAAAeMX99yCNt5/Tt5/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOlVdXZufzLLy0hEW4m6vswQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7H7wEAAP//YEa3Uw==") r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x323801, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x40, 0xc, 0xd, {0xd, 0xe, "2a67af365c2769903da479"}}, 0x0}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x793, &(0x7f0000001600)="$eJzs3MFLXNcaAPDvXp0YE/PGB2/x3ibvQQIJhIwaN8nq+TZvFwgEuk1FRxGvTnDGVG0gprtCIY2bthRKu++y20JI/4DuSqCF7gulTe2i7WbKHUdt4owZ45hJ098PrnPOveee73z3Xo/3gncC+Mv6T/4jiRiKiGsRUWyuTyPiWKN0PGJ9q93m49tT+ZJEvX79hyTfLTbrxZ2+kubnyWjsEv+MiIeFiAtv7Y1bXV2bn8yy8lKzPlJbuDlSXV27OLcwOVueLS+OjV8ZvTw+fnl0vGu5nn3tyuD9L/+/sfHVZ7V7p/svJjHRyDuauXUt0B9sHZNCTDy1fvEogvVQ0kGb/oM0BgDgSOT3+X3Ne7NCFKNv9y5tr302AQAAAC+v+kC9U7923BIAAAB4ySTR6xEAAAAAR2v7/wC23+09qvdg2/n+fxEx3Cp+f+Md4ojjUYiIE5vJE68fJFu7waGs342IBxMtrr/Dv6Q8ulsc7E6PdNuDfP6ZaDX/pDvzT7SYf/q3vzvhkNrPf7vx+9rMf9c6jPH5R/8qtI1/t7ry9ulW8ZOd+Emb+K93GP/exjv3222rfxJxruXfn+SJWPt8P8TIzFzW6ldrZ7gPfzv/qH3+ESf2xE+SRtRk//xvdpj/m5s/za/vE//8mf3P/1b8gSf2y6+Jd5vjSCPifvMzr288FePMwtdf7I2crG/Hn25z/Fue//G+nR4+7jD/bz8dWOmwKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEUSVraKadpqRRxMiL+ESfSrFKtXZipLC9O59sihqOQzsxl5dGIKG7Vk7w+1ijv1i/l5cHd+nhE/P2bwa2gc1m5NFXJpnudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADtORsRQJGkpItKI+LmYpqVSr0cFAAAAdN1wrwcAAAAAHDnP/wAAAPDqe97n/6TL4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeadeuXs2X+ubj21N5ffrW6vJ85dbF6XJ1vrSwPFWaqizdLM1WKrNZuTRVWXhWf2lEjF2J5ZWRWrlaG6murt1YqCwv1m7MLUzOlm+UCy8kKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5qqLEkA6WISBvlNC2VIk5FxHAUkpm5rDwaEX+LiEfFwkBeH+v1oAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi66ura/GSWlZf+3IX6i0inLyK612FfdKGfSCJeklPQovBB86zs1yZZj+j5UNPmQA/Tz8GujTvPOCy9Lvy7R/MRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9VV1dm5/MsvJStdcjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLfS75KIyJdzxbNDT289lvxSjMGt8hsfXn9vZbJWWxrL1/9YbGyPiNr7zfWXIuJUc8c7LzYLAAAAeMX99yCNt5/Tt5/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOlVdXZufzLLy0hEW4m6vswQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7H7wEAAP//YEa3Uw==") (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x323801, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x40, 0xc, 0xd, {0xd, 0xe, "2a67af365c2769903da479"}}, 0x0}, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) (async) 5.878786272s ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000300000000000200000a20000000000a050000000000000000000100fff80900010073797a30000000002c000000030a01010000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a0104000000000000000001000000300004802c0001800b000100736f636b657400001c0002800800024000000001080001400000000908000300000000b708000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.689522053s ago: executing program 4 (id=245): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000100)='./file0\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r1 = syz_io_uring_setup(0x52bf, &(0x7f0000000400)={0x0, 0xfb9f, 0x80, 0x8000c, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = open(&(0x7f00000000c0)='.\x00', 0x10800, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000340), &(0x7f0000000180)=0xfffffffffffffe08) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101080, 0x88) setreuid(0xffffffffffffffff, 0xee00) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000000248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 5.689134943s ago: executing program 3 (id=246): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x2, &(0x7f0000000180)={[{@hide}, {@map_normal, 0x0}, {}, {@showassoc}, {@map_off}, {@hide, 0x41}, {@session={'session', 0x3d, 0x23}}, {@unhide}, {}, {@utf8}, {@showassoc}, {@unhide}, {@gid}, {@session={'session', 0x3d, 0x16}}, {@map_normal}, {@session={'session', 0x3d, 0x31}}, {@dmode={'dmode', 0x3d, 0xc82}}, {@mode={'mode', 0x3d, 0x4}}]}, 0x2, 0x6a0, &(0x7f0000000a40)="$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") socket(0x29, 0xa, 0x16afa04f) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FICLONE(r1, 0x40049409, r1) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x2, &(0x7f0000000180)={[{@hide}, {@map_normal, 0x0}, {}, {@showassoc}, {@map_off}, {@hide, 0x41}, {@session={'session', 0x3d, 0x23}}, {@unhide}, {}, {@utf8}, {@showassoc}, {@unhide}, {@gid}, {@session={'session', 0x3d, 0x16}}, {@map_normal}, {@session={'session', 0x3d, 0x31}}, {@dmode={'dmode', 0x3d, 0xc82}}, {@mode={'mode', 0x3d, 0x4}}]}, 0x2, 0x6a0, &(0x7f0000000a40)="$eJzs3V1rG+n5x/HfyLIte/+E5d8SQnCSO0kXHJoqI3njYFLoqqORPa2kETNysaGwpBt7CZGzbZJC45OtT/oA2zfQs570oC+i0ON9Fz0pLSztWaE9mDIPeoqeol0l2d18P2ZXo3uumfuauRVdjK25JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMup2nbJUt1r7h+YyZxq4Dey5f9Go+vTvS3rRrpwY2a/khX/p0JBF9KmC9/srz4f/++aNtJnGyrEDwWdvnX+7bvfyOe6209J+PPQvDt88uz04b1O5+jxC8Quae7dv07KdZfWsjEZE7TrNr3Q9xqVXdd4oW92trftW3u10NS8uhsehm23YZzAzbX9wGw6N0xpZ2fLuMVDf7+5W63U3W7jne+UbXvb/GA1HWhJxdDZ8+p1r7mbxMSr45g75pMfpwFupWHM8YPO0dasI4mDSi8SVJ4VVLbL5VKpXC5t3965fce28yMNdsyyezQSsfAXLb5iFvPGDSxALq7/f7Wkugpqal8HMmN/HFUVyFdjwvpMt/6/c8ud2u9g/e9W+QvS97LVF5XU/8vps8uT6v+EXIxMssG4NdaE9vl+lpOMjJ7omU71UPfUUUdHeryAfRuZKwvZyyv42ZWrpjyF8uWpoUrSYrIWox1ta1u23teeagplVJOnulyFOlSottzkFeUokKuK2vIVyGhTjm7IqKQd7WhLRq6KOpSvfTW1q6oq+ncURcd6kJz3rSk5qhtUmhCwOhhUnrKnSfX/Jx+nr9Os/tvU/zdV+jpYTR8+nRYDfAlE2fX/oNzsza68vIwAAAAAAMCiWclv363kb/eXJEWqeXXXft1pAQAAAACABbIUrWpDVnz9L+mSLK7/AQAAAAD4urGSe+wsSevJh/qt/p1QL/JLgKVXkCIAAAAAAPiCkjv/L69IUTJpxRVZc13/AwAAAACAr4DfDMyxn+/OsRt1/6yfkxS2Vq0//3NVwbJ11jr4lnVSiddUTrKYkU8AtGsXrXPZRL3Jw4qk5Jnjblgb6eSY2SSYvXkHPzueNde/FTyXwMrS4A4mJGDFPW/ns2f6RFfTTa5m88zfP80pWZP2sl7z6m7R8et3S6pUzuXa7kH7548e/EIKesd5/KBzVPzgo879JJezuOnsJN7px0Pp5MafjH4uT5P5FpJ7LsYd8Zpq3S5/22ysW0m/dvf4l1Q5yQ12NG0A+n3+StfSMbu2nsaun/Zm3I+PvxAff6mYDNnQ0QfLVj+L0vNHPm4gJmRRSLK4nsZc37yu8t/S5d4o5KzCt5ekcnF0DIayKA9mMftcWP8aORcDWSQP3TUD52IrzuIv8Y4mZLE1XxYjIwIAr8uxLil5F7qkZBLzXhUqZHW3Wx66b2qfq+7Mru7vDVf3p7+PomSDJSmf/W1iai8Fxe/om1ZSh1bSQ8pfHPOObmd1paAJ7+j2F6hucV9/6n8HUpb2SBb/iaLobinp93fPVdU/DHU30m9YLy/Fp/DW05OfJhPgxz48+vDoUbm8tW2/a9u3y1pODiN7WBK1BwAwYvZ37MyMsN7V1TTi6v1/vJMuDVW8/+99pKCoD/SROrqvm92vELgyfq/rAx9DuJletWrgqtWcf/tu8r10w7El3Zx4VZfU0oHYci92Wd1Nhit1P3brJY8CAACv1rUZdXh8/S8M1f+b2kwjNi+Ove4eruXZ1XHvkn5SbGl28u8t+mwAAPBmcIPPrPX2r60g8Frvl3Z2SpX2nmsC3/mhCbzqrmu8ZtsNnL1Kc9c1rcBv+45fN61Aq17VDU2432r5QdvU/MC0/NA7SL753WRf/R66jUqz7Tlhq+5WQtc4frNdcdqm6oWOae1/v+6Fe26QbBy2XMereU6l7flNE/r7geMWjQlddyDQq7rNtlfz4sWmaQVeoxIcmh/59f2Ga6pu6AReq+2nO+z25TVrftBIdlvMR+M+LwAAwBvnybPTh/c6naPHzy+sxZfmacuZJsSMLqzoybP4qjxuyWermCMIAIAvmX4Bn2OjwktMCAAAAAAAAAAAAAAAAAAAAAAAjJh9S9+cC8vjbhaUei0/O5e16Jfq32I4sh9Li05snoXcvFt1b4k4ffjplOC1Xkv39A/GnL2yA/z7/0lvJS1KW/KL72ttyuC+jIXvHqdndGJMvHLsqtXeWOQX/88hXnj0xwmroiiKpm++OnwOV4YOMDet07ykxytzD8HKyEsUwNfV/wIAAP//qMc0fQ==") (async) socket(0x29, 0xa, 0x16afa04f) (async) 4.890604137s ago: executing program 0 (id=247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40}, {0x6, 0x1}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x300, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4.763783284s ago: executing program 3 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000001000)={0xffffffffffffffff, 0x1, 0x8000, 0x100000000}) sendfile(r2, r1, &(0x7f0000001040)=0x8, 0xffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) 3.880170573s ago: executing program 0 (id=249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x5, 0x0) read$msr(r0, &(0x7f000001b700)=""/102386, 0x18ff2) r1 = io_uring_setup(0x48ac, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1, 0xbd}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @mcast2, 0xffffffff}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 3.629331627s ago: executing program 0 (id=250): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000540)="97ff7900854c4f727c70aa1aa1905a27e9dace88822c5a93a94db449bbf1fe3ddb498ce75f72d19de989aae40869849544e61c4e6206106a7ee6f08380a2cfe5b5859deadfec71f1b9acf6e40ff1e6c24536583702dcd5dd791dafcd50db906e32001565414de2c7f85fede9c12b1b3333c7337020171ffec87e035d4e3ba1a339f65d1778de9f5c0a6147c1df33caeb6216ff54fc09fd6d405e0c4446b0a9a0f628d4ccd19929f1eaa35b59f8e0318ca33fa7aaa386", 0xb6}], 0x1}, 0x4048043) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6a4, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000500)={0x4, 0x12, {r2}, {}, 0x100000000, 0xf}) read$FUSE(r6, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000070601020000000033a0000000000000050001000700000008000640000000030500010007000002080006400000000e"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x41) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = dup(r0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff3, 0xbffc, 0xee52, 0x2, 0xc, 0x20008, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000000, 0x71, 0xffff1896, 0x8, 0x26, 0x0, 0x1a}, 0x9c) 3.550510981s ago: executing program 3 (id=251): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 3.225633309s ago: executing program 2 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 2.595413175s ago: executing program 0 (id=253): r0 = creat(&(0x7f0000000500)='./file0\x00', 0xdcd0447a6912180f) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003eaff00000000000002000300030000000903000038000000fcffffff0e000000000020"], 0x38) close(r0) creat(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x125) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x1f}}) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000540)=ANY=[@ANYRES64], 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000033000100285e7000fbdbdb2502000000080001e3eb1e5d00"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {0x0, 0x872}, 0x14, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x1, 0xfffffff8, 0x2, 0x8, 0xffffffff, 0x5, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x2], [0x3, 0xfffffffc, 0x0, 0xe, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10002, 0x40000, 0x0, 0xc0800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4c6, 0x2, 0x0, 0x476f], [0x1, 0x7c, 0x0, 0x4, 0x3, 0x0, 0x0, 0x100, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffff5, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x10004, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @loopback, 0x4}, 0x80, 0x0, 0xfffffffffffffe42}, 0xff00) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r5, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) 2.212408497s ago: executing program 3 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000190000/0x1000)=nil, 0x10cc, 0x4, 0x10012, r1, 0x0) 1.652765077s ago: executing program 4 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000000240)={0x3, 0xf, 0x1, 0x6, 0x9, 0x2}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x400) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000b00)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x12, 0x6, 0x0, 0x0, "41aa852ed0ee53ae210696985995de3bb842da1d072d09fc23839199cfdd79ce5b8fd9f8c96b59f6550648cb7ddc3acb99961b8c5a1f2624e07c9ff92be5eff9"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r6 = dup2(r2, r1) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x54) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2b8180, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x2}) 1.160482125s ago: executing program 2 (id=256): r0 = gettid() mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000004400000020"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000700), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r1}, 0x38) acct(&(0x7f00000001c0)='./file0\x00') timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x1, 0x0, 0x60, 0x7f, 0x2, "9f9413a4d68de2d71b63e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='+\x00']) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x44}}, 0x4040000) timer_getoverrun(r2) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) recvmmsg(r6, &(0x7f0000000040), 0x40000000000007d, 0x40018003, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200027bd7000fcdbdf250300005e080002000200000008000200020000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40880) 1.075657979s ago: executing program 0 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) setxattr$incfs_id(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x100000000000000) 817.571244ms ago: executing program 4 (id=258): syz_emit_ethernet(0x71, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x1, 0x0, [{0x0, 0x5, "a78ce54006598080a8030037004023493b87aafaff00ffffffffff23732472eefa45ad96489269"}, {0x18}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) syz_io_uring_setup(0xf00, &(0x7f00000027c0)={0x0, 0x2044, 0x10000, 0x0, 0x2fb}, &(0x7f0000000100), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 721.942019ms ago: executing program 3 (id=259): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4440, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) read$FUSE(r0, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, r3, {0xe}}, 0x18) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00001b3000/0x3000)=nil) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x8913, &(0x7f000011fec0)) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 581.175337ms ago: executing program 4 (id=260): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="e4836d513bcab6b90efd3ebcdfc597b9a7e7daadf4b04a69b21dfd22fa7b851984a0b83bc6a2b8df663311", 0x2b}, {&(0x7f00000000c0)="5daeda0d3494ff55eeecf1b4a6f565a74a04976e2511f376b008fc2b01d6361d", 0x20}], 0x2, 0x0, 0x0, 0x54}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readv(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38800aaba3875e51, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x5, '\x00', 0x6}, {0x7e, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x3, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x7, 0x2}, {0x68, 0x87, 0x96, '\x00', 0x7}, {0x0, 0x0, 0x27, '\x00', 0x7b}, {0x3, 0x7, 0xd2}, {0x68, 0x3, 0x5, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtaction={0x70, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x4d, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100fffffff5000000000300000a20000000000a01080000000000000000010000090900010073797a310000000054000000030a030000000000000000000a0900010073797a31000000000900030073797a300000000028000480080002401501ad7d1400030076657468305f766972745f77696669000800014000000005140000001100010000000000000000000a00000a000000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100fefffff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310008000070000000030a010400000000000000000100000a0900010073797a31000000000900030073797a300000000028000480080002401501ad7d140004"], 0xb8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x340040c1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24008800) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 191.549729ms ago: executing program 0 (id=261): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") futex(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) r4 = io_uring_setup(0x20, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x80000002, 0xfefffffd}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) accept4$x25(r5, 0x0, 0x0, 0x80800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000300)={0x10000008}) 0s ago: executing program 2 (id=262): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 55.555557][ T5771] cgroup: Unknown subsys name 'net' [ 55.689247][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.041921][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.560701][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.569212][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.577909][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.582043][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.585373][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.600129][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.607331][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.607349][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.608801][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.616884][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.622341][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.629147][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.637175][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.642845][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.649145][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.664439][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.677158][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.678382][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.685353][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.693130][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.699399][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.708115][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.713628][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.727601][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.142849][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 59.238077][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 59.260456][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 59.340313][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.348608][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.356260][ T5781] bridge_slave_0: entered allmulticast mode [ 59.363178][ T5781] bridge_slave_0: entered promiscuous mode [ 59.392348][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.399650][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.406818][ T5781] bridge_slave_1: entered allmulticast mode [ 59.413800][ T5781] bridge_slave_1: entered promiscuous mode [ 59.420816][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 59.516824][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.524059][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.531147][ T5782] bridge_slave_0: entered allmulticast mode [ 59.537952][ T5782] bridge_slave_0: entered promiscuous mode [ 59.546173][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.553343][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.560453][ T5782] bridge_slave_1: entered allmulticast mode [ 59.568008][ T5782] bridge_slave_1: entered promiscuous mode [ 59.575070][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.582158][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.589377][ T5784] bridge_slave_0: entered allmulticast mode [ 59.596124][ T5784] bridge_slave_0: entered promiscuous mode [ 59.605299][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.617550][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.640570][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.647756][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.655070][ T5784] bridge_slave_1: entered allmulticast mode [ 59.661662][ T5784] bridge_slave_1: entered promiscuous mode [ 59.718306][ T5781] team0: Port device team_slave_0 added [ 59.729191][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.749083][ T5781] team0: Port device team_slave_1 added [ 59.779897][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.800698][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.842626][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.862081][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.869312][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.895366][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.906967][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.914357][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.921450][ T5783] bridge_slave_0: entered allmulticast mode [ 59.928289][ T5783] bridge_slave_0: entered promiscuous mode [ 59.937827][ T5782] team0: Port device team_slave_0 added [ 59.947287][ T5782] team0: Port device team_slave_1 added [ 59.961295][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.968337][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.994537][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.011011][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.018726][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.025909][ T5783] bridge_slave_1: entered allmulticast mode [ 60.032468][ T5783] bridge_slave_1: entered promiscuous mode [ 60.064182][ T5784] team0: Port device team_slave_0 added [ 60.072278][ T5784] team0: Port device team_slave_1 added [ 60.109365][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.116438][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.144061][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.156194][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.163177][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.189130][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.207351][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.214491][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.240404][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.293680][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.300630][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.326642][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.339620][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.351718][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.384029][ T5781] hsr_slave_0: entered promiscuous mode [ 60.392652][ T5781] hsr_slave_1: entered promiscuous mode [ 60.425293][ T5783] team0: Port device team_slave_0 added [ 60.479924][ T5783] team0: Port device team_slave_1 added [ 60.489080][ T5784] hsr_slave_0: entered promiscuous mode [ 60.495640][ T5784] hsr_slave_1: entered promiscuous mode [ 60.501977][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.509842][ T5784] Cannot create hsr debugfs directory [ 60.533515][ T5782] hsr_slave_0: entered promiscuous mode [ 60.539673][ T5782] hsr_slave_1: entered promiscuous mode [ 60.545952][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.554331][ T5782] Cannot create hsr debugfs directory [ 60.586077][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.593124][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.619363][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.636794][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.643885][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.669828][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.733528][ T5792] Bluetooth: hci2: command tx timeout [ 60.813514][ T5790] Bluetooth: hci0: command tx timeout [ 60.813530][ T5793] Bluetooth: hci1: command tx timeout [ 60.823157][ T5792] Bluetooth: hci3: command tx timeout [ 60.836320][ T5783] hsr_slave_0: entered promiscuous mode [ 60.842863][ T5783] hsr_slave_1: entered promiscuous mode [ 60.851683][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.860400][ T5783] Cannot create hsr debugfs directory [ 61.046467][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.059287][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.099639][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.109329][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.148741][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.159615][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.168695][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.184985][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.264649][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.274737][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.284467][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.297616][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.401257][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.426851][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.437942][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.456266][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.478131][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.504939][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.539435][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.546717][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.560706][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.567846][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.638878][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.706637][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.733833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.740963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.751379][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.758557][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.787277][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.830951][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.850210][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.875259][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.882383][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.910269][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.917424][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.937967][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.959021][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.996487][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.003662][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.036172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.043330][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.072501][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.211779][ T5781] veth0_vlan: entered promiscuous mode [ 62.230825][ T5781] veth1_vlan: entered promiscuous mode [ 62.290380][ T5781] veth0_macvtap: entered promiscuous mode [ 62.326140][ T5781] veth1_macvtap: entered promiscuous mode [ 62.351835][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.397234][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.431875][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.456273][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.465476][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.493633][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.504745][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.556360][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.621986][ T5784] veth0_vlan: entered promiscuous mode [ 62.640666][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.708418][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.713888][ T5784] veth1_vlan: entered promiscuous mode [ 62.725001][ T5782] veth0_vlan: entered promiscuous mode [ 62.727678][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.767420][ T5782] veth1_vlan: entered promiscuous mode [ 62.801575][ T5783] veth0_vlan: entered promiscuous mode [ 62.814141][ T5792] Bluetooth: hci2: command tx timeout [ 62.828414][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.829211][ T5783] veth1_vlan: entered promiscuous mode [ 62.842173][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.887948][ T5782] veth0_macvtap: entered promiscuous mode [ 62.893298][ T5792] Bluetooth: hci3: command tx timeout [ 62.899079][ T5792] Bluetooth: hci1: command tx timeout [ 62.899124][ T5790] Bluetooth: hci0: command tx timeout [ 62.919030][ T5784] veth0_macvtap: entered promiscuous mode [ 62.939236][ T5784] veth1_macvtap: entered promiscuous mode [ 62.967191][ T5782] veth1_macvtap: entered promiscuous mode [ 62.986381][ T5783] veth0_macvtap: entered promiscuous mode [ 62.998117][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.009756][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.025841][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.075219][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.095805][ T5867] syz.2.3[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 63.106376][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.122755][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.136869][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.149354][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.160613][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.176390][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.189195][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.198579][ T5783] veth1_macvtap: entered promiscuous mode [ 63.213706][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.223348][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.232052][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.242264][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.261425][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.272756][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.283131][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.294728][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.306486][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.330223][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.340101][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.354027][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.362728][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.388109][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.399321][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.409591][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.420412][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.431082][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.441906][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.459444][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.496095][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.515074][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.528198][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.539458][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.549477][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.560001][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.572633][ T5867] loop2: detected capacity change from 0 to 32768 [ 63.572667][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.639562][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.639850][ T5867] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.665734][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.675013][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.684516][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.765702][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.779209][ T5867] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 63.783248][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.848381][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.869745][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.894777][ T5867] XFS (loop2): Starting recovery (logdev: internal) [ 63.945336][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.961278][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.961607][ T5867] XFS (loop2): Ending recovery (logdev: internal) [ 63.985160][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.996594][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.134174][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.142803][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.177715][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.188612][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.228108][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.359774][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.893909][ T5790] Bluetooth: hci2: command tx timeout [ 64.973476][ T5790] Bluetooth: hci0: command tx timeout [ 64.978911][ T5790] Bluetooth: hci1: command tx timeout [ 64.981149][ T5792] Bluetooth: hci3: command tx timeout [ 65.211311][ T5893] syzkaller0: entered promiscuous mode [ 65.221267][ T5893] syzkaller0: entered allmulticast mode [ 66.015039][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.083029][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.273136][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 66.285312][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.296097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.340769][ T5872] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 66.418618][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.599379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.622008][ T5872] usb 2-1: config 0 descriptor?? [ 66.725452][ T5835] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 66.803455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.813298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.974672][ T5792] Bluetooth: hci2: command tx timeout [ 67.053222][ T5792] Bluetooth: hci1: command tx timeout [ 67.058748][ T5792] Bluetooth: hci0: command tx timeout [ 67.064311][ T5793] Bluetooth: hci3: command tx timeout [ 67.213021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 67.222056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.303378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.343167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.353111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.361383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.613744][ T5835] usb 1-1: config 0 has no interface number 0 [ 67.625206][ T5888] loop1: detected capacity change from 0 to 512 [ 67.646236][ T5888] EXT4-fs: Ignoring removed oldalloc option [ 67.665781][ T5835] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 67.683029][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.691035][ T5835] usb 1-1: Product: syz [ 67.713011][ T5835] usb 1-1: Manufacturer: syz [ 67.717622][ T5835] usb 1-1: SerialNumber: syz [ 67.734164][ T5835] usb 1-1: config 0 descriptor?? [ 67.760158][ T5835] yurex 1-1:0.50: Could not find endpoints [ 67.777602][ T5888] EXT4-fs (loop1): 1 truncate cleaned up [ 67.804937][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.909403][ T5883] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2: invalid indirect mapped block 234881024 (level 0) [ 67.931763][ T5883] EXT4-fs (loop1): Remounting filesystem read-only [ 68.538682][ T5915] loop3: detected capacity change from 0 to 1024 [ 69.003571][ T5907] loop2: detected capacity change from 0 to 32768 [ 69.010929][ T5907] ======================================================= [ 69.010929][ T5907] WARNING: The mand mount option has been deprecated and [ 69.010929][ T5907] and is ignored by this kernel. Remove the mand [ 69.010929][ T5907] option from the mount to silence this warning. [ 69.010929][ T5907] ======================================================= [ 69.098074][ T8] usb 2-1: USB disconnect, device number 2 [ 69.108223][ T11] hfsplus: b-tree write err: -5, ino 4 [ 69.120692][ T5907] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.300982][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.378107][ T5907] XFS (loop2): Ending clean mount [ 69.476352][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.629565][ T5938] xt_policy: too many policy elements [ 70.061039][ T5813] usb 1-1: USB disconnect, device number 2 [ 70.188032][ T5944] loop3: detected capacity change from 0 to 40427 [ 70.198440][ T5944] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 70.206418][ T5944] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 70.221959][ T5944] F2FS-fs (loop3): invalid crc value [ 70.250077][ T5944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.331776][ T5944] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 70.339042][ T5951] loop1: detected capacity change from 0 to 1024 [ 70.348012][ T5944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.429719][ T5954] loop0: detected capacity change from 0 to 2048 [ 70.749775][ T5954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.583878][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.590505][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.745079][ T49] hfsplus: b-tree write err: -5, ino 4 [ 71.803398][ T5945] loop2: detected capacity change from 0 to 32768 [ 71.829991][ T5945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.14 (5945) [ 71.922867][ T5945] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.980394][ T5945] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 72.004309][ T5945] BTRFS info (device loop2): enabling auto defrag [ 72.011084][ T5945] BTRFS info (device loop2): use no compression [ 72.019031][ T5945] BTRFS info (device loop2): force clearing of disk cache [ 72.027906][ T5945] BTRFS info (device loop2): max_inline at 4096 [ 72.037257][ T5945] BTRFS info (device loop2): disabling free space tree [ 72.898713][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 72.906728][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.000593][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 74.001240][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 74.012135][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 74.031733][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 74.051769][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 74.062887][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 74.078656][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 74.101521][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 74.166327][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 74.188665][ T49] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 74.207729][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 74.219159][ T5945] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 74.233293][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 74.267245][ T49] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 74.276453][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.302159][ T5945] BTRFS error (device loop2): open_ctree failed: -12 [ 74.303645][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.343047][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.363084][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.393131][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.402181][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.411333][ T5931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (5931) [ 74.657257][ T8] usb 2-1: usb_control_msg returned -32 [ 74.674068][ T8] usbtmc 2-1:16.0: can't read capabilities [ 75.083086][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.109255][ T5996] usbtmc 2-1:16.0: control status returned 0 [ 75.192740][ T5998] loop0: detected capacity change from 0 to 136 [ 75.273071][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 75.324944][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.452042][ T8] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 75.476097][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.501049][ T8] usb 3-1: config 0 descriptor?? [ 75.864801][ T5995] loop3: detected capacity change from 0 to 32768 [ 75.877221][ T5998] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 75.922039][ T5988] loop2: detected capacity change from 0 to 512 [ 75.935688][ T5988] EXT4-fs: Ignoring removed oldalloc option [ 75.949618][ T5995] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.993427][ T5988] EXT4-fs (loop2): 1 truncate cleaned up [ 76.000400][ T5988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.080956][ T6013] loop0: detected capacity change from 0 to 2048 [ 76.150117][ T6014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.172293][ T5988] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.22: invalid indirect mapped block 234881024 (level 0) [ 76.194887][ T5988] EXT4-fs (loop2): Remounting filesystem read-only [ 76.211972][ T5813] usb 3-1: USB disconnect, device number 2 [ 76.231218][ T6013] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 76.241028][ T5995] XFS (loop3): Ending clean mount [ 76.281956][ T6013] Remounting filesystem read-only [ 76.316107][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 76.393568][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.542790][ T5813] usb 2-1: USB disconnect, device number 3 [ 76.602741][ T967] cfg80211: failed to load regulatory.db [ 76.791659][ T6019] loop1: detected capacity change from 0 to 2048 [ 76.806490][ T6019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.040935][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.180360][ T6026] pim6reg: entered allmulticast mode [ 77.205621][ T6026] Bluetooth: MGMT ver 1.22 [ 78.544113][ T6034] loop1: detected capacity change from 0 to 40427 [ 78.563269][ T6040] Invalid ELF header type: 3 != 1 [ 79.124692][ T6034] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 79.132465][ T6034] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.156550][ T6034] F2FS-fs (loop1): invalid crc value [ 79.164971][ T6034] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.275848][ T6034] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 79.283188][ T6034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.675464][ T6047] pim6reg: entered allmulticast mode [ 79.697248][ T6024] loop0: detected capacity change from 0 to 32768 [ 79.813471][ T6024] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 80.135541][ T6053] loop2: detected capacity change from 0 to 136 [ 80.154078][ T2985] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 80.201730][ T2985] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 80.277139][ T6033] loop3: detected capacity change from 0 to 32768 [ 80.680057][ T6059] loop0: detected capacity change from 0 to 1024 [ 81.612756][ T12] hfsplus: b-tree write err: -5, ino 4 [ 81.654591][ T6060] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 82.133852][ T5813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.134519][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 83.144742][ T5813] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 83.153059][ T5813] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.162788][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.172599][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.182582][ T967] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.190565][ T5813] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.203735][ T5813] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.212828][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.280244][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.393086][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 83.400872][ T967] usb 3-1: config 0 has an invalid interface number: 124 but max is 0 [ 83.413017][ T967] usb 3-1: config 0 has no interface number 0 [ 83.424034][ T967] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 83.438681][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.446827][ T967] usb 3-1: Product: syz [ 83.451187][ T967] usb 3-1: Manufacturer: syz [ 83.456067][ T5813] usb 1-1: usb_control_msg returned -32 [ 83.463476][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 83.466705][ T967] usb 3-1: SerialNumber: syz [ 83.473579][ T5813] usbtmc 1-1:16.0: can't read capabilities [ 83.488862][ T967] usb 3-1: config 0 descriptor?? [ 83.493039][ T5877] usb 4-1: config 0 has an invalid interface number: 209 but max is 0 [ 83.502400][ T5877] usb 4-1: config 0 has no interface number 0 [ 83.522385][ T5877] usb 4-1: config 0 interface 209 has no altsetting 0 [ 83.545088][ T5877] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 83.558749][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.567413][ T5877] usb 4-1: Product: syz [ 83.571668][ T5877] usb 4-1: Manufacturer: syz [ 83.581785][ T5877] usb 4-1: SerialNumber: syz [ 83.594507][ T5877] usb 4-1: config 0 descriptor?? [ 83.630682][ T6080] loop1: detected capacity change from 0 to 32768 [ 83.680832][ T6080] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 83.824520][ T6074] Zero length message leads to an empty skb [ 83.843401][ T5813] IPVS: starting estimator thread 0... [ 83.856804][ T27] audit: type=1800 audit(1762825686.881:2): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 83.960332][ T6084] usbtmc 1-1:16.0: control status returned 0 [ 83.973204][ T6085] IPVS: using max 19 ests per chain, 45600 per kthread [ 83.991448][ T27] audit: type=1800 audit(1762825687.011:3): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 84.134600][ T5813] usb 3-1: USB disconnect, device number 3 [ 84.396636][ T6080] syz.1.42 (6080) used greatest stack depth: 19888 bytes left [ 84.564509][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 84.948231][ T6091] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.287893][ T5877] usb 4-1: USB disconnect, device number 2 [ 85.416390][ T5813] usb 1-1: USB disconnect, device number 3 [ 85.479092][ T6089] loop1: detected capacity change from 0 to 32768 [ 85.544174][ T6089] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 85.586083][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 85.633434][ T6105] nftables ruleset with unbound set [ 85.668997][ T6089] XFS (loop1): Ending clean mount [ 85.816029][ T5877] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.024558][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 86.034273][ T5877] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 86.042372][ T5877] usb 4-1: config 0 has no interface number 0 [ 86.072197][ T5877] usb 4-1: config 0 interface 54 has no altsetting 0 [ 86.089238][ T5877] usb 4-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=34.c5 [ 86.118064][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.143092][ T5877] usb 4-1: Product: syz [ 86.147280][ T5877] usb 4-1: Manufacturer: syz [ 86.151882][ T5877] usb 4-1: SerialNumber: syz [ 86.178007][ T5877] usb 4-1: config 0 descriptor?? [ 86.333417][ T6091] loop2: detected capacity change from 0 to 40427 [ 86.350072][ T6091] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 86.422374][ T6091] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.430006][ T6118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.50'. [ 86.496985][ T6091] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 86.507106][ T5782] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 86.640812][ T6091] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.710302][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 86.943723][ T6125] loop1: detected capacity change from 0 to 1024 [ 86.951061][ T6125] EXT4-fs: Ignoring removed nobh option [ 86.985584][ T6125] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 87.051146][ T6091] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.168918][ T6091] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.089702][ T6132] kvm: emulating exchange as write [ 88.312322][ T6098] loop3: detected capacity change from 0 to 32768 [ 88.345955][ T6098] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.45 (6098) [ 88.501432][ T6141] IPVS: Scheduler module ip_vs_ not found [ 88.528215][ T5877] usb 4-1: bad CDC descriptors [ 88.547871][ T5791] udevd[5791]: incorrect btrfs checksum on /dev/loop3 [ 88.570136][ T5877] usb 4-1: bad CDC descriptors [ 88.644245][ T5877] usb 4-1: USB disconnect, device number 3 [ 89.821887][ T6162] loop3: detected capacity change from 0 to 32768 [ 89.873303][ T6162] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 90.163609][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 90.216512][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 90.540189][ T6177] loop1: detected capacity change from 0 to 32768 [ 90.570205][ T6177] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.63 (6177) [ 90.609667][ T6177] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 90.619814][ T6177] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 90.628537][ T6177] BTRFS info (device loop1): using free space tree [ 90.735797][ T6186] loop0: detected capacity change from 0 to 1024 [ 90.790603][ T6177] BTRFS info (device loop1): enabling ssd optimizations [ 90.797607][ T6177] BTRFS info (device loop1): auto enabling async discard [ 90.864945][ T6177] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 91.580205][ T6203] loop3: detected capacity change from 0 to 512 [ 91.614828][ T6203] EXT4-fs: Ignoring removed oldalloc option [ 91.889880][ T6203] EXT4-fs (loop3): 1 truncate cleaned up [ 91.903875][ T6172] loop2: detected capacity change from 0 to 32768 [ 91.928602][ T6203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.997908][ T6172] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 92.146700][ T6172] XFS (loop2): Ending clean mount [ 92.160059][ T6199] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 92.208677][ T1146] hfsplus: b-tree write err: -5, ino 4 [ 92.229682][ T6199] EXT4-fs (loop3): Remounting filesystem read-only [ 92.301469][ T6199] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 92.349027][ T6215] pim6reg1: entered promiscuous mode [ 92.373055][ T6215] pim6reg1: entered allmulticast mode [ 92.595278][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.976468][ T5781] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 93.085191][ T6217] loop0: detected capacity change from 0 to 32768 [ 93.189425][ T6217] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 93.232583][ T27] audit: type=1800 audit(1762825696.251:4): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.67" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 93.276343][ T6227] loop3: detected capacity change from 0 to 512 [ 93.503425][ T27] audit: type=1800 audit(1762825696.531:5): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.67" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 93.533516][ T6201] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 93.752840][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.772800][ T6227] ext4: Unknown parameter 'permit_directio' [ 93.991524][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.202689][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.312284][ T6239] loop3: detected capacity change from 0 to 1024 [ 94.358795][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.696712][ T6217] syz.0.67 (6217) used greatest stack depth: 18736 bytes left [ 94.811718][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.823789][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.837219][ T6242] team0: Port device bridge1 added [ 94.842878][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.845885][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 94.875323][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.884195][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.891705][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.923728][ T6242] bridge0: port 3(team0) entered blocking state [ 94.939316][ T6242] bridge0: port 3(team0) entered disabled state [ 94.963478][ T6242] team0: entered allmulticast mode [ 94.997064][ T6242] team_slave_0: entered allmulticast mode [ 95.015312][ T6242] team_slave_1: entered allmulticast mode [ 95.033101][ T6242] bridge1: entered allmulticast mode [ 95.067138][ T6242] team0: entered promiscuous mode [ 95.077231][ T6242] team_slave_0: entered promiscuous mode [ 95.087922][ T6242] team_slave_1: entered promiscuous mode [ 95.094049][ T6242] bridge1: entered promiscuous mode [ 95.200719][ T11] hfsplus: b-tree write err: -5, ino 4 [ 95.205010][ T6242] bridge0: port 3(team0) entered blocking state [ 95.212846][ T6242] bridge0: port 3(team0) entered forwarding state [ 95.363706][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.600413][ T8] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 95.624706][ T8] usb 1-1: config 0 has no interface number 0 [ 95.659838][ T8] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.735292][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 95.764927][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.800401][ T8] usb 1-1: Product: syz [ 95.810489][ T8] usb 1-1: Manufacturer: syz [ 95.822724][ T8] usb 1-1: SerialNumber: syz [ 95.859540][ T8] usb 1-1: config 0 descriptor?? [ 95.866531][ T6257] loop3: detected capacity change from 0 to 32768 [ 95.909274][ T6257] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.76 (6257) [ 95.952104][ T8] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 96.040002][ T6257] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.066494][ T6257] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 96.083715][ T6257] BTRFS info (device loop3): enabling auto defrag [ 96.092864][ T6257] BTRFS info (device loop3): use no compression [ 96.162299][ T5835] usb 1-1: USB disconnect, device number 4 [ 96.168508][ T6257] BTRFS info (device loop3): force clearing of disk cache [ 96.186282][ T5835] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 96.223055][ T6257] BTRFS info (device loop3): max_inline at 4096 [ 96.232587][ T6257] BTRFS info (device loop3): disabling free space tree [ 96.386210][ T6243] chnl_net:caif_netlink_parms(): no params data found [ 96.403278][ T27] audit: type=1800 audit(1762825699.421:6): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.78" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=9493 res=0 errno=0 [ 96.471503][ T6257] BTRFS info (device loop3): enabling ssd optimizations [ 96.497100][ T6257] BTRFS info (device loop3): auto enabling async discard [ 96.548327][ T6257] BTRFS info (device loop3): rebuilding free space tree [ 96.608985][ T6257] BTRFS info (device loop3): disabling free space tree [ 96.633613][ T6257] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.654869][ T6257] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.793206][ T5835] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 97.016496][ T5790] Bluetooth: hci2: command tx timeout [ 97.176312][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.220191][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.306525][ T5835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.319619][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.342928][ T5835] usb 1-1: Product: syz [ 97.378561][ T5835] usb 1-1: Manufacturer: syz [ 97.390017][ T5835] usb 1-1: SerialNumber: syz [ 97.418377][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.443891][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.451252][ T6243] bridge_slave_0: entered allmulticast mode [ 97.462567][ T6243] bridge_slave_0: entered promiscuous mode [ 97.603824][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.617057][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.653697][ T6243] bridge_slave_1: entered allmulticast mode [ 97.671432][ T6243] bridge_slave_1: entered promiscuous mode [ 97.748807][ T5784] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.922323][ T1146] hsr_slave_0: left promiscuous mode [ 97.938921][ T1146] hsr_slave_1: left promiscuous mode [ 97.957876][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.968609][ T6333] capability: warning: `syz.0.79' uses deprecated v2 capabilities in a way that may be insecure [ 97.978376][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.024100][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.054326][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.104045][ T1146] bridge_slave_1: left allmulticast mode [ 98.133230][ T1146] bridge_slave_1: left promiscuous mode [ 98.140977][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.238117][ T1146] bridge_slave_0: left allmulticast mode [ 98.255921][ T1146] bridge_slave_0: left promiscuous mode [ 98.417223][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.460342][ T6347] mmap: syz.3.82 (6347) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.624607][ T1146] veth1_macvtap: left promiscuous mode [ 98.632990][ T1146] veth0_macvtap: left promiscuous mode [ 98.639338][ T1146] veth1_vlan: left promiscuous mode [ 98.646120][ T1146] veth0_vlan: left promiscuous mode [ 99.135226][ T5790] Bluetooth: hci2: command tx timeout [ 99.324760][ T6353] loop3: detected capacity change from 0 to 1024 [ 99.497345][ T5835] usb 1-1: cannot find UAC_HEADER [ 99.641378][ T5835] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 99.659759][ T5835] usb 1-1: USB disconnect, device number 5 [ 99.667216][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 99.731652][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.774943][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 99.846160][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.890731][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.225192][ T2985] hfsplus: b-tree write err: -5, ino 4 [ 100.294247][ T5877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.353466][ T1146] bond0 (unregistering): Released all slaves [ 100.397452][ T6368] block device autoloading is deprecated and will be removed. [ 100.437442][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.448845][ T5877] usb 1-1: device descriptor read/64, error -71 [ 100.460695][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.743903][ T5877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.923218][ T5877] usb 1-1: device descriptor read/64, error -71 [ 101.058341][ T5877] usb usb1-port1: attempt power cycle [ 101.223985][ T5790] Bluetooth: hci2: command tx timeout [ 101.497398][ T5877] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.546059][ T5877] usb 1-1: device descriptor read/8, error -71 [ 101.837403][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 101.884846][ T5877] usb 1-1: device descriptor read/8, error -71 [ 102.025322][ T5877] usb usb1-port1: unable to enumerate USB device [ 102.158278][ T6243] team0: Port device team_slave_0 added [ 102.168850][ T6243] team0: Port device team_slave_1 added [ 102.274871][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.292354][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.362975][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.403089][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.416084][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.495182][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.609460][ T6243] hsr_slave_0: entered promiscuous mode [ 102.623941][ T6243] hsr_slave_1: entered promiscuous mode [ 102.640425][ T6243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.653057][ T6243] Cannot create hsr debugfs directory [ 103.145401][ T6243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.176818][ T6243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.186799][ T6382] loop3: detected capacity change from 0 to 32768 [ 103.232167][ T6382] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.90 (6382) [ 103.234099][ T6400] FAULT_INJECTION: forcing a failure. [ 103.234099][ T6400] name failslab, interval 1, probability 0, space 0, times 1 [ 103.262354][ T6243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.279611][ T6400] CPU: 0 PID: 6400 Comm: syz.0.93 Not tainted syzkaller #0 [ 103.286829][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.296887][ T6400] Call Trace: [ 103.300176][ T6400] [ 103.303128][ T6400] dump_stack_lvl+0x16c/0x230 [ 103.307840][ T6400] ? show_regs_print_info+0x20/0x20 [ 103.313061][ T6400] ? load_image+0x3b0/0x3b0 [ 103.317587][ T6400] ? __might_sleep+0xe0/0xe0 [ 103.322196][ T6400] ? __lock_acquire+0x7c80/0x7c80 [ 103.327241][ T6400] should_fail_ex+0x39d/0x4d0 [ 103.331940][ T6400] should_failslab+0x9/0x20 [ 103.336460][ T6400] slab_pre_alloc_hook+0x59/0x310 [ 103.341500][ T6400] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 103.347147][ T6400] kmem_cache_alloc+0x5a/0x2e0 [ 103.351912][ T6400] ? getname_flags+0xbb/0x500 [ 103.356593][ T6400] getname_flags+0xbb/0x500 [ 103.361100][ T6400] user_path_at_empty+0x2c/0x60 [ 103.365948][ T6400] __x64_sys_umount+0xf5/0x170 [ 103.370709][ T6400] ? path_umount+0xef0/0xef0 [ 103.375295][ T6400] ? lockdep_hardirqs_on+0x98/0x150 [ 103.380482][ T6400] do_syscall_64+0x55/0xb0 [ 103.384890][ T6400] ? clear_bhb_loop+0x40/0x90 [ 103.389562][ T6400] ? clear_bhb_loop+0x40/0x90 [ 103.394238][ T6400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.400122][ T6400] RIP: 0033:0x7f0e0298f6c9 [ 103.404532][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.424124][ T6400] RSP: 002b:00007f0e037dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.432524][ T6400] RAX: ffffffffffffffda RBX: 00007f0e02be5fa0 RCX: 00007f0e0298f6c9 [ 103.440484][ T6400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 103.448445][ T6400] RBP: 00007f0e037dd090 R08: 0000000000000000 R09: 0000000000000000 [ 103.456402][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.464361][ T6400] R13: 00007f0e02be6038 R14: 00007f0e02be5fa0 R15: 00007ffdf0488a68 [ 103.472333][ T6400] [ 103.486895][ T5790] Bluetooth: hci2: command tx timeout [ 103.517575][ T6243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.521022][ T6382] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.537955][ T6382] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 103.547854][ T6382] BTRFS info (device loop3): enabling auto defrag [ 103.555921][ T6382] BTRFS info (device loop3): use no compression [ 103.562188][ T6382] BTRFS info (device loop3): force clearing of disk cache [ 103.572183][ T6382] BTRFS info (device loop3): max_inline at 4096 [ 103.579554][ T6382] BTRFS info (device loop3): disabling free space tree [ 103.728942][ T6382] BTRFS info (device loop3): enabling ssd optimizations [ 103.757329][ T6382] BTRFS info (device loop3): auto enabling async discard [ 103.776673][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.794989][ T6382] BTRFS info (device loop3): rebuilding free space tree [ 103.811610][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.850768][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.857936][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.877385][ T6382] BTRFS info (device loop3): disabling free space tree [ 103.890613][ T6382] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.907145][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.914754][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.931402][ T6382] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.097746][ T6437] loop2: detected capacity change from 0 to 1024 [ 104.470741][ T5784] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.776715][ T6442] loop0: detected capacity change from 0 to 136 [ 104.812353][ T6442] Attempt to read inode for relocated directory [ 104.985923][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.063270][ T1146] hfsplus: b-tree write err: -5, ino 4 [ 105.158338][ T5931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (5931) [ 106.351511][ T6243] veth0_vlan: entered promiscuous mode [ 106.386102][ T6243] veth1_vlan: entered promiscuous mode [ 106.420695][ T6498] loop0: detected capacity change from 0 to 512 [ 106.468233][ T6243] veth0_macvtap: entered promiscuous mode [ 106.488833][ T6243] veth1_macvtap: entered promiscuous mode [ 106.541490][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.594434][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.619397][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.644368][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.654591][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.665227][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.678633][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.688853][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.699348][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.709206][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.721494][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.731653][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.742620][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.754304][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.840798][ T6243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.863296][ T6243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.872011][ T6243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.881343][ T6243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.034216][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.063026][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.117709][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.135869][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.139250][ T6469] loop2: detected capacity change from 0 to 40427 [ 107.196048][ T6469] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 107.224074][ T6469] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 107.399605][ T6469] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 107.440500][ T6469] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.606381][ T6469] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 107.675386][ T6469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.914929][ T6524] input: syz0 as /devices/virtual/input/input5 [ 108.559738][ T6531] syzkaller1: entered promiscuous mode [ 108.586357][ T6533] loop0: detected capacity change from 0 to 736 [ 108.599539][ T6531] syzkaller1: entered allmulticast mode [ 108.974460][ T6469] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 109.034965][ T6502] loop3: detected capacity change from 0 to 32768 [ 109.134042][ T6502] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.257782][ T6565] loop0: detected capacity change from 0 to 128 [ 109.339407][ T6502] XFS (loop3): Ending clean mount [ 109.376810][ T6565] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.493164][ T6565] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.566618][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.731062][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.063913][ T6575] netlink: 100 bytes leftover after parsing attributes in process `syz.4.110'. [ 110.869476][ T6577] loop0: detected capacity change from 0 to 2048 [ 110.948969][ T6577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.064042][ T6580] loop3: detected capacity change from 0 to 4096 [ 111.201987][ T6580] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 111.246396][ T6580] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 111.358673][ T6580] ntfs3: loop3: ino=21, "blkio.bfq.io_queued_recursive" fallocate(0x10) is not supported [ 111.772797][ T6600] input: syz0 as /devices/virtual/input/input6 [ 112.536002][ T6606] loop4: detected capacity change from 0 to 512 [ 112.574682][ T6606] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.603365][ T6606] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 112.682205][ T6606] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 112.690910][ T6606] System zones: 0-2, 18-18, 34-34 [ 112.704205][ T6606] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.116: inode #15: comm syz.4.116: iget: illegal inode # [ 112.769476][ T6606] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.116: couldn't read orphan inode 15 (err -117) [ 112.807601][ T6606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.913080][ T5835] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.977806][ T6243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.117832][ T6577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.112'. [ 113.123048][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 113.138099][ T5835] usb 4-1: config 0 has no interfaces? [ 113.158563][ T5835] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 113.177375][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.202130][ T5835] usb 4-1: config 0 descriptor?? [ 113.452607][ T6624] loop2: detected capacity change from 0 to 2048 [ 113.523858][ T6624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.643361][ T6624] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.779974][ T6613] fuse: Invalid rootmode [ 113.798914][ T6613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3862582447 (3862582447 ns) > initial count (3756248739 ns). Using initial count to start timer. [ 114.207238][ T6631] loop0: detected capacity change from 0 to 32768 [ 114.433681][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.930374][ T6669] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 116.203590][ T6675] input: syz0 as /devices/virtual/input/input7 [ 117.213240][ T787] usb 4-1: USB disconnect, device number 4 [ 117.381011][ T6688] loop0: detected capacity change from 0 to 1024 [ 117.426015][ T6688] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 117.484503][ T6688] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 117.543154][ T6688] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.585140][ T6688] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #5: comm syz.0.131: unexpected bad inode w/o EXT4_IGET_BAD [ 117.630819][ T6688] EXT4-fs (loop0): no journal found [ 117.650272][ T6688] EXT4-fs (loop0): can't get journal size [ 117.675574][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.749522][ T6688] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.131: Abort forced by user [ 117.779217][ T6688] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 117.781148][ T5828] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 117.986055][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.019931][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.079890][ T5828] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.136742][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.215273][ T6717] input: syz0 as /devices/virtual/input/input8 [ 118.411708][ T5828] usb 3-1: config 0 descriptor?? [ 118.741049][ T5828] hub 3-1:0.0: USB hub found [ 118.887249][ T5828] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 118.916790][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.161156][ T5828] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 119.190115][ T5828] hid-generic: probe of 0003:046D:C31C.0001 failed with error -22 [ 119.352179][ T6683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.433038][ T787] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 119.484307][ T5828] usb 3-1: USB disconnect, device number 5 [ 119.669430][ T787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.683469][ T787] usb 5-1: not running at top speed; connect to a high speed hub [ 119.692597][ T787] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 119.702110][ T787] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 119.712325][ T787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.729833][ T787] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.738934][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.747379][ T787] usb 5-1: Product: syz [ 119.751556][ T787] usb 5-1: Manufacturer: syz [ 119.756226][ T787] usb 5-1: SerialNumber: syz [ 120.230968][ T6744] fuse: Bad value for 'rootmode' [ 121.534004][ T5790] Bluetooth: hci2: command tx timeout [ 121.949609][ T6740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.140'. [ 122.186836][ T6766] loop0: detected capacity change from 0 to 128 [ 122.238155][ T6766] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.710572][ T6783] input: syz0 as /devices/virtual/input/input9 [ 123.015113][ T787] usb 5-1: 0:2 : does not exist [ 123.251873][ T787] usb 5-1: USB disconnect, device number 2 [ 123.498391][ T6797] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000010 [ 123.598411][ T6795] overlay: filesystem on ./file0 not supported as upperdir [ 123.735031][ T6805] loop2: detected capacity change from 0 to 8 [ 123.885712][ T5835] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 124.071023][ T5835] usb 4-1: device descriptor read/64, error -71 [ 124.927547][ T5835] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 124.997810][ T6819] sd 0:0:1:0: PR command failed: 1026 [ 125.004716][ T6819] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 125.011481][ T6819] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 125.097904][ T5835] usb 4-1: device descriptor read/64, error -71 [ 125.227068][ T5835] usb usb4-port1: attempt power cycle [ 125.663146][ T5835] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.713848][ T5835] usb 4-1: device descriptor read/8, error -71 [ 126.003036][ T5835] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 126.044643][ T5835] usb 4-1: device descriptor read/8, error -71 [ 126.186275][ T5835] usb usb4-port1: unable to enumerate USB device [ 126.848060][ T6829] input: syz0 as /devices/virtual/input/input10 [ 127.535933][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 127.544887][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 127.554784][ T6814] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 127.839279][ T6840] loop2: detected capacity change from 0 to 256 [ 127.941919][ T6840] FAT-fs (loop2): Directory bread(block 64) failed [ 127.953154][ T6840] FAT-fs (loop2): Directory bread(block 65) failed [ 127.973960][ T6840] FAT-fs (loop2): Directory bread(block 66) failed [ 128.023900][ T6840] FAT-fs (loop2): Directory bread(block 67) failed [ 128.178812][ T6840] FAT-fs (loop2): Directory bread(block 68) failed [ 128.299912][ T6840] FAT-fs (loop2): Directory bread(block 69) failed [ 128.310187][ T5872] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 128.427086][ T6840] FAT-fs (loop2): Directory bread(block 70) failed [ 128.549944][ T6840] FAT-fs (loop2): Directory bread(block 71) failed [ 128.616417][ T5872] usb 1-1: device descriptor read/64, error -71 [ 128.691734][ T6840] FAT-fs (loop2): Directory bread(block 72) failed [ 128.840387][ T6840] FAT-fs (loop2): Directory bread(block 73) failed [ 129.013390][ T5872] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 129.389463][ T5872] usb 1-1: device descriptor read/64, error -71 [ 129.607262][ T5872] usb usb1-port1: attempt power cycle [ 130.130108][ T5872] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 130.331965][ T5872] usb 1-1: device descriptor read/8, error -71 [ 130.817706][ T5872] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 131.173242][ T5872] usb 1-1: device not accepting address 13, error -71 [ 131.187885][ T5872] usb usb1-port1: unable to enumerate USB device [ 131.265310][ T6857] loop0: detected capacity change from 0 to 1024 [ 131.298865][ T6857] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.327456][ T6857] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.343497][ T6857] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.351620][ T6857] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.163: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.448928][ T6868] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (253) [ 131.469238][ T6857] EXT4-fs (loop0): 1 orphan inode deleted [ 131.502012][ T6857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.583957][ T6873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 131.590793][ T6873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.666213][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.670238][ T6873] vhci_hcd vhci_hcd.0: Device attached [ 131.793130][ T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 131.933198][ T5828] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 131.940797][ T5835] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 131.953035][ T8] usb 5-1: device descriptor read/64, error -71 [ 131.995117][ T6885] input: syz0 as /devices/virtual/input/input11 [ 132.159129][ T5835] usb 4-1: config 0 has no interfaces? [ 132.167192][ T6884] loop0: detected capacity change from 0 to 2048 [ 132.219139][ T5835] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.253315][ T8] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 132.359598][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.440544][ T6884] loop0: p1 p3 < > p4 < p5 > [ 132.512849][ T6884] loop0: partition table partially beyond EOD, truncated [ 132.523728][ T8] usb 5-1: device descriptor read/64, error -71 [ 132.533923][ T5835] usb 4-1: config 0 descriptor?? [ 132.550453][ T6884] loop0: p3 start 4284289 is beyond EOD, truncated [ 132.663118][ T8] usb usb5-port1: attempt power cycle [ 132.758950][ T6868] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 132.768356][ T6875] usbip_core: unknown command [ 132.784308][ T6875] vhci_hcd: unknown pdu 0 [ 132.788794][ T6875] usbip_core: unknown command [ 132.798801][ T23] usb 4-1: USB disconnect, device number 9 [ 132.813473][ T49] vhci_hcd: stop threads [ 132.823269][ T49] vhci_hcd: release socket [ 132.850022][ T49] vhci_hcd: disconnect device [ 132.861675][ T5931] udevd[5931]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 132.869478][ T6136] udevd[6136]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 132.880499][ T6894] udevd[6894]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 132.904573][ T6891] loop0: detected capacity change from 0 to 1024 [ 132.911490][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919054][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.093059][ T8] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 133.132747][ T8] usb 5-1: device descriptor read/8, error -71 [ 133.403022][ T8] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 133.458760][ T8] usb 5-1: device descriptor read/8, error -71 [ 133.575528][ T6897] loop0: detected capacity change from 0 to 8192 [ 133.605112][ T8] usb usb5-port1: unable to enumerate USB device [ 133.607794][ T6897] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.635986][ T6897] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 133.645979][ T6897] REISERFS (device loop0): using ordered data mode [ 133.652504][ T6897] reiserfs: using flush barriers [ 133.662319][ T6897] REISERFS (device loop0): journal params: device ram0, size 3, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 133.686817][ T6897] REISERFS (device loop0): checking transaction log (ram0) [ 133.696410][ T6897] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one 127 [ 133.707575][ T6897] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 133.718140][ T6897] REISERFS (device loop0): Remounting filesystem read-only [ 133.726137][ T6897] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 133.812176][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 133.826433][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 133.847779][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 133.859994][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 134.125779][ T787] libceph: connect (1)[c::]:6789 error -101 [ 134.131839][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 134.221535][ T6897] ceph: No mds server is up or the cluster is laggy [ 134.499721][ T6924] loop0: detected capacity change from 0 to 1024 [ 134.747018][ T6927] loop4: detected capacity change from 0 to 16 [ 134.925727][ T6927] erofs: (device loop4): mounted with root inode @ nid 36. [ 135.263294][ T27] audit: type=1800 audit(1762825738.251:7): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.176" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 135.474464][ T59] hfsplus: b-tree write err: -5, ino 4 [ 135.966496][ T6934] input: syz0 as /devices/virtual/input/input12 [ 136.919672][ T6936] loop4: detected capacity change from 0 to 32768 [ 136.963604][ T6936] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.060850][ T6936] XFS (loop4): Ending clean mount [ 137.322274][ T6945] syzkaller1: entered promiscuous mode [ 137.333334][ T6945] syzkaller1: entered allmulticast mode [ 137.632255][ T6243] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.943351][ T5872] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 138.123075][ T5872] usb 4-1: device descriptor read/64, error -71 [ 138.156164][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 138.268590][ T27] audit: type=1326 audit(1762825741.291:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d0138f6c9 code=0x0 [ 138.406534][ T5872] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 138.453288][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.593030][ T5872] usb 4-1: device descriptor read/64, error -71 [ 138.654834][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 138.673057][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.681224][ T23] usb 5-1: Product: syz [ 138.703190][ T23] usb 5-1: Manufacturer: syz [ 138.707877][ T23] usb 5-1: SerialNumber: syz [ 138.712504][ T27] audit: type=1326 audit(1762825741.731:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.2.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d0138f6c9 code=0x0 [ 138.746648][ T5872] usb usb4-port1: attempt power cycle [ 139.001006][ T6995] netlink: 'syz.0.185': attribute type 13 has an invalid length. [ 139.021520][ T6995] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.030898][ T6995] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.039745][ T6995] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.048503][ T6995] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.060499][ T6995] netlink: 'syz.0.185': attribute type 13 has an invalid length. [ 139.183209][ T5872] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 139.208734][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 139.224318][ T5872] usb 4-1: device descriptor read/8, error -71 [ 139.242812][ T7000] loop0: detected capacity change from 0 to 1024 [ 139.253185][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 139.267208][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 139.284659][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 139.502586][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 139.516288][ T23] lan78xx: probe of 5-1:1.0 failed with error -71 [ 139.528742][ T23] usb 5-1: USB disconnect, device number 7 [ 139.649238][ T5872] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 139.756686][ T5872] usb 4-1: device descriptor read/8, error -71 [ 139.974098][ T5872] usb usb4-port1: unable to enumerate USB device [ 140.410367][ T49] hfsplus: b-tree write err: -5, ino 4 [ 140.537042][ T7022] input: syz0 as /devices/virtual/input/input13 [ 141.335786][ T7033] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 142.353035][ T27] audit: type=1326 audit(1762825745.371:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e0298f6c9 code=0x0 [ 142.382614][ T7033] loop4: detected capacity change from 0 to 32768 [ 142.451283][ T7033] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.541815][ T7033] XFS (loop4): Ending clean mount [ 142.651178][ T6243] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.605098][ T7092] input: syz0 as /devices/virtual/input/input14 [ 146.581671][ T7122] loop0: detected capacity change from 0 to 512 [ 146.615915][ T7122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.698766][ T7122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.727773][ T7122] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.774039][ T5872] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.814655][ T7122] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.205: Allocating blocks 41-42 which overlap fs metadata [ 146.921203][ T7122] EXT4-fs (loop0): Remounting filesystem read-only [ 146.953507][ T7122] Quota error (device loop0): write_blk: dquota write failed [ 146.961357][ T7122] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 146.983965][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 146.999680][ T7122] Quota error (device loop0): write_blk: dquota write failed [ 147.015310][ T5872] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 147.017753][ T7122] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 147.034255][ T5872] usb 5-1: config 0 has no interface number 0 [ 147.060812][ T5872] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.086202][ T5872] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.112841][ T7122] EXT4-fs (loop0): 1 truncate cleaned up [ 147.114933][ T5872] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 147.137505][ T7122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.137749][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 147.223065][ T5872] usb 5-1: Product: syz [ 147.227253][ T5872] usb 5-1: SerialNumber: syz [ 147.329206][ T5872] usb 5-1: config 0 descriptor?? [ 147.370629][ T5872] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 147.436167][ T5872] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15 [ 147.564674][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.574218][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.581404][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.593066][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.600364][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.607588][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.614854][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.622005][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.629221][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.636458][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.655598][ T5872] usb 5-1: USB disconnect, device number 8 [ 147.655672][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 147.818780][ T5872] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 147.897733][ T7122] overlayfs: failed to resolve './bus': -2 [ 147.968892][ T7126] loop2: detected capacity change from 0 to 32768 [ 148.240157][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 149.043022][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.253121][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 149.263956][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.291477][ T8] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 149.311056][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.327834][ T8] usb 5-1: Product: syz [ 149.338698][ T8] usb 5-1: Manufacturer: syz [ 149.353178][ T8] usb 5-1: SerialNumber: syz [ 149.434277][ T8] usb 5-1: config 0 descriptor?? [ 149.455664][ T8] redrat3 5-1:0.0: Couldn't find all endpoints [ 149.698107][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.721797][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.839582][ T7149] overlayfs: statfs failed on './file0' [ 151.022295][ T7156] input: syz0 as /devices/virtual/input/input16 [ 151.672129][ T7152] netlink: 'syz.4.208': attribute type 10 has an invalid length. [ 151.762904][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.772482][ T28] usb 5-1: USB disconnect, device number 9 [ 151.973551][ T7158] loop0: detected capacity change from 0 to 512 [ 151.980195][ T7161] loop4: detected capacity change from 0 to 1764 [ 152.023106][ T7158] EXT4-fs (loop0): Test dummy encryption mode enabled [ 152.294292][ T7158] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.366208][ T7158] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.210: Directory hole found for htree leaf block 0 [ 152.507545][ T7171] loop2: detected capacity change from 0 to 1024 [ 152.925066][ T5813] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 153.113068][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 153.415780][ T5813] usb 1-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 153.453634][ T11] hfsplus: b-tree write err: -5, ino 4 [ 153.468494][ T5813] usb 1-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.522533][ T5813] usb 1-1: config 1 interface 0 has no altsetting 0 [ 153.540903][ T5813] usb 1-1: string descriptor 0 read error: -22 [ 153.557542][ T5813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.578049][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.624352][ T5813] usb 1-1: bad CDC descriptors [ 153.780894][ T7189] batman_adv: batadv0: Adding interface: gretap1 [ 153.808123][ T7188] loop3: detected capacity change from 0 to 512 [ 153.825985][ T5835] usb 1-1: USB disconnect, device number 14 [ 153.832414][ T7189] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.903693][ T7189] batman_adv: batadv0: Interface activated: gretap1 [ 153.970589][ T5931] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.400918][ T5783] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 154.541187][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 155.607740][ T7214] FAULT_INJECTION: forcing a failure. [ 155.607740][ T7214] name failslab, interval 1, probability 0, space 0, times 0 [ 155.640890][ T7214] CPU: 1 PID: 7214 Comm: syz.3.220 Not tainted syzkaller #0 [ 155.648207][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.658276][ T7214] Call Trace: [ 155.661568][ T7214] [ 155.664520][ T7214] dump_stack_lvl+0x16c/0x230 [ 155.669221][ T7214] ? show_regs_print_info+0x20/0x20 [ 155.674411][ T7214] ? load_image+0x3b0/0x3b0 [ 155.678899][ T7214] ? __might_sleep+0xe0/0xe0 [ 155.683477][ T7214] ? __lock_acquire+0x7c80/0x7c80 [ 155.688492][ T7214] should_fail_ex+0x39d/0x4d0 [ 155.693177][ T7214] should_failslab+0x9/0x20 [ 155.697684][ T7214] slab_pre_alloc_hook+0x59/0x310 [ 155.702728][ T7214] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.708439][ T7214] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.714157][ T7214] __kmem_cache_alloc_node+0x53/0x260 [ 155.719525][ T7214] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.725235][ T7214] __kmalloc+0xa4/0x240 [ 155.729380][ T7214] tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.734921][ T7214] tomoyo_path_number_perm+0x1ea/0x590 [ 155.740367][ T7214] ? tomoyo_path_number_perm+0x1ba/0x590 [ 155.745993][ T7214] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 155.751453][ T7214] ? ksys_write+0x1c1/0x250 [ 155.755969][ T7214] ? __fget_files+0x28/0x4d0 [ 155.760557][ T7214] security_file_ioctl+0x70/0xa0 [ 155.765493][ T7214] __se_sys_ioctl+0x48/0x170 [ 155.770076][ T7214] do_syscall_64+0x55/0xb0 [ 155.774484][ T7214] ? clear_bhb_loop+0x40/0x90 [ 155.779151][ T7214] ? clear_bhb_loop+0x40/0x90 [ 155.783815][ T7214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.789699][ T7214] RIP: 0033:0x7f3539f8f6c9 [ 155.794114][ T7214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.813712][ T7214] RSP: 002b:00007f353ae53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.822114][ T7214] RAX: ffffffffffffffda RBX: 00007f353a1e5fa0 RCX: 00007f3539f8f6c9 [ 155.830073][ T7214] RDX: 0000200000000280 RSI: 00000000c05064a7 RDI: 0000000000000004 [ 155.838029][ T7214] RBP: 00007f353ae53090 R08: 0000000000000000 R09: 0000000000000000 [ 155.845987][ T7214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.853944][ T7214] R13: 00007f353a1e6038 R14: 00007f353a1e5fa0 R15: 00007ffcfd1081f8 [ 155.861913][ T7214] [ 155.867477][ T7214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.157075][ T7229] input: syz0 as /devices/virtual/input/input17 [ 157.920124][ T7238] loop2: detected capacity change from 0 to 1024 [ 157.994424][ T7240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.421595][ T11] hfsplus: b-tree write err: -5, ino 4 [ 159.518763][ T7260] netlink: 104 bytes leftover after parsing attributes in process `syz.3.232'. [ 159.930559][ T7261] loop2: detected capacity change from 0 to 32768 [ 160.001329][ T7261] UFO tlock:0xffffc9000283a510 [ 160.141172][ T7257] loop0: detected capacity change from 0 to 40427 [ 160.232880][ T7257] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 160.245933][ T7257] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.307856][ T7257] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.343489][ T7270] input: syz0 as /devices/virtual/input/input18 [ 160.421169][ T7257] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.428631][ T7257] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.484658][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 160.591398][ T5783] syz-executor: attempt to access beyond end of device [ 160.591398][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.609658][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 161.389266][ T7292] loop4: detected capacity change from 0 to 1024 [ 162.380196][ T2985] hfsplus: b-tree write err: -5, ino 4 [ 162.721978][ T7306] FAULT_INJECTION: forcing a failure. [ 162.721978][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 162.734823][ T7306] CPU: 0 PID: 7306 Comm: syz.4.240 Not tainted syzkaller #0 [ 162.742120][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.752177][ T7306] Call Trace: [ 162.755459][ T7306] [ 162.758392][ T7306] dump_stack_lvl+0x16c/0x230 [ 162.763084][ T7306] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 162.768724][ T7306] ? show_regs_print_info+0x20/0x20 [ 162.773930][ T7306] ? load_image+0x3b0/0x3b0 [ 162.778452][ T7306] should_fail_ex+0x39d/0x4d0 [ 162.783147][ T7306] should_failslab+0x9/0x20 [ 162.787657][ T7306] slab_pre_alloc_hook+0x59/0x310 [ 162.792691][ T7306] ? __lock_acquire+0x1334/0x7c80 [ 162.797722][ T7306] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.803453][ T7306] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.809184][ T7306] __kmem_cache_alloc_node+0x53/0x260 [ 162.814569][ T7306] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.820298][ T7306] __kmalloc+0xa4/0x240 [ 162.824468][ T7306] tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.830046][ T7306] tomoyo_check_open_permission+0x1c3/0x3c0 [ 162.835949][ T7306] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 162.842035][ T7306] ? tomoyo_check_path_number_acl+0x280/0x280 [ 162.848119][ T7306] ? __asan_memset+0x22/0x40 [ 162.852736][ T7306] ? __rwlock_init+0x150/0x150 [ 162.857511][ T7306] ? tomoyo_file_open+0xed/0x180 [ 162.862458][ T7306] security_file_open+0x62/0xa0 [ 162.867323][ T7306] do_dentry_open+0x380/0x1500 [ 162.872105][ T7306] path_openat+0x274b/0x3190 [ 162.876740][ T7306] ? do_filp_open+0x3d0/0x3d0 [ 162.881430][ T7306] ? rcu_is_watching+0x15/0xb0 [ 162.886204][ T7306] ? getname_kernel+0x146/0x2f0 [ 162.891063][ T7306] ? do_file_open_root+0x418/0x520 [ 162.896195][ T7306] do_file_open_root+0x2b0/0x520 [ 162.901152][ T7306] ? path_openat+0x3190/0x3190 [ 162.905946][ T7306] ? file_open_root+0xf1/0x1a0 [ 162.910712][ T7306] ? file_open_root+0x122/0x1a0 [ 162.915567][ T7306] ? kasan_check_range+0x25b/0x290 [ 162.920684][ T7306] ? build_open_flags+0x44b/0x5b0 [ 162.925722][ T7306] file_open_root+0x15e/0x1a0 [ 162.930406][ T7306] ? filp_open+0x1d0/0x1d0 [ 162.934828][ T7306] ? alloc_fd+0x58f/0x630 [ 162.939173][ T7306] do_handle_open+0x485/0x550 [ 162.943853][ T7306] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 162.949496][ T7306] ? __ia32_compat_sys_open_by_handle_at+0x80/0x80 [ 162.956018][ T7306] do_syscall_64+0x55/0xb0 [ 162.960446][ T7306] ? clear_bhb_loop+0x40/0x90 [ 162.965129][ T7306] ? clear_bhb_loop+0x40/0x90 [ 162.969817][ T7306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.975728][ T7306] RIP: 0033:0x7f27e318f6c9 [ 162.980145][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.999739][ T7306] RSP: 002b:00007f27e40d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 163.008145][ T7306] RAX: ffffffffffffffda RBX: 00007f27e33e6180 RCX: 00007f27e318f6c9 [ 163.016104][ T7306] RDX: 0000000000000c80 RSI: 0000200000000140 RDI: 0000000000000005 [ 163.024064][ T7306] RBP: 00007f27e40d1090 R08: 0000000000000000 R09: 0000000000000000 [ 163.032025][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.039986][ T7306] R13: 00007f27e33e6218 R14: 00007f27e33e6180 R15: 00007ffe79d32358 [ 163.047960][ T7306] [ 163.052899][ T7306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.781768][ T7315] loop2: detected capacity change from 0 to 2048 [ 164.901701][ T7315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.917159][ T7315] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.598612][ T7327] loop3: detected capacity change from 0 to 164 [ 165.783301][ T7327] Unable to read rock-ridge attributes [ 165.873654][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.062989][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 166.740181][ T5872] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.771201][ T5872] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.794680][ T5872] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.806657][ T5872] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 166.815598][ T5872] usb 3-1: Product: syz [ 166.819780][ T5872] usb 3-1: Manufacturer: syz [ 166.835868][ T5872] hub 3-1:4.0: USB hub found [ 167.034463][ T5872] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 167.162098][ T7348] loop0: detected capacity change from 0 to 1024 [ 167.213233][ T7329] loop4: detected capacity change from 0 to 32768 [ 167.234415][ T7329] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 167.255416][ T7315] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.242: bg 0: block 345: padding at end of block bitmap is not set [ 167.526019][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.664935][ T5835] usb 3-1: USB disconnect, device number 6 [ 168.135863][ T59] hfsplus: b-tree write err: -5, ino 4 [ 168.427124][ T6894] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 168.743837][ T7374] input: syz0 as /devices/virtual/input/input19 [ 169.230470][ T7381] syz.4.255: attempt to access beyond end of device [ 169.230470][ T7381] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 169.245749][ T7381] SQUASHFS error: Failed to read block 0x0: -5 [ 169.254404][ T7381] unable to read squashfs_super_block [ 169.889301][ T7387] 9pnet_fd: Insufficient options for proto=fd [ 169.962388][ T7389] loop2: detected capacity change from 0 to 16 [ 170.003366][ T7389] erofs: (device loop2): mounted with root inode @ nid 36. [ 170.485895][ T7395] loop3: detected capacity change from 0 to 32768 [ 170.543148][ T787] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.562586][ T7395] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 170.647850][ T7395] [ 170.650214][ T7395] ====================================================== [ 170.657236][ T7395] WARNING: possible circular locking dependency detected [ 170.664263][ T7395] syzkaller #0 Not tainted [ 170.668681][ T7395] ------------------------------------------------------ [ 170.674561][ T7404] loop0: detected capacity change from 0 to 256 [ 170.675682][ T7395] syz.3.259/7395 is trying to acquire lock: [ 170.675694][ T7395] ffff88805be25f58 [ 170.684817][ T7404] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.687771][ T7395] (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 170.687819][ T7395] [ 170.687819][ T7395] but task is already holding lock: [ 170.687824][ T7395] ffff88805be53f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x199/0x310 [ 170.687866][ T7395] [ 170.687866][ T7395] which lock already depends on the new lock. [ 170.687866][ T7395] [ 170.687871][ T7395] [ 170.687871][ T7395] the existing dependency chain (in reverse order) is: [ 170.687876][ T7395] [ 170.687876][ T7395] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 170.687900][ T7395] down_write+0x97/0x1f0 [ 170.687926][ T7395] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 170.687944][ T7395] ocfs2_xattr_set+0x596/0x11f0 [ 170.687962][ T7395] ocfs2_set_acl+0x4e1/0x590 [ 170.687984][ T7395] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 170.688007][ T7395] vfs_set_acl+0x803/0xa60 [ 170.688027][ T7395] path_setxattr+0x39f/0x550 [ 170.688055][ T7395] __x64_sys_setxattr+0xbb/0xd0 [ 170.688075][ T7395] do_syscall_64+0x55/0xb0 [ 170.688096][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.688112][ T7395] [ 170.688112][ T7395] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 170.688138][ T7395] down_read+0x46/0x2e0 [ 170.688161][ T7395] ocfs2_init_acl+0x2fa/0x720 [ 170.688183][ T7395] ocfs2_mknod+0x12e5/0x20f0 [ 170.688199][ T7395] ocfs2_mkdir+0x196/0x410 [ 170.688214][ T7395] vfs_mkdir+0x296/0x440 [ 170.688236][ T7395] do_mkdirat+0x1d4/0x440 [ 170.688259][ T7395] __x64_sys_mkdir+0x6e/0x80 [ 170.688281][ T7395] do_syscall_64+0x55/0xb0 [ 170.688300][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.688317][ T7395] [ 170.688317][ T7395] -> #3 (jbd2_handle){++++}-{0:0}: [ 170.688341][ T7395] start_this_handle+0x1e9d/0x20c0 [ 170.688356][ T7395] jbd2__journal_start+0x2bb/0x5b0 [ 170.688370][ T7395] jbd2_journal_start+0x2a/0x40 [ 170.688384][ T7395] ocfs2_start_trans+0x376/0x6c0 [ 170.688407][ T7395] ocfs2_mknod+0xe47/0x20f0 [ 170.688422][ T7395] ocfs2_create+0x196/0x410 [ 170.688437][ T7395] path_openat+0x1277/0x3190 [ 170.688461][ T7395] do_filp_open+0x1c5/0x3d0 [ 170.688482][ T7395] do_sys_openat2+0x12c/0x1c0 [ 170.688499][ T7395] __x64_sys_open+0x11f/0x140 [ 170.688515][ T7395] do_syscall_64+0x55/0xb0 [ 170.688534][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.688551][ T7395] [ 170.688551][ T7395] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 170.688575][ T7395] down_read+0x46/0x2e0 [ 170.688598][ T7395] ocfs2_start_trans+0x36a/0x6c0 [ 170.688621][ T7395] ocfs2_mknod+0xe47/0x20f0 [ 170.688636][ T7395] ocfs2_create+0x196/0x410 [ 170.688650][ T7395] path_openat+0x1277/0x3190 [ 170.688673][ T7395] do_filp_open+0x1c5/0x3d0 [ 170.688696][ T7395] do_sys_openat2+0x12c/0x1c0 [ 170.688713][ T7395] __x64_sys_open+0x11f/0x140 [ 170.688730][ T7395] do_syscall_64+0x55/0xb0 [ 170.688750][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.688765][ T7395] [ 170.688765][ T7395] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 170.688794][ T7395] ocfs2_start_trans+0x26b/0x6c0 [ 170.688817][ T7395] ocfs2_mknod+0xe47/0x20f0 [ 170.688833][ T7395] ocfs2_mkdir+0x196/0x410 [ 170.688848][ T7395] vfs_mkdir+0x296/0x440 [ 170.688871][ T7395] do_mkdirat+0x1d4/0x440 [ 170.688894][ T7395] __x64_sys_mkdir+0x6e/0x80 [ 170.688918][ T7395] do_syscall_64+0x55/0xb0 [ 170.688937][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.688953][ T7395] [ 170.688953][ T7395] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 170.688984][ T7395] __lock_acquire+0x2ddb/0x7c80 [ 170.689001][ T7395] lock_acquire+0x197/0x410 [ 170.689017][ T7395] down_write+0x97/0x1f0 [ 170.689047][ T7395] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 170.693050][ T7404] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 170.703312][ T7395] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 170.703346][ T7395] ocfs2_lock_allocators+0x2fb/0x5b0 [ 170.703368][ T7395] ocfs2_write_begin_nolock+0x225a/0x4190 [ 170.703389][ T7395] ocfs2_write_begin+0x1bc/0x310 [ 170.703410][ T7395] generic_perform_write+0x2fb/0x5b0 [ 170.703427][ T7395] ocfs2_file_write_iter+0x1582/0x1d00 [ 170.703448][ T7395] vfs_write+0x43b/0x940 [ 170.703467][ T7395] ksys_write+0x147/0x250 [ 170.703485][ T7395] do_syscall_64+0x55/0xb0 [ 170.720495][ T7404] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.722852][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.722876][ T7395] [ 170.722876][ T7395] other info that might help us debug this: [ 170.722876][ T7395] [ 170.783090][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 170.783151][ T7395] Chain exists of: [ 170.783151][ T7395] &ocfs2_sysfile_lock_key[args->fi_sysfile_type] [ 170.818793][ T787] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 170.823049][ T7395] #6 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 170.823049][ T7395] [ 170.823078][ T7395] Possible unsafe locking scenario: [ 170.823078][ T7395] [ 170.823083][ T7395] CPU0 CPU1 [ 170.823087][ T7395] ---- ---- [ 170.823092][ T7395] lock( [ 170.832932][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.838004][ T7395] &ocfs2_file_ip_alloc_sem_key); [ 170.838016][ T7395] lock(&oi->ip_xattr_sem); [ 170.838035][ T7395] lock( [ 170.883215][ T787] usb 5-1: Product: syz [ 170.887418][ T7395] &ocfs2_file_ip_alloc_sem_key); [ 170.887430][ T7395] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 170.899532][ T787] usb 5-1: Manufacturer: syz [ 170.903227][ T7395] [ 170.903227][ T7395] *** DEADLOCK *** [ 170.903227][ T7395] [ 170.903234][ T7395] 4 locks held by syz.3.259/7395: [ 170.903244][ T7395] #0: ffff88801e74e848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 170.919524][ T787] usb 5-1: SerialNumber: syz [ 170.923541][ T7395] #1: ffff888022312418 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 170.948959][ T787] r8152-cfgselector 5-1: config 0 descriptor?? [ 170.953196][ T7395] #2: ffff88805be542d8 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x40b/0x1d00 [ 171.322793][ T7395] #3: ffff88805be53f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x199/0x310 [ 171.333760][ T7395] [ 171.333760][ T7395] stack backtrace: [ 171.339637][ T7395] CPU: 0 PID: 7395 Comm: syz.3.259 Not tainted syzkaller #0 [ 171.346908][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.356952][ T7395] Call Trace: [ 171.360222][ T7395] [ 171.363146][ T7395] dump_stack_lvl+0x16c/0x230 [ 171.367819][ T7395] ? load_image+0x3b0/0x3b0 [ 171.372315][ T7395] ? show_regs_print_info+0x20/0x20 [ 171.377507][ T7395] ? print_circular_bug+0x12b/0x1a0 [ 171.382704][ T7395] check_noncircular+0x2bd/0x3c0 [ 171.387634][ T7395] ? print_deadlock_bug+0x5d0/0x5d0 [ 171.392825][ T7395] ? lockdep_lock+0xe0/0x220 [ 171.397405][ T7395] ? _find_first_zero_bit+0xd3/0x100 [ 171.402685][ T7395] __lock_acquire+0x2ddb/0x7c80 [ 171.407529][ T7395] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 171.413498][ T7395] ? __lock_acquire+0x7c80/0x7c80 [ 171.418519][ T7395] ? verify_lock_unused+0x140/0x140 [ 171.423708][ T7395] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 171.429335][ T7395] ? do_raw_spin_lock+0x121/0x2c0 [ 171.434349][ T7395] ? mutex_unlock+0x10/0x10 [ 171.438849][ T7395] lock_acquire+0x197/0x410 [ 171.443347][ T7395] ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 171.449664][ T7395] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 171.455643][ T7395] ? __might_sleep+0xe0/0xe0 [ 171.460241][ T7395] ? read_lock_is_recursive+0x20/0x20 [ 171.465611][ T7395] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 171.471759][ T7395] ? lockdep_unlock+0x137/0x2d0 [ 171.476598][ T7395] ? lockdep_lock+0x220/0x220 [ 171.481264][ T7395] down_write+0x97/0x1f0 [ 171.485505][ T7395] ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 171.491819][ T7395] ? down_read_killable+0x340/0x340 [ 171.497011][ T7395] ? __lock_acquire+0x2b6b/0x7c80 [ 171.502029][ T7395] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 171.508176][ T7395] ? stack_trace_save+0x9c/0xe0 [ 171.513029][ T7395] ? verify_lock_unused+0x140/0x140 [ 171.518225][ T7395] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 171.524889][ T7395] ? kasan_set_track+0x5f/0x70 [ 171.529642][ T7395] ? ocfs2_file_write_iter+0x1582/0x1d00 [ 171.535268][ T7395] ? vfs_write+0x43b/0x940 [ 171.539678][ T7395] ? ksys_write+0x147/0x250 [ 171.544171][ T7395] ? do_syscall_64+0x55/0xb0 [ 171.548759][ T7395] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.554824][ T7395] ? ocfs2_alloc_should_use_local+0x13e/0x2d0 [ 171.560886][ T7395] ? __lock_acquire+0x7c80/0x7c80 [ 171.565899][ T7395] ? do_raw_spin_lock+0x121/0x2c0 [ 171.570929][ T7395] ? __rwlock_init+0x150/0x150 [ 171.575687][ T7395] ? do_raw_spin_unlock+0x121/0x230 [ 171.580879][ T7395] ? _raw_spin_unlock+0x28/0x40 [ 171.585723][ T7395] ? ocfs2_alloc_should_use_local+0x13e/0x2d0 [ 171.591778][ T7395] ? ocfs2_reserve_clusters_with_limit+0x16c/0xba0 [ 171.598281][ T7395] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 171.604606][ T7395] ? ocfs2_reserve_clusters+0x30/0x30 [ 171.609976][ T7395] ? ocfs2_read_inode_block+0x11e/0x180 [ 171.615521][ T7395] ? rcu_is_watching+0x15/0xb0 [ 171.620278][ T7395] ? ocfs2_num_free_extents+0x2e2/0x5a0 [ 171.625812][ T7395] ? ocfs2_validate_extent_block+0x550/0x550 [ 171.631783][ T7395] ? ocfs2_get_clusters+0x2b4/0xa70 [ 171.636979][ T7395] ocfs2_lock_allocators+0x2fb/0x5b0 [ 171.642269][ T7395] ? _ocfs2_clear_bit+0x40/0x40 [ 171.647113][ T7395] ? do_raw_spin_lock+0x121/0x2c0 [ 171.652130][ T7395] ? __rwlock_init+0x150/0x150 [ 171.656889][ T7395] ? ocfs2_write_begin_nolock+0xf3a/0x4190 [ 171.662691][ T7395] ocfs2_write_begin_nolock+0x225a/0x4190 [ 171.668439][ T7395] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 171.674259][ T7395] ? verify_lock_unused+0x140/0x140 [ 171.679454][ T7395] ? ocfs2_initialize_journal_triggers+0x540/0x540 [ 171.685963][ T7395] ? __might_sleep+0xe0/0xe0 [ 171.690548][ T7395] ? do_raw_spin_unlock+0x121/0x230 [ 171.695736][ T7395] ? read_lock_is_recursive+0x20/0x20 [ 171.701101][ T7395] ? mark_lock+0x94/0x320 [ 171.705419][ T7395] ? down_write+0x162/0x1f0 [ 171.709916][ T7395] ? down_read_killable+0x340/0x340 [ 171.715112][ T7395] ? lock_chain_count+0x20/0x20 [ 171.719955][ T7395] ocfs2_write_begin+0x1bc/0x310 [ 171.724889][ T7395] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 171.730689][ T7395] ? ocfs2_readahead+0x1a0/0x1a0 [ 171.735622][ T7395] ? fault_in_readable+0xef/0x160 [ 171.740637][ T7395] ? fault_in_iov_iter_readable+0xbf/0x2e0 [ 171.746438][ T7395] generic_perform_write+0x2fb/0x5b0 [ 171.751718][ T7395] ? generic_file_direct_write+0x3e0/0x3e0 [ 171.757515][ T7395] ? __generic_file_write_iter+0xf7/0x230 [ 171.763225][ T7395] ? ocfs2_file_write_iter+0x1559/0x1d00 [ 171.768851][ T7395] ocfs2_file_write_iter+0x1582/0x1d00 [ 171.774309][ T7395] ? ocfs2_file_read_iter+0xa30/0xa30 [ 171.779683][ T7395] ? rcu_read_lock_any_held+0xb4/0x120 [ 171.785135][ T7395] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 171.790412][ T7395] vfs_write+0x43b/0x940 [ 171.794650][ T7395] ? file_end_write+0x250/0x250 [ 171.799495][ T7395] ? __fget_files+0x44a/0x4d0 [ 171.804167][ T7395] ? __fdget_pos+0x2a3/0x330 [ 171.808751][ T7395] ? ksys_write+0x75/0x250 [ 171.813162][ T7395] ksys_write+0x147/0x250 [ 171.817495][ T7395] ? __ia32_sys_read+0x90/0x90 [ 171.822252][ T7395] ? lockdep_hardirqs_on+0x98/0x150 [ 171.827439][ T7395] do_syscall_64+0x55/0xb0 [ 171.831850][ T7395] ? clear_bhb_loop+0x40/0x90 [ 171.836517][ T7395] ? clear_bhb_loop+0x40/0x90 [ 171.841191][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.847073][ T7395] RIP: 0033:0x7f3539f8f6c9 [ 171.851478][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.871079][ T7395] RSP: 002b:00007f353ae53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.879483][ T7395] RAX: ffffffffffffffda RBX: 00007f353a1e5fa0 RCX: 00007f3539f8f6c9 [ 171.887445][ T7395] RDX: 0000000000001006 RSI: 0000200000000240 RDI: 0000000000000005 [ 171.895403][ T7395] RBP: 00007f353a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.903362][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.911320][ T7395] R13: 00007f353a1e6038 R14: 00007f353a1e5fa0 R15: 00007ffcfd1081f8 [ 171.919293][ T7395] [ 172.084878][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 172.167872][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 172.206617][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 172.233790][ T787] r8152-cfgselector 5-1: Unknown version 0x0000 [ 172.267675][ T787] r8152-cfgselector 5-1: USB disconnect, device number 10