last executing test programs: 1m16.989833518s ago: executing program 4 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000900)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1m16.146994532s ago: executing program 4 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x20}, 0x0) 1m15.165890547s ago: executing program 4 (id=34): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305ffed00"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0xe314, @remote, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084"], 0x18, 0x8000}, 0x4040080) 1m13.483912456s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x82, 0x1b4, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) lseek(r0, 0x3fffffffc00, 0x3) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000480)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008080}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x4) 1m11.821933569s ago: executing program 4 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) dup3(r4, r6, 0x6700000000000000) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001500)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x837873a, 0xffffffff80400202, 0x0, 0xfe, 0x8000, 0x8, 0x0, 0x0, 0x4, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m10.870312236s ago: executing program 4 (id=44): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000000)=""/125, &(0x7f00000000c0)=0x7d) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc5, 0xc8, 0xcf, 0x40, 0xb48, 0x300d, 0xaba0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0xdd, 0x39}}]}}]}}, 0x0) 1m6.857177334s ago: executing program 32 (id=44): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000000)=""/125, &(0x7f00000000c0)=0x7d) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc5, 0xc8, 0xcf, 0x40, 0xb48, 0x300d, 0xaba0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0xdd, 0x39}}]}}]}}, 0x0) 6.918808525s ago: executing program 5 (id=282): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x15, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x1000, 0x4b0, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xfffffffd, 0x0, 0x1}, {0x0, 0x4}, {0x0, 0x4, 0x208}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x69, 0x6a, 0x100, 0x2, 0xc}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 5.817204977s ago: executing program 0 (id=287): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3b25ff02000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b400", 0x30}], 0x1}, 0x0) 5.65569445s ago: executing program 0 (id=288): sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@dots}, {@nodots}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@dots}, {@fat=@errors_continue}, {@nodots}, {@fat=@check_strict}, {@dots}, {@dots}, {@nodots}, {}, {@dots}, {@fat=@check_strict}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@dots}, {@dots}, {@nodots}, {@dots}]}, 0xfd, 0x1ed, &(0x7f0000000240)="$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") 5.508936449s ago: executing program 5 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) 5.248062881s ago: executing program 5 (id=290): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x18c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x9e, 0x6, "02ae77c0d4aa0056eda630496d907743e9b98666197bf9e448d1b65dff8783088a02983f82b4dd5a2fb293d84aa1c067b094a275da859a539343d32393561d7a7cba6cc936e98fc1440f3cedcb0a5acaecf4699905c3277ea0dd033ba401b261b4da3bea617cc65320488add11d0ae0d73f6bc25905253c27f1ce89df7123f5a50381d1dddaf157597f99c623e1d66ddf31f3308a572e40f2420"}, @NFTA_TABLE_USERDATA={0x91, 0x6, "df17948d758dfe2b6a173f5f1b939d04e1064a01199f496a070676ffa0d51054ac15ff03fe292d6591c601aec6dc48e85c9817fdbe44ebd8ea073dfd39450921e3045e914849c1205d239ac95502d32d1e5316711f97805346401be0611ed7faccec56a2dee8857e42a78f582243cc978f0aca88f7d896c61237f27955cf849fda781aaec29c35ca7e96adfa39"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x13c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xd8, 0x8, "c14d062ff254027fc8d2b5d385101e8a8dd7924c86bf215c9a9226ad7562fb30da313605bb2db5aee46b9861d3b1007f009d8babbc4d06c2cb42ea2d15716be3597265785f31d8b6b4d437dd9a6c4b0596812aef422343cde04b940b58eaef44a9eb025c8a336f968e7a5a92dad6fc36bc52b1ec7f711fa234be37cee8b5ed0f804da3f847eccfbef672d937c5e7d6bbfb66c15abf845e54ea54f4f256986e2de5a093367fceb8bd94a19ddb86dc0dc93148b434ef61142d66c74b7ba53a91d50b704ea05432b0becbb2278cffb638ca89235805"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x1fc, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xae, 0x6, "7b739507af2174594a2abacd8120a4600400ee48a71430c11cfa70455557a27a376f14347a979cc46a785d9f6e0340efccba4ba0c8966518a5106a874c75ac64e43bec2c1bfe41ad06c479354c73ccec2384c4cfc48919b5c2754816b7e4697215e6d75129214afa029806a6bb96d01a7fb3ac83cd0d846bd3c85db8040c7e450499e11cd8cc3f7b27eb1192e93f5a606dd4b442a7f0e1861daeaa85d277828360d2bc1ada4be78d1a49"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe7, 0x6, "9884576dbae3ac9a17269e7678628252e943e9bb6b9f79908b5a44f5c6878d339c73dfb5f57d88595898f18c844a05c5f04a2731f5cf834b527c50748823948ce9a3494d77fef2b7a64811eacba3ede5ff05016d99fca7337aa6c54cf42e96075b34da207eacd05e77cbdedcddb62a547bb76fb2bf2653eacb2d449f8a9b19b15baf13bd0541f596f05bc43ebf290f19afe9d16e570a4064f1d3a5c5c957cbb6dc682db0d220134d255804c27049bf406f4ba32a0315a0bc1aa5cdc5de897f85078e33f927c654703a91bfd0913bd2661bbf9548de328bc3da7bd66686db96f3ce9aba"}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c0}, 0x1, 0x0, 0x0, 0x20004800}, 0x40805) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) 5.131191167s ago: executing program 3 (id=291): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000004) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.104652104s ago: executing program 0 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./file0\x00', 0x14080, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617211626561743d6e2c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f0be312686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755716e709526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67931472322d59f2323b55a5a40d3254431798c736d7a5ab"], 0x1, 0x4441, &(0x7f000000cd00)="$eJzs3c9vG1kdAPDvTLJsUrZLuuxhkZCwxEogQFGyJyArkaZps8k2FBV2D1xcJ/G2ASeuEgdx2EN6q8QJiQPiUIHELacqEufyJ3DhWM6V4MAFCalSkO1xmhnbxA12SqrP59DJvN/21/P8xtL0pZnGvc3d0uZuqbJdqq9/tvtB6Rf12t5WNdJz0rP/N86vfwYzis/Jf2vzT0MbOb3cunbjx59+EPHnjb8+Ozo6Ooqm8ehp9sTf//rn5+snjx1poU6z3d6tDctPI+LdrnE1jUXEREQkEXE1S1vIjpMRcTnL+/TzX90pDWk0j59WPyw/X314OPf+ysGjw/6vPYn4Xe0r37m79fevj8397VtD6h4AAAAAAAAAAAAAAAAAgAtu6fatT340MxtPkhg/SLqf113Kjv2ejz0amq+N/sUCAAAAAAAAAAAAAAAAAADA/6kXz/+Xknd6PP+/mB3n+9Q/+sFLdPbW2cfJaCz/8Nbi9ZnZbP/3pCv/u1nSP66OxZUe+74X93+/Wqjfe//37n7OqjO+Tr9TkaTTufM0nZ6O+EO28ft7yaW0Vt9tfPuz+t72xtCGcWHl49/evT8XnWxD/wHjny4U2h/9/v9f7vo0Nc/vDO8j9lrLx3+sb7k/PkgGuv6vFeqdR/w5u3z8x1tpkycLzLcngGb8fz1+evwXC+2PKv5vR0QpaY61lJsBmmuYZnq/9Qp5+fi/0UrLTZ3ZG9nv+v93If7XC+13xX982K+g9/y/X/wioqd8/L/QSpvIlXiz9W8r/unp1/+NQvuv4vu/Of79F4lTo+3/YsvHvx3rwjXaeicHnf+XCu33jf+b/9u4P0mzcb6d5D4BB0k7vd//V0dePv4TXfkv7v/SgdZ/HxXqn9f9X6ffzv1fZ/r/ZtK+/6O3fPwn+5Yb9PpfLtQb9fw/31r/cVb5+F9qpeXXzu2vz0Hjv1Jof1Txb92VTHTin00C+1nmRMTvrf8Gko//F9uJ6ckS7Te1tf5LTl//f1xo/1Ws/5rj309H2+vrIh//vj/QT8aDJP4ywPf/zULF0cc/YsZvfWeWj//lvuVa1//E6fFfLdQbdfy/McrGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6Ahew4FUk6nTtP0+npiGvZ+XtxKVmrbJTXavX1n+9GLGbppXgnuVurr1Vq5c3t+ka1XKnV6usR17P8d2Mi2a3VG+Wtyv0bx21NJveqlZ3GWrXSiIilLP2rcbnT1tpmY6tyPyI+Os77UlrfuX+vsl3e2Nz5/szMzEwsH4/hSlL9ZaO63Wj33s6NWDmuO5WcGFwr++PjsbyV/Ky+t7NdqbXSb56oU6uvV2on6qxmeb+JK0ljZ297vdKolmv1u53+XqX57Li4fPsnt2/OduXfSdrHhfMdFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv6cnc934bEePtszQi5jt/JL3KP35a/bD8fPXh4dz7KwePDp/1KwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq7dIyaQBCFAfjNpEjS5RiplqRLuyEQkiIbBE+gx/AwehQv4R0sLGwtRJBd1HUXttHq+5oH8zPzHswDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhvkeVeP/t/eIFE/7x4jldLU+z3/rOv/svv9whxm5nZ+/6uv0h+kq/6iPNmU+prvtbBIdtbFo7Ul7ny77PPfO1bdvffM1fV8i5SIiyjp/TTkXxbC3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbR9G3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CsAAP//fF8aRA==") capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) chmod(&(0x7f0000000240)='./file0\x00', 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0x0, 0x59455247, 0x6, 0x2048, 0x1, 0x9, 0x9, 0x1, 0x6, 0x0, 0x5}}) 4.917688537s ago: executing program 2 (id=293): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e54140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 3.528835302s ago: executing program 0 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = fanotify_init(0x10, 0x80000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000005}) r2 = open(&(0x7f0000000280)='./file1\x00', 0x10fcc2, 0x10) fanotify_mark(r0, 0x1, 0x23, r2, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x5, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xb) copy_file_range(0xffffffffffffffff, &(0x7f00000008c0)=0x4, r3, 0x0, 0x8, 0x0) 3.21488552s ago: executing program 3 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000e09f0000020000000900020073797a30000000000900010073797a300000000026000380080001400000000008000240000000001400000011000100"/103], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x801, 0xf5, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELSET={0xdc, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0xa1, 0xd, 0x1, 0x0, "15c90c2b2daefe4ea4d0d0adfb4042de32d9e74d092aca5dccf4841d14a3771bbdf9e3aeee91fdc44f8b71e2582a90f5971d881d23e25d49872e6c26c73d8be4542a5a18e0c37916676c2b6b8edfff00c474accf7aff2b9c1cfa46907deed4cb156cf72319cd5df7090ff08a949bf1c052d1aad19818755d66048e4cf8dbfd98d986abe6904e40d19062a9411057f8d86c44cc40d15bcf9782f0a0bd0a"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x148}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 3.09128018s ago: executing program 2 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x4000000) 2.920888866s ago: executing program 0 (id=297): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x2, 0x2004000) 2.920598847s ago: executing program 1 (id=298): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, 0x0, 0x0) 2.801167825s ago: executing program 2 (id=299): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) syz_pidfd_open(r2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x1000, 0x4b0, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xfffffffd, 0x0, 0x1}, {0x0, 0x4}, {0x0, 0x4, 0x208}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x69, 0x6a, 0x100, 0x2, 0xc}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 2.780695401s ago: executing program 3 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="64f00fc78ef60000000f018b95950f214ec7442400f1000000c7442402654923deff1c2440ab420f070f017d60440f20c03506000000440f22c0c74424005b000000c7442402d7250000ff1c24dadcb800000000ba008000000f30", 0x5b}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.536958015s ago: executing program 1 (id=301): socket$netlink(0x10, 0x3, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000140)={0x0, 0x1}) socket$inet(0x2, 0x2, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0xce, 0x214180) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES8=r3, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20004810}, 0x44004) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.301284663s ago: executing program 0 (id=302): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e27, 0x409, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000004c0)={r5, @in={{0x2, 0x9, @private=0xa010101}}, [0x7, 0x8001, 0x6, 0x100000000, 0x0, 0x9, 0x5, 0xd, 0x0, 0xd, 0x8, 0x40, 0x8, 0x2, 0x1]}, &(0x7f0000000080)=0x100) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x294, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x280, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x100, 0x5, "c606f1332b252daab8e286e6c7a6784b2b1fa89b3c1b4fd7951f6e1ce5135a49d547db714ecc9cfa5fa90c1f8ff09f960097d04b046360a642b422bb7866e8f7dbcf88f1abf2eefa80785e9ec06e251731e76d410cf752960376ab1dace53a9adf882d1c6cd5cc77e14554b36c20d0db8019bf4152febe762f1bd33fba24f66f89fb69ef2f583c7a399ab4510982bb048318f2d690af88c2a66080c161c2df3d68eeeff5159f670c07850ee2a286ed81b08ee712a3633d56b344c58053da79fc93f8e68f6d3d2fe4c83a3940c56aeb0eddac2c7f1aff27a18a7e8a62f80be3ea307d180c82ed95ee703794317b458c8b66e7fb884a56864c4473f5c4"}, @ETHTOOL_A_BITSET_MASK={0xa6, 0x5, "ca2f54a00a05a66f66ace9bf3efcb8b46930abba39dbd5a56ca2d5162c4f00af85b9bbea909d8ee757ac4344667a58f929492d1bd43e23f2f79e9a56bb0fd29bb62c02dfa339bad6c1deacc70abc93e81677c701edbd47a453dc2c61950f2e7d30edb17218cc567c55d98555b35f294627198974338e95cce5f8b75c0ddc81b1051c34c28f50136f29b1837be5b3ae175ed4c4a5a962c7df43099bd4bf1ae7313dc5"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'bcachefs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '((\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}+{!}*\xf4}\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x226}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40040d1}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)=""/192, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000400)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000000540)="f79d79c38bb6e5fa56f90aeddca2e9eee6c7968a979317c3e4466f8c27086977e4f979739439f06266ed9ccdb50ff292df862d604540bb6e2d7482ffb3ea9a44c639709c854438d224a134ddf2696d47b14ab02f7095009e7b842cb5c7fcd6d1814a0c706031aff4ae70b490d457999ed8954471dc7f535bf682d14ee590ba649385", 0x82}, {&(0x7f0000000600)="cba366c6a92b7ffee823ce23a8c514d768222806a899aed00cb36fe7cd2d02ab650dd0196f324225bcd54c6d560524aaf5c3d1ff42bf3e2c6e8d84579a073c5f496caac8ec6111e867eec270e615b817679fbf06e86a706173b522ad96418ef4de6eab069db2d81d4bbbf4cc6915f87cd6ed4e004a6286ec2c779cecb259f1aca8dabcaa14d52b", 0x87}, {&(0x7f00000006c0)="8db44ccf0fda73fef72c0497bf71471f4cbeedc8c260b17c73e4ff80a4bf91c329c5673387d36094d77532b98825a6c54737ab20c7ec3931b053812a427ddf2ef4f809714c0883073af682109a97fc87faa4fb1cda5b249c9ae1889135f69d5552c092e63b7ed8661f79", 0x6a}, {&(0x7f0000000ac0)="ec78c6e737085e3fa0be46e0e26deb6562de1280e06b156c399bc7a2d17447f4e141f3fd18a62f9bd6792bf3eb8bc4da4bc5b8590fb55848855013cefff087a04a2506833832ef40128b934c7804fa342352de20bcf9877c24b63c791e1ae96a907dd0c0c7a611b7d084da5f433df075371314dffcd3154506b5ca60ad5a10fc959d6295a4178fb508edabe9e525ed5cdfe2ee45be305a465079ee15189fc87a8a8e9ce079bbe0bbc9e6cbcf03c7a265cb312dd64a4445d371f2d0e7e8f7f04b887bbd254b93adce57126857ad78f49a13e5a38322eb", 0xd6}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000000440)="b4c4e1e9d4b3e5356f42400df1df58f6b102312e5418cd191420ca7c844d5f143f5ed44ebbfa842e9a37c3f56c8f5ca77e29a4fd1ae0883d1b", 0x39}, {&(0x7f0000000740)="050994f79699e1c80b6c31d386e7ba15eac25bae6a6b38586eb559ca4f229f3e28e8fef376dfb003b842154331e743082bda4061adc6293c690b2e975515da360fb044601061ca22fd6e", 0x4a}], 0x7, &(0x7f0000001c40)=[@rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x6, 0xfe, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @mcast2]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x33, 0x14, 0x1, 0xd, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x6}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x148}, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000005900)='./file0\x00', 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='btree_node_prefetch,no_data_io,nochanges,no_data_io,recovery_pass_last=check_subvolume_structure,recovery_pass_last=initialize_subvolumes,errors=continue,wide_macs,shard_inode_numbers,background_compression=l,obj_type=^\'#,\x00'/238], 0x81, 0x58dd, &(0x7f000000b200)="$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") sendmmsg$inet_sctp(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00'], 0x70, 0x40}], 0x1, 0x40) 2.297376873s ago: executing program 5 (id=303): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000006f00)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@data_writeback}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}, {@fowner_lt}], 0x2c}, 0xa, 0x525, &(0x7f0000000480)="$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") stat(&(0x7f0000006300)='./file1\x00', 0x0) stat(&(0x7f0000006440)='./file1\x00', 0x0) lstat(&(0x7f0000006c00)='./file2\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10004, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r2) 2.105878867s ago: executing program 3 (id=304): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800080, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f00000002c0)={[{@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@check_strict}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {}, {@block={'block', 0x3d, 0x400}}, {@cruft}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f0000000dc0)="$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") 1.924075734s ago: executing program 1 (id=305): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000004) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="64f00fc78ef60000000f018b95950f214ec7442400f1000000c7442402654923deff1c2440ab420f070f017d60440f20c03506000000440f22c0c74424005b000000c7442402d7250000ff1c24dadcb800000000ba008000000f30", 0x5b}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.72009061s ago: executing program 2 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e54140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 1.225192048s ago: executing program 1 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = fanotify_init(0x10, 0x80000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000005}) r2 = open(&(0x7f0000000280)='./file1\x00', 0x10fcc2, 0x10) fanotify_mark(r0, 0x1, 0x23, r2, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x5, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xb) copy_file_range(0xffffffffffffffff, &(0x7f00000008c0)=0x4, r3, 0x0, 0x8, 0x0) 1.098142822s ago: executing program 2 (id=308): r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x6b4, &(0x7f0000002b40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) writev(r1, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1) r2 = msgget$private(0x0, 0x144) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/163) msgrcv(r2, &(0x7f00000002c0)={0x0, ""/196}, 0xcc, 0x3, 0x2000) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000180)={0xe, 0x3, 0xfffa}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x400}]}, 0x14, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. [ 171.593476][ T5792] cgroup: Unknown subsys name 'net' [ 171.738172][ T5792] cgroup: Unknown subsys name 'cpuset' [ 171.753460][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 177.503886][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 181.613338][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.629143][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.638248][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.646837][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.655789][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.666620][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.679181][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.707711][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.708731][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.720106][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.732567][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.743767][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.752314][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.765326][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.767711][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.782915][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.794562][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.807002][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.827217][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.843280][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.932977][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.011346][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.020932][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.034500][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.046013][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.965267][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 183.821050][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 183.860322][ T5813] Bluetooth: hci3: command tx timeout [ 183.860749][ T5815] Bluetooth: hci0: command tx timeout [ 183.930093][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 183.951550][ T5815] Bluetooth: hci1: command tx timeout [ 183.951608][ T5813] Bluetooth: hci2: command tx timeout [ 184.095637][ T5815] Bluetooth: hci4: command tx timeout [ 184.260023][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 184.282548][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 184.339202][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.346728][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.357348][ T5816] bridge_slave_0: entered allmulticast mode [ 184.368607][ T5816] bridge_slave_0: entered promiscuous mode [ 184.478734][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.486234][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.497281][ T5816] bridge_slave_1: entered allmulticast mode [ 184.506801][ T5816] bridge_slave_1: entered promiscuous mode [ 184.800352][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.862030][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.170056][ T5816] team0: Port device team_slave_0 added [ 185.179653][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.187150][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.196732][ T5826] bridge_slave_0: entered allmulticast mode [ 185.206099][ T5826] bridge_slave_0: entered promiscuous mode [ 185.297369][ T5816] team0: Port device team_slave_1 added [ 185.305775][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.315318][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.323069][ T5826] bridge_slave_1: entered allmulticast mode [ 185.332509][ T5826] bridge_slave_1: entered promiscuous mode [ 185.573976][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.583033][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.590850][ T5809] bridge_slave_0: entered allmulticast mode [ 185.599817][ T5809] bridge_slave_0: entered promiscuous mode [ 185.742912][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.750869][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.758518][ T5809] bridge_slave_1: entered allmulticast mode [ 185.766633][ T5809] bridge_slave_1: entered promiscuous mode [ 185.814932][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.822588][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.830341][ T5818] bridge_slave_0: entered allmulticast mode [ 185.838701][ T5818] bridge_slave_0: entered promiscuous mode [ 185.852344][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.859593][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.885875][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.898453][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.905916][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.915441][ T5818] bridge_slave_1: entered allmulticast mode [ 185.924942][ T5818] bridge_slave_1: entered promiscuous mode [ 185.935048][ T5815] Bluetooth: hci3: command tx timeout [ 185.942397][ T5815] Bluetooth: hci0: command tx timeout [ 185.950608][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.027711][ T5813] Bluetooth: hci2: command tx timeout [ 186.027994][ T5815] Bluetooth: hci1: command tx timeout [ 186.037343][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.047823][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.055649][ T5811] bridge_slave_0: entered allmulticast mode [ 186.065069][ T5811] bridge_slave_0: entered promiscuous mode [ 186.113236][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.120563][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.147149][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.167858][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.188610][ T5815] Bluetooth: hci4: command tx timeout [ 186.205801][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.253269][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.260981][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.268651][ T5811] bridge_slave_1: entered allmulticast mode [ 186.277914][ T5811] bridge_slave_1: entered promiscuous mode [ 186.336707][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.355104][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.480201][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.607728][ T5826] team0: Port device team_slave_0 added [ 186.624924][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.672390][ T5818] team0: Port device team_slave_0 added [ 186.724129][ T5826] team0: Port device team_slave_1 added [ 186.741206][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.828614][ T5818] team0: Port device team_slave_1 added [ 186.850168][ T5816] hsr_slave_0: entered promiscuous mode [ 186.860040][ T5816] hsr_slave_1: entered promiscuous mode [ 186.879574][ T5809] team0: Port device team_slave_0 added [ 186.957985][ T5811] team0: Port device team_slave_0 added [ 187.005033][ T5809] team0: Port device team_slave_1 added [ 187.050626][ T5811] team0: Port device team_slave_1 added [ 187.060074][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.067261][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.093493][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.144726][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.152123][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.178503][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.254889][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.263435][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.290101][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.357714][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.364985][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.391461][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.487084][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.494414][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.520874][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.603966][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.611285][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.637553][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.660830][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.667942][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.694504][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.709047][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.716147][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.742472][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.018719][ T5815] Bluetooth: hci0: command tx timeout [ 188.024316][ T5815] Bluetooth: hci3: command tx timeout [ 188.075990][ T5818] hsr_slave_0: entered promiscuous mode [ 188.085922][ T5818] hsr_slave_1: entered promiscuous mode [ 188.092163][ T5815] Bluetooth: hci1: command tx timeout [ 188.094952][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 188.099963][ T5815] Bluetooth: hci2: command tx timeout [ 188.103547][ T5818] Cannot create hsr debugfs directory [ 188.133953][ T5826] hsr_slave_0: entered promiscuous mode [ 188.143854][ T5826] hsr_slave_1: entered promiscuous mode [ 188.152610][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 188.158611][ T5826] Cannot create hsr debugfs directory [ 188.248771][ T5815] Bluetooth: hci4: command tx timeout [ 188.350575][ T5811] hsr_slave_0: entered promiscuous mode [ 188.360983][ T5811] hsr_slave_1: entered promiscuous mode [ 188.369564][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 188.375462][ T5811] Cannot create hsr debugfs directory [ 188.558555][ T5809] hsr_slave_0: entered promiscuous mode [ 188.569681][ T5809] hsr_slave_1: entered promiscuous mode [ 188.579227][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 188.585064][ T5809] Cannot create hsr debugfs directory [ 189.595806][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.616646][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.732740][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.770572][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.022171][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.057593][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.082650][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.091627][ T5815] Bluetooth: hci0: command tx timeout [ 190.097246][ T5813] Bluetooth: hci3: command tx timeout [ 190.106985][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.137625][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.159865][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.171795][ T5815] Bluetooth: hci2: command tx timeout [ 190.177414][ T5813] Bluetooth: hci1: command tx timeout [ 190.244100][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.391890][ T5815] Bluetooth: hci4: command tx timeout [ 190.507553][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.574431][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.606515][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.641086][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.729848][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.762079][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.830188][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.889686][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.931343][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.407334][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.512987][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.675285][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.714192][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.789560][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.797144][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.914433][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.922063][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.938045][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.945626][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.960907][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.968560][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.085642][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.280633][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.417727][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.425312][ T4948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.463249][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.494742][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.532244][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.621484][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.654791][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.693250][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.700984][ T4948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.805952][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.814048][ T4948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.884429][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.960239][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.967736][ T4948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.132205][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.139840][ T4948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.173804][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.181431][ T4948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.325610][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.611933][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.701136][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.189229][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.201151][ T5818] veth0_vlan: entered promiscuous mode [ 195.343889][ T5818] veth1_vlan: entered promiscuous mode [ 195.475243][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.713720][ T5826] veth0_vlan: entered promiscuous mode [ 195.776303][ T5818] veth0_macvtap: entered promiscuous mode [ 195.825737][ T5818] veth1_macvtap: entered promiscuous mode [ 195.863206][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.899786][ T5826] veth1_vlan: entered promiscuous mode [ 196.043060][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.144590][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.210282][ T5811] veth0_vlan: entered promiscuous mode [ 196.369949][ T4948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.403529][ T5826] veth0_macvtap: entered promiscuous mode [ 196.419112][ T5811] veth1_vlan: entered promiscuous mode [ 196.454364][ T5826] veth1_macvtap: entered promiscuous mode [ 196.484707][ T4948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.550229][ T4948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.596007][ T5809] veth0_vlan: entered promiscuous mode [ 196.655351][ T4948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.715937][ T5809] veth1_vlan: entered promiscuous mode [ 196.770143][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.863050][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.887682][ T5811] veth0_macvtap: entered promiscuous mode [ 196.942634][ T5811] veth1_macvtap: entered promiscuous mode [ 196.965068][ T3472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.030388][ T3472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.069808][ T3472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.123117][ T3472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.142037][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.223784][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.264683][ T5809] veth0_macvtap: entered promiscuous mode [ 197.295302][ T3501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.347447][ T5809] veth1_macvtap: entered promiscuous mode [ 197.389240][ T3501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.398241][ T3501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.500515][ T1853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.606820][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.685157][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.761260][ T5816] veth0_vlan: entered promiscuous mode [ 197.827136][ T3480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.859477][ T3472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.899834][ T3472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.917742][ T5816] veth1_vlan: entered promiscuous mode [ 197.953983][ T3472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.262133][ T5816] veth0_macvtap: entered promiscuous mode [ 198.316119][ T5816] veth1_macvtap: entered promiscuous mode [ 198.532862][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.642469][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.786203][ T4948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.864935][ T4948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.940550][ T4948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.994373][ T4948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.430440][ T4948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.438909][ T4948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.701951][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.710388][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.908264][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.916562][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.244780][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.254509][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.270795][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 204.866578][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.875100][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.711869][ T5997] loop3: detected capacity change from 0 to 32768 [ 206.076701][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.084902][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.277526][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.285813][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.458751][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.466756][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.995537][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.003820][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.221944][ T6015] FAULT_INJECTION: forcing a failure. [ 207.221944][ T6015] name failslab, interval 1, probability 0, space 0, times 1 [ 207.234946][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(none) [ 207.235085][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.235177][ T6015] Call Trace: [ 207.235241][ T6015] [ 207.235292][ T6015] __dump_stack+0x26/0x30 [ 207.235487][ T6015] dump_stack_lvl+0x1df/0x270 [ 207.235677][ T6015] dump_stack+0x1e/0x25 [ 207.235860][ T6015] should_fail_ex+0x7dc/0x8a0 [ 207.236038][ T6015] should_failslab+0x15b/0x200 [ 207.236225][ T6015] __kmalloc_cache_noprof+0xcb/0xed0 [ 207.236419][ T6015] ? legacy_init_fs_context+0x61/0x130 [ 207.236612][ T6015] ? kmsan_get_metadata+0xfb/0x160 [ 207.236796][ T6015] legacy_init_fs_context+0x61/0x130 [ 207.236986][ T6015] alloc_fs_context+0xaee/0xda0 [ 207.237184][ T6015] fs_context_for_mount+0x3b/0x50 [ 207.237370][ T6015] do_new_mount+0x270/0x1420 [ 207.237542][ T6015] ? apparmor_capable+0x32d/0x410 [ 207.237743][ T6015] ? kmsan_get_metadata+0xfb/0x160 [ 207.237945][ T6015] path_mount+0x6db/0x1e90 [ 207.238129][ T6015] ? user_path_at+0x32d/0x3d0 [ 207.238333][ T6015] __se_sys_mount+0x6eb/0x7d0 [ 207.238545][ T6015] ? kmsan_get_metadata+0xfb/0x160 [ 207.238763][ T6015] __x64_sys_mount+0xe4/0x150 [ 207.238962][ T6015] x64_sys_call+0x3604/0x3e20 [ 207.239153][ T6015] do_syscall_64+0xd9/0x210 [ 207.239308][ T6015] ? irqentry_exit+0x16/0x60 [ 207.239491][ T6015] ? clear_bhb_loop+0x40/0x90 [ 207.239652][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.239810][ T6015] RIP: 0033:0x7fc98718eec9 [ 207.239932][ T6015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.240047][ T6015] RSP: 002b:00007fc988096038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.240201][ T6015] RAX: ffffffffffffffda RBX: 00007fc9873e5fa0 RCX: 00007fc98718eec9 [ 207.240301][ T6015] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 207.240393][ T6015] RBP: 00007fc988096090 R08: 0000200000000180 R09: 0000000000000000 [ 207.240484][ T6015] R10: 0000000000804000 R11: 0000000000000246 R12: 0000000000000002 [ 207.240569][ T6015] R13: 00007fc9873e6038 R14: 00007fc9873e5fa0 R15: 00007ffcd25e99e8 [ 207.240700][ T6015] [ 207.501178][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.509427][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.089783][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 208.278793][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 208.316524][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 208.328802][ T9] usb 3-1: config 0 has no interface number 0 [ 208.335117][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 208.345571][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 208.505737][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 208.515178][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.523626][ T9] usb 3-1: Product: syz [ 208.528637][ T9] usb 3-1: Manufacturer: syz [ 208.533441][ T9] usb 3-1: SerialNumber: syz [ 208.649821][ T9] usb 3-1: config 0 descriptor?? [ 208.657634][ T6019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.697824][ T6031] overlay: Bad value for 'workdir' [ 209.179116][ T9] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 209.189458][ T9] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 209.397650][ T6019] loop2: detected capacity change from 0 to 16 [ 209.462954][ T6019] ======================================================= [ 209.462954][ T6019] WARNING: The mand mount option has been deprecated and [ 209.462954][ T6019] and is ignored by this kernel. Remove the mand [ 209.462954][ T6019] option from the mount to silence this warning. [ 209.462954][ T6019] ======================================================= [ 209.499127][ T6019] erofs: Unknown parameter '' [ 209.702244][ T6043] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.284283][ T6043] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.370454][ T6019] loop2: detected capacity change from 0 to 32768 [ 210.382152][ T6019] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (6019) [ 210.420497][ T6019] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.431243][ T6019] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 210.547968][ T6043] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.773993][ T6043] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.790831][ T6047] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17'. [ 210.899009][ T6064] loop4: detected capacity change from 0 to 65 [ 210.908142][ T6064] bfs: Unknown parameter '+' [ 211.209500][ T6019] BTRFS error (device loop2): open_ctree failed: -4 [ 211.688048][ T6064] loop4: detected capacity change from 0 to 32768 [ 211.722209][ T3472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.774267][ T5896] usb 3-1: USB disconnect, device number 2 [ 211.784733][ T1097] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.793819][ T6064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.18 (6064) [ 211.841631][ T6064] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.852567][ T6064] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 211.858727][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.892814][ T3501] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.167593][ T6074] binder: 6069:6074 ioctl c0306201 200000000640 returned -22 [ 212.274369][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.392947][ T6064] BTRFS info (device loop4): enabling ssd optimizations [ 212.400350][ T6064] BTRFS info (device loop4): enabling free space tree [ 212.560701][ T5816] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.708993][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 213.792454][ T6108] netem: incorrect ge model size [ 213.797650][ T6108] netem: change failed [ 213.909001][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 213.941464][ T5896] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 213.950498][ T5896] usb 1-1: config 0 has no interface number 0 [ 214.044224][ T5896] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 214.054074][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.062597][ T5896] usb 1-1: Product: syz [ 214.066949][ T5896] usb 1-1: Manufacturer: syz [ 214.071893][ T5896] usb 1-1: SerialNumber: syz [ 214.109794][ T6110] binder: 6109:6110 ioctl c00c620f 200000000100 returned -22 [ 214.205134][ T5896] usb 1-1: config 0 descriptor?? [ 214.920872][ T6115] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.098052][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.241096][ T6108] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 215.360309][ T5896] usb 1-1: USB disconnect, device number 2 [ 215.419046][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 215.680808][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.692420][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.702610][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 215.711964][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.851279][ T5900] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 215.875491][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 215.962262][ T9] usb 4-1: config 0 descriptor?? [ 216.053248][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.081163][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 216.175459][ T5900] usb 2-1: config 0 has no interfaces? [ 216.183292][ T5900] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 216.192786][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.220039][ T5870] usb 3-1: config 1 has an invalid interface number: 17 but max is 6 [ 216.229559][ T5870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 216.238869][ T5870] usb 3-1: config 1 has no interface number 0 [ 216.353185][ T5900] usb 2-1: config 0 descriptor?? [ 216.369838][ T5870] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 216.382982][ T5870] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 216.392517][ T5870] usb 3-1: Product: syz [ 216.396929][ T5870] usb 3-1: Manufacturer: syz [ 216.401840][ T5870] usb 3-1: SerialNumber: syz [ 216.494291][ T6118] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 216.581362][ T5896] usb 2-1: USB disconnect, device number 2 [ 216.823343][ T6132] bond1: entered promiscuous mode [ 216.828894][ T6132] bond1: entered allmulticast mode [ 216.836391][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.939303][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 216.945993][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.131959][ T9] usb 4-1: USB disconnect, device number 2 [ 217.484082][ T5870] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 217.495982][ T5870] visor 3-1:1.17: probe with driver visor failed with error -71 [ 217.691896][ T5870] usb 3-1: USB disconnect, device number 3 [ 218.406453][ T6141] loop4: detected capacity change from 0 to 8 [ 218.547548][ T6141] SQUASHFS error: lzo decompression failed, data probably corrupt [ 218.556165][ T6141] SQUASHFS error: Failed to read block 0x0: -5 [ 218.563276][ T6141] SQUASHFS error: lzo decompression failed, data probably corrupt [ 218.571595][ T6141] SQUASHFS error: Failed to read block 0x0: -5 [ 218.588991][ T30] audit: type=1800 audit(1759039987.860:2): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.37" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 219.360503][ T6146] loop2: detected capacity change from 0 to 4096 [ 219.612059][ T5816] SQUASHFS error: Unable to read directory block [629:1f] [ 219.702814][ T5816] SQUASHFS error: Unable to read directory block [629:1f] [ 219.811183][ T6153] loop3: detected capacity change from 0 to 32768 [ 219.823367][ T6153] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.40 (6153) [ 219.845851][ T6153] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.862172][ T6153] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 220.077458][ T6153] BTRFS info (device loop3): setting nodatasum [ 220.083941][ T6153] BTRFS info (device loop3): enabling free space tree [ 220.092528][ T6153] BTRFS info (device loop3): use zlib compression, level 3 [ 220.100149][ T6153] BTRFS info (device loop3): max_inline set to 0 [ 220.519457][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 220.630034][ T3472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.762814][ T6175] loop2: detected capacity change from 0 to 1024 [ 220.798928][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 220.848503][ T5900] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 220.857414][ T5900] usb 4-1: config 254 has no interface number 0 [ 220.864087][ T5900] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 220.874529][ T5900] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.889039][ T5900] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 220.900883][ T5900] usb 4-1: config 254 interface 235 has no altsetting 0 [ 220.971637][ T6175] hfsplus: request for non-existent node 134217728 in B*Tree [ 220.979567][ T6175] hfsplus: request for non-existent node 134217728 in B*Tree [ 221.005284][ T3472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.150571][ T3472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.150686][ T6176] Bluetooth: MGMT ver 1.23 [ 221.211859][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 221.223052][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 221.231452][ T5900] usb 4-1: Product: syz [ 221.235800][ T5900] usb 4-1: Manufacturer: syz [ 221.240743][ T5900] usb 4-1: SerialNumber: syz [ 221.406817][ T6153] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.449791][ T5870] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 221.486684][ T3472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.661178][ T5870] usb 3-1: device descriptor read/64, error -71 [ 221.682249][ T6179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.748133][ T5900] usbtest 4-1:254.235: Linux gadget zero [ 221.754562][ T5900] usbtest 4-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 221.974414][ T5870] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 222.098984][ T5869] usb 4-1: USB disconnect, device number 3 [ 222.119968][ T5870] usb 3-1: device descriptor read/64, error -71 [ 222.233056][ T5870] usb usb3-port1: attempt power cycle [ 222.395718][ T3472] bridge_slave_1: left allmulticast mode [ 222.401777][ T3472] bridge_slave_1: left promiscuous mode [ 222.408666][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.551027][ T3472] bridge_slave_0: left allmulticast mode [ 222.556864][ T3472] bridge_slave_0: left promiscuous mode [ 222.563886][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.689463][ T5870] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 222.775420][ T5870] usb 3-1: device descriptor read/8, error -71 [ 223.054916][ T5818] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.068850][ T5870] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 223.113146][ T5870] usb 3-1: device descriptor read/8, error -71 [ 223.243697][ T5870] usb usb3-port1: unable to enumerate USB device [ 223.920970][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.972997][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.015961][ T3472] bond0 (unregistering): Released all slaves [ 224.088088][ T3472] bond1 (unregistering): Released all slaves [ 224.528290][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.535103][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.070573][ T5870] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 225.082564][ T5870] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 225.101487][ T3472] hsr_slave_0: left promiscuous mode [ 225.221431][ T3472] hsr_slave_1: left promiscuous mode [ 225.231590][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.239394][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.351996][ T5870] hid-generic 0000:0003:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 225.391678][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.399562][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.642007][ T3472] veth1_macvtap: left promiscuous mode [ 225.647735][ T3472] veth0_macvtap: left promiscuous mode [ 225.654225][ T3472] veth1_vlan: left promiscuous mode [ 225.659930][ T3472] veth0_vlan: left promiscuous mode [ 225.755979][ T6186] loop0: detected capacity change from 0 to 32768 [ 225.765704][ T6186] XFS: ikeep mount option is deprecated. [ 225.778936][ T6186] XFS: noikeep mount option is deprecated. [ 226.195500][ T6186] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.424672][ T5870] IPVS: starting estimator thread 0... [ 226.528788][ T6202] IPVS: using max 240 ests per chain, 12000 per kthread [ 226.546949][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.642374][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.654877][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.673709][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.687888][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.713840][ T6186] XFS (loop0): Ending clean mount [ 226.738732][ T6186] XFS (loop0): Quotacheck needed: Please wait. [ 226.990285][ T6186] XFS (loop0): Quotacheck: Done. [ 227.107514][ T6190] fido_id[6190]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.493646][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 227.611499][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 228.901211][ T5813] Bluetooth: hci2: command tx timeout [ 229.000548][ T5826] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.025471][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'. [ 229.449297][ T5896] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 229.709759][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.748855][ T5896] usb 2-1: too many configurations: 78, using maximum allowed: 8 [ 229.800068][ T5896] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 229.807993][ T5896] usb 2-1: can't read configurations, error -71 [ 230.463944][ T6204] chnl_net:caif_netlink_parms(): no params data found [ 230.973613][ T5813] Bluetooth: hci2: command tx timeout [ 232.548170][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.562216][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.570176][ T6204] bridge_slave_0: entered allmulticast mode [ 232.580016][ T6204] bridge_slave_0: entered promiscuous mode [ 232.673345][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.681322][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.690508][ T6204] bridge_slave_1: entered allmulticast mode [ 232.700351][ T6204] bridge_slave_1: entered promiscuous mode [ 233.081486][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.096090][ T5813] Bluetooth: hci2: command tx timeout [ 233.140848][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.569924][ T6204] team0: Port device team_slave_0 added [ 233.661825][ T6204] team0: Port device team_slave_1 added [ 233.991875][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 234.113425][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.120815][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.147379][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.371522][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.378998][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.409306][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.129106][ T5813] Bluetooth: hci2: command tx timeout [ 235.177947][ T6204] hsr_slave_0: entered promiscuous mode [ 235.189673][ T6204] hsr_slave_1: entered promiscuous mode [ 236.731532][ T6344] raw_sendmsg: syz.3.91 forgot to set AF_INET. Fix it! [ 237.221300][ T6204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.333996][ T6204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.440019][ T6204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.535731][ T6204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.022829][ T6362] netlink: 'syz.3.98': attribute type 7 has an invalid length. [ 238.031011][ T6362] netlink: 'syz.3.98': attribute type 4 has an invalid length. [ 238.038935][ T6362] netlink: 'syz.3.98': attribute type 7 has an invalid length. [ 238.046662][ T6362] netlink: 209028 bytes leftover after parsing attributes in process `syz.3.98'. [ 238.669390][ T6370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 239.088020][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.411853][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.506122][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.513762][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.644062][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.651778][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.264206][ T6410] netlink: 104 bytes leftover after parsing attributes in process `syz.0.114'. [ 242.322071][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.681853][ T6444] Dead loop on virtual device ip6_vti0, fix it urgently! [ 244.461247][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 245.718104][ T6204] veth0_vlan: entered promiscuous mode [ 245.912466][ T6204] veth1_vlan: entered promiscuous mode [ 246.475112][ T6485] Illegal XDP return value 14 on prog (id 22) dev N/A, expect packet loss! [ 246.536621][ T6204] veth0_macvtap: entered promiscuous mode [ 246.655100][ T6204] veth1_macvtap: entered promiscuous mode [ 246.924529][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.142'. [ 246.963885][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.023589][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.142'. [ 247.256042][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.362634][ T4948] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.406661][ T4948] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.464137][ T4948] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.469696][ T6497] netlink: 104 bytes leftover after parsing attributes in process `syz.3.145'. [ 247.511740][ T4948] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.046474][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 249.057262][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 249.067292][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 251.652417][ T6553] loop0: detected capacity change from 0 to 32768 [ 251.662494][ T6553] ocfs2: Unknown parameter 'resv_0000000001' [ 252.270381][ T6555] loop3: detected capacity change from 0 to 4096 [ 252.380684][ T6555] ntfs3: Unknown parameter '/dev/snd/controlC#' [ 252.953118][ T6555] loop3: detected capacity change from 0 to 16 [ 253.093170][ T6555] erofs (device loop3): mounted with root inode @ nid 36. [ 253.433187][ T6571] loop0: detected capacity change from 0 to 8 [ 253.646457][ T6571] SQUASHFS error: Failed to read block 0x2d7: -5 [ 253.657567][ T6571] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 253.742653][ T6565] loop2: detected capacity change from 0 to 40427 [ 253.813959][ T6565] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 253.823461][ T6565] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 253.833751][ T6565] F2FS-fs (loop2): Image doesn't support compression [ 253.840996][ T6565] F2FS-fs (loop2): build fault injection rate: 690 [ 253.847726][ T6565] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 253.859619][ T5870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 253.886039][ T6571] SQUASHFS error: Failed to read block 0x8f: -5 [ 253.908635][ T30] audit: type=1800 audit(1759040023.180:3): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.169" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 253.937060][ T6565] F2FS-fs (loop2): invalid crc value [ 254.089622][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 254.169915][ T5870] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 254.178504][ T5870] usb 4-1: config 0 has no interface number 0 [ 254.184883][ T5870] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 254.195376][ T5870] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 254.256489][ T6565] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 254.308649][ T6565] F2FS-fs (loop2): Start checkpoint disabled! [ 254.358986][ T6565] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 254.369082][ T6565] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 254.394741][ T5870] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 254.404578][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.413051][ T5870] usb 4-1: Product: syz [ 254.417404][ T5870] usb 4-1: Manufacturer: syz [ 254.422484][ T5870] usb 4-1: SerialNumber: syz [ 254.480339][ T5870] usb 4-1: config 0 descriptor?? [ 254.493911][ T6569] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.551733][ T1097] kworker/u8:5: attempt to access beyond end of device [ 254.551733][ T1097] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.566985][ T1097] CPU: 1 UID: 0 PID: 1097 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(none) [ 254.567126][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.567262][ T1097] Workqueue: writeback wb_workfn (flush-7:2) [ 254.567505][ T1097] Call Trace: [ 254.567555][ T1097] [ 254.567605][ T1097] __dump_stack+0x26/0x30 [ 254.567783][ T1097] dump_stack_lvl+0x1df/0x270 [ 254.567972][ T1097] dump_stack+0x1e/0x25 [ 254.568136][ T1097] f2fs_handle_critical_error+0xa6f/0xc20 [ 254.568393][ T1097] f2fs_stop_checkpoint+0x65/0x80 [ 254.568602][ T1097] f2fs_write_end_io+0x101c/0x1bc0 [ 254.568797][ T1097] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 254.568946][ T1097] bio_endio+0xeb1/0x1010 [ 254.569125][ T1097] submit_bio_noacct+0x211/0x2760 [ 254.569361][ T1097] submit_bio+0x57c/0x630 [ 254.569544][ T1097] f2fs_submit_write_bio+0x92/0x250 [ 254.569746][ T1097] __submit_merged_bio+0x16f/0x6a0 [ 254.569941][ T1097] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 254.570130][ T1097] __submit_merged_write_cond+0x458/0x9a0 [ 254.570365][ T1097] f2fs_write_data_pages+0x4bb2/0x5480 [ 254.570701][ T1097] ? module_trace_bprintk_format_notify+0x460/0xc30 [ 254.570907][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.571077][ T1097] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 254.571271][ T1097] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 254.571478][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.571646][ T1097] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 254.571829][ T1097] ? __rb_insert_augmented+0x80/0x11b0 [ 254.572036][ T1097] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 254.572205][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.572370][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.572539][ T1097] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 254.572716][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.572887][ T1097] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 254.573061][ T1097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 254.573278][ T1097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 254.573487][ T1097] do_writepages+0x3f2/0x860 [ 254.573642][ T1097] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 254.573825][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.573993][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.574191][ T1097] __writeback_single_inode+0x101/0x1190 [ 254.574361][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.574542][ T1097] writeback_sb_inodes+0xac1/0x1cb0 [ 254.574792][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.575010][ T1097] wb_writeback+0x4ce/0xc00 [ 254.575185][ T1097] ? queue_io+0x461/0x790 [ 254.575345][ T1097] wb_workfn+0x397/0x1910 [ 254.575538][ T1097] ? kmsan_get_metadata+0xfb/0x160 [ 254.575732][ T1097] ? __pfx_wb_workfn+0x10/0x10 [ 254.575925][ T1097] process_scheduled_works+0xb91/0x1d80 [ 254.576194][ T1097] worker_thread+0xedf/0x1590 [ 254.576431][ T1097] kthread+0xd5c/0xf00 [ 254.576580][ T1097] ? __pfx_worker_thread+0x10/0x10 [ 254.576806][ T1097] ? __pfx_kthread+0x10/0x10 [ 254.576957][ T1097] ret_from_fork+0x233/0x380 [ 254.577128][ T1097] ? __pfx_kthread+0x10/0x10 [ 254.577288][ T1097] ret_from_fork_asm+0x1a/0x30 [ 254.577513][ T1097] [ 254.888190][ T1097] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 255.202908][ T5870] usb 4-1: can't set config #0, error -71 [ 255.221670][ T5870] usb 4-1: USB disconnect, device number 4 [ 256.656291][ T6604] kvm: kvm [6593]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000067) = 0x0 [ 256.709701][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 256.803441][ T6606] 8021q: VLANs not supported on ip6_vti0 [ 257.363077][ T6594] sctp: failed to load transform for md5: -2 [ 257.815395][ T6606] loop2: detected capacity change from 0 to 40427 [ 257.825196][ T6606] F2FS-fs: heap/no_heap options were deprecated [ 257.832186][ T6606] f2fs: Unknown parameter 'activeult_injection' [ 257.894153][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.902931][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.772413][ T6616] sg_write: data in/out 196608/32 bytes for SCSI command 0x2c-- guessing data in; [ 258.772413][ T6616] program syz.3.179 not setting count and/or reply_len properly [ 258.805236][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.172'. [ 258.825820][ T6614] loop0: detected capacity change from 0 to 32768 [ 258.839783][ T6614] ocfs2: Unknown parameter 'resv_0000000001' [ 259.044589][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.059314][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.987991][ T6618] loop3: detected capacity change from 0 to 256 [ 260.369710][ T5870] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 260.628921][ T5870] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 260.637443][ T5870] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 260.648089][ T5870] usb 3-1: config 8 has no interface number 0 [ 260.654520][ T5870] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 260.665034][ T5870] usb 3-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.679333][ T5870] usb 3-1: config 8 interface 177 has no altsetting 0 [ 260.686371][ T5870] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 260.696367][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.734403][ T6119] udevd[6119]: failed to send result of seq 11811 to main daemon: Connection refused [ 260.784047][ T6632] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 260.797796][ T6632] Error validating options; rc = [-22] [ 260.886041][ T6637] loop0: detected capacity change from 0 to 64 [ 260.900812][ T6633] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 260.914593][ T6633] Error validating options; rc = [-22] [ 260.943097][ T6638] netlink: 288 bytes leftover after parsing attributes in process `syz.1.187'. [ 261.005443][ T6637] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 261.007037][ T5870] usb 3-1: string descriptor 0 read error: -71 [ 261.027732][ T5870] ir_toy 3-1:8.177: required endpoints not found [ 261.130391][ T5870] usb 3-1: USB disconnect, device number 8 [ 261.200097][ T30] audit: type=1326 audit(1759040030.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.222740][ T30] audit: type=1326 audit(1759040030.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.249508][ T30] audit: type=1326 audit(1759040030.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.271858][ T30] audit: type=1326 audit(1759040030.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.294910][ T30] audit: type=1326 audit(1759040030.470:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.317504][ T30] audit: type=1326 audit(1759040030.470:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.342909][ T30] audit: type=1326 audit(1759040030.490:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.366399][ T30] audit: type=1326 audit(1759040030.490:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.389365][ T30] audit: type=1326 audit(1759040030.490:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98718eec9 code=0x7ffc0000 [ 261.411874][ T30] audit: type=1326 audit(1759040030.500:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc98718d710 code=0x7ffc0000 [ 261.762147][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.188'. [ 261.884161][ T6642] ip6tnl0: entered promiscuous mode [ 261.891137][ T6642] ip6tnl0: entered allmulticast mode [ 262.508694][ T5870] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 262.759249][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 262.793714][ T5870] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 262.803368][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.928800][ T5870] usb 2-1: config 0 descriptor?? [ 262.956313][ T5870] gspca_main: sq930x-2.14.0 probing 041e:403c [ 263.445300][ T6656] loop5: detected capacity change from 0 to 32768 [ 263.454489][ T6656] ocfs2: Unknown parameter 'resv_0000000001' [ 263.621404][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.631390][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.690056][ T5901] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 263.768722][ T5870] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 263.775369][ T5870] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 263.910858][ T5870] usb 2-1: USB disconnect, device number 5 [ 264.049041][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 264.239033][ T5901] usb 1-1: device descriptor read/all, error -71 [ 264.388970][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.538901][ T5896] usb 3-1: device descriptor read/64, error -71 [ 264.789817][ T5896] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.819028][ T5870] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 264.999982][ T5896] usb 3-1: device descriptor read/64, error -71 [ 265.027812][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.053016][ T5870] usb 2-1: not running at top speed; connect to a high speed hub [ 265.114359][ T5896] usb usb3-port1: attempt power cycle [ 265.138636][ T5870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.149532][ T5870] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 265.273678][ T5870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.283648][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.292222][ T5870] usb 2-1: Product: syz [ 265.296571][ T5870] usb 2-1: Manufacturer: syz [ 265.301526][ T5870] usb 2-1: SerialNumber: syz [ 265.456429][ T5869] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 265.589777][ T5896] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 265.662071][ T5896] usb 3-1: device descriptor read/8, error -71 [ 265.690406][ T5869] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 265.699342][ T5869] usb 6-1: config 0 has no interface number 0 [ 265.705726][ T5869] usb 6-1: config 0 interface 160 has no altsetting 0 [ 265.740042][ T6673] loop0: detected capacity change from 0 to 32768 [ 265.767714][ T5870] usb 2-1: USB disconnect, device number 6 [ 265.801861][ T6673] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.814573][ T5869] usb 6-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 265.825297][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.838707][ T5869] usb 6-1: Product: syz [ 265.845909][ T5869] usb 6-1: Manufacturer: syz [ 265.851018][ T5869] usb 6-1: SerialNumber: syz [ 265.875258][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 265.916779][ T5869] usb 6-1: config 0 descriptor?? [ 265.923335][ T5896] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 265.945055][ T6673] XFS (loop0): Ending clean mount [ 265.972760][ T5896] usb 3-1: device descriptor read/8, error -71 [ 265.995718][ T5869] usb-storage 6-1:0.160: USB Mass Storage device detected [ 266.106125][ T5896] usb usb3-port1: unable to enumerate USB device [ 266.165823][ T5826] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.186261][ T5869] usb 6-1: USB disconnect, device number 2 [ 267.078054][ T6702] loop3: detected capacity change from 0 to 764 [ 267.141432][ T6702] iso9660: Unknown parameter 'dummy0' [ 267.979951][ T6724] netlink: 248 bytes leftover after parsing attributes in process `syz.5.211'. [ 268.020009][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 268.168901][ T5901] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 268.309031][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 268.318010][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 268.327745][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 268.408277][ T5901] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.420093][ T5901] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.430437][ T5901] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.443656][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.450825][ T5901] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 268.460281][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.489821][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 268.523762][ T5869] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 268.532788][ T5869] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.543105][ T5869] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.553294][ T5869] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.563686][ T5869] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.577192][ T5869] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.586774][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.602922][ T5901] usb 4-1: config 0 descriptor?? [ 268.848936][ T5869] usb 2-1: usb_control_msg returned -32 [ 268.854934][ T5869] usbtmc 2-1:16.0: can't read capabilities [ 268.878853][ T6731] loop2: detected capacity change from 0 to 4096 [ 268.936472][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 268.945428][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 268.953734][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 268.962203][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 268.970691][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 268.979250][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 268.987426][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 268.996082][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 269.004530][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 269.019844][ T6731] ntfs3(loop2): try to read out of volume at offset 0x3fffffe0c00 [ 269.065775][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.075431][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.243710][ T5901] lenovo 0003:17EF:60A3.0002: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 269.414992][ T6737] loop0: detected capacity change from 0 to 4096 [ 269.416241][ T5901] usb 4-1: USB disconnect, device number 5 [ 269.459381][ T5869] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 269.646070][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 269.674917][ T5869] usb 6-1: config 0 has an invalid interface number: 121 but max is 1 [ 269.683541][ T5869] usb 6-1: config 0 has an invalid interface number: 121 but max is 1 [ 269.692289][ T5869] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.701492][ T5869] usb 6-1: config 0 has no interface number 0 [ 269.707777][ T5869] usb 6-1: config 0 interface 121 has no altsetting 0 [ 269.715049][ T5869] usb 6-1: config 0 interface 121 has no altsetting 1 [ 269.760974][ T5869] usb 6-1: New USB device found, idVendor=12d1, idProduct=1429, bcdDevice= 0.00 [ 269.770629][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.778936][ T5869] usb 6-1: Product: syz [ 269.783269][ T5869] usb 6-1: Manufacturer: syz [ 269.788033][ T5869] usb 6-1: SerialNumber: syz [ 269.839959][ T5869] usb 6-1: config 0 descriptor?? [ 269.987852][ T6743] loop2: detected capacity change from 0 to 512 [ 270.110788][ T6743] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.222: casefold flag without casefold feature [ 270.149761][ T6743] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.222: couldn't read orphan inode 15 (err -117) [ 270.206990][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.426761][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.479628][ T5896] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 270.669379][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 270.680998][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 270.694423][ T5896] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 270.703957][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.744193][ T5896] usb 1-1: config 0 descriptor?? [ 270.760038][ T6748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.869378][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 271.228284][ T6748] fuse: Bad value for 'fd' [ 271.309973][ T5896] smartjoyplus 0003:0925:8866.0003: hidraw0: USB HID vff.fa Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 271.323220][ T5896] smartjoyplus 0003:0925:8866.0003: no output reports found [ 271.341950][ T5901] usb 2-1: USB disconnect, device number 7 [ 271.456093][ T5896] usb 1-1: USB disconnect, device number 5 [ 272.471646][ T5869] usb-storage 6-1:0.121: USB Mass Storage device detected [ 272.571779][ T5869] usb 6-1: USB disconnect, device number 3 [ 272.868697][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 273.048726][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 273.088763][ T5896] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 273.097225][ T5896] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.111542][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.123177][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.135654][ T5896] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.149800][ T5896] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.159373][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.795828][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 273.795904][ T30] audit: type=1800 audit(1759040043.070:34): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.242" name="file1" dev="overlay" ino=292 res=0 errno=0 [ 274.198238][ T6793] loop2: detected capacity change from 0 to 40427 [ 274.237816][ T6793] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 274.248674][ T6793] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 274.302168][ T6793] F2FS-fs (loop2): invalid crc value [ 274.658534][ T5896] usb 2-1: usb_control_msg returned -32 [ 274.664405][ T5896] usbtmc 2-1:16.0: can't read capabilities [ 274.677244][ T6793] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 274.702516][ T6793] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 274.709995][ T6793] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 274.885265][ T6812] netlink: 76 bytes leftover after parsing attributes in process `syz.3.246'. [ 275.021824][ T6815] FAULT_INJECTION: forcing a failure. [ 275.021824][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 275.035489][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.5.247 Not tainted syzkaller #0 PREEMPT(none) [ 275.035633][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.035720][ T6815] Call Trace: [ 275.035772][ T6815] [ 275.035823][ T6815] __dump_stack+0x26/0x30 [ 275.036011][ T6815] dump_stack_lvl+0x1df/0x270 [ 275.036209][ T6815] dump_stack+0x1e/0x25 [ 275.036377][ T6815] should_fail_ex+0x7dc/0x8a0 [ 275.036560][ T6815] should_fail+0x2a/0x40 [ 275.036699][ T6815] should_fail_usercopy+0x2e/0x40 [ 275.036859][ T6815] _copy_from_user+0x33/0x100 [ 275.037030][ T6815] kstrtouint_from_user+0x75/0x140 [ 275.037188][ T6815] ? kmsan_get_metadata+0xfb/0x160 [ 275.037356][ T6815] ? proc_fail_nth_write+0x43/0x300 [ 275.037512][ T6815] ? vfs_write+0x487/0x15d0 [ 275.037681][ T6815] proc_fail_nth_write+0x61/0x300 [ 275.037841][ T6815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 275.038023][ T6815] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 275.038195][ T6815] vfs_write+0x487/0x15d0 [ 275.038368][ T6815] ? stack_depot_save_flags+0x35/0x7b0 [ 275.038519][ T6815] ? kmsan_get_metadata+0xfb/0x160 [ 275.038688][ T6815] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 275.038856][ T6815] ? kmsan_get_metadata+0xfb/0x160 [ 275.039044][ T6815] __x64_sys_write+0x1fb/0x4d0 [ 275.039253][ T6815] x64_sys_call+0x3014/0x3e20 [ 275.039447][ T6815] do_syscall_64+0xd9/0x210 [ 275.039597][ T6815] ? irqentry_exit+0x16/0x60 [ 275.039786][ T6815] ? clear_bhb_loop+0x40/0x90 [ 275.039952][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.040116][ T6815] RIP: 0033:0x7f978d58d97f [ 275.040235][ T6815] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 275.040352][ T6815] RSP: 002b:00007f978e43f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 275.040490][ T6815] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f978d58d97f [ 275.040584][ T6815] RDX: 0000000000000001 RSI: 00007f978e43f0a0 RDI: 0000000000000005 [ 275.040671][ T6815] RBP: 00007f978e43f090 R08: 0000000000000000 R09: 0000000000000000 [ 275.040758][ T6815] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 275.040840][ T6815] R13: 00007f978d7e6128 R14: 00007f978d7e6090 R15: 00007ffc9b3a95d8 [ 275.040972][ T6815] [ 275.267248][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.386503][ T6808] loop0: detected capacity change from 0 to 4096 [ 275.403640][ T6808] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 276.534828][ T6823] loop3: detected capacity change from 0 to 4096 [ 276.547471][ T5901] usb 2-1: USB disconnect, device number 8 [ 276.593900][ T6823] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 277.006974][ T6823] ntfs3(loop3): ino=19, mi_enum_attr [ 277.012866][ T6823] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 277.187519][ T30] audit: type=1800 audit(1759040046.460:35): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.255" name="file1" dev="overlay" ino=107 res=0 errno=0 [ 277.685225][ T6840] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 277.785324][ T6840] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 277.795707][ T6840] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 277.826260][ T6840] bond1: (slave vcan1): making interface the new active one [ 277.837075][ T6840] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 278.330507][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 278.542369][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.553120][ T5896] usb 4-1: config 0 has no interfaces? [ 278.559011][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.570032][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.597663][ T5896] usb 4-1: config 0 descriptor?? [ 278.729243][ T5901] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 279.062044][ T5896] usb 4-1: USB disconnect, device number 6 [ 279.186026][ T6857] loop0: detected capacity change from 0 to 2048 [ 279.265117][ T6857] NILFS (loop0): invalid segment: Inconsistency found [ 279.272569][ T6857] NILFS (loop0): trying rollback from an earlier position [ 279.388793][ T6857] NILFS (loop0): recovery complete [ 279.409070][ T6860] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.505326][ T6858] loop2: detected capacity change from 0 to 32768 [ 279.514638][ T6858] btrfs: Deprecated parameter 'usebackuproot' [ 279.521129][ T6858] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 279.531186][ T6858] btrfs: Deprecated parameter 'usebackuproot' [ 279.537465][ T6858] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 279.553629][ T6858] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.263 (6858) [ 279.604713][ T6858] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.615376][ T6858] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 279.624396][ T6858] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 279.647611][ T6858] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 279.672538][ T5901] usb 2-1: device descriptor read/64, error -71 [ 279.683764][ T6858] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 279.709134][ T6858] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 279.723074][ T6858] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 279.739571][ T6858] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 279.754279][ T6858] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 279.817580][ T6858] BTRFS info (device loop2): rebuilding free space tree [ 279.849290][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 279.893083][ T6858] BTRFS info (device loop2): setting nodatasum [ 279.899790][ T6858] BTRFS info (device loop2): enabling ssd optimizations [ 279.906933][ T6858] BTRFS info (device loop2): enabling free space tree [ 279.915853][ T6858] BTRFS info (device loop2): force clearing of disk cache [ 279.923338][ T6858] BTRFS info (device loop2): doing ref verification [ 279.930292][ T6858] BTRFS info (device loop2): trying to use backup root at mount time [ 279.938775][ T6858] BTRFS info (device loop2): max_inline set to 4096 [ 280.044879][ T5901] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 280.060010][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 280.080492][ T5811] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.116808][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.127680][ T5896] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.139523][ T5896] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 280.212273][ T5896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.222009][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.222858][ T5901] usb 2-1: device descriptor read/64, error -71 [ 280.230375][ T5896] usb 1-1: SerialNumber: syz [ 280.250133][ T5896] hub 1-1:1.0: bad descriptor, ignoring hub [ 280.256374][ T5896] hub 1-1:1.0: probe with driver hub failed with error -5 [ 280.266058][ T5896] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 280.364706][ T5901] usb usb2-port1: attempt power cycle [ 280.518040][ T6879] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 280.738978][ T5901] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 280.802558][ T5901] usb 2-1: device descriptor read/8, error -71 [ 281.045342][ T30] audit: type=1800 audit(1759040050.320:36): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="file1" dev="overlay" ino=371 res=0 errno=0 [ 281.066161][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.109373][ T5901] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 281.165220][ T5901] usb 2-1: device descriptor read/8, error -71 [ 281.290240][ T5901] usb usb2-port1: unable to enumerate USB device [ 281.669857][ T5901] usb 1-1: USB disconnect, device number 6 [ 281.896022][ T6892] loop3: detected capacity change from 0 to 128 [ 281.899812][ T6892] vfat: Unknown parameter 'short' [ 282.075496][ T6892] loop3: detected capacity change from 0 to 1024 [ 282.140869][ T6892] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 282.212821][ T6892] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.271: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.317246][ T6892] Quota error (device loop3): write_blk: dquota write failed [ 282.329591][ T6892] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 282.341466][ T6892] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.271: Failed to acquire dquot type 0 [ 282.461099][ T6892] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.271: Freeing blocks not in datazone - block = 0, count = 4096 [ 282.565855][ T6892] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.271: Invalid inode bitmap blk 0 in block_group 0 [ 282.599155][ T3501] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.618941][ T6892] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 282.657559][ T3501] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 282.666417][ T3501] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 282.676984][ T6892] EXT4-fs (loop3): 1 orphan inode deleted [ 282.686445][ T6892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.827953][ T6892] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.271: iget: bad extra_isize 65535 (inode size 256) [ 282.942704][ T6892] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.271: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 282.961265][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.376156][ T6909] loop5: detected capacity change from 0 to 1024 [ 283.419443][ T6909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.426354][ T6909] ext4: Unknown parameter 'uid>00000000000000000000' [ 283.644681][ T6909] loop5: detected capacity change from 0 to 512 [ 283.776431][ T6909] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.276: casefold flag without casefold feature [ 283.806186][ T6892] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.271: iget: bad extra_isize 65535 (inode size 256) [ 283.809147][ T6907] loop1: detected capacity change from 0 to 32768 [ 283.827431][ T6909] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.276: couldn't read orphan inode 15 (err -117) [ 283.921066][ T6909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.932515][ T6907] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.964474][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.130140][ T6909] capability: warning: `syz.5.276' uses deprecated v2 capabilities in a way that may be insecure [ 284.173790][ T6907] XFS (loop1): Ending clean mount [ 284.181410][ T6921] evm: overlay not supported [ 284.188068][ T6907] XFS (loop1): Quotacheck needed: Please wait. [ 284.227003][ T6907] XFS (loop1): Quotacheck: Done. [ 284.251888][ T30] audit: type=1800 audit(1759040053.530:37): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.275" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 284.384564][ T5809] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 284.525427][ T30] audit: type=1800 audit(1759040053.800:38): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.279" name="file1" dev="overlay" ino=350 res=0 errno=0 [ 284.546141][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.635806][ T6204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.322474][ T6932] loop2: detected capacity change from 0 to 512 [ 285.378241][ T6932] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 285.454747][ T6932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 285.526913][ T6932] EXT4-fs (loop2): orphan cleanup on readonly fs [ 285.533689][ T6932] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.283: bad orphan inode 267 [ 285.624189][ T6932] EXT4-fs (loop2): Remounting filesystem read-only [ 285.633202][ T6932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 285.780287][ T6943] bridge1: entered promiscuous mode [ 285.785698][ T6943] bridge1: entered allmulticast mode [ 285.838049][ T6932] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.283: dx entry: limit 0 != root limit 125 [ 285.850405][ T6932] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.283: Corrupt directory, running e2fsck is recommended [ 285.959863][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.966698][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.981827][ T6947] loop0: detected capacity change from 0 to 256 [ 285.999828][ T6948] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.283: dx entry: limit 0 != root limit 125 [ 286.016826][ T6948] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.283: Corrupt directory, running e2fsck is recommended [ 286.079534][ T6947] FAT-fs (loop0): invalid media value (0x00) [ 286.085745][ T6947] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 286.095593][ T6947] FAT-fs (loop0): Can't find a valid FAT filesystem [ 286.103920][ T6932] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.283: dx entry: limit 0 != root limit 125 [ 286.117003][ T6952] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.283: dx entry: limit 0 != root limit 125 [ 286.117156][ T6952] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.283: Corrupt directory, running e2fsck is recommended [ 286.118695][ T6952] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.283: dx entry: limit 0 != root limit 125 [ 286.118837][ T6952] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.283: Corrupt directory, running e2fsck is recommended [ 286.174434][ T6932] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.283: Corrupt directory, running e2fsck is recommended [ 286.321140][ T5896] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 286.468030][ T6954] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.524977][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.536407][ T5896] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 286.545980][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.619200][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 286.663546][ T5896] usb 2-1: config 0 descriptor?? [ 286.792884][ T6954] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.126629][ T5896] elecom 0003:056E:00FE.0004: hidraw0: USB HID v0.04 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 287.181599][ T6954] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.228546][ T6958] loop0: detected capacity change from 0 to 32768 [ 287.240814][ T6958] ocfs2: Unknown parameter 'hearbeat' [ 287.365802][ T6954] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.567637][ T5896] usb 2-1: USB disconnect, device number 13 [ 287.826179][ T3472] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.097134][ T1097] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.129960][ T1097] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.149035][ T1097] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.387855][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 289.420049][ T6988] loop5: detected capacity change from 0 to 512 [ 289.480599][ T6988] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 289.553171][ T6988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 289.620348][ T6988] EXT4-fs (loop5): orphan cleanup on readonly fs [ 289.627054][ T6988] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.303: bad orphan inode 267 [ 289.779132][ T6988] EXT4-fs (loop5): Remounting filesystem read-only [ 289.787915][ T6988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 289.913498][ T6999] loop3: detected capacity change from 0 to 1764 [ 289.952377][ T6988] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.303: dx entry: limit 0 != root limit 125 [ 289.966106][ T6988] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.303: Corrupt directory, running e2fsck is recommended [ 290.079167][ T7005] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.303: dx entry: limit 0 != root limit 125 [ 290.091655][ T7005] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.303: Corrupt directory, running e2fsck is recommended [ 290.143239][ T7006] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.303: dx entry: limit 0 != root limit 125 [ 290.148781][ T6988] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.303: dx entry: limit 0 != root limit 125 [ 290.155501][ T7006] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.303: Corrupt directory, running e2fsck is recommended [ 290.167304][ T6988] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.303: Corrupt directory, running e2fsck is recommended [ 290.221692][ T7006] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.303: dx entry: limit 0 != root limit 125 [ 290.234132][ T7006] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.303: Corrupt directory, running e2fsck is recommended [ 290.478143][ T30] audit: type=1800 audit(1759040059.740:39): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name="file1" dev="overlay" ino=349 res=0 errno=0 [ 290.577303][ T6204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 290.660575][ T7012] loop2: detected capacity change from 0 to 1024 [ 291.442347][ T5811] ===================================================== [ 291.449893][ T5811] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x9a6/0x27a0 [ 291.457247][ T5811] hfsplus_uni2asc+0x9a6/0x27a0 [ 291.462448][ T5811] hfsplus_readdir+0xd60/0x1a70 [ 291.467485][ T5811] iterate_dir+0x44f/0x620 [ 291.472215][ T5811] __se_sys_getdents64+0x17e/0x550 [ 291.477684][ T5811] __x64_sys_getdents64+0x97/0xe0 [ 291.483246][ T5811] x64_sys_call+0x3a14/0x3e20 [ 291.488284][ T5811] do_syscall_64+0xd9/0x210 [ 291.493066][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.496628][ T4230] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.499521][ T5811] [ 291.512721][ T5811] Uninit was created at: [ 291.517160][ T5811] __kmalloc_noprof+0x95f/0x1310 [ 291.522488][ T5811] hfsplus_find_init+0x90/0x1d0 [ 291.527731][ T5811] hfsplus_readdir+0x1dc/0x1a70 [ 291.533507][ T5811] iterate_dir+0x44f/0x620 [ 291.542746][ T5811] __se_sys_getdents64+0x17e/0x550 [ 291.548043][ T5811] __x64_sys_getdents64+0x97/0xe0 [ 291.555091][ T5811] x64_sys_call+0x3a14/0x3e20 [ 291.560811][ T5811] do_syscall_64+0xd9/0x210 [ 291.565472][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.572482][ T5811] [ 291.574896][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 291.584679][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.595058][ T5811] ===================================================== [ 291.602250][ T5811] Disabling lock debugging due to kernel taint [ 291.608778][ T5811] Kernel panic - not syncing: kmsan.panic set ... [ 291.615326][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(none) [ 291.626635][ T5811] Tainted: [B]=BAD_PAGE [ 291.630883][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.641066][ T5811] Call Trace: [ 291.644441][ T5811] [ 291.647470][ T5811] __dump_stack+0x26/0x30 [ 291.651979][ T5811] dump_stack_lvl+0x53/0x270 [ 291.656748][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.662746][ T5811] dump_stack+0x1e/0x25 [ 291.667075][ T5811] vpanic+0x361/0xc50 [ 291.671250][ T5811] panic+0x15d/0x160 [ 291.675375][ T5811] kmsan_report+0x31c/0x320 [ 291.680053][ T5811] ? kmsan_get_metadata+0xfb/0x160 [ 291.685334][ T5811] ? __msan_warning+0x1b/0x30 [ 291.690156][ T5811] ? hfsplus_uni2asc+0x9a6/0x27a0 [ 291.695412][ T5811] ? hfsplus_readdir+0xd60/0x1a70 [ 291.700629][ T5811] ? iterate_dir+0x44f/0x620 [ 291.705392][ T5811] ? __se_sys_getdents64+0x17e/0x550 [ 291.710858][ T5811] ? __x64_sys_getdents64+0x97/0xe0 [ 291.716241][ T5811] ? x64_sys_call+0x3a14/0x3e20 [ 291.721306][ T5811] ? do_syscall_64+0xd9/0x210 [ 291.726135][ T5811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.732362][ T5811] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 291.738789][ T5811] ? kmsan_get_metadata+0xfb/0x160 [ 291.744081][ T5811] ? kmsan_get_metadata+0xfb/0x160 [ 291.749400][ T5811] ? kmsan_get_metadata+0xfb/0x160 [ 291.754694][ T5811] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 291.761107][ T5811] ? kmsan_get_metadata+0xfb/0x160 [ 291.766394][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.772403][ T5811] ? utf32_to_utf8+0x3e4/0x410 [ 291.777379][ T5811] ? kmsan_get_metadata+0xfb/0x160 [ 291.782749][ T5811] __msan_warning+0x1b/0x30 [ 291.787413][ T5811] hfsplus_uni2asc+0x9a6/0x27a0 [ 291.792455][ T5811] ? __msan_memcpy+0x108/0x1c0 [ 291.797513][ T5811] hfsplus_readdir+0xd60/0x1a70 [ 291.802782][ T5811] ? aa_file_perm+0x549/0x2140 [ 291.807815][ T5811] ? kmsan_get_metadata+0xfb/0x160 [ 291.813197][ T5811] ? __pfx_hfsplus_readdir+0x10/0x10 [ 291.818708][ T5811] iterate_dir+0x44f/0x620 [ 291.823312][ T5811] __se_sys_getdents64+0x17e/0x550 [ 291.828621][ T5811] ? __pfx_filldir64+0x10/0x10 [ 291.833561][ T5811] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.839569][ T5811] __x64_sys_getdents64+0x97/0xe0 [ 291.844797][ T5811] x64_sys_call+0x3a14/0x3e20 [ 291.849678][ T5811] do_syscall_64+0xd9/0x210 [ 291.854333][ T5811] ? irqentry_exit+0x16/0x60 [ 291.859123][ T5811] ? clear_bhb_loop+0x40/0x90 [ 291.863970][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.870037][ T5811] RIP: 0033:0x7fb8465c1833 [ 291.874569][ T5811] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 3d f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 291.894510][ T5811] RSP: 002b:00007fffaad55fd8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 291.903262][ T5811] RAX: ffffffffffffffda RBX: 0000555567285600 RCX: 00007fb8465c1833 [ 291.911468][ T5811] RDX: 0000000000008000 RSI: 0000555567285600 RDI: 0000000000000005 [ 291.919745][ T5811] RBP: 00005555672855d4 R08: 0000000000000000 R09: 0000000000000000 [ 291.927839][ T5811] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 291.935937][ T5811] R13: 0000000000000010 R14: 00005555672855d0 R15: 00007fffaad58290 [ 291.944078][ T5811] [ 291.947502][ T5811] Kernel Offset: disabled [ 291.951892][ T5811] Rebooting in 86400 seconds..