last executing test programs: 1m49.049425933s ago: executing program 0 (id=1): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f00000003c0)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@disable_roll_forward}, {@checkpoint_diasble}, {@background_gc_on}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@age_extent_cache}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0xffffffffffffffff}}], [{@subj_type={'subj_type', 0x3d, 'disable_roll_forward'}}, {@flag='dirsync'}]}, 0x1, 0x551c, &(0x7f00000079c0)="$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") syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000001400)={0x8, 0x1, 0x3, 0x7fffffff, 0x4, 0x83f, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x0, 0x1000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f00000001c0)=0xc7) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005200010a00000000000000000a"], 0x26}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) 1m47.38734161s ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@nodelalloc}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@mblk_io_submit}, {@noblock_validity}, {@user_xattr}, {@bh}, {@jqfmt_vfsv0}]}, 0x1, 0x56b, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00', {}, {}, 0x5e, 0x1}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d7, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffff00, 0xffffffff, 0xffffffff, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast2, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) socket$tipc(0x1e, 0x5, 0x0) 1m46.894431607s ago: executing program 0 (id=10): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x1}, 0x14) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000066001b000038000000000000f104000080"], 0x14}], 0x1}, 0x0) r6 = dup(r4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) r8 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ftruncate(r10, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x10) socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r12 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r12, 0x5452, &(0x7f0000000040)=0x400000000000009) socket$kcm(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(r12, 0x1, 0x7, &(0x7f0000000240), 0x4) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r9, 0x267a4e37}, 0xc) sendmmsg$inet(r6, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="dd7d4b81cb76a59205a856e538e3648c20d055ef10859c7cb00e95b5d6384b9ee30e23f57e6fc33b3c07582a96e1d0cd1bd9a7a71b4aaec2e78ceb8f454b765947fb5e3e8311d3f31cd78d8046d1d788f5b21e4be9590df26fbc51614f2f3cce3d6b9dde5ca8fae3a503da18a8ca3195a28d219355eefacc3bb9b6ada40f2e80ddcd68037a53cd4ed305104b17d3d1605d0c95be0c623771d61551e61225fbf27c874b2c3eb20d2023a9adef9ac59392824b435b65ea2f11648a7484c4d948417d27149ea892125ab4e73e6c5e511d1278184a23441fe228832e2961a843db186b1779ab0ee277fd1e9695bad45c7060c89c92", 0xf3}, {&(0x7f00000000c0)="c3d2520cb4414f84aba11c5f134fcab8f5c18243cf33186af5530c7121792da99d036639d7b1c280ba2203efc67ab1649cf6dd36725d", 0x36}, {&(0x7f0000000400)="7eacc9732825672a8200f1473ef86b5ea203661cb153908a7dcb92f1f6eb281f82a0fae37544623e9cc2f2384682fc95fbb7250618d08379eb05adbbcf9ad262764a2e4754cb1854ef608fee820ce50715a96862872428c8eb9b8a24273a4228d903bfeb58ca39fd6425bf9f98811d41af7c8075753d8e225bfa65a882b4082f0e670dfcce642de9fe3325251611842aaba8d3a440cb6f04d6a3812ab6a7ab10e1eea4e17331bdfd28aee359d76d06bc91ef7eff14b0109f2a6727d0f78a42b1a7fe5e4675143897daeb75213ec58dc922b2a552ea75761f5c591e6deb889cf6a913", 0xe2}], 0x3}}, {{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000500)="a791bdb43fbaa905dbf8de9950acf8d2f0c69f766a1eb3bba336b1ec78645b930db3ae14f9d8a5fccda2c83d115368bc8a5818a3a269f9b85cf8ab6a163b1cfdffeb7cafebeaf5444419d7702ae689b6cb0d14179e6dff2af99a629107e67045846d23c6c48f5491f6b8ba8563dcb322ef500f7dd1d2eaaf77861a6973b19b70d461fd6e6a9e2c1a3bb23fe66a58a637619acc5fce4a8191184cc6f7b2f1d66c7a05ec58765e118f010d3ecde1421acc39c967fa2fc53c40905a2fcec5d6", 0xbe}, {&(0x7f00000005c0)="56a75cc7fe0bd12ebf2f70ab3f671a9d843c0c76e7827640b80ee21c86352e2e4a8a85272158bb849964bc03591f4c6df600b8d4a48884e7cea332c4d1de74d12891e1d2c0fd974e7a83047cc5b715d7f1b501d321e22c33055a87dc2cc564ea6971ad58e21cd25139f18549e9c5242f9f14344bbdabf70882e417c2bcf4851c9da8e25c982b7bfc2c2cc3d50b8e286e2165aa5889ee5b7e1cca9af1e4088ca69287c67b3a64dd606cf819eae964", 0xae}, {&(0x7f0000000680)="96492eee1154823ef6b3f0c27fb7880c01630e5b50b641687d059292333c6bb8d742d0a93aef0c73f9c1e200535e5c68b39ce24836863fd31b61c91568209bc25ab771cb4d711ff0904ab2e858c3349b508b23f7b1d7cab4826911eeaf2fad99af7295c5623090ce58b08eedeee39b13fa7a9a99437cdce83bc3ea4c959d3b2b18efb211208ce1a9af75402d04c71f1236cc28d97b2c0611844aded5b2cc18b39bc29ed0e9ab7aa751f10b3957a694d7056512734c495403fde5c98dd3c4c230df86e5f0bd07477377b712120c77c9828a89ab6b1a0516766d6db4b866087755dd56853fff6692a258d46872ca36ba2cd6a465018ec9545d", 0xf8}, {&(0x7f0000000300)="e9b7f9524508f1e52ff608141158707e467d72d1bd0d9022d3ebdff74b7c0806597f090fa0b0a4cc0714adafedd39440ae8f3327e867c32cc5ed7f08e3e423a76bb61f6b717f52", 0x47}, {&(0x7f0000000780)="3020a26523483a5bec8ebf891e46c55d442ad975f327660a47144318215e0ea7285de51ef51bad5f8490aa071911c2df9ee2cfb4c2093524507e6773c8c51b2b5cc9a2dfeeb4c0b810a227838e4ec4a021991f7791b75bf93e90860d669264190b8735e04a200ac36023c00f63c1a9a1186a", 0x72}, {&(0x7f0000000800)="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", 0xfd}], 0x6, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010100, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @broadcast}}}], 0x58}}], 0x2, 0x1) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 1m46.441019785s ago: executing program 2 (id=12): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) write$FUSE_INIT(r0, 0x0, 0xfffffffffffffdd5) 1m44.789937095s ago: executing program 0 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lseek(0xffffffffffffffff, 0x8000000000008, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0xd6}], 0x1, 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x48, 0x0, &(0x7f0000000700)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x1406, 0x4, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x11, 0x2007, @fd=r3, 0x19c, &(0x7f0000000240), 0x0, 0x8, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m43.871068197s ago: executing program 32 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lseek(0xffffffffffffffff, 0x8000000000008, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0xd6}], 0x1, 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x48, 0x0, &(0x7f0000000700)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x1406, 0x4, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x11, 0x2007, @fd=r3, 0x19c, &(0x7f0000000240), 0x0, 0x8, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m37.909622883s ago: executing program 2 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x7, 0x1, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7, 0x1, 0x1, 0xf}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001c0000032bbd7000fcecf321d0b694705cf445a0e4dbdf25000000007db2c9791840316ad1a06d481d32b4f6780d6b260d5974bf13fc7510611b83837bce3de3ad9e", @ANYRES32=r2, @ANYBLOB="20007704080004000400000008000f000100000008000a000000c03f14000e800400020005000100f200000004000200060006004e200000"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r11 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r12 = fcntl$dupfd(r10, 0x406, r10) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r11, &(0x7f0000000880)=[{&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) 1m36.648529182s ago: executing program 33 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x7, 0x1, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7, 0x1, 0x1, 0xf}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001c0000032bbd7000fcecf321d0b694705cf445a0e4dbdf25000000007db2c9791840316ad1a06d481d32b4f6780d6b260d5974bf13fc7510611b83837bce3de3ad9e", @ANYRES32=r2, @ANYBLOB="20007704080004000400000008000f000100000008000a000000c03f14000e800400020005000100f200000004000200060006004e200000"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r11 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r12 = fcntl$dupfd(r10, 0x406, r10) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r11, &(0x7f0000000880)=[{&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) 1m15.614247115s ago: executing program 4 (id=84): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip_tables_targets\x00') preadv(r4, &(0x7f000001a140)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1, 0x3, 0x8) 1m12.343164476s ago: executing program 3 (id=88): r0 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1m12.13450302s ago: executing program 3 (id=90): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0x3, 0x4001}, 0xc) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) read$dsp(r2, &(0x7f0000001380)=""/229, 0xe5) 1m11.846948683s ago: executing program 4 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@ll={0x11, 0x9}, 0x80, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001d00030400000000ffdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100200012800c0001006d6163766c616e00100002800a0004000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004850}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r6, 0x29, 0xce, 0x0, &(0x7f0000000300)) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 1m10.35909107s ago: executing program 3 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="66643d668bec006e3523d868096ecd0fcd2bd3c9877e8c072a293fb8db15803ba7f64638b4b398afe340ca881c30e36c9029f3621a4775e7cbad758ff276ec42db623f4789a1098dec92cd1ce535dd855f5b3f5c7d6730a063dd9fe0dea60d9a343d15d1b7b344f3881cbcbaa38f02253d", @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0xffffffffffffffff, 0x0, 0xee01) llistxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r2, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) 1m9.968193634s ago: executing program 4 (id=96): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x1c, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b926558305608ffc450394321545000043ae", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000000200000000000000", @ANYRES32=r3, @ANYBLOB="957b112c5b0807a55f906fe526bc282ed0e925bd06f84e8bf06efd98174d4d963df7233b45c7b8c1c0aeac", @ANYRES8=r1], 0x10) close(0x3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000004c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) fchdir(r2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, &(0x7f0000002180)) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x19d, &(0x7f0000000000)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000000)=0x84) openat$cgroup_int(r1, &(0x7f0000000040)='memory.low\x00', 0x2, 0x0) 1m9.879020683s ago: executing program 3 (id=97): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611278000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r1, &(0x7f0000000200), &(0x7f0000000080)=ANY=[@ANYBLOB], 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) close(r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x7, 0x10001, 0x6, {{0x8, 0x4, 0x0, 0x8, 0x20, 0x64, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, {[@rr={0x7, 0xb, 0xe3, [@loopback, @multicast1]}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x3c, 0x0, 0x41000, 0x8, '\x00', r3, @sched_cls=0xecb7fdae2d7b23fa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568}, 0x94) 1m9.596565331s ago: executing program 4 (id=98): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0xff, 0xc9, 0x6}}}, 0x8) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x8000000e}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002100010000000000fddbdf250a0000080000000110000000140011"], 0x30}}, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x141800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)=0x3) 1m9.231121874s ago: executing program 3 (id=100): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000947e000000000085100000fdffffff06000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x8000}, 0x4) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365823d63703835372c6d61703d61636f726e2c6e6f726f636b2c73657373696f6e3d3078303030303030303030303030303030322c73657373696f6e3d3078303030303030303030303030303030612c00"], 0x1, 0xaa5, &(0x7f0000000d80)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365823d63703835372c6d61703d61636f726e2c6e6f726f636b2c73657373696f6e3d3078303030303030303030303030303030322c73657373696f6e3d3078303030303030303030303030303030612c00"], 0x1, 0xaa5, &(0x7f0000000d80)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d95703836352c696f636861727365743d63703836302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c636f6465706167653d3836322c726f6469722c756e695f786c6174653d312c696f636861727365743d63703837344573686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c696f636861727365743d63703933322c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c757466383d312c757466383d312c00"], 0x25, 0x353, &(0x7f0000000840)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1m6.166916384s ago: executing program 4 (id=109): r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) r3 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008d1e632039102021a702f9ff0301090212000100ffc0000904"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) kexec_load(0x602e, 0x2, &(0x7f0000000240)=[{&(0x7f00000001c0)="74e665eef857", 0x6, 0x4, 0x4}, {&(0x7f0000000200)="18e77e283b44ea36ec1fee8d27a825dc0279dc06e2ca572539", 0x19, 0x0, 0x3}], 0x280000) linkat(r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000180)='./bus\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getdents64(r1, &(0x7f0000000f80)=""/4086, 0xff6) 1m6.166311168s ago: executing program 3 (id=110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x8800) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x0, 0x5, 0x7, 0x606020a, 0x2}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x40, @mcast1, 0x8}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x200000, @remote, 0x5}], 0x68) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1m5.462255792s ago: executing program 34 (id=110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x8800) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x0, 0x5, 0x7, 0x606020a, 0x2}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x40, @mcast1, 0x8}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x200000, @remote, 0x5}], 0x68) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 25.134990125s ago: executing program 4 (id=109): r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) r3 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008d1e632039102021a702f9ff0301090212000100ffc0000904"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) kexec_load(0x602e, 0x2, &(0x7f0000000240)=[{&(0x7f00000001c0)="74e665eef857", 0x6, 0x4, 0x4}, {&(0x7f0000000200)="18e77e283b44ea36ec1fee8d27a825dc0279dc06e2ca572539", 0x19, 0x0, 0x3}], 0x280000) linkat(r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000180)='./bus\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getdents64(r1, &(0x7f0000000f80)=""/4086, 0xff6) 9.631653839s ago: executing program 5 (id=204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000100)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) read$msr(r1, &(0x7f0000000100)=""/214, 0xd6) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) 8.035895998s ago: executing program 5 (id=207): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x480002) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000980)={0x8, 0x1000, 0x1, 0x0, 0x6, 0x3, "9b31515379c1275e4f5a6c75e62f1cd8", 0xc, 0x7, 0x1, 0x9, 0x4, 0x8, 0x32}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r4], 0x0) 6.444058407s ago: executing program 1 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@ll={0x11, 0x9}, 0x80, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001d00030400000000ffdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100200012800c0001006d6163766c616e00100002800a0004000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004850}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r6, 0x29, 0xce, 0x0, &(0x7f0000000300)) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) 6.267100902s ago: executing program 5 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x100, &(0x7f0000000400)) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x7, 0x210803) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)={0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000380)={r2, r3, r5, 0x2, 0x7f, 0x3ff, 0x6, 0x5, 0x1ddb0b1a, 0x24a, 0x74ba, 0x9}) 5.054171726s ago: executing program 1 (id=210): socket$kcm(0x15, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0xc000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001e00fa800000000000000000711062000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x24}, 0x94) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r5, 0x47bc, 0x20, 0x0, 0x0, 0x0) 4.722359918s ago: executing program 5 (id=211): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x2, 0x5567, &(0x7f0000006f40)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 4.655570421s ago: executing program 1 (id=212): unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0xf5ff) 3.049222683s ago: executing program 5 (id=213): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001000)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5425, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 2.789221894s ago: executing program 1 (id=214): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.488309766s ago: executing program 1 (id=215): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) 751.94922ms ago: executing program 5 (id=216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) read$msr(r1, &(0x7f0000000100)=""/214, 0xd6) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) 0s ago: executing program 1 (id=217): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) getpid() syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2bd, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x107042, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x10000, 0xa, 0x80012d58, 0x12d5c}}, 0x44) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(r0, &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80840, 0x103) landlock_create_ruleset(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0x1b, 0x4e21, 0xffff, @rand_addr=' \x01\x00', 0x6db5}}}, 0x38) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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") kernel console output (not intermixed with test programs): 299010][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.306217][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.413433][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.493540][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.500759][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.546262][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.553476][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.584775][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.613479][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.725940][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.897976][ T5856] veth0_vlan: entered promiscuous mode [ 98.948106][ T5856] veth1_vlan: entered promiscuous mode [ 99.132334][ T5852] veth0_vlan: entered promiscuous mode [ 99.154492][ T5856] veth0_macvtap: entered promiscuous mode [ 99.174207][ T5852] veth1_vlan: entered promiscuous mode [ 99.204339][ T5856] veth1_macvtap: entered promiscuous mode [ 99.326535][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.363758][ T5852] veth0_macvtap: entered promiscuous mode [ 99.386441][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.405532][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.426655][ T5852] veth1_macvtap: entered promiscuous mode [ 99.467377][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.504232][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.531221][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.539985][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.550294][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.652576][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.678469][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.695138][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.758904][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.768774][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.779152][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.788226][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.823734][ T5857] veth0_vlan: entered promiscuous mode [ 99.945861][ T5857] veth1_vlan: entered promiscuous mode [ 99.957199][ T5861] veth0_vlan: entered promiscuous mode [ 99.982260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.990174][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.023823][ T5861] veth1_vlan: entered promiscuous mode [ 100.036407][ T5849] veth0_vlan: entered promiscuous mode [ 100.082307][ T5162] Bluetooth: hci1: command tx timeout [ 100.126270][ T5849] veth1_vlan: entered promiscuous mode [ 100.134940][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.143001][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.162742][ T5860] Bluetooth: hci0: command tx timeout [ 100.168202][ T5162] Bluetooth: hci2: command tx timeout [ 100.182682][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.200529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.240994][ T5162] Bluetooth: hci4: command tx timeout [ 100.246464][ T5860] Bluetooth: hci3: command tx timeout [ 100.246614][ T5868] Bluetooth: hci5: command tx timeout [ 100.291588][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.322949][ T5857] veth0_macvtap: entered promiscuous mode [ 100.335597][ T5857] veth1_macvtap: entered promiscuous mode [ 100.356106][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.376932][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.399718][ T5861] veth0_macvtap: entered promiscuous mode [ 100.430226][ T5858] veth0_vlan: entered promiscuous mode [ 100.497453][ T5858] veth1_vlan: entered promiscuous mode [ 100.534090][ T5849] veth0_macvtap: entered promiscuous mode [ 100.547120][ T5849] veth1_macvtap: entered promiscuous mode [ 100.572677][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.604652][ T5861] veth1_macvtap: entered promiscuous mode [ 100.646605][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.689416][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.704154][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.715045][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734234][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.804170][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.827638][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.885793][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.911333][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.963159][ T5861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.980516][ T5861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.989341][ T5861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.007555][ T5995] loop1: detected capacity change from 0 to 4096 [ 101.009707][ T5861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.024957][ T5995] EXT4-fs: Ignoring removed orlov option [ 101.095930][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.121252][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.135936][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.153934][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.193989][ T30] audit: type=1800 audit(1752184331.396:2): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 101.199673][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.321666][ T5858] veth0_macvtap: entered promiscuous mode [ 101.348600][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.371627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.379479][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.416570][ T5858] veth1_macvtap: entered promiscuous mode [ 101.425492][ T5990] loop0: detected capacity change from 0 to 40427 [ 101.466660][ T5990] ======================================================= [ 101.466660][ T5990] WARNING: The mand mount option has been deprecated and [ 101.466660][ T5990] and is ignored by this kernel. Remove the mand [ 101.466660][ T5990] option from the mount to silence this warning. [ 101.466660][ T5990] ======================================================= [ 101.579363][ T5990] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 101.615075][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.623673][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.662187][ T5990] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.678130][ T5990] F2FS-fs (loop0): build fault injection rate: 18446 [ 101.687079][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.701574][ T5990] F2FS-fs (loop0): invalid crc value [ 101.735425][ T6004] wg0 speed is unknown, defaulting to 1000 [ 101.756977][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.838370][ T6004] wg0 speed is unknown, defaulting to 1000 [ 101.841789][ T6006] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.868723][ T6004] wg0 speed is unknown, defaulting to 1000 [ 101.881675][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.888935][ T6004] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.902704][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.914801][ T6004] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.920513][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.931542][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.938208][ T5990] F2FS-fs (loop0): Start checkpoint disabled! [ 101.961004][ T5990] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.966543][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.995704][ T5990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 102.007922][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.063115][ T6004] wg0 speed is unknown, defaulting to 1000 [ 102.089256][ T6004] wg0 speed is unknown, defaulting to 1000 [ 102.104585][ T6004] wg0 speed is unknown, defaulting to 1000 [ 102.106878][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.112514][ T6004] wg0 speed is unknown, defaulting to 1000 [ 102.129387][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.148383][ T6004] wg0 speed is unknown, defaulting to 1000 [ 102.171613][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 102.222605][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.237828][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.310788][ T6004] wg0 speed is unknown, defaulting to 1000 [ 102.424852][ T6012] loop2: detected capacity change from 0 to 1024 [ 102.432309][ T6012] EXT4-fs: inline encryption not supported [ 102.438192][ T6012] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.444748][ T6012] EXT4-fs: Ignoring removed bh option [ 102.490394][ T5856] syz-executor: attempt to access beyond end of device [ 102.490394][ T5856] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 102.533224][ T6012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.565691][ T5856] syz-executor: attempt to access beyond end of device [ 102.565691][ T5856] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 102.667676][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.760186][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.782383][ T1150] kworker/u8:6: attempt to access beyond end of device [ 102.782383][ T1150] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.924954][ T6012] xt_connbytes: Forcing CT accounting to be enabled [ 102.931932][ T6012] Cannot find add_set index 0 as target [ 102.991330][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 102.995959][ T1150] CPU: 1 UID: 0 PID: 1150 Comm: kworker/u8:6 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 102.995990][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.996006][ T1150] Workqueue: writeback wb_workfn (flush-7:0) [ 102.996063][ T1150] Call Trace: [ 102.996073][ T1150] [ 102.996083][ T1150] dump_stack_lvl+0x189/0x250 [ 102.996120][ T1150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.996148][ T1150] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 102.996185][ T1150] ? __pfx_queue_work_on+0x10/0x10 [ 102.996218][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.996246][ T1150] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 102.996282][ T1150] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.996320][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.996347][ T1150] ? f2fs_hw_is_readonly+0x39b/0x470 [ 102.996389][ T1150] f2fs_handle_critical_error+0x37c/0x540 [ 102.996432][ T1150] f2fs_write_end_io+0x495/0x810 [ 102.996454][ T1150] ? blkg_put+0x22/0x240 [ 102.996504][ T1150] __submit_merged_bio+0x27a/0x6a0 [ 102.996547][ T1150] __submit_merged_write_cond+0x255/0x530 [ 102.996590][ T1150] f2fs_write_data_pages+0x261d/0x3000 [ 102.996670][ T1150] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.996763][ T1150] ? unwind_next_frame+0xa5/0x2390 [ 102.996815][ T1150] ? ret_from_fork_asm+0x1a/0x30 [ 102.996856][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.996884][ T1150] ? __lock_acquire+0xab9/0xd20 [ 102.996933][ T1150] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.996974][ T1150] do_writepages+0x32e/0x550 [ 102.997007][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997034][ T1150] ? reacquire_held_locks+0x127/0x1d0 [ 102.997070][ T1150] ? writeback_sb_inodes+0x372/0x1000 [ 102.997108][ T1150] __writeback_single_inode+0x145/0xff0 [ 102.997136][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997163][ T1150] ? do_raw_spin_unlock+0x122/0x240 [ 102.997205][ T1150] writeback_sb_inodes+0x6b5/0x1000 [ 102.997234][ T1150] ? __lock_acquire+0xab9/0xd20 [ 102.997270][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997313][ T1150] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 102.997390][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997417][ T1150] ? rcu_is_watching+0x15/0xb0 [ 102.997447][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997485][ T1150] wb_writeback+0x43b/0xaf0 [ 102.997522][ T1150] ? queue_io+0x3a1/0x590 [ 102.997553][ T1150] ? __pfx_wb_writeback+0x10/0x10 [ 102.997591][ T1150] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.997633][ T1150] wb_workfn+0x409/0xef0 [ 102.997689][ T1150] ? __pfx_wb_workfn+0x10/0x10 [ 102.997732][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997759][ T1150] ? __lock_acquire+0xab9/0xd20 [ 102.997798][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997829][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.997862][ T1150] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.997896][ T1150] ? process_scheduled_works+0x9ef/0x17b0 [ 102.997923][ T1150] ? process_scheduled_works+0x9ef/0x17b0 [ 102.997955][ T1150] process_scheduled_works+0xae1/0x17b0 [ 102.998020][ T1150] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.998063][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.998101][ T1150] worker_thread+0x8a0/0xda0 [ 102.998135][ T1150] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.998181][ T1150] ? __kthread_parkme+0x7b/0x200 [ 102.998225][ T1150] kthread+0x711/0x8a0 [ 102.998265][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 102.998294][ T1150] ? __pfx_kthread+0x10/0x10 [ 102.998325][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.998358][ T1150] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.998392][ T1150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.998419][ T1150] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.998455][ T1150] ? __pfx_kthread+0x10/0x10 [ 102.998492][ T1150] ret_from_fork+0x3fc/0x770 [ 102.998523][ T1150] ? __pfx_ret_from_fork+0x10/0x10 [ 102.998557][ T1150] ? __switch_to_asm+0x39/0x70 [ 102.998589][ T1150] ? __switch_to_asm+0x33/0x70 [ 102.998620][ T1150] ? __pfx_kthread+0x10/0x10 [ 102.998657][ T1150] ret_from_fork_asm+0x1a/0x30 [ 102.998711][ T1150] [ 102.998720][ T1150] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.158354][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.250835][ T5975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.454257][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 103.576798][ T6017] loop1: detected capacity change from 0 to 32768 [ 103.609280][ T5857] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=1040, size=60 fake=0 [ 103.665465][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 103.706591][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.740752][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.741427][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 103.822564][ T5975] usb 2-1: config 3 has an invalid interface number: 238 but max is 0 [ 103.836612][ T5975] usb 2-1: config 3 has no interface number 0 [ 103.866154][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 103.877057][ T5975] usb 2-1: config 3 interface 238 has no altsetting 0 [ 103.922166][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 103.934352][ T5928] usb 6-1: config 6 has an invalid interface number: 51 but max is 1 [ 103.982895][ T5975] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=92.99 [ 103.991821][ T6017] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 104.000450][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.025132][ T5975] usb 2-1: Product: syz [ 104.029310][ T5975] usb 2-1: Manufacturer: syz [ 104.033938][ T5975] usb 2-1: SerialNumber: syz [ 104.041246][ T5857] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=1040, size=60 fake=0 [ 104.061305][ T5928] usb 6-1: config 6 has no interface number 1 [ 104.068162][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.081184][ T5928] usb 6-1: config 6 interface 0 has no altsetting 0 [ 104.086961][ T6017] allowing incompatible features above 0.0: (unknown version) [ 104.096916][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.110473][ T5928] usb 6-1: config 6 interface 51 has no altsetting 0 [ 104.111920][ T6017] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 104.136362][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.156368][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 104.167732][ T5928] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 104.210866][ T6017] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 104.216614][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.229265][ T5928] usb 6-1: Product: syz [ 104.233660][ T5928] usb 6-1: Manufacturer: syz [ 104.238316][ T5928] usb 6-1: SerialNumber: syz [ 104.268958][ T6017] bcachefs (loop1): initializing new filesystem [ 104.294898][ T6017] bcachefs (loop1): going read-write [ 104.304971][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 104.315888][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.342144][ T5857] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=1040, size=60 fake=0 [ 104.393687][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.401355][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.405886][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.432019][ T6017] bcachefs (loop1): marking superblocks [ 104.437297][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.459165][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.468547][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 104.473214][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.524949][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.533317][ T6017] bcachefs (loop1): initializing freespace [ 104.548222][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.589342][ T6017] bcachefs (loop1): done initializing freespace [ 104.601831][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.661763][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.693179][ T6017] bcachefs (loop1): reading snapshots table [ 104.699705][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.726890][ T6039] sit0: entered promiscuous mode [ 104.732237][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.748988][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.770188][ T6039] netlink: 'syz.5.6': attribute type 1 has an invalid length. [ 104.781966][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.798421][ T6017] bcachefs (loop1): reading snapshots done [ 104.800966][ T6039] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6'. [ 104.807444][ T6042] loop3: detected capacity change from 0 to 2048 [ 104.854027][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.885957][ T6042] nilfs2: Unknown parameter 'sansmute' [ 104.953943][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 104.986247][ T5928] xr_serial 6-1:6.51: xr_serial converter detected [ 104.996917][ T6017] bcachefs (loop1): done starting filesystem [ 104.999338][ T5928] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 105.013902][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 105.059205][ T5928] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 105.148377][ T5928] usb 6-1: USB disconnect, device number 2 [ 105.188536][ T5928] xr_serial 6-1:6.0: device disconnected [ 105.234978][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.538406][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.813578][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.861567][ T6017] syz.1.11 (6017) used greatest stack depth: 17480 bytes left [ 106.258888][ T6057] input: syz1 as /devices/virtual/input/input5 [ 107.791268][ T6059] FAULT_INJECTION: forcing a failure. [ 107.791268][ T6059] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.804584][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.3.19 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 107.804619][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.804637][ T6059] Call Trace: [ 107.804647][ T6059] [ 107.804659][ T6059] dump_stack_lvl+0x189/0x250 [ 107.804694][ T6059] ? __pfx____ratelimit+0x10/0x10 [ 107.804743][ T6059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.804774][ T6059] ? __pfx__printk+0x10/0x10 [ 107.804810][ T6059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.804855][ T6059] should_fail_ex+0x414/0x560 [ 107.804899][ T6059] _copy_from_user+0x2d/0xb0 [ 107.804930][ T6059] __sys_bind+0x199/0x3e0 [ 107.804961][ T6059] ? __pfx___sys_bind+0x10/0x10 [ 107.805015][ T6059] __x64_sys_bind+0x7a/0x90 [ 107.805043][ T6059] do_syscall_64+0xfa/0x3b0 [ 107.805069][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.805092][ T6059] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 107.805124][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.805148][ T6059] RIP: 0033:0x7fbcb058e929 [ 107.805169][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.805188][ T6059] RSP: 002b:00007fbcb142b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 107.805213][ T6059] RAX: ffffffffffffffda RBX: 00007fbcb07b6160 RCX: 00007fbcb058e929 [ 107.805231][ T6059] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 107.805247][ T6059] RBP: 00007fbcb142b090 R08: 0000000000000000 R09: 0000000000000000 [ 107.805261][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.805275][ T6059] R13: 0000000000000000 R14: 00007fbcb07b6160 R15: 00007ffd53598388 [ 107.805311][ T6059] [ 108.156185][ T5857] EXT4-fs error: 232 callbacks suppressed [ 108.156208][ T5857] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=1040, size=60 fake=0 [ 108.194142][ T5975] usb 2-1: unsupported MDLM descriptors [ 108.223608][ T5975] usb 2-1: USB disconnect, device number 2 [ 108.378140][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 108.383967][ T5852] bcachefs (loop1): shutting down [ 108.412996][ T5852] bcachefs (loop1): going read-only [ 108.418560][ T5852] bcachefs (loop1): finished waiting for writes to stop [ 108.474496][ T5852] bcachefs (loop1): flushing journal and stopping allocators, journal seq 6 [ 108.527338][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 108.549129][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.588378][ T5852] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 6 [ 108.617862][ T5857] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=1040, size=60 fake=0 [ 108.653269][ T5852] bcachefs (loop1): clean shutdown complete, journal seq 7 [ 108.681698][ T5852] bcachefs (loop1): marking filesystem clean [ 108.717810][ T5857] EXT4-fs warning: 71 callbacks suppressed [ 108.717832][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 108.839560][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 108.870571][ T6066] loop3: detected capacity change from 0 to 1024 [ 108.899795][ T6066] hfsplus: Unknown parameter 'n' [ 108.970130][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 109.134295][ T5857] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=1040, size=60 fake=0 [ 109.300887][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 109.377467][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 109.468580][ T5857] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=1040, size=80 fake=0 [ 109.509090][ T5852] bcachefs (loop1): shutdown complete [ 109.587548][ T5857] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=1040, size=60 fake=0 [ 109.721125][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 109.777474][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.787146][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.795043][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.806668][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.829310][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.837256][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 109.944049][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 110.003843][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 110.087815][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 110.177820][ T1150] bridge_slave_1: left allmulticast mode [ 110.182989][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 110.198093][ T1150] bridge_slave_1: left promiscuous mode [ 110.199363][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.274870][ T1150] bridge_slave_0: left allmulticast mode [ 110.284962][ T1150] bridge_slave_0: left promiscuous mode [ 110.288634][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 110.306886][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.380199][ T5857] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 1040, name_len 0inline size 60 [ 110.949668][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.978325][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.999829][ T1150] bond0 (unregistering): Released all slaves [ 111.028359][ T6081] loop4: detected capacity change from 0 to 32768 [ 111.036116][ T6075] wg0 speed is unknown, defaulting to 1000 [ 111.130588][ T5975] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.187351][ T6093] loop3: detected capacity change from 0 to 1024 [ 111.328857][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.350600][ T5975] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 111.385421][ T5975] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 111.397211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 111.517015][ T5975] usb 6-1: config 220 has no interface number 2 [ 111.524325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.584776][ T5975] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 111.693883][ T5975] usb 6-1: config 220 interface 0 has no altsetting 0 [ 111.702184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.711107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.765510][ T5975] usb 6-1: config 220 interface 76 has no altsetting 0 [ 111.819902][ T5975] usb 6-1: config 220 interface 1 has no altsetting 0 [ 111.910457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.960583][ T5162] Bluetooth: hci2: command tx timeout [ 112.061518][ T5975] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 112.112999][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.139899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.148456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.205019][ T5975] usb 6-1: Product: syz [ 112.225412][ T5975] usb 6-1: Manufacturer: syz [ 112.230049][ T5975] usb 6-1: SerialNumber: syz [ 112.438693][ T6081] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc [ 112.438728][ T6081] allowing incompatible features above 0.0: (unknown version) [ 112.438743][ T6081] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 112.561808][ T6081] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 112.577176][ T6081] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 112.637105][ T6081] bcachefs (loop4): Version upgrade required: [ 112.637105][ T6081] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 112.637105][ T6081] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 112.637105][ T6081] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 112.747250][ T6081] bcachefs (loop4): dropping and reconstructing all alloc info [ 112.852035][ T6081] bcachefs (loop4): accounting_read... done [ 112.879532][ T6081] bcachefs (loop4): alloc_read... [ 112.905600][ T1150] hsr_slave_0: left promiscuous mode [ 112.922668][ T6081] done [ 112.933259][ T1150] hsr_slave_1: left promiscuous mode [ 112.938493][ T6081] bcachefs (loop4): done starting filesystem [ 112.949324][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.983294][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.046319][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.096080][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.235163][ T1150] veth1_macvtap: left promiscuous mode [ 113.265027][ T1150] veth0_macvtap: left promiscuous mode [ 113.286005][ T1150] veth1_vlan: left promiscuous mode [ 113.304278][ T1150] veth0_vlan: left promiscuous mode [ 113.403071][ T5858] bcachefs (loop4): shutting down [ 113.545399][ T5858] bcachefs (loop4): shutdown complete [ 113.668240][ T5975] usb 6-1: selecting invalid altsetting 0 [ 113.732021][ T5975] usb 6-1: selecting invalid altsetting 0 [ 113.813539][ T5975] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 113.819956][ T5975] usb 6-1: No valid video chain found. [ 113.864334][ T5975] usb 6-1: selecting invalid altsetting 0 [ 113.870133][ T5975] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 113.898171][ T5975] usb 6-1: USB disconnect, device number 3 [ 113.992835][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.003341][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.010829][ T5868] Bluetooth: hci2: command tx timeout [ 114.016615][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.027600][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.045216][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.100841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.421778][ T6114] loop5: detected capacity change from 0 to 512 [ 115.390818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 115.530744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.738067][ T6114] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.37: corrupted in-inode xattr: bad e_name length [ 116.082148][ T5162] Bluetooth: hci4: command tx timeout [ 116.106390][ T5162] Bluetooth: hci2: command tx timeout [ 116.408518][ T6102] loop3: detected capacity change from 0 to 32768 [ 116.417588][ T6114] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.37: couldn't read orphan inode 15 (err -117) [ 116.455022][ T6114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.566724][ T6114] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.37: dx entry: limit 0 != root limit 125 [ 116.608721][ T6114] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.37: Corrupt directory, running e2fsck is recommended [ 116.747117][ T6127] loop1: detected capacity change from 0 to 1024 [ 116.838417][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.876546][ T6127] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.1.41: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 116.938585][ T6127] EXT4-fs error (device loop1) in ext4_delete_entry:2739: Corrupt filesystem [ 116.983827][ T6127] EXT4-fs warning (device loop1): ext4_rename_delete:3726: inode #2: comm syz.1.41: Deleting old file: nlink 4, error=-117 [ 117.137220][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.142476][ T6134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.603712][ T6120] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 118.124563][ T6141] loop3: detected capacity change from 0 to 4096 [ 118.158767][ T6141] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 118.169312][ T5868] Bluetooth: hci4: command tx timeout [ 118.180578][ T5162] Bluetooth: hci2: command tx timeout [ 118.273450][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 118.395443][ T6141] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 118.499802][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 118.567125][ T6147] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 118.587395][ T6147] netlink: 224 bytes leftover after parsing attributes in process `syz.4.47'. [ 118.671286][ T6148] process 'syz.4.47' launched './file1' with NULL argv: empty string added [ 118.720594][ T90] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 118.882761][ T90] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.909804][ T90] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.936027][ T90] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.950971][ T6143] loop1: detected capacity change from 0 to 32768 [ 118.990344][ T90] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.999395][ T6143] bcachefs (/dev/loop1): error validating superblock: Filesystem has incompatible feature bit 35, highest supported small_image (22) [ 119.017054][ T90] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 119.040873][ T6143] bcachefs: bch2_fs_get_tree() error: invalid_sb_features [ 119.053585][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.113422][ T90] usb 4-1: config 0 descriptor?? [ 119.814895][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 119.828064][ T90] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 119.859242][ T90] usb 4-1: USB disconnect, device number 2 [ 119.977827][ T6109] netlink: 32 bytes leftover after parsing attributes in process `syz.5.37'. [ 120.008546][ T6147] tipc: Started in network mode [ 120.015924][ T6147] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 120.029366][ T6147] tipc: Enabling of bearer rejected, failed to enable media [ 120.124694][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.242883][ T5162] Bluetooth: hci4: command tx timeout [ 120.532116][ T6161] netlink: 'syz.1.49': attribute type 2 has an invalid length. [ 120.585441][ T6161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.49'. [ 121.185184][ T6111] wg0 speed is unknown, defaulting to 1000 [ 122.320732][ T5162] Bluetooth: hci4: command tx timeout [ 122.785538][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 123.776761][ T6197] netlink: 488 bytes leftover after parsing attributes in process `syz.1.62'. [ 124.905384][ T6207] loop5: detected capacity change from 0 to 256 [ 125.029894][ T6207] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 125.112973][ T6207] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 125.238211][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.249550][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.64'. [ 125.264543][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.280122][ T6218] x_tables: duplicate underflow at hook 1 [ 125.286331][ T6075] bridge_slave_0: entered allmulticast mode [ 125.298735][ T6215] loop4: detected capacity change from 0 to 4096 [ 125.352328][ T6075] bridge_slave_0: entered promiscuous mode [ 125.356079][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.356191][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.356339][ T6075] bridge_slave_1: entered allmulticast mode [ 125.388399][ T6075] bridge_slave_1: entered promiscuous mode [ 125.467047][ T6220] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.637799][ T6222] loop1: detected capacity change from 0 to 4096 [ 125.654268][ T1150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.677559][ T30] audit: type=1800 audit(125.657:3): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.67" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 125.943665][ T6227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.984696][ T6111] chnl_net:caif_netlink_parms(): no params data found [ 126.873551][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.909870][ T30] audit: type=1800 audit(126.887:4): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.68" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 126.933619][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.031195][ T6235] loop5: detected capacity change from 0 to 764 [ 127.293479][ T1150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.362118][ T6075] team0: Port device team_slave_0 added [ 127.439573][ T1150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.502576][ T6075] team0: Port device team_slave_1 added [ 127.706478][ T1150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.837746][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.864632][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.947301][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.983571][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.015612][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.041792][ T6111] bridge_slave_0: entered allmulticast mode [ 128.060155][ T6111] bridge_slave_0: entered promiscuous mode [ 128.126568][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.175095][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.219478][ T6111] bridge_slave_1: entered allmulticast mode [ 128.273534][ T6111] bridge_slave_1: entered promiscuous mode [ 128.335390][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.375485][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.494840][ T6239] loop3: detected capacity change from 0 to 131072 [ 128.504004][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.562106][ T6239] F2FS-fs (loop3): invalid crc value [ 128.692750][ T6239] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 128.787006][ T6252] loop5: detected capacity change from 0 to 1024 [ 128.923458][ T6252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.935867][ T6257] syz.4.72 uses obsolete (PF_INET,SOCK_PACKET) [ 128.997725][ T30] audit: type=1800 audit(128.977:5): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.75" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 129.028995][ T6257] loop4: detected capacity change from 0 to 16 [ 129.065531][ T6257] erofs (device loop4): mounted with root inode @ nid 36. [ 129.145548][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.149177][ T6257] syz.4.72 (6257): /proc/6248/oom_adj is deprecated, please use /proc/6248/oom_score_adj instead. [ 129.195329][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.211912][ T6250] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 130.198049][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.341561][ T6111] team0: Port device team_slave_0 added [ 130.470779][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.487370][ T6075] hsr_slave_0: entered promiscuous mode [ 130.509862][ T6075] hsr_slave_1: entered promiscuous mode [ 130.518968][ T6075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.527058][ T6075] Cannot create hsr debugfs directory [ 130.543257][ T6111] team0: Port device team_slave_1 added [ 130.656511][ T5921] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 130.670582][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.708483][ T5921] usb 2-1: Product: syz [ 130.721503][ T5921] usb 2-1: Manufacturer: syz [ 130.726296][ T5921] usb 2-1: SerialNumber: syz [ 130.758186][ T5921] usb 2-1: config 0 descriptor?? [ 130.781305][ T5921] ch341 2-1:0.0: ch341-uart converter detected [ 131.616358][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.674661][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.740571][ T6111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.940810][ T6266] loop5: detected capacity change from 0 to 32768 [ 131.981029][ T6266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.78 (6266) [ 132.090833][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.097420][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.551678][ T6264] loop1: detected capacity change from 0 to 2048 [ 132.663559][ T6281] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 132.695769][ T6264] udf: Unknown parameter '' [ 132.758367][ T6281] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 132.931495][ T6281] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 133.051430][ T5921] ch341-uart ttyUSB0: failed to read break control: -110 [ 133.058582][ T5921] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 133.069611][ T6266] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.087551][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.155553][ T6266] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 133.169478][ T6280] nfs: Bad value for 'source' [ 133.174599][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.202199][ T6281] overlayfs: missing 'lowerdir' [ 133.221991][ T6280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.231488][ T6266] BTRFS info (device loop5): using free-space-tree [ 133.254567][ T6111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.390700][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 133.392453][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 133.443896][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 133.492170][ T1150] bridge_slave_1: left allmulticast mode [ 133.528774][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 133.529165][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 133.580921][ T1150] bridge_slave_1: left promiscuous mode [ 133.581682][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 133.619592][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.709073][ T1150] bridge_slave_0: left allmulticast mode [ 133.732668][ T1150] bridge_slave_0: left promiscuous mode [ 133.773639][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.813662][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 133.814149][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 133.894116][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 133.986482][ T6266] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 133.997450][ T6304] loop3: detected capacity change from 0 to 64 [ 134.036114][ T6266] BTRFS error (device loop5): open_ctree failed: -12 [ 134.413715][ T6304] syz.3.83: attempt to access beyond end of device [ 134.413715][ T6304] loop3: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 134.467014][ T6304] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 134.511005][ T6304] syz.3.83: attempt to access beyond end of device [ 134.511005][ T6304] loop3: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 134.529845][ T6304] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 134.549944][ T6304] syz.3.83: attempt to access beyond end of device [ 134.549944][ T6304] loop3: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 134.597330][ T6304] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 134.621200][ T6304] syz.3.83: attempt to access beyond end of device [ 134.621200][ T6304] loop3: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 134.636086][ T6304] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 134.652690][ T6304] syz.3.83: attempt to access beyond end of device [ 134.652690][ T6304] loop3: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 134.668880][ T6304] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 134.725561][ T6304] syz.3.83: attempt to access beyond end of device [ 134.725561][ T6304] loop3: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 134.758092][ T6304] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 134.771495][ T6304] syz.3.83: attempt to access beyond end of device [ 134.771495][ T6304] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 135.275943][ T6304] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 135.302454][ T6304] syz.3.83: attempt to access beyond end of device [ 135.302454][ T6304] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 135.343546][ T6304] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 135.355803][ T6304] syz.3.83: attempt to access beyond end of device [ 135.355803][ T6304] loop3: rw=2049, sector=78, nr_sectors = 112 limit=64 [ 135.667851][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.736563][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.783536][ T6315] FAULT_INJECTION: forcing a failure. [ 135.783536][ T6315] name failslab, interval 1, probability 0, space 0, times 1 [ 135.796439][ T6315] CPU: 0 UID: 0 PID: 6315 Comm: syz.3.86 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 135.796462][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.796473][ T6315] Call Trace: [ 135.796482][ T6315] [ 135.796490][ T6315] dump_stack_lvl+0x189/0x250 [ 135.796517][ T6315] ? __pfx____ratelimit+0x10/0x10 [ 135.796546][ T6315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.796568][ T6315] ? __pfx__printk+0x10/0x10 [ 135.796596][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.796617][ T6315] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 135.796654][ T6315] should_fail_ex+0x414/0x560 [ 135.796686][ T6315] should_failslab+0xa8/0x100 [ 135.796710][ T6315] ? __pfx_ip6_dst_gc+0x10/0x10 [ 135.796728][ T6315] kmem_cache_alloc_noprof+0x73/0x3c0 [ 135.796757][ T6315] ? dst_alloc+0x105/0x170 [ 135.796784][ T6315] ? __pfx_ip6_dst_gc+0x10/0x10 [ 135.796803][ T6315] dst_alloc+0x105/0x170 [ 135.796833][ T6315] ip6_pol_route+0xa21/0x1180 [ 135.796853][ T6315] ? ip6_pol_route+0x162/0x1180 [ 135.796878][ T6315] ? __pfx_ip6_pol_route+0x10/0x10 [ 135.796898][ T6315] ? __lock_acquire+0xab9/0xd20 [ 135.796921][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.796941][ T6315] ? inet6_ehashfn+0xb3/0x570 [ 135.796962][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.796982][ T6315] ? ip6t_do_table+0x1376/0x1560 [ 135.797004][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797029][ T6315] fib6_rule_lookup+0x52f/0x6f0 [ 135.797051][ T6315] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 135.797072][ T6315] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 135.797100][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797120][ T6315] ? __inet6_lookup_established+0xb95/0xc30 [ 135.797149][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797174][ T6315] ip6_route_input+0x6ce/0xa50 [ 135.797201][ T6315] ? __pfx_ip6_route_input+0x10/0x10 [ 135.797231][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797266][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797286][ T6315] ? ip6_rcv_finish_core+0x222/0x420 [ 135.797316][ T6315] ip6_rcv_finish+0x141/0x2d0 [ 135.797345][ T6315] NF_HOOK+0x30c/0x3a0 [ 135.797369][ T6315] ? skb_orphan+0x4f/0xd0 [ 135.797397][ T6315] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 135.797422][ T6315] ? NF_HOOK+0x9a/0x3a0 [ 135.797447][ T6315] ? __pfx_NF_HOOK+0x10/0x10 [ 135.797475][ T6315] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 135.797505][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797530][ T6315] __netif_receive_skb+0xd3/0x380 [ 135.797553][ T6315] ? netif_receive_skb+0x115/0x790 [ 135.797582][ T6315] netif_receive_skb+0x1cb/0x790 [ 135.797611][ T6315] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 135.797633][ T6315] ? __pfx_netif_receive_skb+0x10/0x10 [ 135.797667][ T6315] ? tun_rx_batched+0x160/0x730 [ 135.797689][ T6315] tun_rx_batched+0x1b9/0x730 [ 135.797707][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797727][ T6315] ? __lock_acquire+0xab9/0xd20 [ 135.797753][ T6315] ? __pfx_tun_rx_batched+0x10/0x10 [ 135.797776][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797799][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797830][ T6315] tun_get_user+0x298e/0x3ce0 [ 135.797852][ T6315] ? tun_get_user+0x693/0x3ce0 [ 135.797869][ T6315] ? tun_get_user+0x2549/0x3ce0 [ 135.797899][ T6315] ? aa_file_perm+0x11f/0xed0 [ 135.797917][ T6315] ? __pfx_tun_get_user+0x10/0x10 [ 135.797936][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.797956][ T6315] ? aa_file_perm+0x3e7/0xed0 [ 135.797984][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.798004][ T6315] ? ref_tracker_alloc+0x318/0x460 [ 135.798031][ T6315] ? __lock_acquire+0xab9/0xd20 [ 135.798051][ T6315] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 135.798084][ T6315] ? tun_get+0x1c/0x2f0 [ 135.798105][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.798128][ T6315] ? tun_get+0x1c/0x2f0 [ 135.798146][ T6315] ? tun_get+0x1c/0x2f0 [ 135.798164][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.798188][ T6315] tun_chr_write_iter+0x113/0x200 [ 135.798210][ T6315] vfs_write+0x54b/0xa90 [ 135.798236][ T6315] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 135.798256][ T6315] ? __pfx_vfs_write+0x10/0x10 [ 135.798286][ T6315] ? __fget_files+0x2a/0x420 [ 135.798314][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.798339][ T6315] ksys_write+0x145/0x250 [ 135.798362][ T6315] ? __pfx_ksys_write+0x10/0x10 [ 135.798381][ T6315] ? rcu_is_watching+0x15/0xb0 [ 135.798408][ T6315] ? do_syscall_64+0xbe/0x3b0 [ 135.798430][ T6315] do_syscall_64+0xfa/0x3b0 [ 135.798446][ T6315] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.798474][ T6315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.798491][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.798511][ T6315] ? exc_page_fault+0x9f/0xf0 [ 135.798541][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.798558][ T6315] RIP: 0033:0x7fbcb058d3df [ 135.798575][ T6315] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 135.798589][ T6315] RSP: 002b:00007fbcb146d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 135.798607][ T6315] RAX: ffffffffffffffda RBX: 00007fbcb07b5fa0 RCX: 00007fbcb058d3df [ 135.798620][ T6315] RDX: 0000000000000062 RSI: 0000200000000180 RDI: 00000000000000c8 [ 135.798632][ T6315] RBP: 00007fbcb146d090 R08: 0000000000000000 R09: 0000000000000000 [ 135.798643][ T6315] R10: 0000000000000062 R11: 0000000000000293 R12: 0000000000000001 [ 135.798653][ T6315] R13: 0000000000000000 R14: 00007fbcb07b5fa0 R15: 00007ffd53598388 [ 135.798681][ T6315] [ 136.331364][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.994220][ T1150] bond0 (unregistering): Released all slaves [ 137.192258][ T5978] usb 2-1: USB disconnect, device number 3 [ 137.261716][ T5978] ch341 2-1:0.0: device disconnected [ 139.168131][ T6341] fuse: Bad value for 'fd' [ 139.311491][ T6111] hsr_slave_0: entered promiscuous mode [ 139.343172][ T6111] hsr_slave_1: entered promiscuous mode [ 139.364097][ T6111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.384228][ T6111] Cannot create hsr debugfs directory [ 139.627193][ T6348] loop3: detected capacity change from 0 to 128 [ 139.699723][ T6348] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.842408][ T1150] hsr_slave_0: left promiscuous mode [ 139.859602][ T1150] hsr_slave_1: left promiscuous mode [ 139.872170][ T6348] loop3: detected capacity change from 128 to 64 [ 139.884265][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.897976][ T6352] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Out of memory [ 139.923386][ T6352] EXT4-fs error (device loop3): ext4_rmdir:3193: inode #12: comm syz.3.97: mark_inode_dirty error [ 139.929093][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.970793][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.981979][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.077563][ T1150] veth1_macvtap: left promiscuous mode [ 140.138697][ T1150] veth0_macvtap: left promiscuous mode [ 140.161045][ T1150] veth1_vlan: left promiscuous mode [ 140.206842][ T1150] veth0_vlan: left promiscuous mode [ 140.384068][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 141.428755][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 141.538833][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 142.174644][ T6368] can: request_module (can-proto-4) failed. [ 142.605362][ T5849] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Out of memory [ 142.629094][ T5849] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #12: comm syz-executor: mark_inode_dirty error [ 142.647685][ T5849] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 142.679936][ T5849] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.293557][ T6075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.329908][ T6075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.427391][ T6075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.484505][ T6075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.857906][ T6111] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 143.944827][ T6111] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 144.014349][ T6111] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 144.080148][ T6111] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 144.515474][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.701753][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.888399][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.942782][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.953575][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.962441][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.970590][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.000949][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.039567][ T5162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.048239][ T5162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.066048][ T5162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.088188][ T5162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.098556][ T5162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.115136][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.184088][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.255468][ T6075] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.416302][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.423611][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.481378][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.488579][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.630612][ T6402] wg0 speed is unknown, defaulting to 1000 [ 145.743676][ T6404] wg0 speed is unknown, defaulting to 1000 [ 146.370875][ T30] audit: type=1326 audit(146.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd246d8e929 code=0x0 [ 146.773326][ T1150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.025949][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.050811][ T5162] Bluetooth: hci0: command tx timeout [ 147.121442][ T5162] Bluetooth: hci3: command tx timeout [ 147.184576][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.232032][ T6424] loop1: detected capacity change from 0 to 64 [ 147.257514][ T6424] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 147.274607][ T6423] netlink: 'syz.5.117': attribute type 2 has an invalid length. [ 147.520054][ T1150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.649016][ T6427] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 147.660098][ T6427] netlink: 224 bytes leftover after parsing attributes in process `syz.1.119'. [ 147.717002][ T6111] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.743439][ T6428] loop1: detected capacity change from 0 to 16 [ 147.806424][ T6428] cramfs: Unknown parameter './file1' [ 147.889104][ T6427] tipc: Started in network mode [ 147.906763][ T6427] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 147.936684][ T6427] tipc: Enabling of bearer rejected, failed to enable media [ 148.015120][ T1150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.219332][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.226583][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.478756][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.486020][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.643876][ T6402] chnl_net:caif_netlink_parms(): no params data found [ 149.119356][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.134763][ T5162] Bluetooth: hci0: command tx timeout [ 149.154859][ T6434] loop1: detected capacity change from 0 to 131072 [ 149.208075][ T5162] Bluetooth: hci3: command tx timeout [ 149.224909][ T6434] F2FS-fs (loop1): invalid crc value [ 149.361624][ T6434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 149.396897][ T6404] chnl_net:caif_netlink_parms(): no params data found [ 149.951359][ T1150] bridge_slave_1: left allmulticast mode [ 149.957492][ T1150] bridge_slave_1: left promiscuous mode [ 149.979279][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.086581][ T1150] bridge_slave_0: left allmulticast mode [ 150.108649][ T6440] loop5: detected capacity change from 0 to 32768 [ 150.115605][ T1150] bridge_slave_0: left promiscuous mode [ 150.154386][ T6440] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.123 (6440) [ 150.156566][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.220805][ T1150] bridge_slave_1: left allmulticast mode [ 150.236719][ T1150] bridge_slave_1: left promiscuous mode [ 150.260637][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.304300][ T1150] bridge_slave_0: left allmulticast mode [ 150.309997][ T1150] bridge_slave_0: left promiscuous mode [ 150.316781][ T6440] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.340711][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.348762][ T6440] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 150.376993][ T6440] BTRFS info (device loop5): using free-space-tree [ 150.703924][ T6440] overlay: ./file2 is not a directory [ 151.158964][ T30] audit: type=1800 audit(151.127:7): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.123" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 151.204976][ T5162] Bluetooth: hci0: command tx timeout [ 151.286402][ T5162] Bluetooth: hci3: command tx timeout [ 151.576731][ T5861] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.580325][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.822851][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.848064][ T1150] bond0 (unregistering): Released all slaves [ 153.176038][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.186992][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.197533][ T1150] bond0 (unregistering): Released all slaves [ 153.283232][ T5162] Bluetooth: hci0: command tx timeout [ 153.361034][ T5162] Bluetooth: hci3: command tx timeout [ 153.433268][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.460026][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.481405][ T6402] bridge_slave_0: entered allmulticast mode [ 153.489431][ T6402] bridge_slave_0: entered promiscuous mode [ 153.533326][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.540607][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.547791][ T6402] bridge_slave_1: entered allmulticast mode [ 153.583912][ T6402] bridge_slave_1: entered promiscuous mode [ 153.597807][ T1150] tipc: Left network mode [ 153.669421][ T30] audit: type=1326 audit(153.647:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.5.127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f6c98e929 code=0x0 [ 154.457895][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.506339][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.573017][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.580211][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.603830][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.130'. [ 154.616137][ T6404] bridge_slave_0: entered allmulticast mode [ 154.631066][ T6404] bridge_slave_0: entered promiscuous mode [ 154.661841][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.669040][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.710857][ T6404] bridge_slave_1: entered allmulticast mode [ 154.719558][ T6510] loop1: detected capacity change from 0 to 64 [ 154.729041][ T6404] bridge_slave_1: entered promiscuous mode [ 155.744050][ T6515] loop5: detected capacity change from 0 to 512 [ 155.780152][ T6517] loop1: detected capacity change from 0 to 64 [ 155.817765][ T6515] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 155.851359][ T6515] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.134: invalid indirect mapped block 2683928664 (level 1) [ 155.885160][ T6515] EXT4-fs (loop5): Remounting filesystem read-only [ 155.906403][ T6515] EXT4-fs (loop5): 1 truncate cleaned up [ 155.939579][ T6402] team0: Port device team_slave_0 added [ 155.944115][ T6515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.025866][ T6404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.055721][ T6404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.127574][ T6402] team0: Port device team_slave_1 added [ 156.163154][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.195210][ T6522] bridge_slave_0: default FDB implementation only supports local addresses [ 157.081711][ T6525] loop5: detected capacity change from 0 to 131072 [ 157.111971][ T6525] F2FS-fs (loop5): invalid crc value [ 157.181482][ T6525] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 157.882466][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.910041][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.936021][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.977351][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.034364][ T6404] team0: Port device team_slave_0 added [ 158.060339][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.068807][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.168964][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.263129][ T6404] team0: Port device team_slave_1 added [ 158.488646][ T1150] hsr_slave_0: left promiscuous mode [ 158.509372][ T1150] hsr_slave_1: left promiscuous mode [ 158.523817][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.540605][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.559021][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.574372][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.615403][ T1150] hsr_slave_0: left promiscuous mode [ 158.634598][ T1150] hsr_slave_1: left promiscuous mode [ 158.648110][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.656077][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.664333][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.680160][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.746990][ T1150] veth1_macvtap: left promiscuous mode [ 158.752990][ T1150] veth0_macvtap: left promiscuous mode [ 158.758915][ T1150] veth1_vlan: left promiscuous mode [ 158.765389][ T1150] veth0_vlan: left promiscuous mode [ 158.774839][ T1150] veth1_macvtap: left promiscuous mode [ 158.781252][ T1150] veth0_macvtap: left promiscuous mode [ 158.787172][ T1150] veth1_vlan: left promiscuous mode [ 158.793302][ T1150] veth0_vlan: left promiscuous mode [ 159.193970][ T6532] loop5: detected capacity change from 0 to 4096 [ 159.265294][ T6532] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 159.333897][ T6532] ntfs3(loop5): Failed to load $Bitmap (-22). [ 159.555560][ T6532] loop5: detected capacity change from 0 to 4096 [ 159.581585][ T6532] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 159.641817][ T6532] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 159.665201][ T6532] ntfs3(loop5): ino=19, mi_enum_attr [ 159.701321][ T6532] ntfs3(loop5): failed to convert "c46c" to iso8859-7 [ 159.741488][ T6532] ntfs3(loop5): ino=20, mi_enum_attr [ 159.969123][ T30] audit: type=1326 audit(159.947:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.5.139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f6c98e929 code=0x0 [ 160.588078][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 160.624179][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 161.247093][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 161.285724][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 161.608215][ T6402] hsr_slave_0: entered promiscuous mode [ 161.618456][ T6402] hsr_slave_1: entered promiscuous mode [ 161.627250][ T6402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.635225][ T6402] Cannot create hsr debugfs directory [ 161.688337][ T6111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.867981][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.891853][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.929900][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.944777][ T6075] veth0_vlan: entered promiscuous mode [ 161.964444][ T6075] veth1_vlan: entered promiscuous mode [ 161.997789][ T6075] veth0_macvtap: entered promiscuous mode [ 162.039332][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.058435][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.140888][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.253559][ T6075] veth1_macvtap: entered promiscuous mode [ 162.373289][ T6548] loop1: detected capacity change from 0 to 64 [ 162.917044][ T6543] loop5: detected capacity change from 0 to 131072 [ 162.989863][ T6543] F2FS-fs (loop5): invalid crc value [ 163.153920][ T6543] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 163.585264][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.192351][ T6404] hsr_slave_0: entered promiscuous mode [ 164.223181][ T6404] hsr_slave_1: entered promiscuous mode [ 164.237594][ T6404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.257212][ T6404] Cannot create hsr debugfs directory [ 164.374366][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.011748][ T6075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.028351][ T6075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.051852][ T6075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.060893][ T6075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.417523][ T6111] veth0_vlan: entered promiscuous mode [ 165.655285][ T6111] veth1_vlan: entered promiscuous mode [ 165.948768][ T6111] veth0_macvtap: entered promiscuous mode [ 166.022249][ T6111] veth1_macvtap: entered promiscuous mode [ 166.054413][ T6402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.130592][ T6402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.203831][ T6402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.305806][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.369494][ T6402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.479953][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.759296][ T6111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.698766][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.739889][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.749539][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.758145][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.766734][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.790825][ T6111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.820476][ T6111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.829333][ T6111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.247813][ T6583] wg0 speed is unknown, defaulting to 1000 [ 168.255000][ T6404] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 168.278346][ T6594] loop1: detected capacity change from 0 to 1024 [ 168.343439][ T6594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.382487][ T178] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.511109][ T5949] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.529640][ T6404] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 168.575059][ T6404] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 168.724911][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 168.748491][ T178] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.769511][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 168.817233][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 168.837618][ T6404] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 168.850543][ T5949] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 168.882054][ T6598] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 168.926530][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.958185][ T178] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.988088][ T5949] usb 2-1: config 0 descriptor?? [ 169.224411][ T178] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.236039][ T6592] loop5: detected capacity change from 0 to 131072 [ 169.291081][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.291550][ T6592] F2FS-fs (loop5): invalid crc value [ 169.334324][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.408320][ T6592] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 169.661932][ T90] usb 2-1: USB disconnect, device number 4 [ 170.152005][ T5868] Bluetooth: hci2: command tx timeout [ 170.274591][ T6188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.276323][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.309148][ T6188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.449846][ T6613] loop1: detected capacity change from 0 to 64 [ 172.160688][ T5868] Bluetooth: hci2: command tx timeout [ 172.886740][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.939439][ T178] bridge_slave_1: left allmulticast mode [ 172.962529][ T178] bridge_slave_1: left promiscuous mode [ 173.000688][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.024398][ T178] bridge_slave_0: left allmulticast mode [ 173.030071][ T178] bridge_slave_0: left promiscuous mode [ 173.046388][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.307327][ T6623] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 173.337503][ T6623] netlink: 224 bytes leftover after parsing attributes in process `syz.1.154'. [ 173.449063][ T6624] loop1: detected capacity change from 0 to 16 [ 173.457115][ T6624] cramfs: Unknown parameter './file1' [ 173.854948][ T5162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.875804][ T5162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.889178][ T5162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.903824][ T5162] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.911660][ T5162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.033187][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.052997][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.064461][ T178] bond0 (unregistering): Released all slaves [ 174.105490][ T6402] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.112721][ T6623] tipc: Enabling of bearer rejected, failed to enable media [ 174.276517][ T6402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.287093][ T6402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.608687][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.074966][ T6402] veth0_vlan: entered promiscuous mode [ 175.104420][ T6402] veth1_vlan: entered promiscuous mode [ 175.147984][ T6402] veth0_macvtap: entered promiscuous mode [ 175.163936][ T6402] veth1_macvtap: entered promiscuous mode [ 175.187870][ T5868] Bluetooth: hci2: command tx timeout [ 175.206439][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.250535][ T5949] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.313581][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 175.329454][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.336681][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.345188][ T6636] loop1: detected capacity change from 0 to 131072 [ 175.370356][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.377542][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.386433][ T6636] F2FS-fs (loop1): invalid crc value [ 175.461419][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 175.477614][ T6636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 175.487806][ T5949] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 175.512752][ T5949] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 175.532838][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.541108][ T5949] usb 6-1: Product: syz [ 175.572136][ T5949] usb 6-1: Manufacturer: syz [ 175.577235][ T5949] usb 6-1: SerialNumber: syz [ 175.623382][ T5949] usb 6-1: config 0 descriptor?? [ 175.645339][ T5949] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 175.665087][ T5949] usb 6-1: setting power ON [ 175.673002][ T5949] dvb-usb: bulk message failed: -22 (2/0) [ 175.795523][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.825543][ T5949] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 175.864172][ T6634] FAULT_INJECTION: forcing a failure. [ 175.864172][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 175.936566][ T5949] usb 6-1: media controller created [ 175.984837][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.5.157 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 175.984876][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.984891][ T6634] Call Trace: [ 175.984900][ T6634] [ 175.984912][ T6634] dump_stack_lvl+0x189/0x250 [ 175.984948][ T6634] ? __pfx____ratelimit+0x10/0x10 [ 175.984988][ T6634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.985019][ T6634] ? __pfx__printk+0x10/0x10 [ 175.985061][ T6634] ? __pfx___might_resched+0x10/0x10 [ 175.985091][ T6634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.985128][ T6634] should_fail_ex+0x414/0x560 [ 175.985173][ T6634] should_failslab+0xa8/0x100 [ 175.985209][ T6634] __kmalloc_noprof+0xcb/0x4f0 [ 175.985237][ T6634] ? kfree+0x4d/0x440 [ 175.985262][ T6634] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 175.985294][ T6634] tomoyo_realpath_from_path+0xe3/0x5d0 [ 175.985320][ T6634] ? tomoyo_domain+0xd9/0x130 [ 175.985352][ T6634] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 175.985387][ T6634] tomoyo_path_number_perm+0x1e8/0x5a0 [ 175.985426][ T6634] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.985469][ T6634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.985510][ T6634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.985538][ T6634] ? __lock_acquire+0xab9/0xd20 [ 175.985590][ T6634] ? __fget_files+0x2a/0x420 [ 175.985628][ T6634] ? __fget_files+0x2a/0x420 [ 175.985660][ T6634] ? __fget_files+0x3a0/0x420 [ 175.985693][ T6634] ? __fget_files+0x2a/0x420 [ 175.985733][ T6634] security_file_ioctl+0xcb/0x2d0 [ 175.985769][ T6634] __se_sys_ioctl+0x47/0x170 [ 175.985806][ T6634] do_syscall_64+0xfa/0x3b0 [ 175.985833][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.985857][ T6634] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 175.985888][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.985912][ T6634] RIP: 0033:0x7f0f6c98e929 [ 175.985934][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.985954][ T6634] RSP: 002b:00007f0f6a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.985978][ T6634] RAX: ffffffffffffffda RBX: 00007f0f6cbb5fa0 RCX: 00007f0f6c98e929 [ 175.985996][ T6634] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 175.986012][ T6634] RBP: 00007f0f6a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.986027][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.986041][ T6634] R13: 0000000000000000 R14: 00007f0f6cbb5fa0 R15: 00007fff6afcc1b8 [ 175.986079][ T6634] [ 176.010454][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.035527][ T6634] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.061804][ T5868] Bluetooth: hci4: command tx timeout [ 176.065174][ T6634] dvb-usb: bulk message failed: -22 (3/0) [ 176.200340][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.329076][ T6634] dvb-usb: bulk message failed: -22 (3/0) [ 176.364359][ T5949] usb 6-1: selecting invalid altsetting 6 [ 176.382773][ T5949] usb 6-1: digital interface selection failed (-22) [ 176.406369][ T5949] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 176.500830][ T178] hsr_slave_0: left promiscuous mode [ 176.509338][ T5949] usb 6-1: setting power OFF [ 176.518117][ T178] hsr_slave_1: left promiscuous mode [ 176.523683][ T5949] dvb-usb: bulk message failed: -22 (2/0) [ 176.548114][ T5949] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 176.557123][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.560964][ T5949] (NULL device *): no alternate interface [ 176.576482][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.609432][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.629821][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.652282][ T5949] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 176.671214][ T178] veth1_macvtap: left promiscuous mode [ 176.690827][ T5949] usb 6-1: USB disconnect, device number 4 [ 176.697431][ T178] veth0_macvtap: left promiscuous mode [ 176.711347][ T178] veth1_vlan: left promiscuous mode [ 176.717862][ T178] veth0_vlan: left promiscuous mode [ 177.166239][ T10] IPVS: starting estimator thread 0... [ 177.210603][ T5868] Bluetooth: hci2: command tx timeout [ 177.343306][ T6656] IPVS: using max 24 ests per chain, 57600 per kthread [ 178.026662][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.142979][ T5868] Bluetooth: hci4: command tx timeout [ 178.382994][ T178] team0 (unregistering): Port device team_slave_1 removed [ 178.449632][ T178] team0 (unregistering): Port device team_slave_0 removed [ 179.562275][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.594752][ T6629] wg0 speed is unknown, defaulting to 1000 [ 179.706191][ T6402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.740092][ T6402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.749193][ T6402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.758031][ T6402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.796393][ T6668] syz.1.163: attempt to access beyond end of device [ 179.796393][ T6668] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 179.810185][ T6668] efs: cannot read volume header [ 179.945421][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.121147][ T6678] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.162595][ T5868] Bluetooth: hci4: command tx timeout [ 180.177426][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.197453][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.213397][ T6681] loop5: detected capacity change from 0 to 64 [ 180.213716][ T6583] bridge_slave_0: entered allmulticast mode [ 180.259652][ T6676] "syz.1.165" (6676) uses obsolete ecb(arc4) skcipher [ 180.262317][ T6583] bridge_slave_0: entered promiscuous mode [ 180.282511][ T6681] hfs: get root inode failed [ 180.348697][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.358023][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.365528][ T6583] bridge_slave_1: entered allmulticast mode [ 180.373636][ T6583] bridge_slave_1: entered promiscuous mode [ 181.080999][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.192271][ T6691] loop5: detected capacity change from 0 to 512 [ 181.299084][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.430207][ T6691] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 181.506908][ T6691] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 181.511507][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.611092][ T6691] EXT4-fs (loop5): 1 truncate cleaned up [ 181.778476][ T6691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.871693][ T6691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.959824][ T6691] loop5: detected capacity change from 0 to 512 [ 181.972510][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.979657][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.994791][ T6691] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 182.059852][ T178] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.123454][ T6583] team0: Port device team_slave_0 added [ 182.247439][ T5868] Bluetooth: hci4: command tx timeout [ 182.258570][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.265813][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.475296][ T30] audit: type=1326 audit(182.247:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.5.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f6c98e929 code=0x0 [ 182.698686][ T6583] team0: Port device team_slave_1 added [ 182.802585][ T178] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.825316][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.833630][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.091796][ T178] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.151326][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.158321][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.184239][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.249537][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.262956][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.269947][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.314976][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.429581][ T178] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.540778][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.638035][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.646945][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.664694][ T6629] chnl_net:caif_netlink_parms(): no params data found [ 183.700841][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 183.734166][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 183.749352][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.762120][ T6583] hsr_slave_0: entered promiscuous mode [ 183.768817][ T6583] hsr_slave_1: entered promiscuous mode [ 183.777183][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.789683][ T10] usb 6-1: Product: syz [ 183.795000][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.802805][ T10] usb 6-1: Manufacturer: syz [ 183.807615][ T10] usb 6-1: SerialNumber: syz [ 183.812416][ T6583] Cannot create hsr debugfs directory [ 184.058853][ T10] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 184.097571][ T10] usb 6-1: USB disconnect, device number 5 [ 184.176952][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.359201][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.375479][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.394726][ T6629] bridge_slave_0: entered allmulticast mode [ 184.421160][ T6629] bridge_slave_0: entered promiscuous mode [ 184.429306][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.446515][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.457553][ T6629] bridge_slave_1: entered allmulticast mode [ 184.469056][ T6629] bridge_slave_1: entered promiscuous mode [ 184.698485][ T178] bridge_slave_1: left allmulticast mode [ 184.730080][ T178] bridge_slave_1: left promiscuous mode [ 184.751082][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.768046][ T178] bridge_slave_0: left allmulticast mode [ 184.788617][ T178] bridge_slave_0: left promiscuous mode [ 184.794911][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.092185][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.107277][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.115279][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.123597][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.133460][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.185099][ T6737] loop5: detected capacity change from 0 to 512 [ 186.368734][ T6737] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 186.394681][ T6737] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 186.438626][ T6737] EXT4-fs (loop5): 1 truncate cleaned up [ 186.450074][ T6737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.466917][ T6737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.149480][ T6737] loop5: detected capacity change from 0 to 512 [ 187.177743][ T6737] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 187.357850][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.369593][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.380007][ T178] bond0 (unregistering): Released all slaves [ 187.469972][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.491275][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.674605][ T6629] team0: Port device team_slave_0 added [ 188.205481][ T6629] team0: Port device team_slave_1 added [ 188.250498][ T5868] Bluetooth: hci0: command tx timeout [ 188.330805][ T6734] wg0 speed is unknown, defaulting to 1000 [ 188.403388][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.420960][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.446858][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.482179][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.513650][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.521901][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.547788][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.600870][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.796194][ T30] audit: type=1326 audit(188.777:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd246d8e929 code=0x7ffc0000 [ 188.817685][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.833041][ T30] audit: type=1326 audit(188.777:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd246d8e929 code=0x7ffc0000 [ 188.978640][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.990747][ T5978] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.031822][ T6629] hsr_slave_0: entered promiscuous mode [ 189.048977][ T6629] hsr_slave_1: entered promiscuous mode [ 189.061201][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.079045][ T6629] Cannot create hsr debugfs directory [ 189.143401][ T178] hsr_slave_0: left promiscuous mode [ 189.150236][ T178] hsr_slave_1: left promiscuous mode [ 189.169810][ T5978] usb 6-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 189.169914][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.194660][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.200794][ T5978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.216900][ T5978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.228046][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.238577][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.246678][ T5978] usb 6-1: Product: ㌇殡號됧㤾廔惀뷌暽᫑控᧜鼧蚍鴤퇗㎮덽殅坼쬥蹫蕧鄘퉷䜐缆ዡ鰅骝촯ﶺᰠǛ틐윲ꅈ黸ﺗ鿿◿☤Ꮦſt砀䒌l﹞ⅻ莇ㆽ눾풀ꌠ蟒娋ൊ濠昗女ꉉꖨ醤熡褟ꦟ䦖פּ䠐ʣ锪ퟻ団魅钁⊆凡庮妈烯唽葬 [ 189.252613][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.284267][ T5978] usb 6-1: Manufacturer: 쪈蹍烿㣪穂蕽弧ढ़梛겅㈣驄䉩瘉砞꩑䇒鯡绦ᩌ륒歴쫟韙⪰ꥅ荀ᙑ০⬳⊄蜚슧뀋ힵ쓒Ὴ毐ṥꅦꬵ桚멵䂯杙劣躛磺醽蔥뮿늋樅㳿꿑病⚿ቷꛧ錟絹逻䧁᭡﬜燈ᵡ傿쏭瓄㬨᧗㸾쟹껏︛帧窓旄괬맓镅憖終椟믪쬗䐘뎬ᔓ嗳ᜡ [ 189.319021][ T5978] usb 6-1: SerialNumber: ж [ 189.338483][ T178] veth1_macvtap: left promiscuous mode [ 189.352909][ T178] veth0_macvtap: left promiscuous mode [ 189.358590][ T178] veth1_vlan: left promiscuous mode [ 189.364772][ T178] veth0_vlan: left promiscuous mode [ 189.561538][ T5978] usb 6-1: 0:2 : does not exist [ 189.581922][ T6768] loop1: detected capacity change from 0 to 32768 [ 189.595176][ T6768] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.189 (6768) [ 189.619280][ T5978] usb 6-1: USB disconnect, device number 6 [ 189.635348][ T6768] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 189.648628][ T6768] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 189.659061][ T6768] BTRFS info (device loop1): using free-space-tree [ 189.712395][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.918425][ T30] audit: type=1800 audit(189.897:13): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="memory.events" dev="loop1" ino=264 res=0 errno=0 [ 190.007566][ T30] audit: type=1804 audit(189.897:14): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.189" name="/newroot/68/bus/memory.events" dev="loop1" ino=264 res=1 errno=0 [ 190.035636][ T30] audit: type=1800 audit(189.987:15): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 190.309673][ T5852] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 190.329118][ T5868] Bluetooth: hci0: command tx timeout [ 190.679291][ T178] team0 (unregistering): Port device team_slave_1 removed [ 190.729498][ T178] team0 (unregistering): Port device team_slave_0 removed [ 192.208542][ T6800] loop1: detected capacity change from 0 to 64 [ 192.237927][ T6800] hfs: get root inode failed [ 192.401350][ T5868] Bluetooth: hci0: command tx timeout [ 192.641999][ T30] audit: type=1326 audit(192.627:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd246d8e929 code=0x0 [ 193.535261][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.546829][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.490923][ T5868] Bluetooth: hci0: command tx timeout [ 195.225527][ T6734] chnl_net:caif_netlink_parms(): no params data found [ 195.406519][ T6828] loop1: detected capacity change from 0 to 16 [ 195.456819][ T6828] erofs (device loop1): mounted with root inode @ nid 36. [ 195.645433][ T6404] veth0_vlan: entered promiscuous mode [ 195.747998][ T178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.798880][ T6404] veth1_vlan: entered promiscuous mode [ 195.808207][ T6826] loop5: detected capacity change from 0 to 32768 [ 195.878575][ T6826] jbd2_journal_init_inode: Cannot locate journal superblock [ 195.891344][ T6826] (syz.5.198,6826,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 195.902808][ T6826] (syz.5.198,6826,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal! [ 195.913513][ T6826] (syz.5.198,6826,0):ocfs2_check_volume:2432 ERROR: status = -22 [ 195.922246][ T6826] (syz.5.198,6826,0):ocfs2_mount_volume:1764 ERROR: status = -22 [ 195.940708][ T6826] (syz.5.198,6826,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 195.956332][ T178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.996456][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.009432][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.017757][ T6734] bridge_slave_0: entered allmulticast mode [ 196.028300][ T6734] bridge_slave_0: entered promiscuous mode [ 196.078084][ T178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.096688][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.105096][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.112997][ T6734] bridge_slave_1: entered allmulticast mode [ 196.121314][ T6734] bridge_slave_1: entered promiscuous mode [ 196.157863][ T6583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.199079][ T178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.220791][ T5921] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 196.367158][ T6583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.374900][ T5921] usb 6-1: device descriptor read/64, error -71 [ 196.426694][ T6835] loop1: detected capacity change from 0 to 256 [ 196.441968][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.460735][ T6583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.487968][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.499221][ T6835] FAULT_INJECTION: forcing a failure. [ 196.499221][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 196.532364][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.1.200 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 196.532399][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.532414][ T6835] Call Trace: [ 196.532423][ T6835] [ 196.532434][ T6835] dump_stack_lvl+0x189/0x250 [ 196.532469][ T6835] ? __pfx____ratelimit+0x10/0x10 [ 196.532510][ T6835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.532542][ T6835] ? __pfx__printk+0x10/0x10 [ 196.532585][ T6835] ? __pfx___might_resched+0x10/0x10 [ 196.532615][ T6835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.532653][ T6835] should_fail_ex+0x414/0x560 [ 196.532697][ T6835] should_failslab+0xa8/0x100 [ 196.532732][ T6835] __kmalloc_noprof+0xcb/0x4f0 [ 196.532760][ T6835] ? kfree+0x4d/0x440 [ 196.532793][ T6835] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 196.532824][ T6835] tomoyo_realpath_from_path+0xe3/0x5d0 [ 196.532852][ T6835] ? tomoyo_domain+0xd9/0x130 [ 196.532888][ T6835] tomoyo_path_perm+0x213/0x4b0 [ 196.532920][ T6835] ? leave_rcu+0xef/0x160 [ 196.532954][ T6835] ? tomoyo_path_perm+0x1e3/0x4b0 [ 196.532987][ T6835] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 196.533031][ T6835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533058][ T6835] ? msdos_format_name+0xc57/0xd90 [ 196.533129][ T6835] ? __pfx_current_check_access_path+0x10/0x10 [ 196.533178][ T6835] tomoyo_path_rmdir+0xa2/0xe0 [ 196.533205][ T6835] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 196.533241][ T6835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533275][ T6835] security_path_rmdir+0x167/0x360 [ 196.533305][ T6835] do_rmdir+0x219/0x630 [ 196.533337][ T6835] ? __pfx_do_rmdir+0x10/0x10 [ 196.533373][ T6835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533401][ T6835] ? getname_flags+0x1e5/0x540 [ 196.533443][ T6835] __x64_sys_rmdir+0x47/0x50 [ 196.533470][ T6835] do_syscall_64+0xfa/0x3b0 [ 196.533493][ T6835] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.533533][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.533556][ T6835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533585][ T6835] ? exc_page_fault+0x9f/0xf0 [ 196.533625][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.533650][ T6835] RIP: 0033:0x7fd246d8e929 [ 196.533672][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.533693][ T6835] RSP: 002b:00007fd247b80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 196.533718][ T6835] RAX: ffffffffffffffda RBX: 00007fd246fb5fa0 RCX: 00007fd246d8e929 [ 196.533736][ T6835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 196.533752][ T6835] RBP: 00007fd247b80090 R08: 0000000000000000 R09: 0000000000000000 [ 196.533774][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.533789][ T6835] R13: 0000000000000000 R14: 00007fd246fb5fa0 R15: 00007fffc3716bf8 [ 196.533828][ T6835] [ 196.533837][ T6835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.848654][ T6404] veth0_macvtap: entered promiscuous mode [ 196.891326][ T6583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.892121][ T5921] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 196.992122][ T6734] team0: Port device team_slave_0 added [ 197.041656][ T5921] usb 6-1: device descriptor read/64, error -71 [ 197.086923][ T6734] team0: Port device team_slave_1 added [ 197.153065][ T5921] usb usb6-port1: attempt power cycle [ 197.162291][ T6404] veth1_macvtap: entered promiscuous mode [ 197.222423][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.229502][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.261660][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.300111][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.321444][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.350278][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.392479][ T6837] loop1: detected capacity change from 0 to 32768 [ 197.398652][ T178] bridge_slave_1: left allmulticast mode [ 197.405888][ T178] bridge_slave_1: left promiscuous mode [ 197.413522][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.419715][ T6837] XFS (loop1): Invalid device [./bus], error=-2 [ 197.448128][ T178] bridge_slave_0: left allmulticast mode [ 197.454569][ T178] bridge_slave_0: left promiscuous mode [ 197.461014][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.537452][ T5921] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 197.571396][ T5921] usb 6-1: device descriptor read/8, error -71 [ 198.034540][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.049304][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.067337][ T178] bond0 (unregistering): Released all slaves [ 199.537953][ T6845] loop1: detected capacity change from 0 to 262144 [ 199.564655][ T6845] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.202 (6845) [ 199.581458][ T6845] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 199.595057][ T6845] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 199.597247][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.604720][ T6845] BTRFS info (device loop1): using free-space-tree [ 199.679929][ T6734] hsr_slave_0: entered promiscuous mode [ 199.704320][ T6734] hsr_slave_1: entered promiscuous mode [ 199.713903][ T6734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.721711][ T6734] Cannot create hsr debugfs directory [ 199.756714][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.031099][ T6404] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.040825][ T6404] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.058989][ T6404] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.075182][ T6404] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.169280][ T5852] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 200.250472][ T5921] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 200.285887][ T5921] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.310191][ T178] hsr_slave_0: left promiscuous mode [ 200.321732][ T5921] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.338466][ T178] hsr_slave_1: left promiscuous mode [ 200.350852][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.358460][ T5921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.367609][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.376119][ T5921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 200.387583][ T5921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 200.402300][ T5921] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.420525][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.440989][ T5921] usb 6-1: Product: syz [ 200.445195][ T5921] usb 6-1: Manufacturer: syz [ 200.479554][ T5921] cdc_wdm 6-1:1.0: skipping garbage [ 200.496755][ T5921] cdc_wdm 6-1:1.0: skipping garbage [ 200.511512][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.548629][ T5921] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 200.554869][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.600613][ T5921] cdc_wdm 6-1:1.0: Unknown control protocol [ 200.697538][ T5921] usb 6-1: USB disconnect, device number 10 [ 200.779452][ T178] veth1_macvtap: left promiscuous mode [ 200.809178][ T178] veth0_macvtap: left promiscuous mode [ 200.819689][ T178] veth1_vlan: left promiscuous mode [ 200.838627][ T178] veth0_vlan: left promiscuous mode [ 201.283427][ T30] audit: type=1326 audit(201.257:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd246d8e929 code=0x0 [ 202.050634][ T5978] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 202.093170][ T178] team0 (unregistering): Port device team_slave_1 removed [ 202.132572][ T178] team0 (unregistering): Port device team_slave_0 removed [ 202.217605][ T5978] usb 6-1: Using ep0 maxpacket: 16 [ 202.230342][ T5978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.256564][ T5978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.273631][ T5978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.296387][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.309925][ T5978] usb 6-1: Product: syz [ 202.314672][ T5978] usb 6-1: Manufacturer: syz [ 202.332065][ T5978] usb 6-1: SerialNumber: syz [ 202.563733][ T5978] usb 6-1: 0:2 : does not exist [ 202.576507][ T5978] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 202.663549][ T5978] usb 6-1: USB disconnect, device number 11 [ 202.759790][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.797679][ T6629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.928636][ T6629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.972634][ T6629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.998799][ T6629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.415189][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.790113][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.945466][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.952716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.101119][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.108924][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.235858][ T6898] wg0 speed is unknown, defaulting to 1000 [ 205.374373][ T5162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.384440][ T5162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.393721][ T5162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.402309][ T5162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.410023][ T5162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.500287][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.618928][ T1150] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.738285][ T1150] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.777008][ T6901] wg0 speed is unknown, defaulting to 1000 [ 205.793138][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.855547][ T6896] loop5: detected capacity change from 0 to 40427 [ 205.875685][ T6896] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 205.895406][ T6896] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 205.934709][ T6896] F2FS-fs (loop5): invalid crc value [ 205.957410][ T6734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.016091][ T1150] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.080139][ T6734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.111859][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.119029][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.178056][ T6896] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 206.201764][ T6896] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.233343][ T6734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.284682][ T6896] syz.5.211: attempt to access beyond end of device [ 206.284682][ T6896] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.308493][ T1150] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.356743][ T6734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.424405][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.431635][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.808903][ T6919] pim6reg: entered allmulticast mode [ 206.844364][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.543087][ T5868] Bluetooth: hci3: command tx timeout [ 208.030330][ T1150] bridge_slave_1: left allmulticast mode [ 208.037282][ T1150] bridge_slave_1: left promiscuous mode [ 208.054866][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.070252][ T1150] bridge_slave_0: left allmulticast mode [ 208.081189][ T1150] bridge_slave_0: left promiscuous mode [ 208.087111][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.629358][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.675628][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.728665][ T1150] bond0 (unregistering): Released all slaves [ 208.838963][ T6901] chnl_net:caif_netlink_parms(): no params data found [ 209.060480][ T6025] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 209.253399][ T6025] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.270399][ T6025] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.310567][ T6025] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.334501][ T6025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 209.370890][ T6025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 209.403524][ T6025] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.413375][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.435825][ T1150] hsr_slave_0: left promiscuous mode [ 209.450512][ T6025] usb 6-1: Product: syz [ 209.454703][ T6025] usb 6-1: Manufacturer: syz [ 209.470670][ T1150] hsr_slave_1: left promiscuous mode [ 209.486527][ T6025] cdc_wdm 6-1:1.0: skipping garbage [ 209.487086][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.500441][ T6025] cdc_wdm 6-1:1.0: skipping garbage [ 209.511918][ T6025] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 209.530965][ T6025] cdc_wdm 6-1:1.0: Unknown control protocol [ 209.531800][ T6946] loop1: detected capacity change from 0 to 64 [ 209.558837][ T30] audit: type=1800 audit(209.537:18): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 209.570701][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.596651][ T5928] IPVS: starting estimator thread 0... [ 209.611711][ T5868] Bluetooth: hci3: command tx timeout [ 209.674787][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.749886][ T5928] usb 6-1: USB disconnect, device number 12 [ 209.826888][ T6948] syz.1.217: attempt to access beyond end of device [ 209.826888][ T6948] loop1: rw=34817, sector=18, nr_sectors = 400 limit=64 [ 209.850548][ T6947] IPVS: using max 25 ests per chain, 60000 per kthread [ 209.860338][ T6948] syz.1.217: attempt to access beyond end of device [ 209.860338][ T6948] loop1: rw=34817, sector=420, nr_sectors = 20 limit=64 [ 209.886594][ T6948] [ 209.888943][ T6948] ====================================================== [ 209.895960][ T6948] WARNING: possible circular locking dependency detected [ 209.902981][ T6948] 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 Not tainted [ 209.910079][ T6948] ------------------------------------------------------ [ 209.917262][ T6948] syz.1.217/6948 is trying to acquire lock: [ 209.923148][ T6948] ffff8880788080f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 209.933961][ T6948] [ 209.933961][ T6948] but task is already holding lock: [ 209.941318][ T6948] ffff888078fac0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0 [ 209.950856][ T6948] [ 209.950856][ T6948] which lock already depends on the new lock. [ 209.950856][ T6948] [ 209.961352][ T6948] [ 209.961352][ T6948] the existing dependency chain (in reverse order) is: [ 209.970374][ T6948] [ 209.970374][ T6948] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 209.978485][ T6948] lock_acquire+0x120/0x360 [ 209.983512][ T6948] __mutex_lock+0x182/0xe80 [ 209.988544][ T6948] hfs_find_init+0x165/0x1e0 [ 209.993666][ T6948] hfs_extend_file+0x2ee/0x1230 [ 209.999036][ T6948] hfs_bmap_reserve+0x107/0x430 [ 210.004402][ T6948] hfs_cat_create+0x1b3/0x640 [ 210.009595][ T6948] hfs_mkdir+0x6c/0xe0 [ 210.014179][ T6948] vfs_mkdir+0x306/0x510 [ 210.018940][ T6948] do_mkdirat+0x247/0x590 [ 210.023791][ T6948] __x64_sys_mkdirat+0x87/0xa0 [ 210.029073][ T6948] do_syscall_64+0xfa/0x3b0 [ 210.034180][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.040590][ T6948] [ 210.040590][ T6948] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 210.049807][ T6948] validate_chain+0xb9b/0x2140 [ 210.055094][ T6948] __lock_acquire+0xab9/0xd20 [ 210.060289][ T6948] lock_acquire+0x120/0x360 [ 210.065306][ T6948] __mutex_lock+0x182/0xe80 [ 210.070325][ T6948] hfs_extend_file+0xda/0x1230 [ 210.075611][ T6948] hfs_bmap_reserve+0x107/0x430 [ 210.080978][ T6948] __hfs_ext_write_extent+0x1fa/0x470 [ 210.086873][ T6948] __hfs_ext_cache_extent+0x6b/0x9b0 [ 210.092678][ T6948] hfs_extend_file+0x316/0x1230 [ 210.098045][ T6948] hfs_get_block+0x3d7/0xbd0 [ 210.103150][ T6948] __blockdev_direct_IO+0x16dd/0x33d0 [ 210.109039][ T6948] hfs_direct_IO+0x119/0x220 [ 210.114172][ T6948] generic_file_direct_write+0x1db/0x3e0 [ 210.120318][ T6948] __generic_file_write_iter+0x11d/0x230 [ 210.126468][ T6948] generic_file_write_iter+0x10f/0x540 [ 210.132443][ T6948] do_iter_readv_writev+0x56e/0x7f0 [ 210.138163][ T6948] vfs_writev+0x31a/0x960 [ 210.143021][ T6948] do_writev+0x14d/0x2d0 [ 210.147815][ T6948] do_syscall_64+0xfa/0x3b0 [ 210.152841][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.159254][ T6948] [ 210.159254][ T6948] other info that might help us debug this: [ 210.159254][ T6948] [ 210.169491][ T6948] Possible unsafe locking scenario: [ 210.169491][ T6948] [ 210.176933][ T6948] CPU0 CPU1 [ 210.182293][ T6948] ---- ---- [ 210.187651][ T6948] lock(&tree->tree_lock#2/1); [ 210.192524][ T6948] lock(&HFS_I(tree->inode)->extents_lock); [ 210.201023][ T6948] lock(&tree->tree_lock#2/1); [ 210.208416][ T6948] lock(&HFS_I(tree->inode)->extents_lock); [ 210.214397][ T6948] [ 210.214397][ T6948] *** DEADLOCK *** [ 210.214397][ T6948] [ 210.222531][ T6948] 5 locks held by syz.1.217/6948: [ 210.227543][ T6948] #0: ffff8880314682b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 210.236631][ T6948] #1: ffff888035068428 (sb_writers#21){.+.+}-{0:0}, at: vfs_writev+0x288/0x960 [ 210.245728][ T6948] #2: ffff888078809620 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: generic_file_write_iter+0xe3/0x540 [ 210.257082][ T6948] #3: ffff888078809478 (&HFS_I(inode)->extents_lock#2){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 210.267995][ T6948] #4: ffff888078fac0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0 [ 210.277979][ T6948] [ 210.277979][ T6948] stack backtrace: [ 210.283866][ T6948] CPU: 0 UID: 0 PID: 6948 Comm: syz.1.217 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 210.283895][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.283910][ T6948] Call Trace: [ 210.283920][ T6948] [ 210.283931][ T6948] dump_stack_lvl+0x189/0x250 [ 210.283967][ T6948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.283994][ T6948] ? __pfx__printk+0x10/0x10 [ 210.284027][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 210.284055][ T6948] ? print_lock_name+0xde/0x100 [ 210.284088][ T6948] print_circular_bug+0x2ee/0x310 [ 210.284121][ T6948] check_noncircular+0x134/0x160 [ 210.284154][ T6948] validate_chain+0xb9b/0x2140 [ 210.284183][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284211][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284239][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284265][ T6948] ? lock_release+0x4b/0x3e0 [ 210.284286][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284312][ T6948] ? lock_release+0x4b/0x3e0 [ 210.284333][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284360][ T6948] ? look_up_lock_class+0x74/0x170 [ 210.284397][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284423][ T6948] ? register_lock_class+0x51/0x320 [ 210.284449][ T6948] __lock_acquire+0xab9/0xd20 [ 210.284476][ T6948] ? hfs_extend_file+0xda/0x1230 [ 210.284499][ T6948] lock_acquire+0x120/0x360 [ 210.284521][ T6948] ? hfs_extend_file+0xda/0x1230 [ 210.284553][ T6948] __mutex_lock+0x182/0xe80 [ 210.284573][ T6948] ? hfs_extend_file+0xda/0x1230 [ 210.284596][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284623][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284650][ T6948] ? check_noncircular+0xe0/0x160 [ 210.284681][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284707][ T6948] ? hfs_extend_file+0xda/0x1230 [ 210.284730][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284759][ T6948] ? __pfx___mutex_lock+0x10/0x10 [ 210.284792][ T6948] ? irqentry_exit+0x74/0x90 [ 210.284811][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.284837][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.284874][ T6948] hfs_extend_file+0xda/0x1230 [ 210.284898][ T6948] ? hfs_find_init+0x165/0x1e0 [ 210.284933][ T6948] ? __pfx_hfs_extend_file+0x10/0x10 [ 210.284956][ T6948] ? __mutex_trylock_common+0x153/0x260 [ 210.284989][ T6948] ? __pfx___mutex_trylock_common+0x10/0x10 [ 210.285021][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285048][ T6948] ? rcu_is_watching+0x15/0xb0 [ 210.285075][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285101][ T6948] ? trace_contention_end+0x39/0x120 [ 210.285131][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285158][ T6948] ? __mutex_lock+0x330/0xe80 [ 210.285178][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285205][ T6948] ? hfs_brec_find+0x18e/0x500 [ 210.285240][ T6948] hfs_bmap_reserve+0x107/0x430 [ 210.285270][ T6948] __hfs_ext_write_extent+0x1fa/0x470 [ 210.285297][ T6948] __hfs_ext_cache_extent+0x6b/0x9b0 [ 210.285323][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285349][ T6948] ? hfs_find_init+0x165/0x1e0 [ 210.285382][ T6948] hfs_extend_file+0x316/0x1230 [ 210.285411][ T6948] ? __pfx_hfs_extend_file+0x10/0x10 [ 210.285435][ T6948] ? __pfx___schedule+0x10/0x10 [ 210.285467][ T6948] ? irqentry_exit+0x74/0x90 [ 210.285486][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285512][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.285554][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285581][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285607][ T6948] ? trace_irq_disable+0x37/0x110 [ 210.285644][ T6948] hfs_get_block+0x3d7/0xbd0 [ 210.285671][ T6948] ? irqentry_exit+0x74/0x90 [ 210.285692][ T6948] ? __pfx_hfs_get_block+0x10/0x10 [ 210.285715][ T6948] ? __pfx_hfs_get_block+0x10/0x10 [ 210.285739][ T6948] ? __pfx_hfs_get_block+0x10/0x10 [ 210.285766][ T6948] ? __pfx_hfs_get_block+0x10/0x10 [ 210.285797][ T6948] __blockdev_direct_IO+0x16dd/0x33d0 [ 210.285843][ T6948] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 210.285873][ T6948] ? __pfx_hfs_get_block+0x10/0x10 [ 210.285899][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285926][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.285961][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.285998][ T6948] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 210.286032][ T6948] ? preempt_schedule_common+0x83/0xd0 [ 210.286066][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286097][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.286133][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286165][ T6948] hfs_direct_IO+0x119/0x220 [ 210.286192][ T6948] generic_file_direct_write+0x1db/0x3e0 [ 210.286215][ T6948] ? file_update_time+0x416/0x490 [ 210.286238][ T6948] __generic_file_write_iter+0x11d/0x230 [ 210.286259][ T6948] ? generic_file_write_iter+0xfb/0x540 [ 210.286282][ T6948] generic_file_write_iter+0x10f/0x540 [ 210.286305][ T6948] ? __pfx_generic_file_write_iter+0x10/0x10 [ 210.286327][ T6948] ? preempt_schedule_irq+0xb5/0x150 [ 210.286364][ T6948] ? __pfx___schedule+0x10/0x10 [ 210.286396][ T6948] ? irqentry_exit+0x74/0x90 [ 210.286414][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286441][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.286476][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286508][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286535][ T6948] ? rcu_is_watching+0x15/0xb0 [ 210.286562][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286588][ T6948] ? trace_irq_disable+0x37/0x110 [ 210.286622][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286654][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286685][ T6948] do_iter_readv_writev+0x56e/0x7f0 [ 210.286715][ T6948] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 210.286743][ T6948] ? rcu_read_lock_any_held+0xb3/0x120 [ 210.286775][ T6948] ? __sanitizer_cov_trace_switch+0x7/0x130 [ 210.286818][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286848][ T6948] vfs_writev+0x31a/0x960 [ 210.286886][ T6948] ? __pfx_vfs_writev+0x10/0x10 [ 210.286917][ T6948] ? irqentry_exit+0x74/0x90 [ 210.286946][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.286974][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.287001][ T6948] ? __fget_files+0x3a0/0x420 [ 210.287031][ T6948] ? __fget_files+0x2a/0x420 [ 210.287063][ T6948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.287092][ T6948] do_writev+0x14d/0x2d0 [ 210.287126][ T6948] ? __pfx_do_writev+0x10/0x10 [ 210.287165][ T6948] do_syscall_64+0xfa/0x3b0 [ 210.287189][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.287211][ T6948] ? asm_sysvec_call_function_single+0x1a/0x20 [ 210.287237][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.287260][ T6948] RIP: 0033:0x7fd246d8e929 [ 210.287279][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.287299][ T6948] RSP: 002b:00007fd247b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 210.287322][ T6948] RAX: ffffffffffffffda RBX: 00007fd246fb6080 RCX: 00007fd246d8e929 [ 210.287339][ T6948] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 210.287354][ T6948] RBP: 00007fd246e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 210.287368][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.287382][ T6948] R13: 0000000000000000 R14: 00007fd246fb6080 R15: 00007fffc3716bf8 [ 210.287408][ T6948] [ 210.287555][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.299359][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.376576][ T6948] syz.1.217: attempt to access beyond end of device [ 210.376576][ T6948] loop1: rw=34817, sector=441, nr_sectors = 64 limit=64 [ 211.250236][ T1150] veth1_macvtap: left promiscuous mode [ 211.290636][ T1150] veth0_macvtap: left promiscuous mode [ 211.296297][ T1150] veth1_vlan: left promiscuous mode [ 211.340576][ T1150] veth0_vlan: left promiscuous mode [ 211.607767][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 211.625503][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 211.694096][ T5868] Bluetooth: hci3: command tx timeout [ 212.319610][ T1150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.375123][ T1150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.421504][ T1150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.495255][ T1150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.583908][ T1150] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.645717][ T1150] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.687072][ T1150] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.745650][ T1150] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.804915][ T5928] wg0 speed is unknown, defaulting to 1000 [ 212.810896][ T5928] syz1: Port: 1 Link DOWN [ 212.842753][ T1150] bridge_slave_1: left allmulticast mode [ 212.848463][ T1150] bridge_slave_1: left promiscuous mode [ 212.854485][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.863491][ T1150] bridge_slave_0: left allmulticast mode [ 212.869128][ T1150] bridge_slave_0: left promiscuous mode [ 212.875219][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.885181][ T1150] bridge_slave_1: left allmulticast mode [ 212.891271][ T1150] bridge_slave_1: left promiscuous mode [ 212.896914][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.905800][ T1150] bridge_slave_0: left allmulticast mode [ 212.911668][ T1150] bridge_slave_0: left promiscuous mode [ 212.917313][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.045678][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.055850][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.065557][ T1150] bond0 (unregistering): Released all slaves [ 213.145163][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.156849][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.166464][ T1150] bond0 (unregistering): Released all slaves [ 213.218012][ T1150] tipc: Left network mode [ 213.479425][ T1150] hsr_slave_0: left promiscuous mode [ 213.486649][ T1150] hsr_slave_1: left promiscuous mode [ 213.492650][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.500058][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.508644][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.516056][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.527021][ T1150] hsr_slave_0: left promiscuous mode [ 213.532905][ T1150] hsr_slave_1: left promiscuous mode [ 213.538558][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.546235][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.554501][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.561960][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.575957][ T1150] veth1_macvtap: left promiscuous mode [ 213.581935][ T1150] veth0_macvtap: left promiscuous mode [ 213.587465][ T1150] veth1_vlan: left promiscuous mode [ 213.592824][ T1150] veth0_vlan: left promiscuous mode [ 213.598903][ T1150] veth1_macvtap: left promiscuous mode [ 213.604660][ T1150] veth0_macvtap: left promiscuous mode [ 213.610195][ T1150] veth1_vlan: left promiscuous mode [ 213.615505][ T1150] veth0_vlan: left promiscuous mode [ 213.717105][ T1150] pim6reg (unregistering): left allmulticast mode [ 213.823944][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 213.845289][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 214.037278][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 214.049332][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 214.640088][ T1150] IPVS: stop unused estimator thread 0... [ 214.647925][ T1150] IPVS: stop unused estimator thread 0... [ 215.253610][ T6231] bridge_slave_1: left allmulticast mode [ 215.259293][ T6231] bridge_slave_1: left promiscuous mode [ 215.265310][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.277488][ T6231] bridge_slave_0: left allmulticast mode [ 215.284614][ T6231] bridge_slave_0: left promiscuous mode [ 215.290254][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.299664][ T6231] bridge_slave_1: left allmulticast mode [ 215.305341][ T6231] bridge_slave_1: left promiscuous mode [ 215.311644][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.319917][ T6231] bridge_slave_0: left allmulticast mode [ 215.325868][ T6231] bridge_slave_0: left promiscuous mode [ 215.331895][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.341292][ T6231] bridge_slave_1: left allmulticast mode [ 215.346935][ T6231] bridge_slave_1: left promiscuous mode [ 215.352680][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.361835][ T6231] bridge_slave_0: left allmulticast mode [ 215.367532][ T6231] bridge_slave_0: left promiscuous mode [ 215.373582][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.507768][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.517927][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.528065][ T6231] bond0 (unregistering): Released all slaves [ 215.595956][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.607139][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.618053][ T6231] bond0 (unregistering): Released all slaves [ 215.689687][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.699728][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.709786][ T6231] bond0 (unregistering): Released all slaves [ 215.787302][ T6231] bond0 (unregistering): Released all slaves [ 215.896279][ T6231] hsr_slave_0: left promiscuous mode [ 215.902116][ T6231] hsr_slave_1: left promiscuous mode [ 215.907755][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.915821][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.926202][ T6231] hsr_slave_0: left promiscuous mode [ 215.932371][ T6231] hsr_slave_1: left promiscuous mode [ 215.938174][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.945918][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.956863][ T6231] hsr_slave_0: left promiscuous mode [ 215.962687][ T6231] hsr_slave_1: left promiscuous mode [ 215.968377][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.976457][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.114170][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 216.136201][ T6231] team0 (unregistering): Port device team_slave_0 removed [ 216.275137][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 216.297625][ T6231] team0 (unregistering): Port device team_slave_0 removed [ 216.465399][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 216.481825][ T6231] team0 (unregistering): Port device team_slave_0 removed