last executing test programs: 5m36.981510422s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r1 = socket(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f000001f7c0)={&(0x7f000001f640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0xa, 0x3}, {0x4, 0x3}]}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f000001f6c0)=""/215, 0x41, 0xd7, 0x1, 0xf907}, 0x28) connect$can_j1939(r1, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xcc, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="e4e24e00", 0x10) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r8, r7}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crc32c\x00'}}) 5m19.48487938s ago: executing program 32 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r1 = socket(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f000001f7c0)={&(0x7f000001f640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0xa, 0x3}, {0x4, 0x3}]}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f000001f6c0)=""/215, 0x41, 0xd7, 0x1, 0xf907}, 0x28) connect$can_j1939(r1, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xcc, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="e4e24e00", 0x10) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r8, r7}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crc32c\x00'}}) 3m41.472227941s ago: executing program 4 (id=255): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0}, 0x20) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x6) r3 = fsmount(r0, 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x69a, &(0x7f00000000c0)={0x0, 0x7a26, 0x1, 0x0, 0x40024c}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000400)='rw\x00', 0x0, 0x0) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x3e, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xf, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 3m38.848875648s ago: executing program 4 (id=259): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x6c, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x6, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x4, 0xd61]}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001280)={'dummy0\x00', &(0x7f0000001240)=@ethtool_cmd={0x48, 0x8001, 0x7fff, 0x8e00, 0x4, 0x0, 0x8, 0xa, 0x7, 0x4, 0x5, 0x78c8, 0xfff7, 0x80, 0xb, 0x1ff, [0x0, 0x6]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x0, 0x80, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="d9", 0x1}], 0x1}}], 0x1, 0x41) shutdown(r1, 0x1) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000340)={0x3, @capture={0x0, 0x0, {0x3, 0x5}, 0xffff, 0x400}}) sendmsg$inet_sctp(r1, &(0x7f0000001280)={0x0, 0x8400, &(0x7f0000000040)=[{&(0x7f0000000140)="9a", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="30000000000000008400000001000000ff4309004100000005000080ffffffff080000001607000002000000", @ANYRES32=0x0, @ANYBLOB=' '], 0x50, 0x4000}, 0x24000090) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8804, &(0x7f0000000500)={0x11, 0xc7, 0x0, 0x1, 0x0, 0x6, @random="5aa5cf8156fc"}, 0x14) 3m36.992487273s ago: executing program 4 (id=264): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4001af84, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000080)={0x18, 0x0, 0x467d, 0x2}) 3m34.872144983s ago: executing program 4 (id=268): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e13", @ANYRES16=r1], 0x24) 3m32.112692459s ago: executing program 4 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000010000007e00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0xca, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000027c0), 0x0, 0x3, r0}, 0x38) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='fd/3\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x143042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='v7\x00', 0x80000, &(0x7f00000003c0)='bfs\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r4 = getpgrp(r3) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000c00)={{r2}, "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"}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x9, &(0x7f0000000140)=""/222) syz_pidfd_open(r4, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/unix\x00') readlinkat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) 3m30.563106822s ago: executing program 4 (id=279): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, &(0x7f0000000040)={@align=0x63, {0x3, 0x92b, 0x101, 0x4}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0xb}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe76, 0x0, r0}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fchmod(r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10) 1m49.885706419s ago: executing program 5 (id=451): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = socket$alg(0x26, 0x5, 0x0) fadvise64(r0, 0xe0, 0x6, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1m45.502934913s ago: executing program 5 (id=456): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@empty, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa00007, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="5ba0a459abecadcf2a5afa3e025cecb6e8fb6a6578dbf63fdcc53146eac7b5b5210b0e752b2f8a235a053c4e9caffd578671ab7ee713af68a922c5e821cd59bc1825c315a442de4cfa5c95c937a45b3f6b8e3c837ffbc8935bb7c8554b3224634aad3a27e21996d086962f745d3fc8d85b2a4902e9ef7784426a7fa3792bbed913afdba991a6388f55de1efdeb6a8c91d76852cd0375206ae8aaeea1fcf1c0f49da873fe04582d831556814cd2204f34b1b178de"], 0x1, 0x24d, &(0x7f00000006c0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='./bus\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000000)=0xfffff800, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1m43.307307766s ago: executing program 5 (id=460): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x25dfdbfd, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x2c}}, 0x24080) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, &(0x7f0000000040)={@align=0x63, {0x3, 0x92b, 0x101, 0x4}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0xb}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe76, 0x0, r0}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fchmod(r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10) 1m38.12854474s ago: executing program 5 (id=463): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xe, {0x101, 0x2, 0x5, 0xd07}}) 1m34.887243626s ago: executing program 34 (id=463): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xe, {0x101, 0x2, 0x5, 0xd07}}) 59.957950587s ago: executing program 0 (id=515): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) 58.550224036s ago: executing program 0 (id=517): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) 57.59158884s ago: executing program 0 (id=518): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x3c, '\x00', @st={0x4, [{0x0, @svalue=0x6}, {0x2, @svalue=0x3}, {0x3, @uvalue=0x3}, {0x1, @svalue=0x4f}]}, 0xe6}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000000001,novrs,partition=00000000000000000001,unhide,umask=00000000000000000000722,gid=', @ANYRESDEC=0xee00, @ANYBLOB="02000000b364c580e4cd74b05a53e62a5d5fa253d2abb1af86c2c95782638f9849394a3a08eaf84560d9b8a5e4c16941639113cccf1c2d73e47d07a0f6fa292ab59c78173e1ccd717d0771f78f6dbda19dd3d4d617ae6f12c2a9c4"], 0x1, 0xc47, &(0x7f0000002680)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d63703836322c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d77696e6e742c696f636861727365743d69736f383835392d392c636f6465706167653d3835302c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6d697865642c757466383d302c726f6469722c00b112a1fcbf44cfda2d816615d95e9a707c706aabf136eefda1830103971b89607516a2f15f848964c092e8ed518abcce491915aa7ffc0e4031e79235687fc4febae98e567d00465caa2a5a1b971ee8"], 0x26, 0x367, &(0x7f00000009c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socket$unix(0x1, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) 56.560723875s ago: executing program 0 (id=521): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xffffffff}) close_range(r0, r0, 0x0) 56.146636671s ago: executing program 0 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f000000f900)="$eJzs3U+PG2cdB/Df+N/+CU2jHqoSIbRtA7SU5m8JgQJtD3DohQPKFSXabquIFFASUFpFZKtcOPAiQEgcAXHkxAvogSs3XgCREiSgpw6a9fNsxsaOdze1x7vz+UjOzM/PzPqZfD1re2fGTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8fb3f3iuiIgrv0h3nIj4XHQjOhFrVb0REWsbJ/LyvYh4Lnaa49mI6K9EFLnx6YjXIuLj4xEPHt7ZrO46v8d+fO9Pf//dj4794G9/6J/5z59vdV+fttzt27/+91/uHnx7AQAAoI3KsiyL9DH/ZPp832m6UwDAQuTX/zLJ96uXrt5esv6o1Wq1+hDWdeVkd+tFRGzX16neMzgcDwCHzHZ80nQXaJD8W60XEcea7gSw1IqmO8BcPHh4Z7NI+Rb114ONYXs+F2Qk/+1i9/qOadNZxs8xWdTz615045kp/VlbUB+WSc6/M57/lWH7IC037/wXZVr+g+GlT62T8++O5z/m6OTfmZh/W+X8e/vKvyt/AAAAAABYYvnv/ycaPv678uSbsiePO/67saA+AAAAAAAAAMBn7UnH/9tVGP8PAAAAllX1Wb3ym+OP7pv2XWzV/ZeLiKfGlgdaZiMiViPWm+4HAAAAAAAAAAAAALRJb3gO7+Uioh8RT62vl2VZ3erG6/160vUPu7ZvP7RZ07/kAQBg6OPjY9fyFzuX9cbl9F1//fX19bJcXVsv18u1lfx+drCyWq7VPtfmaXXfymAPb4h7g7L6Yau19epmfV6e1T7+86rHGpTdPXRsMRoMHAAiYvhq9MAr0hFTlk9H0+9yOBzs/0eP/Z+9aPp5CgAAAMxfWZZlkb7O+2Q65t9pulMAwELk1//x4wILq/sLfjy1Wq1Wq1tc15WT3a0XEbFdX6d6z2A4fgA4ZLbjk6a7QIPk32q9iHiu6U4AS61ougPMxYOHdzaLlG9Rfz3YGLbnc0FG8t8udtbL60+azjJ+jsminl/3ohvPTOnPswvqwzLJ+XfG878ybB+k5ead/6JMy7/azhMN9KdpOf/ueP5jjk7+nYn5t1XOv7ev/LvyBwAAAACAJZb//n9iqY7/Dg66OTM97vjvxtweFQAAAAAAAADm68HDO5v5utd8/P8LE5Zz/efRlPMv5N9KOf90/f/uiTcvjS3Xrc3ff+tR/v96eGfz97f++fk83Wv+K3mmSM+sIj0jivRIRS9ND7hhU9zrdwfVI/WLTreXzvkp++/GtbgeW3F2ZNlO2h8etZ8baa962t9pL7vD9vMj7b3d9rz+hZH2fjrTqVzL7adjM34a1+OdnfaqbWXG9q/OaC9ntOf8u/b/Vsr592q3Kv/11F6MTSv3P+r8335fn056nDevffFXZ+e/OTPdi+7uttVV2/dCA/3Z+T85Noif39y6cfr21Vu3bpyLNBm593ykyWcs599Pt5z/Sy8O2/Pv/fr+ev+jwb7zXxb3ojc1/xdr89X2vrzgvjUh5z9It5z/O6n90f5/bHedw53/9P3/lQb6AwAAAAAAAAAAAAAAAI9TluXOJaJvRsTFdP1PU9dmAgCLlV//yyTfv6i6e9D1/zi6HU31X61ecF3U6mIJ+rPQ+tNy3o/39lJtr/pA9X+XrD9LV9eVk71RLyLir/V1qvcMv5z0wwCAZfZpRPyj6U7QGPm3WP6+v2p6qunOAAt184MPf3z1+vWtGzeb7gkAAAAAAAAAcFB5/M+N2vjPp8qyvDu23Mj4r2/FxpOO/9nLM7sDjE4ZqLq7/216nE5Et1Mbbvz5mDb+d3937nHjf/dmPF5/RvtgRvvKjPbVGe0TL/Soyfk/Xxvv/FREnBwbfn10/OejOf7r+Jj3bZDzf6H2fK7y/8rYcvX8y98e5vw7I/mfufX+z87c/ODDV6+9f/W9rfe2fnLh3LmzFy5evHTp0pl3r13fOjv8t8Eez1fOP4997TzQdsn558zl3y45/y+lWv7tkvP/cqrl3y45//x+T/7tkvPPn33k3y45/5dTLf92yfl/NdUj+c/64xKHXs7/lVTb/9sl5/+1VMu/XXL+r6Za/u2S8z+davm3S87/TKr3mP/avPvFYuT88xEu+3+75PzzmQ3yb5ec//lUy79dcv4XUi3/dsn5v5Zq+bdLzv/rqZZ/u+T8L6Za/u2S8/9GquXfLjn/S6mWf7vk/L+Zavm3S87/W6mWf7vk/F9PtfzbJef/7VTLv11y/t9JtfzbJef/3VTLv11y/m+kWv7t8uj7/82YMWMmzzT9mwkAAAAAAAAAAAAAGLeI04mb3kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp79xYj113fAfzM3rxxIDEQUic1YeMYY5xNdn2JL7QuJlwbbiUhFHrBdr1rs+AbXrsEGtWOAiUSRkUVbcNDW0CozUuFVfFAK0B5QK0qVYL2gb4gKlQeoiqggFSVVpCt5pz//78zs7Mzu97xZuacz0dKftmZM3POnPnP7H7tfHcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHTnG2Y/VcuyrFarFRdsyrIX1ecNE5vyS177wh4fAAAAsHa/yP/93M3pgsMruFHDNv90x7e/urCwsJC9b/hPRz+3sJCumMiy0Q1Zll8XXf3B+2uN2wSPZ+O1oYavh7rsfrjL9SNdrh/tcv1Yl+s3dLl+vMv1S07AEjdktXRn2/L/3FSc0uyWbDS/blubWz1e2zBUP3fptlktv83C6IlsLjuVzWbTTdsX29by7b9+Z31fb83ivoYa9rWlvkJ+8ujxeAy1cI63Ne1r8T6jH70+m/jpTx49/tcXnr2t3ex6GprurzjOHVvrx/mJcElxrLVsQzon8TiHGo5zS5vnZLjpOGv57er/3Xqcz63wOIcXD3NdtT7n49lQ/t/fyc/TSC1rc562hMt+dleWZZcXD7t1myX7yoayjU2XDC0+P+PFiqzfR30pvTQbWdU6vXMF67Q+Z7Y1r9PW10R8/u8MtxtZ5hgan6YfPTbW8Lz/fOFa1mlUf9TLvVZa12CvXyv9sgbjuvhO/qCfaLsGt4XH/+j25ddg27XTZg2mx92wBrd2W4NDY8P5MacnoZbfZnEN7mrafjjfUy2fz2zvvAanLpw+NzX/sY/fM3f62MnZk7Nn9uzaNb1n374DBw5MnZg7NTtd/Psaz3b/25gNpdfA1nDu4mvg1S3bNi7VhS+OLXn/vdbX4XiH1+Gmlm17/TocaX1wtfV5QS5d08Vr4z31kz5+ZShb5jWWPz871/46TI+74XU40vA6bPs9pc3rcGQFr8P6Nud2ruxnlpGGf9odw/LfC9a2Bjc1rMHWn0da12Cvfx7plzU4HtbF93Yu/71gSzjeJyZX+/PI8JI1mB5ueO+pX5J+3h8/kI926/L2+hU3jmUX52fP3/vIsQsXzu/KwlgXL2tYK63rdWPDY8qWrNehVa/Xw3N3PHF7m8s3hXM1fk/9X+PLPlf1bfbe2/m5yr+7tT+fTZfuzsLosfU+n+2+m9fP51iWff5bjz34jUc//4Zlz2c9b35iau0/i6dc2vD+O7rM+2/M/c8X+0t39fjw6Ejx+h1OZ2e06f24+akayd+7avm+n5ta2fvxaPhnvd+Pb+nwfry5Zdtevx+Ptj64+H5c6/anHWvT+nyOh3Vyarrz+3F9m827V7smRzq+H98VZi2c/9eEpJByUcPaWW7dpn2NjIyGxzUS99C8Tvc0bT8asll9X0/tvrZ1uuOu4r6G06NbtF7rdKJl216v0/RnX8ut01q3P327Nq3P53hYF7fs6bxO69s8vXft7503xP9seO8c67YGR4fH6sc8mhZh/n6fLdwQ1+C92fHsbHYqm8mvHcvXUy3f1+R9K1uDY+Gf9X6v3NxhDe5o2bbXazB9H1tu7dVGlj74Hmh9PsfDunjyvs5rsL7NG/f39mfXHeGStE3Dz66tf7623J953d5ymq7XWhkJx/mt/Z3/bLa+zakDq82Znc/T3eGSG9ucp9bX73KvqZlsfc7T5nCczx5Y/jzVj6e+zecOrnA9Hc6y7NJH7s//vDf8/crfXfzuV5v+3qXd3+lc+sj9P37xiX9czfEDMPieL8bG4ntdw99MreTv/wEAAICBEHP/UJiJ/A8AAAClEXN//L/CE/kfAAAASiPm/pEwk4rk/81vfHbu+UtZauYvBPH6dBoeKLaLHdfp8PXEwqL65fd/efa//+HSyvY9lGXZzx/4g7bbb34gHldhIhzn1Tc1X77EV+9Z0b6PPnwp7bexv/6FcP/x8ax0GbSr4E5nWfb1mz+T72fi/Vfy+fQDR/P54OUnHq9v89zB4ut4+2deVmz/F6H8e/jEsabbPxPOww/DnH5b+/MRb/eVK6/Zsv+9i/uLt6ttvSl/2E9+oLjf+HtyPvt4sX08z8sd/zc+/dRX6ts/8qr2x39pqP3xPxXu98th/u8riu0bn4P61/F2nwzHH/cXb3fvl77Z9vivfqrY/tybi+2Ohhn3vyN8ve3Nz841nq9HaseaHlf2lmK7uP/p7/5xfn28v3j/rcc/fuRK0/loXR9P/1txP1Mt28fL436iv2/Zf/1+Gtdn3P9Tf3S06Tx32//VB595Rf1+W/d/d8t25z6yM9//4v01/8amv/zkZ9ruLx7P4b891/R4Dr87vI7D/p/8QFiP4fr/u1rcX+tvVzj67ub3n7j9FzZdano80Vt/Wuz/6utO5nPD+A0bb3zRi2+6/Mr6ucuy72wo7q/b/k/+1dmm4//ircX5iNfHjn7r/pcT93/+o5Nnzs5fnJtJZ/XRm/PfnfP24nji8d4c3ltbvz5y9sIHZ89PTE9MZ9lEeX+F3jX7Upg/LsblzlsvLHkH3flweD5v//Ovb9z+r5+Ol//7e4rLr7yt+L716rDdZ8Plm8Lzt7r9L/Xknbfmr+/a0+EIF5b+vuC12LLtvw6saMPw+Ft/Lojr/dzLP5ifh/p1+feN+Lpe4/F/f6a4n6+F87oQfjPz1lsX99e4ffzdCFceKl7vaz5/4W0uPq9/E57vd/ywuP94XPHxfj/8HPPNzc3vd3F9fO3SUOv957/F43J4P8kuF9fHreL5vvLcrW0PL/4ekuzybfnXf5Lu57ZVPczlzH9sfurU3JmLj0xdmJ2/MDX/sY8fOX324pkLR/Lf5XnkQ91uv/j+tDF/f5qZ3bc3y9+tzhbjOnuhj//cw8dn9k9vn5k9ceziiQsPn5s9f/L4/Pzx2Zn57cdOnJj9aLfbz80c2rX74J79uydPzs0cOnDw4J6Dk3NnztYPozioLvZNf3jyzPkj+U3mD+09uOu++/ZOT54+OzN7aP/09OTFbrfPvzdN1m/9+5PnZ08duzB3enZyfu7js4d2Hdy3b3fX3wZ4+tyJ+Ymp8xfPTF2cnz0/VTyWiQv5xfXvfd1uTznN/0fx82yrWvGL+LJ33b0v/X7Wui8/tuxdFZu0/ALRZ8Pvovnnl5w7sJKvY+4fDTOpSP4HAACAKoi5fyzMRP4HAACA0oi5f0OYifwPAAAApRFz/3iYSUXyf+n6/5svrWj/+v/6/43nS/+/Yv3/h/qt/1+8X+j/98Za+/f6/4H+v/6//r/+v/4/PdBv/f+Y+2/IskrmfwAAAKiCmPs3hpnI/wAAAFAaMfffGGYi/wMAAEBpxNz/ojCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/P5VVq/9/uZfHr/+v/89S/db/j7n/xWEmFcn/AAAAUAUx998UZiL/AwAAQGnE3H9zmIn8DwAAAKURc/+mMJOK5H/9f/1//X/9f/3/9vvX/x9M+v+d6f93of/v8//1//X/6al+6//H3P+SMJOK5H8AAACogpj7XxpmIv8DAABA/xm5tpvF3P+yMJMl+f8adwAAAAC84GLuvyVrKYJX5O//9f/1//u//78hXaf/r/+f9WX/fzjT/+8f+v+d6f93of+v/6//r/9PT/Vb/z/P/dl49vIwk4rkfwAAAKiCmPtvDTOR/wEAAKA0Yu7/pTAT+R8AAABKI+b+zWEmFcn/+v/6//3f//f5//r//d7/9/n//UT/vzP9/y70//X/9f/1/+mpfuv/x9x/W5hJRfI/AAAAVEHM/beHmcj/AAAAUBox9/9ymIn8DwAAAKURc/+WMJOK5H/9/7X1/2Pv/Lr1/2NzVP9f/1//X/9f/39F9P870//vQv9f/1//X/+fnuq3/n/M/a8IM6lI/gcAAIAqiLn/jjAT+R8AAABKI+b+V4aZyP8AAABQGjH3T4SZVCT/6/8PxOf/j/n8f/1//X/9f/3/ldH/70z/vwv9f/3/nvT/Fy7p/+v/U+i3/n/M/XeGmVQk/wMAAEAVxNy/NcxE/gcAAIDSiLn/rjAT+R8AAABKI+b+bWEmFcn/+v8D0f/P9P/1//X/9f/1/1dG/78z/f8u9P/1/33+v/4/PdVv/f+Y+18VZlKR/A8AAABVEHP/9jAT+R8AAABKI+b+V4eZyP8AAABQGjH37wgzqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6//r/Pev/L+j/6//Th/3/mPtfE2ZSkfwPAAAAVRBz/84wE/kfAAAASiPm/rvDTOR/AAAAKI2Y+yfDTCqS//X/9f/1//X/9f/b71//fzDp/3em/9+F/r/+v8//1/+np/qt/x9z/z1hJhXJ/wAAAFAFMfffG2Yi/wMAAEBpxNw/FWYi/wMAAEBpxNw/HWZSkfyv/6//r/+v/7+q/v8rF+9X/7+g/99f9P870//vQv9f//8F7/+P6v9TKv3W/4+5f1eYSUXyPwAAAFRBzP27w0zkfwAAACiNmPv3hJnI/wAAAFAaMffvDTOpSP7X/9f/1//X//f5/+33r/8/mPT/O+t9/z8+RP1//X/9f5//r//PUv3W/4+5/74wk4rkfwAAAKiCmPv3hZnI/wAAAFAaMffvDzOR/wEAAKA0Yu4/EGZSkfxf1f5/rdZ8HJH+v/5/foH+v/6//v/A0v/vzOf/d6H/r/+v/6//zxo99IeNX/Vb/z/m/oNhJhXJ/wAAAFAFMfe/NsxE/gcAAIDSiLn/V8JM5H8AAAAojZj7fzXMpCL5v6r9/2U+/7/+cPX/9f/1//X/c/r/g0n/vzP9/y70//X/9f/1/+mpZfv/IXqvd/8/5v5DYSYVyf8AAABQBTH3/1qYifwPAAAApRFz/+vCTOR/AAAAKI2Y+w+HmVQk/+v/+/x//X/9f/3/9vtf7/7/WLxf/f810f/vbH36/7X4tqz/r/+v/6//r/9fcf32+f8x978+zKQi+R8AAACqIOb++8NM5H8AAAAojZj73xBmIv8DAABAacTc/8Ywk4rkf/1//f9B6f/fqP+v/9/yeMrW//f5/72h/9+Zz//vQv9f/1//X/+fnuq3/n/M/W8KM6lI/gcAAIAqiLn/zWEm8j8AAACURsz9bwkzkf8BAACgNGLuf2uYSUXyv/6//v+g9P8z/X/9/5bHo/+v/9+O/n9n+v9d6P/r/+v/6//TU/3W/4+5/9fDTCqS/wEAAKAKYu5/IMxE/gcAAIDSiLn/bWEm8j8AAACURsz9bw8zqUj+1//X/9f/1//X/2+/f/3/waT/39mA9f9/cVO4XP+/oP/f38e/2v7/SMvX16X//4Pl+v8LG1pvr//P9dBv/f+Y+98RZlKR/A8AAABVEHP/O8NM5H8AAAAojZj73xVmIv8DAABAacTc/xthJhXJ//r/9eNYbC/r/5e1/z+k/6//r/9fEfr/nQ1Y/9/n/7fQ/+/v4/f5//r/LNVv/f+Y+98dZlKR/A8AAABVEHP/g2Em8j8AAACURsz9D4WZyP8AAABQGjH3vyfMpCL5X//f5/9Xo//v8/8z/X/9/4rQ/+9M/78L/X/9/37r//+n/j+Drd/6/zH3PxxmUpH8DwAAAFUQc/97w0zkfwAAACiNmPt/M8xE/gcAAIDSiLn/fWEmFcn/+v8r7v9PdLq/69//nxjQ/v9j+v/Xsf9/x03Fdvr/+v8s0v/vTP+/C/1//f9+6//7/H8GXL/1/2Puf3+Yycrz//iKtwQAAABeEDH3/1aYSUX+/h8AAACqIOb+3w4zaZv/u/5vNwAAAEAfirn/d8JMKvL3//r/Pv/f5/8Pbv/f5//r/+v/L7V+/f/4zqP/r/+v/x/p/+v/6//Tqt/6/zH3/26YSUXyPwAAAFRBzP0fCDOR/wEAAGAgtPt/slvF3H8kzET+BwAAgNKIuf9omElF8r/+v/6//n+f9v//bOu/fO/b7zy6S/9f/1//f1XW9fP/6y9+n/+v/6//n+j/6//r/9Oq3/r/MfcfCzOpSP4HAACAKoi5//fCTOR/AAAAKI2Y+4+Hmcj/AAAAUBox98+EmVQk/+v/6//r//dp/3+AP/8/ng/9/2Y96//HN139/7aK/n1aRde3///exZ64/v9q+/9jbS/V/9f/H+Tj1//X/2epfuv/x9w/G2ZSkfwPAAAAVRBy/9CJYi5eIf8DAABAacTcfzLMRP4HAACA0oi5/4NhJhXJ//r/+v/6//r/Pv+//f479f9rIz7/v1+l/v3P8heK/n+L/un/t6f/r/8/yMev/6//z1L91v+PuX8uzKQi+R8AAACqIOb+D4WZyP8AAABQGjH3fzjMRP4HAACA0oi5/1SYSUXyv/6//r/+v/6//n/7/af+f/jW0Def/6//39Fa+/f6/4H+f7X7//+j/6//r/9Pb/Rb/z/m/tNh/j97d/JkWZnWcfwkFlRWYBjuXLgxwqV/Agtda7h24caNEYYLHFBxpnAeUVCcFcF5ABUEERWcB1ARxakbupue54GeaLqJ6iDzeZ6qzDx5bmblvXnPed/PZ8HTZFdybxMVWfzI+vYpnex/AAAA6EHu/lvjFvsfAAAAmpG7/xviFvsfAAAAmpG7/xvjlk72v/7/LP3/1UpZ/3/w/a/u//MVN9j/f6n+/7jX1/+f/fn/g/5/tvT/0/T/K4z3/zcNw9BX/+/5//p//T9rMrf+P3f/N8Utnex/AAAA6EHu/m+OW+x/AAAAaEbu/tviFvsfAAAAmpG7/1vilk72/6H+f2fos//PjNfz/z3/X/+v/9f/L9z59v93vv6VT/9/4v7/oXtWvexM+/8Wn/9/09gHt93Pn9W23/8J+/+Lx32+/p8Wza3/z93/rXFLJ/sfAAAAepC7/9viFvsfAAAAmpG7//a4xf4HAACAZuTu//a4pZP9v77n/1/a+/hC+/+i/9f/731A/6//1/8vluf/T+vp+f+3PX/zrS8/9oWPn+b1O+r/R227n1/6+/f8f/0/R82t/8/d/x1xSyf7HwAAAHqQu/874xb7HwAAAJqRu/+74hb7HwAAAJqRu/+745ZO9v/6+v9FP/+/6P/1/3sf0P/r//X/i6X/n9ZT/389r6//1//r//X/rNfc+v/c/d8Tt3Sy/wEAAKAHufu/N26x/wEAAKAZufvviFvsfwAAAGhG7v7LcUsn+1//v/n+/zX9v/4/rv5f/6//3zz9/zT9/wr6f/2//l//z1rNrf/P3X9n3NLJ/gcAAIAe5O7/vrjF/gcAAIBm5O7//rjF/gcAAIBm5O7/gbilk/2v//f8f/2//l//P/76+v9l0v9P0/+voP8/az9/o/5f/6//51qn7P9fnfiyvZb+P3f/D8Ytnex/AAAA6EHu/h+KW+x/AAAAaEbu/h+OW+x/AAAAaEbu/h+JWzrZ//p//b/+X/9/3f3/0Z96e/T/4/T/50P/P202/f/OhdEP6/8X3/97/r/+X//PAXN7/n/u/h+NWzrZ/wAAANCD3P0/FrdM7P9T/8t8AAAAYKty9/943OL7/wAAALB4WZ3l7v+JuKWT/a//1//r//X/nv8//vpT/f/j17w//f+86P+nzab/P4b+X/+/5Pev/9f/c9Tc+v/c/T8Zt3Sy/wEAAKAHufvvilvsfwAAAGhG7v6filvsfwAAAGhG7v6fjls62f/j/f/V/17/fzL6/4PvX/8//vNjXf1//hX1/5P9/5d5/n+f9P/Tzr//v6j/P/jX1/9v0Lbff+P9/6VVn6//Z8zc+v/c/XfHLZ3sfwAAAOhB7v574hb7HwAAAJqRu/9n4hb7HwAAAJqRu/9n45ZO9r/n/+v/9f/L6/89/3/fNp//P5x7/39B/39C+v9pnv+/gv5f/6//9/x/1mpu/X/u/nvjlk72PwAAAPTg3leGvd3/c8Ng/wMAAMASXft7Bw7/htKQu//n4xb7HwAAAJqRu/8X4pZO9r/+X/+v/9f/6//HX/+0/f+qByN7/v/50P9P0/+voP/fRD9/obH+/77jPn8O/f8d+n9m5kD//+TVj2+r/8/d/4txSyf7HwAAAHqQu/+X4hb7HwAAAJqRu/+X4xb7HwAAAJqRu/9X4pZO9v/G+/+JIFb/r//X/+v/W+r/V9H/nw/9/zT9/wr6f8//9/x//T9rdbX/P/j1cFv9f+7+X41bOtn/AAAA0IPc/b8Wt9j/AAAA0Izc/ffFLfY/AAAANCN3/6/HLZ3sf8//1//r//X/+v/x19f/L5P+f5r+f4X4R0H9v/5f/6//Zz0OPP//Gtvq/3P33x+3dLL/AQAAoAe5+x+IW+x/AAAAaEbu/t+IW+x/AAAAaEbu/t+MWzrZ//r/zfb/+XH9v/5/0P/r//X/56Lb/n9n7Feio47p/5/5ustfcfAjvfb/nv+v/9f/6/9Zq1n0/1eu/tNl7v7fils62f8AAADQg9z9vx232P8AAADQjNz9vxO32P8AAADQjNz9vxu3nHL/f/5a39X50f97/r/+X/+v/x9/ff3/MnXb/5+Q5/+voP/X/+v/9f+s1Sz6/2v+PHf/78Utvv8PAAAAzcjd//txi/0PAAAAzcjd/wdxi/0PAAAAzcjd/4dxSyf7X/+v/9f/6//1/+Ovf739/+4wTv9/PvT/0/T/K+j/m+r/v3IYBv2//p/tmlv/n7v/wbilk/0PAAAAPcjd/1DcYv8DAABAM3L3/1HcYv8DAABAM3L3/3Hc0sn+1//r//X/+n/9//jre/7/Mun/p+n/h2F4eOINjPX/Vy7q/xfa/3v+v/6f7Ztb/5+7/0/ilk72PwAAAPQgd//DcYv9DwAAAM3I3f9I3GL/AwAAQDNy9/9p3NLJ/tf/6//1/1vu/2/Q/+v/9f/rpP+fpv9fwfP/9f/6f/0/azW3/j93/6NxSyf7HwAAAHqQu/+xuMX+BwAAgGbk7v+zuMX+BwAAgGbk7n88bulk/+v/9f/6f8//30j/f1n/f5j+/3xsrv8f9P8b7f9f+7xB/6//X/j71//r/znqvPr/V+Pr/ar+P3f/n8ctnex/AAAA6EHu/ifiFvsfAAAAmpG7/y/iFvsfAAAAmpG7/y/jlk72v/5f/6//1/97/v/46+v/l8nz/6fNt//fp//X/y/5/ev/9f8cdV79/3G9/+E/z93/V3FLJ/sfAAAAepC7/8m4xf4HAACAZuTufypusf8BAACgGbn7/zpu6WT/6//1/wf7/2HQ/+v/9f/7zqH/3x30/2un/5+m/19B/99m/3/D0FD/f+nYz9f/M0dz6/9z9/9N3NLJ/gcAAIAe5O7/27jF/gcAAIBm5O7/u7jF/gcAAIBm5O7/+7ilpf3/2vHp2/L7/4uHPlH/PwzDC7d7/r/+f+L19f+z6f/r76r+f330/9P0/yvo/9vs/z3/X//P1syt/8/d/w9xS0v7HwAAADqXu/8f4xb7HwAAAJqRu/+f4hb7HwAAAJqRu/+f45ZO9v/y+//Dn6j/H870/H/9/94H9P/6f/3/Yp21v79/N35N0//r//X/o/38zjH/3DPo//X/+n9GzK3/z93/L3FLJ/sfAAAAepC7/+m4xf4HAACAZuTufyZusf8BAACgGbn7/zVu6WT/6//1//r/Zfb/u/p//b/+f9Rcnv9/yy1f/pz+X//fYv8/Rf+v/9f/c9jc+v/c/f8Wt3Sy/wEAAKAHufv/PW6x/wEAAKAZufufjVvsfwAAAGjGs3sh5+7wH8PQ5f4/2v/fOOwXqvvG+v9o1PT/19D/H3z/+v/xnx+e/6//1/9v3lz6f8//v773r//X/y/5/Z+q//+io5+v/6dFc+v/c/c/F7d0sv8BAACgB7n7/zNusf8BAACgGbn7/ytusf8BAACgGbn7n49bOtn/nv+v/9f/6//1/+Ovr/9fJv3/NP3/Cvr/s/fz+VVV/7/c5/9/jv6f9Zlb/5+7/7/jlr3h98Wfe53/MwEAAIAZyd3/P3FLJ9//BwAAgB7k7v/fuMX+BwAAgGbk7v+/uKWT/a//1//r//X/+v/x19f/L5P+f5r+f4V++v/dsQ9uu58/q22//2b6f8//Z43m1v/n7v//uKWT/Q8AAABte2Xvj7n73xC32P8AAADQjNz9b4xb7H8AAABoRu7+F+KWTva//l//337//zX6/0Ovr//X/7dM/5+/oo/T/6/QT/8/atv9/NLfv/5f/89Rc+v/c/e/GLd0sv8BAACgB7n73xS32P8AAADQjNz9b45b7H8AAABoRu7+t8QtTez/Cyt/hP6/r/5/Z+ix//f8f/2//r8Dlbwvp/9/YPQXac//1//r/5f7/vX/+n+Omlv/n7v/pZ0LDe5/AAAAaNdXfcnXv3jSH/vS3h93h7fGLfY/AAAANCN3/9viFvsfAAAAmpG7/+1xSyf7X//fV//f5/P/9f/6f/1/T5bT/4/T/+v/9f/Lff/6f/0/R82t/8/d/4645Zrht/r/RQ8AAAA4Vzed7ofn7n9n3NLJ9/8BAACgB7n73xW3HNn/V074u9oBAACAucnd/+64pZPv/+v/Z97/Dxvq/+PH6f/36f/1/2Ovr/9fJv3/tDP2/1d29P/6/wkL6P93N/n+9f/6f46aW/+fu/+JR4cu9z8AAAA06sC/UXjP3h93h/fGLfY/AAAANCN3//viFvsfAAAAmpG7//1xSyf7X/8/8/7/up7/f6n+k+f/d97/37U7+vr6/yb6/52xrzvo/1fx/P8V9P+t9/8bff/6f/0/R52i/98bpJvu/3P3fyBu6WT/AwAAQA9y938wbrH/AQAAoBm5+z8Ut9j/AAAA0Izc/R+OWzrZ//r/LfT/d18cho32/yd4/r/+v4/+/5jXb6f//4KbLz/91V/7yINd9v+e/3+M8+z/8+eC/l//r//fp//X/+v/OWxuz//P3f+RuKWT/Q8AAAA9yN3/ctxi/wMAAEAzcvd/NG55ff8/ta13BQAAAKxT7v6PxS2dfP9f/9/i8/+X2f/n3+st9P+Xl9f/Z1Pce//f9fP/9f/H8Pz/afr/FfT/+n/9v/6ftZpb/5+7/+NxSyf7HwAAAHqQu/8TcUvu/51T/6t7AAAAYGZy938ybvH9fwAAAGhG7v5X4pZO9r/+X/+/gf7/kuf/j//88Px//b/+f/P0/9P0/yvo//X/+n/9P2s1t/4/d/+n4pZO9j8AAAD0IHf/q3GL/Q8AAADNyN3/6bjF/gcAAIBm5O7/TNzSyf7X/+v/5/L8/6T/v/p5+v99+n/9/2no/6fp/1fQ/+v/9f/6f9Zqbv1/7v7PBgAA//+PXGeS") creat(&(0x7f0000000500)='./file2\x00', 0x0) open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xa6}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xab01}], 0x1, 0x540f, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x1e, 0xb0, 0xb8, 0x8, 0xaf0, 0x6711, 0x4b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0xd0, 0x2}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x0, 0x4c31}]}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) 52.600362857s ago: executing program 0 (id=525): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) 37.142518733s ago: executing program 35 (id=525): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) 14.974965625s ago: executing program 7 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1000b0e8}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 14.588664023s ago: executing program 6 (id=578): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x11, 0xffffffffffffffff, 0x0) 13.720844874s ago: executing program 6 (id=580): socket(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r2, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x803, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r8, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 13.4199014s ago: executing program 7 (id=582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23e7e243bd5c1b", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) fchown(r1, 0xee01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000f8ff070008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000080)=""/89}, 0x20) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000180)={0x20000000000000, 0x0, 0x8, 0x0, 0x3, 0x3, 0x0, &(0x7f00000000c0)=[{0x18, 0x1ff, 0x8}, {0x15, 0xfe, 0x9}, {0x21, 0xff, 0x80}]}) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000080)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000003f40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000440)=0x0) capset(&(0x7f0000000480)={0x19980330, r7}, &(0x7f00000004c0)={0xffffffff, 0x3, 0xe1, 0x41f, 0x1, 0x7fffffff}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x8}, {0x7, 0x3, 0x5, 0xcb}, {0x9, 0x6, 0x80, 0x2}, {0x6, 0xf, 0x4, 0x9}]}, 0x10) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r9 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x63d1, 0x10, @mcast2, @remote, 0x7, 0x40, 0x7, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r10, 0x29, 0x2, 0x10, 0x2, 0x25, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x4, 0x10}}) sendmmsg$alg(r5, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)="bd6c8ebeb5d7eba77a0e9e66643400280673f17100a3acdabb974cf418f921bc1f70a0c3b782b7767d69eb220a9f22cd2b3f99491c980d187d2861af9cd43c64a4", 0x41}, {&(0x7f0000000240)="82f3ea1d", 0x4}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x40084) 12.858339384s ago: executing program 2 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 12.701124648s ago: executing program 6 (id=584): syz_usb_connect$uac1(0x0, 0xfffffffffffffe3c, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @loopback, 0xe35a}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x595f}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r5, 0x2, 0x10}, &(0x7f0000000200)=0xc) 11.960907174s ago: executing program 2 (id=586): r0 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000000)={0x7, 0xfffffffffffffffc}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_newaddr={0x34, 0x14, 0x11, 0x70bd27, 0x25dfdbfd, {0xa, 0x8, 0xa9, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x5, 0xffffffff}}, @IFA_TARGET_NETNSID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x9db8d47d88fdff7e) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000b80)={&(0x7f0000000440)=0x4, 0xfffffff8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b40)}) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000c00)={'stack ', '\x84,+(\x00'}, 0xb) clock_gettime(0x0, &(0x7f0000004bc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000c40)=@hci, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/159, 0x9f}], 0x1, &(0x7f0000000dc0)=""/63, 0x3f}, 0x7}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/137, 0x89}, {&(0x7f0000000f40)=""/62, 0x3e}], 0x3, &(0x7f0000000fc0)=""/171, 0xab}, 0x5}, {{&(0x7f0000001080)=@caif=@dgm, 0x80, &(0x7f0000002580)=[{&(0x7f0000001100)=""/129, 0x81}, {&(0x7f00000011c0)=""/182, 0xb6}, {&(0x7f0000001280)=""/110, 0x6e}, {&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000001400)=""/139, 0x8b}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/146, 0x92}], 0x7}, 0xf8f}, {{&(0x7f0000002600)=@x25={0x9, @remote}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/177, 0xb1}, {&(0x7f0000003740)=""/120, 0x78}, {&(0x7f00000037c0)=""/18, 0x12}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/184, 0xb8}, {&(0x7f00000048c0)=""/59, 0x3b}, {&(0x7f0000004900)=""/185, 0xb9}], 0x8, &(0x7f0000004a40)=""/101, 0x65}, 0x6}], 0x4, 0x40010000, &(0x7f0000004c00)={r3, r4+60000000}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r5 = accept4$inet(r0, 0x0, &(0x7f0000004c40), 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000004c80)={{0x0, @private=0xa010100, 0x4e24, 0x0, 'sh\x00', 0x0, 0x2, 0x22}, {@private=0xa010102, 0x4e23, 0x3, 0x8, 0x8, 0x2}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000004d00)=@base={0x20, 0x2, 0x2, 0x3, 0x2100, r0, 0xffffffff, '\x00', 0x0, r0, 0x1, 0x2, 0x1}, 0x50) mount(&(0x7f0000004d80)=@loop={'/dev/loop', 0x0}, &(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00)='nilfs2\x00', 0x80080, &(0x7f0000004e40)='%\x00') futex_waitv(&(0x7f0000006dc0)=[{0x6a, &(0x7f0000004e80)=0x93d, 0x82}, {0x8, &(0x7f0000004ec0)=0x3, 0x2}, {0x5, &(0x7f0000004f00)=0x7, 0x2}, {0x9, &(0x7f0000004f40)=0x10000, 0x82}, {0x1000, &(0x7f0000004f80)=0x3ff, 0x82}, {0x10, &(0x7f0000004fc0)=0x7, 0x82}, {0x7fff, &(0x7f0000005000)=0xffffffffffffffff, 0x2}, {0xffff, &(0x7f0000005040)=0x8, 0x2}, {0xb2f, &(0x7f0000005080)=0x4a0}, {0x9, &(0x7f00000050c0)=0xff37, 0x82}, {0x4, &(0x7f0000005100), 0x2}, {0x401, &(0x7f0000005140)=0xe, 0x2}, {0x100, &(0x7f0000005180)=0x3, 0x2}, {0x8000, &(0x7f00000051c0)=0x8, 0x2}, {0xcfe, &(0x7f0000005200)=0x1, 0x2}, {0x7, &(0x7f0000005240)=0x6, 0x2}, {0x1, &(0x7f0000005280)=0x200, 0x2}, {0x8001, &(0x7f00000052c0)=0x8, 0x82}, {0x9, &(0x7f0000005300)=0x5, 0x82}, {0x1, &(0x7f0000005340)=0x36723251, 0x2}, {0x74, &(0x7f0000005380)=0x2, 0x2}, {0xfff, &(0x7f00000053c0)=0x3, 0x2}, {0x1, &(0x7f0000005400)=0xffffffff, 0x2}, {0xf525, &(0x7f0000005440)=0xa, 0x82}, {0x0, &(0x7f0000005480)=0x23b7, 0x2}, {0xfffffffffffffffc, &(0x7f00000054c0)=0x5, 0x82}, {0x80, &(0x7f0000005500)=0x7, 0x82}, {0x31, &(0x7f0000005540)=0x8000000000000000, 0x2}, {0xbd, &(0x7f0000005580)=0x1, 0x82}, {0x8001, &(0x7f00000055c0)=0xa2, 0x2}, {0xba7e, &(0x7f0000005600)=0x80, 0x2}, {0x3, &(0x7f0000005640)=0x98, 0x82}, {0x3, &(0x7f0000005680)=0x7, 0x82}, {0x400, &(0x7f00000056c0)=0x3, 0x82}, {0x5, &(0x7f0000005700)=0xf92, 0x2}, {0x1, &(0x7f0000005740)=0x18d3, 0x2}, {0x7fff, &(0x7f0000005780)=0xf, 0x82}, {0x0, &(0x7f00000057c0)=0xbefa, 0x82}, {0x0, &(0x7f0000005800)=0x3f, 0x2}, {0x1, &(0x7f0000005840)=0xd98, 0x2}, {0xfffffffffffffff2, &(0x7f0000005880)=0x8000000, 0x82}, {0x8, &(0x7f00000058c0)=0x2, 0x2}, {0x7, &(0x7f0000005900)=0xfffffffffffffff9, 0x82}, {0xfffffffffffffffa, &(0x7f0000005940)=0xfff, 0x82}, {0x9, &(0x7f0000005980)=0x1, 0x82}, {0x6, &(0x7f00000059c0)=0xff, 0x2}, {0x21510516, &(0x7f0000005a00)=0x2}, {0x3, &(0x7f0000005a40)=0x6}, {0x80000001, &(0x7f0000005a80)=0x9, 0x82}, {0xe, &(0x7f0000005ac0)=0x1, 0x82}, {0x8, &(0x7f0000005b00)=0xffffffffffff54b2, 0x82}, {0x7f03, &(0x7f0000005b40), 0x2}, {0x9, &(0x7f0000005b80), 0x2}, {0xb, &(0x7f0000005bc0)=0x1, 0x82}, {0x9a, &(0x7f0000005c00)=0x5, 0x2}, {0x8, &(0x7f0000005c40)=0x7}, {0xfffffffffffffff7, &(0x7f0000005c80)=0x1000, 0x2}, {0x4, &(0x7f0000005cc0)=0x4, 0x2}, {0x1, &(0x7f0000005d00)=0x8001, 0x82}, {0x9, &(0x7f0000005d40)=0x7ff, 0x82}, {0xffffffff, &(0x7f0000005d80)=0xf, 0x82}, {0x7, &(0x7f0000005dc0)=0x4634, 0x82}, {0x7fffffffffffffff, &(0x7f0000005e00)=0x7fff, 0x2}, {0x6, &(0x7f0000005e40)=0xfffffffffffffffa, 0x2}, {0x3, &(0x7f0000005e80)=0xf, 0x82}, {0x2, &(0x7f0000005ec0)=0x5, 0x82}, {0xddb, &(0x7f0000005f00)=0xc623, 0x82}, {0x8000, &(0x7f0000005f40)=0x9, 0x2}, {0x6, &(0x7f0000005f80)=0x6, 0x82}, {0xa, &(0x7f0000005fc0)=0x6a3, 0x82}, {0xffffffffffffffc0, &(0x7f0000006000)=0x78, 0x82}, {0x1, &(0x7f0000006040)=0xfffffffffffff9d0, 0x82}, {0x2, &(0x7f0000006080)=0x4d, 0x82}, {0xe9, &(0x7f00000060c0)=0x6, 0x82}, {0xffffffffffffffff, &(0x7f0000006100)=0x9, 0x82}, {0x1ff, &(0x7f0000006140)=0xdf, 0x2}, {0xb, &(0x7f0000006180)=0x8, 0x2}, {0x81, &(0x7f00000061c0)=0x10, 0x2}, {0x9c6, &(0x7f0000006200)=0x7fffffff, 0xcfb865ae22cfd236}, {0x238, &(0x7f0000006240)=0xfffffffffffffff8, 0x82}, {0x7, &(0x7f0000006280)=0xbf, 0x2}, {0x8, &(0x7f00000062c0)=0x7eda, 0x82}, {0x7e, &(0x7f0000006300)=0x8, 0x2}, {0x6, &(0x7f0000006340)=0xc, 0x2}, {0x1, &(0x7f0000006380)=0xb, 0x82}, {0x5, &(0x7f00000063c0), 0x2}, {0x8, &(0x7f0000006400)=0xff, 0x2}, {0x6, &(0x7f0000006440)=0xb, 0x2}, {0x8001, &(0x7f0000006480)=0x4, 0x82}, {0xffffffffffffffff, &(0x7f00000064c0)=0x4, 0x82}, {0x8, &(0x7f0000006500)=0x3, 0x2}, {0x7, &(0x7f0000006540)=0xd2, 0x2}, {0x3, &(0x7f0000006580)=0x2, 0x82}, {0xf, &(0x7f00000065c0)=0x2291451, 0x2}, {0x5, &(0x7f0000006600)=0x2, 0x2}, {0x6, &(0x7f0000006640)=0x2, 0x2}, {0x5, &(0x7f0000006680)=0x840f, 0x82}, {0x3, &(0x7f00000066c0)=0x7fff, 0x82}, {0x8, &(0x7f0000006700), 0x2}, {0x9, &(0x7f0000006740), 0x82}, {0x2, &(0x7f0000006780)=0x214b, 0x82}, {0x6, &(0x7f00000067c0)=0x8001, 0x186}, {0xdd02, &(0x7f0000006800)=0x8001, 0x43}, {0x7, &(0x7f0000006840)=0xffffffff, 0x82}, {0x9, &(0x7f0000006880)=0x1, 0x82}, {0x6, &(0x7f00000068c0)=0x6, 0x2}, {0xa, &(0x7f0000006900)=0x2, 0x82}, {0x723, &(0x7f0000006940)=0x101, 0x2}, {0x8, &(0x7f0000006980)=0x6c74, 0x82}, {0x1e, &(0x7f00000069c0)=0x7f, 0x82}, {0x9a, &(0x7f0000006a00)=0x7, 0x2}, {0x8, &(0x7f0000006a40)=0x9, 0x2626799d49ee497f}, {0x2, &(0x7f0000006a80)=0x98, 0x2}, {0x85, &(0x7f0000006ac0)=0x5, 0x2}, {0x8001, &(0x7f0000006b00)=0x9, 0x82}, {0x1, &(0x7f0000006b40)=0x1, 0x82}, {0xf8, &(0x7f0000006b80)=0x5, 0x80}, {0x6, &(0x7f0000006bc0)=0x5, 0x2}, {0x10000, &(0x7f0000006c00)=0x8, 0x82}, {0x0, &(0x7f0000006c40)=0xc7, 0x2}, {0x400, &(0x7f0000006c80)=0x9, 0x2}, {0x7593, &(0x7f0000006cc0)=0x7, 0x82}, {0xffeb, &(0x7f0000006d00)=0xe7, 0x2}, {0x2, &(0x7f0000006d40)=0x9, 0x82}, {0x6, &(0x7f0000006d80), 0x2}], 0x7d, 0x0, &(0x7f0000007980), 0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000007a80)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000007a40)={&(0x7f0000007a00)={0x14, 0x0, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000808}, 0x40) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000007ac0)=0xfffffff8, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000007b00)={0x0, 0x7}, &(0x7f0000007b40)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000007b80)={r6, 0x7, 0x20, 0x0, 0xb}, &(0x7f0000007bc0)=0x18) listen(r5, 0x3ce) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008dc0)={r0, 0x0, 0x6, 0x1000, &(0x7f0000007c00)="3f6793db1191", &(0x7f0000007c40)=""/4096, 0x3, 0x0, 0xcc, 0x49, &(0x7f0000008c40)="3a00875e8e4be75350bbc60b851d81bc7d56781ee319f353121583645acf1b49980e160966efeac84d04869968aeca06be75a1080805c84003db051c378a4347a5ffff483397478448a9e6988af0146380232e4a2552c153ca48bc6fe6bc00b80152cd7fa6e037f1cd543ff4a1f8e6fdc6e5148439637fc094aba019aafc0ede7902686e019cd693177a792fb98aa857af8d0fe8bbc0ce207ee498bfeb1c90b726b769969912ebbc152698a0384413f736d5eb54a3a8627501a8605747ba9577923b1543740e01a87889345f", &(0x7f0000008d40)="b1184afd2431b9d7c6b17479748159d076d32926ea643eac7a3ca211a7300bfcd292dfd7eba5f3c396c657e64a701fbafd1fa77b59ce8752b0ec2c00153eebe1022e27ddd08e42ac76", 0x7, 0x0, 0x3}, 0x50) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000008e40)=""/4096, &(0x7f0000009e40)=0x1000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000009ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000009f80)={&(0x7f0000009e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000009f40)={&(0x7f0000009f00)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x80, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = socket$inet6(0xa, 0x1, 0x3) connect$inet6(r8, &(0x7f0000009fc0)={0xa, 0x4e22, 0x596f, @empty, 0x6}, 0x1c) listen(r0, 0x1) recvfrom$inet_nvme(r0, &(0x7f000000a000)=""/66, 0x42, 0x10262, &(0x7f000000a080)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x1, 0x1, {0xa, 0x4e22, 0x8, @private2, 0x6}}}, 0x80) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 11.665248228s ago: executing program 7 (id=588): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000a57) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db4cb904021d08001000fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400fff7f00005c0459c1d67f6f94007134cf6edb8000a007a290457f0189b300277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683fe7e24edbb57a1ed6a0142b351139a8b95025ccca9e00350db798262f3d40fad95667e006dc7923fae94a2c5e23df63951f215c3f8b6ad2cba0a2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ee4edef3d93452a92954b43", 0xd8}], 0x1}, 0x20040010) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x6e20, @loopback}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) 10.453420465s ago: executing program 2 (id=590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@auto_da_alloc}, {@usrquota}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x458, &(0x7f0000000480)="$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") setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x11}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfa, 0x56c, &(0x7f0000000940)="$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") rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000340)=0xfffffffe, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 10.267914324s ago: executing program 7 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x7, r2}) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x10020, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x220000c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.862552804s ago: executing program 3 (id=592): unshare(0x8040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) set_mempolicy(0x6, &(0x7f0000000300)=0x8000000000000005, 0x8) set_mempolicy(0x8000, &(0x7f0000000000)=0x3, 0x6) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x810, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c6572726f72733d72656d6f756e742d726f2c6b6565705f6c6173745f648074732c6e616d65636173653d312c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303030342c6b6565705f6c6173745f646f74732c6572726f72733d72656d6f756e742d726f2c696f636861727365743d63703433372c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1535, &(0x7f0000000600)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10, 0x10, r2, 0x823bd000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r3, 0x5, 0x1, 0xd629}, 0x10) 9.595798823s ago: executing program 6 (id=593): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) io_submit(0x0, 0xffffffffffffff18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x793, &(0x7f0000001040)="$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") sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r2], 0x20}, 0x1, 0xd, 0x0, 0x80c5}, 0x20000000) r5 = gettid() r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8={"0065864b300ba9e07f3ee548"}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$FUSE(r7, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0x7, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x9, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0xc2, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x5, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x5, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x5, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) socket$caif_stream(0x25, 0x1, 0x3) 8.839469433s ago: executing program 3 (id=594): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) syz_open_dev$I2C(0x0, 0x8, 0x2a2002) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) 7.234011102s ago: executing program 3 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.599483687s ago: executing program 7 (id=596): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.54897879s ago: executing program 3 (id=597): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.681265098s ago: executing program 3 (id=602): syz_usb_connect$uac1(0x0, 0xfffffffffffffe3c, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @loopback, 0xe35a}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x595f}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r5, 0x2, 0x10}, &(0x7f0000000200)=0xc) 2.660779779s ago: executing program 6 (id=603): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) io_submit(0x0, 0xffffffffffffff18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x793, &(0x7f0000001040)="$eJzs3F+IVGUbAPDnnN31288dHVcDIRSFrIxoXN0kg4gNAlmvAiEChdxyVrcdXdvZqN280AKpm4gFM5BEbyLoRrqJ7qSLUBLCi7qJjKKiAiusi+hmY2b2X+usTq7b0fX3gzPzvs/ZOc/7zB5ezgtzTgC3rbWVlyQiFxG7IiI/Hk8jYlG11RpxqPZ3o52n91a2JMbGtv+aVD4WBztP7504VjL+3hbVj8SWiPi4K4k1S67MWx4e6e8plYqD4/0NQ/sObCgPjzzQt69nT3FPcf9DD27e3NnZ0bHlxtX61sqdKz5/tHvz0ZWfrlr711fHk+iq1h0z6riRklmC3fORLEPT60yaMxwIDVva+sy8nPMAwM2tcp3fFBHN1ev9fDRF7eLtw1d2Xs7HI7Nepi5//MRP/+U4AQAAgOs31jQGAAAALHhJZD0CAAAAYH5N/A7gYOfpvRPbfPzOYFmd2OodEZceq+08OH5v8ehk/ubqPcQRrdESEYt/T2L6baXJLMf8N1Y/PccDzFF5W7b5LzyZbf7297PNf/LLiEOHI+JMV53zPxk//65fx4z+zHvB714xxwRz9N232eZftybb/EcHIs5U5p+uevNfOjn/RJ35p3ni2Qlz8HL71Pw32rko/jn/TeVvmmX+67rG8e9bXnt/491z79Tbf/aziEuHI+5snnq2w+gV539rNVe9/E80WGd707r19eJPvRcxdirinqiff3qu2Z8PsaG3r1TsqL3Wz//JN68X68W7W2r1L54tfxJX/f53NVh/2w8Xzh+oEx/rruVff1e9/OlVv/+m8WdsNOLU8NeD9eKF52r5d89S/7X+/282mP+LHQ+frRc/9kGDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC2k0ZELpK0MNlO00Ihoi0i7ojFaWmgPHR/78AL+3dX9kUsi5a0t69U7IiIfK2fVPobq+2p/qYZ/c6IaI+I1/L/r/YLzw6UdmddPAAAACxwuYiLO179aGXW4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NbQFhG5SNJCRKQR8WM+TQuFrEcFAAAA3Ai5iIurTp44Xmn/kc96NAAAAMB8qKz/Lx/55VxY/wMAAMCCZf0PAAAAC9/09T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDNIFfdkrQQEWm1naaFQsSSiFgWLUlvX6nYERFLI+J8vuV/lf7GrAcNAAAANCQXcXFr69bvsx4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3hvLwSH9PqVQc1NDQ0JhsZD0zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQhfLwSH9PqVQcLGc9EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALKV/pxERGW7N78u9/ylI9um712U/JmvvkfEi8e3H3upZ2hocGMl/ttkfOjt8fimrGoAAAAApptYp0+s4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABpVHh7p7ymVioPz2Mi6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK7f3wEAAP//6TK2yA==") sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r2], 0x20}, 0x1, 0xd, 0x0, 0x80c5}, 0x20000000) r5 = gettid() r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8={"0065864b300ba9e07f3ee548"}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$FUSE(r7, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0x7, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x9, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0xc2, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x5, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x5, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x5, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) socket$caif_stream(0x25, 0x1, 0x3) 633.070793ms ago: executing program 2 (id=604): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x7ff, &(0x7f0000006680)) fallocate(0xffffffffffffffff, 0x0, 0x800657, 0x40000b7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) tee(r0, r0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f00000000c0)) 171.569018ms ago: executing program 3 (id=605): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x240080d5}, 0x24044040) io_setup(0x8, &(0x7f0000000540)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000080)="01fd0000fe", 0x5, 0x2a25}]) syz_open_dev$usbfs(&(0x7f0000000040), 0xb4f1, 0x40341) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x834) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f0000000000)=0xfffffc01, 0x0, 0x4) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000100)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x44}, [@IPSET_ATTR_ADT={0x0, 0x8, 0x0, 0x1, [{0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0x0, 0x18, 0x1, 0x0, 0xb6c}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x0, 0x7, 0x67}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0x0, 0x1b, 0x1, 0x0, 0x3}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x0, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x7fff}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 0s ago: executing program 2 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): RBP: 00007f17d95f6090 R08: 0000200000000080 R09: 0000000000000000 [ 267.783063][ T6572] R10: 000020000000e6c0 R11: 0000000000000246 R12: 0000000000000001 [ 267.783144][ T6572] R13: 00007f17db616038 R14: 00007f17db615fa0 R15: 00007ffff1edd138 [ 267.783269][ T6572] [ 268.535227][ T6579] loop4: detected capacity change from 0 to 512 [ 268.565439][ T6579] EXT4-fs: Ignoring removed bh option [ 268.653953][ T6579] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.704413][ T6580] loop2: detected capacity change from 0 to 1024 [ 268.740179][ T6579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.834133][ T6589] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 268.842462][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.171'. [ 268.906466][ T6579] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.028994][ T6590] loop0: detected capacity change from 0 to 512 [ 269.115512][ T6590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.229096][ T6590] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 271.393722][ T6603] loop3: detected capacity change from 0 to 32768 [ 271.977125][ T6603] [ 271.977125][ T6603] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.977125][ T6603] [ 272.009678][ T6603] ERROR: (device loop3): diWrite: ixpxd invalid [ 272.009678][ T6603] [ 272.026086][ T6603] ERROR: (device loop3): txAbort: [ 272.026086][ T6603] [ 272.036356][ T6603] jfs_create: dtSearch returned -17 [ 272.108393][ T6607] netlink: 5 bytes leftover after parsing attributes in process `syz.3.172'. [ 272.777513][ T6610] loop0: detected capacity change from 0 to 256 [ 272.897133][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.928629][ T30] libceph: connect (1)[c::]:6789 error -101 [ 272.965212][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 272.999259][ T30] libceph: connect (1)[c::]:6789 error -101 [ 273.040154][ T6610] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 273.054304][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 273.140785][ T6613] ceph: No mds server is up or the cluster is laggy [ 273.313328][ T30] libceph: connect (1)[c::]:6789 error -101 [ 273.319480][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 273.409660][ T6614] loop5: detected capacity change from 0 to 4096 [ 273.528196][ T6614] ext4: Unknown parameter 'fsuuid' [ 275.111462][ T5791] [ 275.111462][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.111462][ T5791] [ 275.201914][ T5791] [ 275.201914][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.201914][ T5791] [ 275.821385][ T6638] loop5: detected capacity change from 0 to 256 [ 276.038790][ T6638] exfat: Deprecated parameter 'utf8' [ 276.194884][ T6638] exfat: Deprecated parameter 'utf8' [ 278.391084][ T6638] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 278.802328][ T29] audit: type=1800 audit(1773076540.992:41): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.184" name="bus" dev="loop5" ino=1048626 res=0 errno=0 [ 278.958239][ T6649] loop0: detected capacity change from 0 to 512 [ 279.112961][ T6649] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.188: Invalid inode bitmap blk 4 in block_group 0 [ 279.253121][ T6649] loop0: lost filesystem error report for type 5 error -117 [ 279.256654][ T6649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.404547][ T6644] loop2: detected capacity change from 0 to 2048 [ 279.499011][ T6649] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 279.523397][ T6644] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 279.557549][ T6644] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 279.614042][ T6649] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.188: Invalid inode bitmap blk 4 in block_group 0 [ 279.641742][ T6649] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 279.771815][ T6112] udevd[6112]: incorrect ext4 checksum on /dev/loop2 [ 279.784417][ T6651] loop4: detected capacity change from 0 to 4096 [ 279.879289][ T6651] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 279.942792][ T5429] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 280.027534][ T6656] loop5: detected capacity change from 0 to 2048 [ 280.169931][ T5429] usb 1-1: Using ep0 maxpacket: 8 [ 280.205126][ T5429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.237523][ T6656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.278716][ T5429] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 280.337335][ T5429] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 280.397218][ T6651] ntfs3(loop4): Failed to initialize $Secure (-22). [ 280.402640][ T5429] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 280.468936][ T5429] usb 1-1: Product: syz [ 280.491469][ T29] audit: type=1800 audit(1773076542.702:42): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.189" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 280.499764][ T5429] usb 1-1: Manufacturer: syz [ 280.594993][ T5429] usb 1-1: SerialNumber: syz [ 281.175376][ T5429] usb 1-1: selecting invalid altsetting 1 [ 281.181310][ T5429] catc 1-1:8.0: Can't set altsetting 1. [ 281.271628][ T5429] catc 1-1:8.0: probe with driver catc failed with error -5 [ 281.392420][ T5429] usb 1-1: USB disconnect, device number 8 [ 281.481897][ T6663] loop5: detected capacity change from 0 to 128 [ 281.557122][ T6663] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 281.614157][ T6663] hpfs: filesystem error: improperly stopped [ 281.621138][ T6663] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 281.631947][ T6664] loop4: detected capacity change from 0 to 512 [ 281.642322][ T6663] hpfs: You really don't want any checks? You are crazy... [ 281.723926][ T6663] hpfs: Code page index out of array [ 281.729746][ T6664] EXT4-fs: Mount option(s) incompatible with ext2 [ 281.746875][ T6663] hpfs: code page support is disabled [ 281.786006][ T6663] hpfs: hpfs_map_4sectors(): unaligned read [ 281.829910][ T6663] hpfs: hpfs_map_4sectors(): unaligned read [ 281.867863][ T6663] hpfs: filesystem error: unable to find root dir [ 282.042980][ T6663] hpfs: hpfs_map_4sectors(): unaligned read [ 282.090052][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.191'. [ 282.112665][ T6663] netlink: 48 bytes leftover after parsing attributes in process `syz.5.191'. [ 282.180618][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.332444][ T6668] loop2: detected capacity change from 0 to 4096 [ 282.375900][ T6668] ext4: Unknown parameter 'fsuuid' [ 282.776768][ T6678] loop0: detected capacity change from 0 to 512 [ 282.836248][ T6678] udf: Unknown parameter 'L"TÑCÒ /‹–­‡á!Ùâzœ”ÂÉ*ö>J–\þÅ’¶ [ 282.836248][ T6678] ^–Û>Ð(ñ^ö—ir±£AÎ °' [ 284.875609][ T6701] loop3: detected capacity change from 0 to 64 [ 285.239915][ T6699] evm: overlay not supported [ 285.255649][ T6695] ceph: No mds server is up or the cluster is laggy [ 285.265008][ T5429] libceph: connect (1)[c::]:6789 error -101 [ 285.265307][ T5429] libceph: mon0 (1)[c::]:6789 connect error [ 285.524524][ T5429] libceph: connect (1)[c::]:6789 error -101 [ 285.530857][ T5429] libceph: mon0 (1)[c::]:6789 connect error [ 286.629236][ T6714] loop2: detected capacity change from 0 to 128 [ 286.976316][ T6714] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 287.176516][ T6714] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.491108][ T6714] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #11: comm syz.2.208: No space for directory leaf checksum. Please run e2fsck -D. [ 287.526734][ T6714] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #11: comm syz.2.208: checksumming directory block 0 [ 287.658515][ T49] Bluetooth: hci5: unexpected subevent 0x10 length: 32 > 2 [ 287.918017][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 287.928605][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 287.940018][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 287.942585][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 287.947666][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 288.644548][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.709222][ T6734] loop3: detected capacity change from 0 to 4096 [ 288.785681][ T6734] ext4: Unknown parameter 'fsuuid' [ 288.870235][ T6736] mkiss: ax0: crc mode is auto. [ 289.266817][ T6743] loop0: detected capacity change from 0 to 64 [ 289.389917][ T6736] loop4: detected capacity change from 0 to 512 [ 290.473901][ T6744] loop2: detected capacity change from 0 to 8192 [ 291.423734][ T6757] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 291.431674][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.222'. [ 291.744516][ T6757] team0: Port device netdevsim1 added [ 291.947659][ T6762] loop2: detected capacity change from 0 to 512 [ 292.072821][ T6762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.133428][ T6762] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 292.175433][ T5785] Bluetooth: hci4: unexpected subevent 0x10 length: 32 > 2 [ 293.366574][ T6776] loop3: detected capacity change from 0 to 64 [ 294.125386][ T29] audit: type=1800 audit(1773076556.322:43): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 294.425766][ T6782] loop2: detected capacity change from 0 to 4096 [ 294.500761][ T6782] ext4: Unknown parameter 'fsuuid' [ 295.440520][ T6792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.233'. [ 296.566691][ T6803] loop2: detected capacity change from 0 to 256 [ 296.670896][ T6803] exfat: Deprecated parameter 'namecase' [ 296.718365][ T6803] exfat: Deprecated parameter 'utf8' [ 296.806685][ T5785] Bluetooth: hci4: unexpected subevent 0x10 length: 32 > 2 [ 297.252767][ T6803] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 298.583530][ T6827] loop2: detected capacity change from 0 to 16 [ 298.626527][ T6827] erofs (device loop2): mounted with root inode @ nid 36. [ 298.693834][ T6827] FAULT_INJECTION: forcing a failure. [ 298.693834][ T6827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.804028][ T6827] CPU: 1 UID: 0 PID: 6827 Comm: syz.2.245 Not tainted syzkaller #0 PREEMPT(full) [ 298.804163][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.804234][ T6827] Call Trace: [ 298.804280][ T6827] [ 298.804327][ T6827] __dump_stack+0x26/0x30 [ 298.804482][ T6827] dump_stack_lvl+0x14c/0x1c0 [ 298.804637][ T6827] dump_stack+0x1e/0x25 [ 298.804777][ T6827] should_fail_ex+0x7e2/0x8c0 [ 298.804934][ T6827] should_fail+0x2a/0x40 [ 298.805061][ T6827] should_fail_usercopy+0x2e/0x40 [ 298.805206][ T6827] _copy_from_user+0x33/0x100 [ 298.805345][ T6827] do_handle_open+0x8cc/0x1330 [ 298.805497][ T6827] __x64_sys_open_by_handle_at+0xa6/0x100 [ 298.805645][ T6827] x64_sys_call+0x1943/0x3ea0 [ 298.805801][ T6827] do_syscall_64+0x134/0xf80 [ 298.805924][ T6827] ? clear_bhb_loop+0x50/0xa0 [ 298.806065][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.806201][ T6827] RIP: 0033:0x7f761279c799 [ 298.806296][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.806401][ T6827] RSP: 002b:00007f761358f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 298.806535][ T6827] RAX: ffffffffffffffda RBX: 00007f7612a15fa0 RCX: 00007f761279c799 [ 298.806626][ T6827] RDX: 0000000000440200 RSI: 0000200000000180 RDI: 0000000000000005 [ 298.806707][ T6827] RBP: 00007f761358f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.806787][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.806861][ T6827] R13: 00007f7612a16038 R14: 00007f7612a15fa0 R15: 00007fffb7cf04a8 [ 298.806985][ T6827] [ 299.064223][ T6826] loop3: detected capacity change from 0 to 1024 [ 299.403253][ T6824] netlink: 26096 bytes leftover after parsing attributes in process `syz.3.244'. [ 301.331546][ T5886] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 301.495669][ T6847] loop2: detected capacity change from 0 to 16 [ 301.526876][ T10] hid (null): report_id 11418 is invalid [ 301.533528][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 301.553122][ T6843] program syz.0.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.610548][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.615797][ T6847] erofs (device loop2): mounted with root inode @ nid 36. [ 301.636458][ T6843] 8021q: VLANs not supported on nlmon0 [ 301.652905][ T10] hid (null): unknown global tag 0xc [ 301.669248][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.695423][ T10] hid-generic 0006:0002:FFFFFFF1.0001: unknown main item tag 0x6 [ 301.717315][ T6831] loop5: detected capacity change from 0 to 4096 [ 301.732526][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 301.765674][ T6831] ext4: Unknown parameter 'fsuuid' [ 301.777754][ T10] hid-generic 0006:0002:FFFFFFF1.0001: unexpected long global item [ 301.812644][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.835009][ T10] hid-generic 0006:0002:FFFFFFF1.0001: probe with driver hid-generic failed with error -22 [ 301.887924][ T5886] usb 5-1: config 0 descriptor?? [ 302.046648][ T5886] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 302.137550][ T5886] usbhid 5-1:0.0: can't add hid device: -22 [ 302.243007][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 303.452305][ T5886] usb 5-1: USB disconnect, device number 3 [ 304.027285][ T5785] Bluetooth: hci0: unexpected subevent 0x10 length: 32 > 2 [ 305.780693][ T6868] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 305.950007][ T6871] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 306.193374][ T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 306.492641][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 306.542907][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.602573][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.683099][ T30] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 306.723469][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.784903][ T30] usb 3-1: config 0 descriptor?? [ 306.883977][ T30] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 306.938708][ T30] usbhid 3-1:0.0: can't add hid device: -22 [ 307.028166][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 308.454669][ T30] usb 3-1: USB disconnect, device number 6 [ 308.961804][ T6898] loop2: detected capacity change from 0 to 512 [ 308.971677][ T6898] EXT4-fs: Ignoring removed bh option [ 308.980930][ T6898] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.177077][ T6898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.263479][ T6898] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.865483][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.563188][ T6914] loop2: detected capacity change from 0 to 4096 [ 311.621323][ T6914] ext4: Unknown parameter 'fsuuid' [ 311.732843][ T5785] Bluetooth: hci3: unexpected subevent 0x10 length: 32 > 2 [ 311.820890][ T6918] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 312.160697][ T6923] loop0: detected capacity change from 0 to 256 [ 312.178562][ T6922] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 312.221478][ T6923] exfat: Deprecated parameter 'utf8' [ 312.308509][ T6923] exfat: Deprecated parameter 'utf8' [ 312.471946][ T6923] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 312.852978][ T29] audit: type=1800 audit(1773076575.072:44): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.270" name="bus" dev="loop0" ino=1048632 res=0 errno=0 [ 313.655913][ T6935] loop4: detected capacity change from 0 to 64 [ 314.000836][ T5886] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 314.252808][ T6934] loop2: detected capacity change from 0 to 4096 [ 314.253273][ T5886] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 314.317105][ T5886] usb 4-1: config 0 has no interface number 0 [ 314.374829][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.476300][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 314.539960][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 314.607834][ T6934] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 314.625194][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 314.686268][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 314.743269][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.792788][ T5886] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 314.861033][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.934002][ T5886] usb 4-1: config 0 descriptor?? [ 314.942026][ T6939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.983558][ T6939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.033837][ T5886] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 315.394767][ T5886] usb 4-1: USB disconnect, device number 5 [ 315.534309][ T5886] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 315.898422][ T6951] loop4: detected capacity change from 0 to 1024 [ 316.305300][ T6958] overlayfs: failed lookup in lower (newroot/61, name='bus', err=-40): overlapping layers [ 316.643100][ T6951] netlink: 26096 bytes leftover after parsing attributes in process `syz.4.279'. [ 317.069335][ T6962] loop3: detected capacity change from 0 to 4096 [ 317.321425][ T6962] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 317.362310][ T6962] UDF-fs: Scanning with blocksize 512 failed [ 317.455142][ T6962] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 317.745336][ T6962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.840570][ T6965] loop2: detected capacity change from 0 to 4096 [ 320.338198][ T6965] NILFS (loop2): error -4 creating segctord thread [ 327.015202][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.021810][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.957661][ T6983] loop3: detected capacity change from 0 to 8 [ 328.059930][ T6983] SQUASHFS error: xz decompression failed, data probably corrupt [ 328.128642][ T6983] SQUASHFS error: Failed to read block 0x108: -5 [ 328.154003][ T6983] SQUASHFS error: Unable to read metadata cache entry [106] [ 328.192401][ T6983] SQUASHFS error: Unable to read inode 0x11f [ 328.289613][ T6979] loop0: detected capacity change from 0 to 4096 [ 328.305842][ T6979] ext4: Unknown parameter 'fsuuid' [ 328.801516][ T6988] loop5: detected capacity change from 0 to 64 [ 328.826545][ T6988] hfs: can't find a HFS filesystem on dev loop5 [ 329.115845][ T6993] syz.3.294 uses obsolete (PF_INET,SOCK_PACKET) [ 329.455768][ T6994] loop3: detected capacity change from 0 to 1024 [ 329.595461][ T6994] hfsplus: failed to load root directory [ 329.959180][ T6999] openvswitch: netlink: IP tunnel dst address not specified [ 331.592989][ T7010] loop0: detected capacity change from 0 to 40427 [ 332.087592][ T7010] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 332.105223][ T7008] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 332.195591][ T7012] loop5: detected capacity change from 0 to 256 [ 332.398594][ T7012] exfat: Deprecated parameter 'utf8' [ 332.502953][ T7012] exfat: Deprecated parameter 'utf8' [ 332.762415][ T7012] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 333.147470][ T5071] Bluetooth: hci5: unexpected event for opcode 0x0c26 [ 333.172450][ T29] audit: type=1800 audit(1773076595.382:45): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.301" name="bus" dev="loop5" ino=1048633 res=0 errno=0 [ 333.373927][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.435048][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.448968][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.465847][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.484069][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.298205][ T7032] loop0: detected capacity change from 0 to 1024 [ 334.532380][ T7032] hfsplus: failed to load root directory [ 334.832960][ T7035] can: request_module (can-proto-0) failed. [ 335.558902][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 335.609921][ T5785] Bluetooth: hci6: command tx timeout [ 335.796122][ T7043] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 336.210927][ T7045] netlink: 'syz.0.309': attribute type 10 has an invalid length. [ 336.261465][ T7033] loop2: detected capacity change from 0 to 2048 [ 336.304023][ T7033] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 336.335362][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.309'. [ 336.405029][ T7033] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 336.701015][ T5963] udevd[5963]: incorrect ext4 checksum on /dev/loop2 [ 337.672440][ T5785] Bluetooth: hci6: command tx timeout [ 338.013202][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 338.205071][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 338.245538][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.335762][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.367774][ T7061] loop0: detected capacity change from 0 to 256 [ 338.372864][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 338.441856][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.517379][ T30] usb 6-1: config 0 descriptor?? [ 338.545824][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 338.571061][ T30] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 338.634822][ T30] usbhid 6-1:0.0: can't add hid device: -22 [ 338.676555][ T30] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 338.764797][ T7061] FAT-fs (loop0): Directory bread(block 64) failed [ 338.781417][ T7061] FAT-fs (loop0): Directory bread(block 65) failed [ 338.863150][ T7061] FAT-fs (loop0): Directory bread(block 66) failed [ 338.909733][ T7061] FAT-fs (loop0): Directory bread(block 67) failed [ 338.994767][ T7061] FAT-fs (loop0): Directory bread(block 68) failed [ 339.119278][ T7061] FAT-fs (loop0): Directory bread(block 69) failed [ 339.216346][ T7061] FAT-fs (loop0): Directory bread(block 70) failed [ 339.264284][ T7061] FAT-fs (loop0): Directory bread(block 71) failed [ 339.271765][ T7061] FAT-fs (loop0): Directory bread(block 72) failed [ 339.281172][ T7061] FAT-fs (loop0): Directory bread(block 73) failed [ 339.311028][ T30] libceph: connect (1)[c::]:6789 error -101 [ 339.336806][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 339.373934][ T7066] ceph: No mds server is up or the cluster is laggy [ 339.752655][ T5785] Bluetooth: hci6: command tx timeout [ 340.049149][ T30] usb 6-1: USB disconnect, device number 2 [ 340.359951][ T7073] loop3: detected capacity change from 0 to 256 [ 340.409379][ T7073] exfat: Deprecated parameter 'utf8' [ 340.447010][ T7073] exfat: Deprecated parameter 'utf8' [ 340.695670][ T7073] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 340.790043][ T7078] loop2: detected capacity change from 0 to 1024 [ 340.953381][ T5785] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 340.988715][ T7078] hfsplus: failed to load root directory [ 341.001013][ T29] audit: type=1800 audit(1773076603.212:46): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.315" name="bus" dev="loop3" ino=1048634 res=0 errno=0 [ 341.282336][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.311310][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.348269][ T7024] bridge_slave_0: entered allmulticast mode [ 341.393645][ T7024] bridge_slave_0: entered promiscuous mode [ 341.503520][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.562549][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.595462][ T7024] bridge_slave_1: entered allmulticast mode [ 341.655729][ T7024] bridge_slave_1: entered promiscuous mode [ 341.842305][ T5785] Bluetooth: hci6: command tx timeout [ 342.130273][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.439661][ T7082] loop5: detected capacity change from 0 to 4096 [ 342.480534][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.483008][ T7082] ext4: Unknown parameter 'fsuuid' [ 343.004687][ T7092] loop3: detected capacity change from 0 to 2048 [ 343.102632][ T7092] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 343.121592][ T7092] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 344.948578][ T7104] loop0: detected capacity change from 0 to 2048 [ 345.342607][ T7104] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 345.368242][ T7104] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 350.251921][ T7024] team0: Port device team_slave_0 added [ 350.781355][ T7024] team0: Port device team_slave_1 added [ 351.326330][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 351.537313][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 351.579998][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.654369][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.711699][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.723923][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 351.724060][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.955488][ T5886] usb 3-1: config 0 descriptor?? [ 351.982306][ T5886] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 351.990725][ T5886] usbhid 3-1:0.0: can't add hid device: -22 [ 352.000455][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 352.004242][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.121827][ T7116] ceph: No mds server is up or the cluster is laggy [ 352.135707][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 352.152776][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 352.314527][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.694391][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.731524][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.855601][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.017435][ T1089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.158357][ T7127] loop3: detected capacity change from 0 to 1024 [ 353.225783][ T7129] loop5: detected capacity change from 0 to 256 [ 353.295933][ T7129] exfat: Deprecated parameter 'utf8' [ 353.301846][ T7129] exfat: Deprecated parameter 'utf8' [ 353.393157][ T7127] hfsplus: failed to load root directory [ 353.600461][ T5886] usb 3-1: USB disconnect, device number 7 [ 353.614025][ T7129] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 353.719949][ T1089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.860167][ T5785] Bluetooth: hci5: unexpected event for opcode 0x0c26 [ 353.894385][ T29] audit: type=1800 audit(1773076616.112:47): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.331" name="bus" dev="loop5" ino=1048635 res=0 errno=0 [ 354.049168][ T7139] binder: 7132:7139 ioctl c0306201 200000000540 returned -22 [ 354.121554][ T1089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.364333][ T7024] hsr_slave_0: entered promiscuous mode [ 354.421519][ T7024] hsr_slave_1: entered promiscuous mode [ 354.468862][ T7024] debugfs: 'hsr0' already exists in 'hsr' [ 354.534083][ T7024] Cannot create hsr debugfs directory [ 354.637544][ T1089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.741945][ T7143] loop0: detected capacity change from 0 to 4096 [ 355.800784][ T7143] ext4: Unknown parameter 'fsuuid' [ 356.793996][ T1089] bridge_slave_1: left allmulticast mode [ 356.799847][ T1089] bridge_slave_1: left promiscuous mode [ 356.843504][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.909363][ T1089] bridge_slave_0: left allmulticast mode [ 356.946837][ T1089] bridge_slave_0: left promiscuous mode [ 357.003500][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.534244][ T10] libceph: connect (1)[c::]:6789 error -101 [ 357.596117][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 357.677919][ T7158] ceph: No mds server is up or the cluster is laggy [ 357.834427][ T7163] netlink: 'syz.2.341': attribute type 10 has an invalid length. [ 357.846154][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'. [ 357.876648][ T7157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.340'. [ 358.041709][ T7164] loop2: detected capacity change from 0 to 512 [ 358.106419][ T7164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.200156][ T7164] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 358.421174][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.491247][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.626928][ T1089] bond0 (unregistering): Released all slaves [ 360.020253][ T7172] loop5: detected capacity change from 0 to 256 [ 360.027149][ T5886] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 360.143686][ T7172] exfat: Deprecated parameter 'utf8' [ 360.234155][ T7172] exfat: Deprecated parameter 'utf8' [ 360.265910][ T7024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.284515][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 360.316699][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.376561][ T7024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.387900][ T7172] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 360.402724][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.453980][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 360.493233][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.548968][ T7024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.567396][ T5886] usb 4-1: config 0 descriptor?? [ 360.597402][ T5785] Bluetooth: hci5: unexpected event for opcode 0x0c26 [ 360.605526][ T29] audit: type=1800 audit(1773076622.812:48): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.344" name="bus" dev="loop5" ino=1048636 res=0 errno=0 [ 360.694771][ T5886] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 360.762831][ T7176] binder: 7174:7176 ioctl c0306201 200000000540 returned -22 [ 360.784067][ T5886] usbhid 4-1:0.0: can't add hid device: -22 [ 360.790620][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 360.975877][ T7024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.336345][ T1089] hsr_slave_0: left promiscuous mode [ 361.402436][ T1089] hsr_slave_1: left promiscuous mode [ 361.452588][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.524400][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.594088][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.656034][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.840016][ T1089] veth1_macvtap: left promiscuous mode [ 361.883993][ T7190] binder: BINDER_SET_CONTEXT_MGR already set [ 361.890232][ T7190] binder: 7183:7190 ioctl 4018620d 2000000006c0 returned -16 [ 361.898669][ T1089] veth0_macvtap: left promiscuous mode [ 361.930022][ T1089] veth1_vlan: left promiscuous mode [ 361.993177][ T1089] veth0_vlan: left promiscuous mode [ 362.243128][ T5429] usb 4-1: USB disconnect, device number 6 [ 363.559102][ T7202] loop2: detected capacity change from 0 to 4096 [ 363.626317][ T7202] ext4: Unknown parameter 'fsuuid' [ 364.713421][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 364.719976][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 364.753044][ T7216] ceph: No mds server is up or the cluster is laggy [ 364.817666][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 364.933333][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 365.046865][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.353'. [ 366.353568][ T7225] netlink: 'syz.3.354': attribute type 10 has an invalid length. [ 366.455223][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.354'. [ 366.577409][ T7228] loop3: detected capacity change from 0 to 512 [ 366.625178][ T7228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.698602][ T7228] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 366.750595][ T7232] loop2: detected capacity change from 0 to 256 [ 366.775065][ T7232] exfat: Deprecated parameter 'utf8' [ 366.801854][ T7225] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 366.827561][ T7232] exfat: Deprecated parameter 'utf8' [ 366.915870][ T7232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 366.941904][ T7225] team0: Failed to send options change via netlink (err -105) [ 367.009501][ T7225] team0: Port device netdevsim1 added [ 367.169293][ T5785] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 367.235129][ T29] audit: type=1800 audit(1773076629.422:49): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="bus" dev="loop2" ino=1048637 res=0 errno=0 [ 367.530953][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.875588][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.910960][ T7237] binder: 7235:7237 ioctl c0306201 200000000540 returned -22 [ 368.038692][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.046401][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.091804][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 368.171840][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.179192][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.669951][ T10] libceph: connect (1)[c::]:6789 error -101 [ 368.708188][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 368.739935][ T7244] ceph: No mds server is up or the cluster is laggy [ 368.886979][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 368.971893][ T7251] netlink: 'syz.5.361': attribute type 29 has an invalid length. [ 369.068354][ T7253] FAULT_INJECTION: forcing a failure. [ 369.068354][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 369.081673][ T7253] CPU: 1 UID: 0 PID: 7253 Comm: syz.0.360 Not tainted syzkaller #0 PREEMPT(full) [ 369.081810][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.081886][ T7253] Call Trace: [ 369.081933][ T7253] [ 369.081980][ T7253] __dump_stack+0x26/0x30 [ 369.082203][ T7253] dump_stack_lvl+0x14c/0x1c0 [ 369.082354][ T7253] dump_stack+0x1e/0x25 [ 369.082489][ T7253] should_fail_ex+0x7e2/0x8c0 [ 369.082736][ T7253] should_failslab+0x158/0x200 [ 369.082924][ T7253] __kmalloc_noprof+0x1e0/0x1680 [ 369.083107][ T7253] ? kfree+0x20/0x1130 [ 369.083259][ T7253] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 369.083450][ T7253] ? tomoyo_path_number_perm+0x81/0x7d0 [ 369.083653][ T7253] ? filter_irq_stacks+0x49/0x190 [ 369.083861][ T7253] ? kmsan_get_metadata+0xf1/0x160 [ 369.084059][ T7253] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.084243][ T7253] tomoyo_realpath_from_path+0xeb/0x9f0 [ 369.084408][ T7253] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.084595][ T7253] ? __srcu_read_lock+0x5e/0xd0 [ 369.084765][ T7253] tomoyo_path_number_perm+0x1d0/0x7d0 [ 369.084973][ T7253] ? kmsan_get_metadata+0xf1/0x160 [ 369.085191][ T7253] tomoyo_file_ioctl+0x3d/0x50 [ 369.085339][ T7253] security_file_ioctl+0x139/0x570 [ 369.085577][ T7253] __se_sys_ioctl+0xbb/0x400 [ 369.085807][ T7253] __x64_sys_ioctl+0x97/0xe0 [ 369.085971][ T7253] x64_sys_call+0x1975/0x3ea0 [ 369.086136][ T7253] do_syscall_64+0x134/0xf80 [ 369.086327][ T7253] ? clear_bhb_loop+0x50/0xa0 [ 369.086465][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.086607][ T7253] RIP: 0033:0x7f17db39c799 [ 369.086705][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.086815][ T7253] RSP: 002b:00007f17d95d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.086936][ T7253] RAX: ffffffffffffffda RBX: 00007f17db616090 RCX: 00007f17db39c799 [ 369.087034][ T7253] RDX: 0000200000000500 RSI: 0000000040585883 RDI: 0000000000000004 [ 369.087117][ T7253] RBP: 00007f17d95d5090 R08: 0000000000000000 R09: 0000000000000000 [ 369.087195][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.087270][ T7253] R13: 00007f17db616128 R14: 00007f17db616090 R15: 00007ffff1edd138 [ 369.087393][ T7253] [ 369.387828][ T7253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.442942][ T7254] netlink: 'syz.5.361': attribute type 29 has an invalid length. [ 369.486207][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 369.517915][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 369.574881][ T7257] overlay: ./file0 is not a directory [ 369.714797][ T7250] ceph: No mds server is up or the cluster is laggy [ 369.725724][ T7256] netlink: 'syz.5.361': attribute type 29 has an invalid length. [ 369.993293][ T7257] can0: slcan on pty26. [ 370.304939][ T7255] can0 (unregistered): slcan off pty26. [ 370.631584][ T30] libceph: connect (1)[c::]:6789 error -101 [ 370.719028][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 370.812942][ T7267] ceph: No mds server is up or the cluster is laggy [ 370.921816][ T7272] binder: BINDER_SET_CONTEXT_MGR already set [ 370.945449][ T7272] binder: 7271:7272 ioctl 4018620d 2000000006c0 returned -16 [ 371.021059][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.363'. [ 371.040578][ T7277] loop5: detected capacity change from 0 to 4096 [ 371.118381][ T7277] ext4: Unknown parameter 'fsuuid' [ 371.858530][ T7291] overlayfs: failed lookup in lower (newroot/84, name='bus', err=-40): overlapping layers [ 371.880236][ T7295] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 371.922665][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.368'. [ 371.943275][ T7294] overlayfs: failed lookup in lower (newroot/84, name='bus', err=-40): overlapping layers [ 372.130085][ T7295] loop0: detected capacity change from 0 to 512 [ 372.177774][ T7295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.308996][ T7295] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 372.514884][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.942372][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 373.200737][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 373.242510][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.270685][ T9] usb 3-1: Product: syz [ 373.290230][ T9] usb 3-1: Manufacturer: syz [ 373.299551][ T9] usb 3-1: SerialNumber: syz [ 373.386905][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 373.432974][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 373.985823][ T30] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 374.468953][ T7325] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.374'. [ 374.579163][ T7319] macvtap1: entered promiscuous mode [ 374.661792][ T7319] dummy0: entered promiscuous mode [ 374.748512][ T7319] team0: Device macvtap1 failed to register rx_handler [ 374.853562][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.375'. [ 375.128475][ T7319] dummy0: left promiscuous mode [ 375.482714][ T9] libceph: connect (1)[c::]:6789 error -101 [ 375.489208][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 375.656227][ T7325] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]·=&öq­!¾>Ýsó³Îú*Š®!)\<)K [ 375.763187][ T9] libceph: connect (1)[c::]:6789 error -101 [ 375.827520][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 375.840245][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 376.331959][ T7334] ceph: No mds server is up or the cluster is laggy [ 376.361407][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 376.373387][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 376.937766][ T7024] veth0_vlan: entered promiscuous mode [ 377.032447][ T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 377.131143][ T7024] veth1_vlan: entered promiscuous mode [ 377.140274][ T7348] overlayfs: failed lookup in lower (newroot/56, name='bus', err=-40): overlapping layers [ 377.245819][ T7348] overlayfs: failed lookup in lower (newroot/56, name='bus', err=-40): overlapping layers [ 377.264094][ T30] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 377.294188][ T30] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 377.387602][ T30] usb 1-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.388166][ T7345] loop2: detected capacity change from 0 to 4096 [ 377.476405][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.479777][ T7345] ext4: Unknown parameter 'fsuuid' [ 377.517933][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.577419][ T30] usb 1-1: Product: syz [ 377.581782][ T30] usb 1-1: Manufacturer: syz [ 377.648832][ T30] usb 1-1: SerialNumber: syz [ 377.753112][ T30] cdc_ncm 1-1:3.0: invalid descriptor buffer length [ 377.774905][ T7024] veth0_macvtap: entered promiscuous mode [ 377.798953][ T30] cdc_ncm 1-1:3.0: CDC Union missing and no IAD found [ 377.852599][ T30] cdc_ncm 1-1:3.0: bind() failure [ 377.889526][ T7024] veth1_macvtap: entered promiscuous mode [ 378.014244][ T30] usb 1-1: USB disconnect, device number 9 [ 378.277015][ T7359] netlink: 'syz.5.381': attribute type 10 has an invalid length. [ 378.285218][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.5.381'. [ 378.320246][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.429014][ T7360] loop5: detected capacity change from 0 to 512 [ 378.524043][ T7360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.618016][ T7360] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 378.644770][ T7356] loop3: detected capacity change from 0 to 4096 [ 378.660273][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.718011][ T7356] ext4: Unknown parameter 'fsuuid' [ 378.972249][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.041244][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.101102][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.211376][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.889407][ T7364] loop2: detected capacity change from 0 to 4096 [ 379.960049][ T7364] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 380.019832][ T7364] ntfs3(loop2): ino=3, mi_enum_attr [ 380.440300][ T7381] FAULT_INJECTION: forcing a failure. [ 380.440300][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 380.543542][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.5.385 Not tainted syzkaller #0 PREEMPT(full) [ 380.543673][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.543744][ T7381] Call Trace: [ 380.543791][ T7381] [ 380.543837][ T7381] __dump_stack+0x26/0x30 [ 380.543995][ T7381] dump_stack_lvl+0x14c/0x1c0 [ 380.544148][ T7381] dump_stack+0x1e/0x25 [ 380.544282][ T7381] should_fail_ex+0x7e2/0x8c0 [ 380.544445][ T7381] should_failslab+0x158/0x200 [ 380.544575][ T7381] kmem_cache_alloc_node_noprof+0x14c/0x12d0 [ 380.544711][ T7381] ? kmsan_get_metadata+0xf1/0x160 [ 380.544898][ T7381] ? __alloc_skb+0x744/0x1190 [ 380.545187][ T7381] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 380.545371][ T7381] __alloc_skb+0x744/0x1190 [ 380.545531][ T7381] ? __alloc_skb+0x35e/0x1190 [ 380.545683][ T7381] ? netlink_autobind+0x3b0/0x430 [ 380.545876][ T7381] netlink_alloc_large_skb+0xa5/0x290 [ 380.546080][ T7381] netlink_sendmsg+0xae9/0x1250 [ 380.546241][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.546361][ T7381] ____sys_sendmsg+0xf37/0xfd0 [ 380.546539][ T7381] ___sys_sendmsg+0x271/0x3b0 [ 380.546654][ T7381] ? kmsan_get_metadata+0xf1/0x160 [ 380.546839][ T7381] ? __rcu_read_unlock+0x6c/0xd0 [ 380.547035][ T7381] ? __fget_files+0x3b4/0x4a0 [ 380.547197][ T7381] ? __fget_files+0x3b9/0x4a0 [ 380.547333][ T7381] ? kmsan_get_metadata+0xf1/0x160 [ 380.547502][ T7381] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 380.547686][ T7381] __x64_sys_sendmsg+0x211/0x3e0 [ 380.547824][ T7381] ? kmsan_get_metadata+0xf1/0x160 [ 380.548018][ T7381] x64_sys_call+0x1e20/0x3ea0 [ 380.548184][ T7381] do_syscall_64+0x134/0xf80 [ 380.548308][ T7381] ? clear_bhb_loop+0x50/0xa0 [ 380.548453][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.548588][ T7381] RIP: 0033:0x7f88cbd9c799 [ 380.548685][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.548791][ T7381] RSP: 002b:00007f88c9ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.548922][ T7381] RAX: ffffffffffffffda RBX: 00007f88cc015fa0 RCX: 00007f88cbd9c799 [ 380.549013][ T7381] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 380.549090][ T7381] RBP: 00007f88c9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.549168][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.549242][ T7381] R13: 00007f88cc016038 R14: 00007f88cc015fa0 R15: 00007ffd55410848 [ 380.549371][ T7381] [ 381.286803][ T5429] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 381.692490][ T5429] usb 1-1: Using ep0 maxpacket: 8 [ 381.863638][ T5429] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 381.910765][ T5429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.932370][ T5429] usb 1-1: Product: syz [ 381.936734][ T5429] usb 1-1: Manufacturer: syz [ 381.941503][ T5429] usb 1-1: SerialNumber: syz [ 382.057418][ T5429] usb 1-1: config 0 descriptor?? [ 382.151324][ T5429] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 383.044836][ T5429] gspca_sonixj: reg_w1 err -71 [ 383.050100][ T5429] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 383.183810][ T5429] usb 1-1: USB disconnect, device number 10 [ 383.318562][ T7388] loop3: detected capacity change from 0 to 2048 [ 383.599208][ T7388] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 383.696230][ T7388] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 383.734031][ T5963] udevd[5963]: incorrect ext4 checksum on /dev/loop3 [ 384.756854][ T7413] overlayfs: failed lookup in lower (newroot/90, name='bus', err=-40): overlapping layers [ 384.839772][ T7413] overlayfs: failed lookup in lower (newroot/90, name='bus', err=-40): overlapping layers [ 384.982382][ T7417] loop5: detected capacity change from 0 to 128 [ 385.026164][ T7417] hpfs: Unknown parameter 'e‚s' [ 385.095412][ T29] audit: type=1326 audit(1773076647.302:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 385.242387][ T29] audit: type=1326 audit(1773076647.392:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 385.373679][ T29] audit: type=1326 audit(1773076647.392:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 385.513145][ T29] audit: type=1326 audit(1773076647.392:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 385.677893][ T29] audit: type=1326 audit(1773076647.392:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 385.809670][ T29] audit: type=1326 audit(1773076647.392:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 385.958270][ T29] audit: type=1326 audit(1773076647.412:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 386.771365][ T7432] loop5: detected capacity change from 0 to 32768 [ 386.781427][ T7432] ocfs2: Unknown parameter '0xffffffffffffffff' [ 386.821734][ T29] audit: type=1326 audit(1773076647.412:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 386.914599][ T29] audit: type=1326 audit(1773076647.412:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 387.063464][ T29] audit: type=1326 audit(1773076647.412:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 387.748597][ T7436] loop3: detected capacity change from 0 to 4096 [ 387.893430][ T7436] ext4: Unknown parameter 'fsuuid' [ 388.254186][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.260782][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.513354][ T5429] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 389.762863][ T5429] usb 3-1: Using ep0 maxpacket: 16 [ 389.791152][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.807271][ T5429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.872902][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.921402][ T5429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.952238][ T5429] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 389.961690][ T5429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.065151][ T5429] usb 3-1: config 0 descriptor?? [ 390.167350][ T5429] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 390.252511][ T5429] usbhid 3-1:0.0: can't add hid device: -22 [ 390.259057][ T5429] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 390.485105][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.577910][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.343152][ T7473] loop3: detected capacity change from 0 to 512 [ 391.427233][ T7473] EXT4-fs: Ignoring removed bh option [ 391.532846][ T7473] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.726176][ T5429] usb 3-1: USB disconnect, device number 9 [ 391.977426][ T7473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.142847][ T7473] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.394239][ T7482] binder: BINDER_SET_CONTEXT_MGR already set [ 392.400386][ T7482] binder: 7480:7482 ioctl 4018620d 2000000006c0 returned -16 [ 393.224166][ T5071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.233202][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.283418][ T5071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.301209][ T5071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.317630][ T5071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.328597][ T5071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.432780][ T5071] Bluetooth: hci3: command tx timeout [ 397.556811][ T5071] Bluetooth: hci3: command tx timeout [ 397.680084][ T7518] loop5: detected capacity change from 0 to 4096 [ 397.733416][ T5429] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 397.827942][ T7518] ext4: Unknown parameter 'fsuuid' [ 397.932574][ T5429] usb 4-1: Using ep0 maxpacket: 8 [ 398.035911][ T5429] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 398.129320][ T5429] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 398.252347][ T5429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 398.378160][ T5429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 398.609170][ T5429] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 398.657969][ T5429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.732189][ T5429] usb 4-1: Product: syz [ 398.736551][ T5429] usb 4-1: Manufacturer: syz [ 398.815082][ T5429] usb 4-1: SerialNumber: syz [ 398.879927][ T1089] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.959842][ T5429] usb 4-1: config 0 descriptor?? [ 399.051618][ T5429] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 399.306485][ T7520] loop3: detected capacity change from 0 to 512 [ 399.395465][ T1089] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.578277][ T5429] usb 4-1: USB disconnect, device number 7 [ 399.592643][ T5071] Bluetooth: hci3: command tx timeout [ 399.708087][ T7536] loop5: detected capacity change from 0 to 128 [ 399.764582][ T1089] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.794289][ T7536] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.859794][ T7488] chnl_net:caif_netlink_parms(): no params data found [ 399.928695][ T7536] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 400.138096][ T7536] futex_wake_op: syz.5.421 tries to shift op by -1; fix this program [ 400.217974][ T1089] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.245529][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 400.513175][ T5886] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.577356][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.610201][ T5886] usb 1-1: Product: syz [ 400.620255][ T5886] usb 1-1: Manufacturer: syz [ 400.628960][ T5886] usb 1-1: SerialNumber: syz [ 400.659296][ T6118] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.743798][ T5886] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.978872][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.444140][ T7552] loop5: detected capacity change from 0 to 256 [ 401.548913][ T5886] usb 1-1: USB disconnect, device number 11 [ 401.672670][ T5071] Bluetooth: hci3: command tx timeout [ 401.758940][ T7555] loop2: detected capacity change from 0 to 128 [ 401.782322][ T7552] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 401.784544][ T1089] bridge_slave_1: left allmulticast mode [ 401.869823][ T1089] bridge_slave_1: left promiscuous mode [ 401.900372][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.937942][ T1089] bridge_slave_0: left allmulticast mode [ 401.948843][ T1089] bridge_slave_0: left promiscuous mode [ 401.957193][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.957313][ T7555] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.057529][ T7552] exFAT-fs (loop5): error, in sector 160, dentry 12 should be unused, but 0x85 [ 402.079846][ T7555] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.133514][ T7552] exFAT-fs (loop5): Filesystem has been set read-only [ 402.213352][ T7555] futex_wake_op: syz.2.426 tries to shift op by -1; fix this program [ 402.239647][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 402.279079][ T9] ath9k_htc: Failed to initialize the device [ 402.351118][ T5886] usb 1-1: ath9k_htc: USB layer deinitialized [ 402.654615][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.318488][ T7568] loop2: detected capacity change from 0 to 512 [ 403.423577][ T7568] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.430: Invalid inode bitmap blk 4 in block_group 0 [ 403.547467][ T7568] loop2: lost filesystem error report for type 5 error -117 [ 403.552133][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 403.566193][ C1] EXT4-fs (loop2): initial error at time 1773076665: ext4_read_inode_bitmap:139 [ 403.575585][ C1] EXT4-fs (loop2): last error at time 1773076665: ext4_read_inode_bitmap:139 [ 403.714606][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.015897][ T7567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 404.112915][ T7567] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.430: Invalid inode bitmap blk 4 in block_group 0 [ 404.199869][ T7567] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 404.336035][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.484272][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.542730][ T1089] bond0 (unregistering): Released all slaves [ 404.624996][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.755750][ T7589] loop0: detected capacity change from 0 to 2048 [ 408.018521][ T7589] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 408.048609][ T7589] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 409.433019][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.448095][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.456412][ T7488] bridge_slave_0: entered allmulticast mode [ 409.510840][ T7488] bridge_slave_0: entered promiscuous mode [ 409.592671][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.600165][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.662740][ T7488] bridge_slave_1: entered allmulticast mode [ 409.692760][ T7488] bridge_slave_1: entered promiscuous mode [ 410.307042][ T1089] hsr_slave_0: left promiscuous mode [ 410.382178][ T1089] hsr_slave_1: left promiscuous mode [ 410.426013][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.480047][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.518126][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.550934][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.636406][ T7609] loop5: detected capacity change from 0 to 128 [ 410.736340][ T7603] loop0: detected capacity change from 0 to 2048 [ 410.746287][ T1089] veth1_macvtap: left promiscuous mode [ 410.760761][ T1089] veth0_macvtap: left promiscuous mode [ 410.800375][ T1089] veth1_vlan: left promiscuous mode [ 410.844727][ T1089] veth0_vlan: left promiscuous mode [ 410.984815][ T7603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.298595][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.835152][ T7628] FAULT_INJECTION: forcing a failure. [ 412.835152][ T7628] name failslab, interval 1, probability 0, space 0, times 0 [ 412.912374][ T7628] CPU: 1 UID: 0 PID: 7628 Comm: syz.0.443 Not tainted syzkaller #0 PREEMPT(full) [ 412.912507][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.912581][ T7628] Call Trace: [ 412.912628][ T7628] [ 412.912677][ T7628] __dump_stack+0x26/0x30 [ 412.912825][ T7628] dump_stack_lvl+0x14c/0x1c0 [ 412.913053][ T7628] dump_stack+0x1e/0x25 [ 412.913185][ T7628] should_fail_ex+0x7e2/0x8c0 [ 412.913350][ T7628] should_failslab+0x158/0x200 [ 412.913471][ T7628] __kmalloc_noprof+0x1e0/0x1680 [ 412.913600][ T7628] ? kernfs_fop_write_iter+0x296/0xa90 [ 412.913849][ T7628] ? kmsan_get_metadata+0xf1/0x160 [ 412.914034][ T7628] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 412.914218][ T7628] kernfs_fop_write_iter+0x296/0xa90 [ 412.914391][ T7628] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 412.914546][ T7628] iter_file_splice_write+0x12d8/0x20c0 [ 412.914830][ T7628] ? kmsan_get_metadata+0xf1/0x160 [ 412.915042][ T7628] ? __pfx_iter_file_splice_write+0x10/0x10 [ 412.915216][ T7628] do_splice+0x1fe5/0x30e0 [ 412.915378][ T7628] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 412.915573][ T7628] ? __se_sys_splice+0xe1/0x8c0 [ 412.915707][ T7628] ? kmsan_get_metadata+0xf1/0x160 [ 412.915922][ T7628] __se_sys_splice+0x549/0x8c0 [ 412.916077][ T7628] __x64_sys_splice+0x114/0x1a0 [ 412.916221][ T7628] x64_sys_call+0x1b6d/0x3ea0 [ 412.916385][ T7628] do_syscall_64+0x134/0xf80 [ 412.916510][ T7628] ? clear_bhb_loop+0x50/0xa0 [ 412.916652][ T7628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.916785][ T7628] RIP: 0033:0x7f17db39c799 [ 412.916892][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.917007][ T7628] RSP: 002b:00007f17d95d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 412.917131][ T7628] RAX: ffffffffffffffda RBX: 00007f17db616090 RCX: 00007f17db39c799 [ 412.917227][ T7628] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 412.917304][ T7628] RBP: 00007f17d95d5090 R08: 000000000000bfd1 R09: 0000000000000000 [ 412.917387][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.917464][ T7628] R13: 00007f17db616128 R14: 00007f17db616090 R15: 00007ffff1edd138 [ 412.917593][ T7628] [ 413.167724][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 413.301562][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 413.868767][ T7488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.923998][ T7602] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 414.019159][ T7605] geneve2: entered promiscuous mode [ 414.108693][ T7488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.765317][ T7488] team0: Port device team_slave_0 added [ 414.828356][ T7488] team0: Port device team_slave_1 added [ 414.883343][ T7642] netlink: 'syz.3.448': attribute type 21 has an invalid length. [ 415.087819][ T7642] netlink: 160 bytes leftover after parsing attributes in process `syz.3.448'. [ 415.302618][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.215484][ T7649] loop0: detected capacity change from 0 to 40427 [ 416.226321][ T7649] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 416.237763][ T7649] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 416.252216][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.280569][ T7488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.319311][ T7649] F2FS-fs (loop0): invalid crc value [ 416.351058][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.382431][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.650792][ T7488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.667258][ T7649] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 416.688392][ T7649] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 416.695747][ T7649] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 416.980729][ T7656] loop3: detected capacity change from 0 to 2048 [ 417.437817][ T7656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.677725][ T5429] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 417.735246][ T7488] hsr_slave_0: entered promiscuous mode [ 417.804417][ T7488] hsr_slave_1: entered promiscuous mode [ 417.872634][ T5429] usb 1-1: Using ep0 maxpacket: 8 [ 417.898857][ T5429] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 417.932241][ T5429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.990992][ T5429] usb 1-1: Product: syz [ 417.995668][ T5429] usb 1-1: Manufacturer: syz [ 418.022165][ T5429] usb 1-1: SerialNumber: syz [ 418.055077][ T5429] usb 1-1: config 0 descriptor?? [ 418.127950][ T5429] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 418.528910][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.564913][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.772931][ T5429] gspca_sonixj: reg_r err -110 [ 418.778089][ T5429] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 419.045220][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.123623][ T7674] loop2: detected capacity change from 0 to 128 [ 419.176066][ T7674] hpfs: Unknown parameter 'e‚s' [ 419.397531][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 419.397601][ T29] audit: type=1326 audit(1773076681.592:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f761279c799 code=0x0 [ 420.024597][ T10] usb 1-1: USB disconnect, device number 12 [ 420.215967][ T7681] loop5: detected capacity change from 0 to 512 [ 420.419147][ T7681] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.456: error while reading EA inode 32 err=-116 [ 420.536723][ T7681] loop5: lost filesystem error report for type 5 error -117 [ 420.542136][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 420.556349][ C1] EXT4-fs (loop5): initial error at time 1773076682: ext4_xattr_inode_iget:446 [ 420.565592][ C1] EXT4-fs (loop5): last error at time 1773076682: ext4_xattr_inode_iget:446 [ 420.575098][ T7681] EXT4-fs (loop5): Remounting filesystem read-only [ 420.585513][ T7681] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 420.663441][ T7681] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 420.739822][ T7681] EXT4-fs (loop5): 1 orphan inode deleted [ 420.778327][ T7681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.784561][ T7687] loop3: detected capacity change from 0 to 256 [ 420.863108][ T7687] exfat: Deprecated parameter 'utf8' [ 420.869024][ T7687] exfat: Deprecated parameter 'utf8' [ 421.083056][ T7687] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 421.318640][ T5071] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 421.331399][ T29] audit: type=1800 audit(1773076683.543:74): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="bus" dev="loop3" ino=1048641 res=0 errno=0 [ 421.967454][ T7488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.100852][ T7488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.204071][ T10] libceph: connect (1)[c::]:6789 error -101 [ 422.210601][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 422.251590][ T7488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.276265][ T7691] ceph: No mds server is up or the cluster is laggy [ 422.543335][ T10] libceph: connect (1)[c::]:6789 error -101 [ 422.590910][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 422.626885][ T7488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.702914][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.458'. [ 423.648340][ T6118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.902793][ T7701] loop3: detected capacity change from 0 to 2048 [ 425.043867][ T7701] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 425.061428][ T7701] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 425.901630][ T1089] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.606836][ T1089] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.924681][ T1089] team0: Port device netdevsim1 removed [ 427.966529][ T7707] binder: BINDER_SET_CONTEXT_MGR already set [ 427.977730][ T1089] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.012203][ T7707] binder: 7704:7707 ioctl 4018620d 2000000006c0 returned -16 [ 428.267639][ T1089] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.096141][ T7488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.365144][ T7488] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.405307][ T1089] bridge_slave_1: left allmulticast mode [ 429.411143][ T1089] bridge_slave_1: left promiscuous mode [ 429.456525][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.484548][ T1089] bridge_slave_0: left allmulticast mode [ 429.490376][ T1089] bridge_slave_0: left promiscuous mode [ 429.523694][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.604101][ T7727] loop3: detected capacity change from 0 to 128 [ 430.693859][ T7727] hpfs: Unknown parameter 'e‚s' [ 430.744630][ T29] audit: type=1326 audit(1773076692.953:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.3.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x0 [ 430.922514][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 431.030357][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.084062][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 431.097579][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.110557][ T7733] loop2: detected capacity change from 0 to 512 [ 431.134850][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.173195][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 431.214257][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.237350][ T7733] EXT4-fs: Ignoring removed orlov option [ 431.239855][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.260750][ T1089] bond0 (unregistering): Released all slaves [ 431.346215][ T10] usb 1-1: config 0 descriptor?? [ 431.420092][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.444345][ T7733] EXT4-fs (loop2): invalid inodes per group: 65537 [ 431.444345][ T7733] [ 431.447339][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.468492][ T10] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 431.478617][ T10] usbhid 1-1:0.0: can't add hid device: -22 [ 431.491414][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.500450][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 431.516345][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.533141][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.576032][ T5429] usb 1-1: USB disconnect, device number 13 [ 431.620021][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.627565][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.956069][ T7739] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 431.984732][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.992331][ T6971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.040850][ T7737] loop2: detected capacity change from 0 to 1024 [ 432.435270][ T7744] loop0: detected capacity change from 0 to 64 [ 432.598840][ T7737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.670394][ T7748] loop3: detected capacity change from 0 to 16 [ 432.692959][ T7744] libceph: resolve 'c' (ret=-3): failed [ 432.724921][ T7747] overlayfs: upper fs needs to support d_type. [ 432.759446][ T7748] erofs (device loop3): blkszbits 0 isn't supported [ 432.800085][ T7747] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 432.882363][ T7747] overlayfs: failed to set xattr on upper [ 432.888277][ T7747] overlayfs: ...falling back to redirect_dir=nofollow. [ 432.981450][ T7747] overlayfs: ...falling back to index=off. [ 433.012950][ T7747] overlayfs: ...falling back to uuid=null. [ 433.019527][ T7747] overlayfs: conflicting lowerdir path [ 433.444093][ T1089] hsr_slave_0: left promiscuous mode [ 433.499275][ T1089] hsr_slave_1: left promiscuous mode [ 433.508347][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.557754][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.594732][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.652309][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.756750][ T5071] Bluetooth: hci5: command tx timeout [ 433.818255][ T1089] veth1_macvtap: left promiscuous mode [ 433.827765][ T1089] veth0_macvtap: left promiscuous mode [ 433.835373][ T1089] veth1_vlan: left promiscuous mode [ 433.852465][ T1089] veth0_vlan: left promiscuous mode [ 433.897130][ T7753] loop3: detected capacity change from 0 to 1024 [ 433.983135][ T7753] EXT4-fs: Ignoring removed i_version option [ 434.121732][ T7753] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 434.228110][ T7753] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 434.330113][ T7753] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 434.393268][ T7753] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 435.676385][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 435.849695][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 435.857392][ T5071] Bluetooth: hci5: command tx timeout [ 436.550389][ T7768] loop3: detected capacity change from 0 to 128 [ 436.589557][ T7768] hpfs: Unknown parameter 'e‚s' [ 436.672995][ T29] audit: type=1326 audit(1773076698.873:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.3.476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x0 [ 437.914441][ T5071] Bluetooth: hci5: command tx timeout [ 438.060401][ T7782] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 438.277766][ T7734] chnl_net:caif_netlink_parms(): no params data found [ 439.023823][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 439.140746][ T7488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.194124][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 439.228854][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 439.244323][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.273191][ T10] usb 4-1: Product: syz [ 439.286458][ T10] usb 4-1: Manufacturer: syz [ 439.297694][ T10] usb 4-1: SerialNumber: syz [ 439.341528][ T10] usb 4-1: config 0 descriptor?? [ 439.430573][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 439.996252][ T5071] Bluetooth: hci5: command tx timeout [ 440.197474][ T10] gspca_sonixj: reg_w1 err -71 [ 440.209997][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 440.297352][ T10] usb 4-1: USB disconnect, device number 8 [ 440.624441][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.644302][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.673236][ T7734] bridge_slave_0: entered allmulticast mode [ 440.706550][ T7734] bridge_slave_0: entered promiscuous mode [ 440.772150][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.814290][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.852974][ T7734] bridge_slave_1: entered allmulticast mode [ 440.885813][ T7734] bridge_slave_1: entered promiscuous mode [ 441.071111][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.332332][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 441.588059][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 441.650321][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.706068][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.732178][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.770605][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 441.817569][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.853768][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.868283][ T9] usb 1-1: config 0 descriptor?? [ 441.951517][ T9] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 442.032271][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 442.052731][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 442.154261][ T9] usb 1-1: USB disconnect, device number 14 [ 442.407172][ T7734] team0: Port device team_slave_0 added [ 442.506100][ T7734] team0: Port device team_slave_1 added [ 442.975686][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.012745][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.102621][ T7734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.178980][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.217684][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.294883][ T7734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.333656][ T7820] loop2: detected capacity change from 0 to 4096 [ 443.508767][ T7820] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 443.541613][ T7820] UDF-fs: Scanning with blocksize 512 failed [ 443.801288][ T7820] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 443.894655][ T7830] loop3: detected capacity change from 0 to 64 [ 443.935677][ T7820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.108785][ T7734] hsr_slave_0: entered promiscuous mode [ 444.196532][ T7734] hsr_slave_1: entered promiscuous mode [ 444.229951][ T7734] debugfs: 'hsr0' already exists in 'hsr' [ 444.310362][ T7734] Cannot create hsr debugfs directory [ 445.020927][ T7838] tmpfs: Unknown parameter 'grpquotaþ€' [ 445.037410][ T7838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.487'. [ 445.051426][ T7488] veth0_vlan: entered promiscuous mode [ 445.639294][ T7488] veth1_vlan: entered promiscuous mode [ 445.725327][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 445.903315][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 445.933135][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 445.968654][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.022554][ T9] usb 4-1: config 0 has no interface number 0 [ 446.073963][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 446.116851][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.144173][ T9] usb 4-1: Product: syz [ 446.148813][ T9] usb 4-1: Manufacturer: syz [ 446.202471][ T9] usb 4-1: SerialNumber: syz [ 446.243396][ T9] usb 4-1: config 0 descriptor?? [ 446.327200][ T9] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 446.370743][ T9] uvcvideo 4-1:0.105: No valid video chain found. [ 446.506950][ T7488] veth0_macvtap: entered promiscuous mode [ 446.704499][ T7734] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 446.808565][ T7734] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 446.871459][ T7488] veth1_macvtap: entered promiscuous mode [ 446.906492][ T7734] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 446.976722][ T7734] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 447.284393][ T7855] loop0: detected capacity change from 0 to 512 [ 447.301655][ T7855] EXT4-fs: Ignoring removed orlov option [ 447.333689][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.377483][ T7855] EXT4-fs (loop0): invalid inodes per group: 65537 [ 447.377483][ T7855] [ 447.621560][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.779300][ T7855] loop0: detected capacity change from 0 to 1024 [ 447.953411][ T5830] usb 4-1: USB disconnect, device number 9 [ 447.966700][ T7855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.162341][ T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.271678][ T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.359423][ T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.448296][ T7864] loop2: detected capacity change from 0 to 1024 [ 448.494753][ T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.254600][ T29] audit: type=1326 audit(1773076711.473:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.2.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f761279c799 code=0x0 [ 449.597878][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.706785][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.717016][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.946658][ T7734] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.988556][ T7885] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 450.146056][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.153681][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.279476][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.287068][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.754423][ T1089] hfsplus: b-tree write err: -5, ino 3 [ 453.772262][ T5429] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 454.029255][ T5429] usb 3-1: Using ep0 maxpacket: 16 [ 454.127882][ T5429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.195104][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.216597][ T5429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.279317][ T5429] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 454.338865][ T5429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.484154][ T5429] usb 3-1: config 0 descriptor?? [ 454.634931][ T5429] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 454.741926][ T7734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.764766][ T5429] usbhid 3-1:0.0: can't add hid device: -22 [ 454.808065][ T5785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 454.822338][ T5429] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 454.844173][ T5785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 454.863156][ T5785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 454.888112][ T5785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 454.904539][ T5785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 455.291455][ T5830] usb 3-1: USB disconnect, device number 10 [ 457.045380][ T5071] Bluetooth: hci6: command tx timeout [ 457.173729][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 458.060017][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.577671][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.887794][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.113542][ T5071] Bluetooth: hci6: command tx timeout [ 459.152666][ T5830] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 459.209644][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.329720][ T7973] loop0: detected capacity change from 0 to 512 [ 459.343309][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 459.429357][ T7973] EXT4-fs: Ignoring removed orlov option [ 459.486410][ T7973] EXT4-fs (loop0): invalid inodes per group: 65537 [ 459.486410][ T7973] [ 459.490680][ T7734] veth0_vlan: entered promiscuous mode [ 459.538885][ T5830] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 459.582933][ T5830] usb 3-1: config 1 has no interface number 0 [ 459.589249][ T5830] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 459.683581][ T5830] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 459.725372][ T5830] usb 3-1: config 1 interface 105 has no altsetting 0 [ 459.747440][ T7734] veth1_vlan: entered promiscuous mode [ 459.835226][ T5830] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 459.884969][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 459.920957][ T5830] usb 3-1: Product: syz [ 459.944240][ T5830] usb 3-1: Manufacturer: syz [ 459.949047][ T5830] usb 3-1: SerialNumber: syz [ 460.047036][ T7967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.136284][ T7967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.574563][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.612515][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.663851][ T7923] bridge_slave_0: entered allmulticast mode [ 460.725197][ T7967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.732871][ T7923] bridge_slave_0: entered promiscuous mode [ 460.789296][ T7967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.933348][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.982688][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.990464][ T7923] bridge_slave_1: entered allmulticast mode [ 461.106083][ T7923] bridge_slave_1: entered promiscuous mode [ 461.201236][ T5071] Bluetooth: hci6: command tx timeout [ 461.361695][ T5830] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 461.460975][ T13] bridge_slave_1: left allmulticast mode [ 461.483375][ T13] bridge_slave_1: left promiscuous mode [ 461.513203][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.605111][ T13] bridge_slave_0: left allmulticast mode [ 461.636076][ T13] bridge_slave_0: left promiscuous mode [ 461.681300][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.728207][ T5830] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 463.275192][ T5071] Bluetooth: hci6: command tx timeout [ 464.231359][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.502788][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 464.722311][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 464.738254][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.832410][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.872895][ T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 464.932261][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.059823][ T30] usb 4-1: config 0 descriptor?? [ 465.386069][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.646443][ T13] bond0 (unregistering): Released all slaves [ 466.252797][ T30] usb 4-1: can't set config #0, error -71 [ 466.333300][ T30] usb 4-1: USB disconnect, device number 10 [ 466.412513][ T5830] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0e:bc:07:27:07:36 [ 466.494866][ T5830] usb 3-1: USB disconnect, device number 11 [ 466.531055][ T5830] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 466.602643][ T13] hsr_slave_0: left promiscuous mode [ 466.662401][ T13] hsr_slave_1: left promiscuous mode [ 466.670372][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.752952][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.788266][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.839161][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.950840][ T13] veth1_macvtap: left promiscuous mode [ 466.957806][ T13] veth0_macvtap: left promiscuous mode [ 466.965005][ T13] veth1_vlan: left promiscuous mode [ 466.970580][ T13] veth0_vlan: left promiscuous mode [ 467.013882][ T8006] loop2: detected capacity change from 0 to 512 [ 467.127069][ T8006] EXT4-fs: Ignoring removed orlov option [ 467.205287][ T8006] EXT4-fs (loop2): invalid inodes per group: 65537 [ 467.205287][ T8006] [ 467.466871][ T8006] loop2: detected capacity change from 0 to 1024 [ 467.744441][ T8006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.868827][ T8010] loop0: detected capacity change from 0 to 128 [ 468.686411][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.520'. [ 468.746916][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.520'. [ 469.190689][ T13] team0 (unregistering): Port device team_slave_1 removed [ 469.285105][ T13] team0 (unregistering): Port device team_slave_0 removed [ 469.907021][ T8021] loop0: detected capacity change from 0 to 32768 [ 469.941901][ T8021] [ 469.941901][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 469.941901][ T8021] [ 469.962592][ T8021] ERROR: (device loop0): diWrite: ixpxd invalid [ 469.962592][ T8021] [ 469.978653][ T8021] ERROR: (device loop0): txAbort: [ 469.978653][ T8021] [ 469.991865][ T8021] jfs_create: dtSearch returned -17 [ 471.253995][ T8021] [ 471.253995][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.253995][ T8021] [ 471.264844][ T8021] [ 471.264844][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.264844][ T8021] [ 471.275768][ T8021] [ 471.275768][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.275768][ T8021] [ 471.286558][ T8021] [ 471.286558][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.286558][ T8021] [ 471.333797][ T8021] [ 471.333797][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.333797][ T8021] [ 471.345454][ T8021] [ 471.345454][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.345454][ T8021] [ 471.356362][ T8021] [ 471.356362][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.356362][ T8021] [ 471.367206][ T8021] [ 471.367206][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.367206][ T8021] [ 471.386354][ T110] [ 471.386354][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.386354][ T110] [ 471.408540][ T8021] [ 471.408540][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.408540][ T8021] [ 471.419459][ T8021] [ 471.419459][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.419459][ T8021] [ 471.433674][ T8021] [ 471.433674][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.433674][ T8021] [ 471.446434][ T8021] [ 471.446434][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.446434][ T8021] [ 471.461508][ T8021] [ 471.461508][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.461508][ T8021] [ 471.473063][ T8021] [ 471.473063][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.473063][ T8021] [ 471.483908][ T8021] [ 471.483908][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.483908][ T8021] [ 471.494717][ T8021] [ 471.494717][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.494717][ T8021] [ 471.513984][ T111] [ 471.513984][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.513984][ T111] [ 471.594374][ T8021] [ 471.594374][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.594374][ T8021] [ 471.605627][ T8021] [ 471.605627][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.605627][ T8021] [ 471.616673][ T8021] [ 471.616673][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.616673][ T8021] [ 471.631582][ T8021] [ 471.631582][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.631582][ T8021] [ 471.652370][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 471.664575][ T8021] [ 471.664575][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.664575][ T8021] [ 471.676221][ T8021] [ 471.676221][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.676221][ T8021] [ 471.687116][ T8021] [ 471.687116][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.687116][ T8021] [ 471.697827][ T8021] [ 471.697827][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.697827][ T8021] [ 471.709660][ T110] [ 471.709660][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.709660][ T110] [ 471.785028][ T8021] [ 471.785028][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.785028][ T8021] [ 471.795774][ T8021] [ 471.795774][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.795774][ T8021] [ 471.797165][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.806465][ T8021] [ 471.806465][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.806465][ T8021] [ 471.806529][ T8021] [ 471.806529][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.806529][ T8021] [ 471.850605][ T8021] [ 471.850605][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.850605][ T8021] [ 471.861924][ T8021] [ 471.861924][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.861924][ T8021] [ 471.873082][ T8021] [ 471.873082][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.873082][ T8021] [ 471.883807][ T8021] [ 471.883807][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.883807][ T8021] [ 471.892478][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 471.901112][ T110] [ 471.901112][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.901112][ T110] [ 471.976590][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.994144][ T8021] [ 471.994144][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 471.994144][ T8021] [ 472.004874][ T8021] [ 472.004874][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.004874][ T8021] [ 472.015632][ T8021] [ 472.015632][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.015632][ T8021] [ 472.026418][ T8021] [ 472.026418][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.026418][ T8021] [ 472.051464][ T8021] [ 472.051464][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.051464][ T8021] [ 472.051444][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 472.071856][ T8021] [ 472.071856][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.071856][ T8021] [ 472.083931][ T8021] [ 472.083931][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.083931][ T8021] [ 472.092765][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 4.b7 [ 472.094655][ T8021] [ 472.094655][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.094655][ T8021] [ 472.117288][ T111] [ 472.117288][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.117288][ T111] [ 472.222173][ T8021] [ 472.222173][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.222173][ T8021] [ 472.232967][ T8021] [ 472.232967][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.232967][ T8021] [ 472.248302][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.257238][ T8021] [ 472.257238][ T8021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.257238][ T8021] [ 472.295415][ T10] usb 1-1: Product: syz [ 472.319486][ T10] usb 1-1: Manufacturer: syz [ 472.372901][ T10] usb 1-1: SerialNumber: syz [ 472.479376][ T5777] [ 472.479376][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.479376][ T5777] [ 472.532893][ T10] usb 1-1: can't set config #1, error -71 [ 472.543775][ T5777] [ 472.543775][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.543775][ T5777] [ 472.563292][ T5830] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 472.603602][ T10] usb 1-1: USB disconnect, device number 15 [ 472.618450][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.618951][ T5830] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 472.675999][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.524'. [ 472.718750][ T5830] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 473.041043][ T7734] veth0_macvtap: entered promiscuous mode [ 473.191336][ T7923] team0: Port device team_slave_0 added [ 473.264274][ T7734] veth1_macvtap: entered promiscuous mode [ 473.330598][ T7923] team0: Port device team_slave_1 added [ 473.586297][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.603119][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.645908][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.699993][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.711216][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.798691][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.278219][ T7923] hsr_slave_0: entered promiscuous mode [ 474.310095][ T7923] hsr_slave_1: entered promiscuous mode [ 474.340535][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.591274][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.779827][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.892364][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 476.062442][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 476.069889][ T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.108296][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.125950][ T148] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.151168][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.199590][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 476.228952][ T148] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.252242][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.273112][ T148] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.320309][ T24] usb 4-1: config 0 descriptor?? [ 476.414275][ T24] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 476.452209][ T24] usbhid 4-1:0.0: can't add hid device: -22 [ 476.500798][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 476.597176][ T24] usb 4-1: USB disconnect, device number 11 [ 478.107181][ T7923] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 478.188234][ T7923] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 478.195895][ T8059] loop2: detected capacity change from 0 to 128 [ 478.287898][ T7923] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 478.391233][ T7923] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 479.444913][ T8067] fuse: Bad value for 'user_id' [ 479.492316][ T8067] fuse: Bad value for 'user_id' [ 479.908866][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.131827][ T8075] overlayfs: failed lookup in lower (newroot/118, name='bus', err=-40): overlapping layers [ 480.143483][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.180231][ T8075] overlayfs: failed lookup in lower (newroot/118, name='bus', err=-40): overlapping layers [ 480.246901][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.254405][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.408460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.415984][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.661865][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.105243][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.129018][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.356261][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.366816][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.594782][ T8112] loop3: detected capacity change from 0 to 32768 [ 484.606200][ T8112] xfs: Deprecated parameter 'attr2' [ 484.611649][ T8112] XFS: attr2 mount option is deprecated. [ 484.799758][ T8112] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 485.478575][ T8112] XFS (loop3): Ending clean mount [ 485.493046][ T8112] XFS (loop3): Quotacheck needed: Please wait. [ 485.904674][ T8131] loop7: detected capacity change from 0 to 512 [ 486.046234][ T8131] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 486.214338][ T8112] XFS (loop3): Quotacheck: Done. [ 487.027540][ T5791] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 487.186636][ T8133] loop7: detected capacity change from 0 to 512 [ 487.287509][ T7923] veth0_vlan: entered promiscuous mode [ 487.315213][ T8133] EXT4-fs: Ignoring removed orlov option [ 487.347137][ T8133] EXT4-fs (loop7): invalid inodes per group: 65537 [ 487.347137][ T8133] [ 487.532305][ T7923] veth1_vlan: entered promiscuous mode [ 487.759348][ T8139] loop7: detected capacity change from 0 to 1024 [ 488.017176][ T8139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.161894][ T7923] veth0_macvtap: entered promiscuous mode [ 488.269994][ T7923] veth1_macvtap: entered promiscuous mode [ 488.648229][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.803312][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.985495][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.040654][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.123219][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.220227][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.868157][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 489.877598][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 489.887813][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.069571][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.103332][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.339312][ T8161] loop3: detected capacity change from 0 to 128 [ 491.820138][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 491.870166][ T8176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.543'. [ 492.233360][ T5071] Bluetooth: hci3: command tx timeout [ 492.485950][ T8158] chnl_net:caif_netlink_parms(): no params data found [ 493.526191][ T7734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.277741][ T5071] Bluetooth: hci5: unexpected subevent 0x0e length: 32 > 15 [ 494.285819][ T5071] Bluetooth: hci5: Unable to find connection for dst b6:00:00:d7:bd:d0 sid 0x86 [ 494.312298][ T5071] Bluetooth: hci3: command tx timeout [ 494.541404][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.577382][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.597824][ T8158] bridge_slave_0: entered allmulticast mode [ 494.685761][ T8158] bridge_slave_0: entered promiscuous mode [ 494.792531][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.825881][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.848604][ T8158] bridge_slave_1: entered allmulticast mode [ 494.912664][ T8158] bridge_slave_1: entered promiscuous mode [ 494.956045][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 495.497452][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.625131][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.873012][ T29] audit: type=1326 audit(1773076758.083:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.062208][ T29] audit: type=1326 audit(1773076758.083:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.087405][ T8226] loop2: detected capacity change from 0 to 128 [ 496.147553][ T8158] team0: Port device team_slave_0 added [ 496.198848][ T29] audit: type=1326 audit(1773076758.083:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.291595][ T8158] team0: Port device team_slave_1 added [ 496.400892][ T29] audit: type=1326 audit(1773076758.153:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.430928][ T5071] Bluetooth: hci3: command tx timeout [ 496.440774][ T29] audit: type=1326 audit(1773076758.153:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.563024][ T29] audit: type=1326 audit(1773076758.153:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.672228][ T29] audit: type=1326 audit(1773076758.173:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.795793][ T29] audit: type=1326 audit(1773076758.173:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 496.831643][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.901505][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.917375][ T29] audit: type=1326 audit(1773076758.203:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 497.033487][ T8235] loop3: detected capacity change from 0 to 512 [ 497.066195][ T8235] EXT4-fs: Ignoring removed orlov option [ 497.091388][ T8158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.108058][ T29] audit: type=1326 audit(1773076758.203:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706ab9c799 code=0x7ffc0000 [ 497.167769][ T8235] EXT4-fs (loop3): invalid inodes per group: 65537 [ 497.167769][ T8235] [ 497.264528][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.271644][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.458087][ T8238] loop3: detected capacity change from 0 to 1024 [ 497.485561][ T8158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.669325][ T8238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.337250][ T8158] hsr_slave_0: entered promiscuous mode [ 498.377067][ T8158] hsr_slave_1: entered promiscuous mode [ 498.448329][ T8158] debugfs: 'hsr0' already exists in 'hsr' [ 498.494501][ T5071] Bluetooth: hci3: command tx timeout [ 498.530898][ T8158] Cannot create hsr debugfs directory [ 499.149373][ T6601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.247150][ T6601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.869956][ T6601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.913214][ T6601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.405646][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.559'. [ 500.835752][ T8278] fuse: Bad value for 'fd' [ 500.893624][ T8278] loop6: detected capacity change from 0 to 2640 [ 500.986537][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.080439][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.132161][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.155955][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.260526][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.303426][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.340575][ T8158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 501.340716][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.408620][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.451186][ T6112] ldm_validate_partition_table(): Disk read failed. [ 501.476306][ T8158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 501.492456][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.822587][ T6112] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.831015][ T6112] Dev loop6: unable to read RDB block 0 [ 501.862640][ T6112] loop6: unable to read partition table [ 501.875652][ T8278] ldm_validate_partition_table(): Disk read failed. [ 501.893437][ T8278] Dev loop6: unable to read RDB block 0 [ 501.899732][ T8278] loop6: unable to read partition table [ 501.915936][ T8158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 501.960817][ T8289] loop2: detected capacity change from 0 to 128 [ 501.993569][ T8278] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 502.226440][ T8158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 503.544298][ T8299] binder: 8296:8299 ioctl 82307201 200000000b40 returned -22 [ 504.040673][ T8286] loop7: detected capacity change from 0 to 2048 [ 504.123593][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.182371][ T8286] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 504.324376][ T8286] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 504.368597][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.483132][ T5963] udevd[5963]: incorrect ext4 checksum on /dev/loop7 [ 504.615753][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.803308][ T8307] loop2: detected capacity change from 0 to 256 [ 504.811541][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.811864][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.945339][ T8307] exfat: Deprecated parameter 'utf8' [ 504.951276][ T8307] exfat: Deprecated parameter 'utf8' [ 505.177952][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.185563][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.225973][ T8307] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 505.562996][ T5071] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 506.536950][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.570'. [ 509.125477][ T8341] loop6: detected capacity change from 0 to 128 [ 509.481753][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 509.876351][ T8349] loop3: detected capacity change from 0 to 512 [ 510.010171][ T8349] EXT4-fs: Ignoring removed orlov option [ 510.154123][ T8349] EXT4-fs (loop3): invalid inodes per group: 65537 [ 510.154123][ T8349] [ 510.834363][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.869945][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.576'. [ 511.162647][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.169602][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.673994][ T8366] binder: BINDER_SET_CONTEXT_MGR already set [ 511.687816][ T8366] binder: 8365:8366 ioctl 4018620d 200000000040 returned -16 [ 511.724396][ T8366] binder: 8365:8366 ioctl c0306201 2000000003c0 returned -14 [ 512.845070][ T8376] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 513.539923][ T8396] loop3: detected capacity change from 0 to 128 [ 513.938058][ T8402] netlink: 'syz.7.588': attribute type 21 has an invalid length. [ 513.989480][ T8402] netlink: 160 bytes leftover after parsing attributes in process `syz.7.588'. [ 514.763668][ T8158] veth0_vlan: entered promiscuous mode [ 514.908717][ T8411] loop2: detected capacity change from 0 to 512 [ 514.931867][ T8158] veth1_vlan: entered promiscuous mode [ 514.988496][ T8411] EXT4-fs: Ignoring removed orlov option [ 515.042813][ T8411] EXT4-fs (loop2): invalid inodes per group: 65537 [ 515.042813][ T8411] [ 515.480472][ T8416] loop2: detected capacity change from 0 to 1024 [ 515.498269][ T8158] veth0_macvtap: entered promiscuous mode [ 515.650896][ T8158] veth1_macvtap: entered promiscuous mode [ 515.708890][ T8416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.723070][ T8420] loop3: detected capacity change from 0 to 256 [ 515.793544][ T8420] exfat: Unknown parameter 'keep_last_d€ts' [ 515.932351][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 516.150238][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.178205][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 516.544693][ T24] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 516.608369][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.679490][ T24] usb 8-1: Product: syz [ 516.760030][ T24] usb 8-1: Manufacturer: syz [ 516.767607][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.796036][ T24] usb 8-1: SerialNumber: syz [ 516.917862][ T24] usb 8-1: config 0 descriptor?? [ 516.959671][ T24] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 517.288504][ T1073] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.387896][ T166] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.429452][ T24] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71 [ 517.511183][ T166] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.587351][ T24] usb 8-1: USB disconnect, device number 2 [ 517.627303][ T166] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.932756][ T8430] loop6: detected capacity change from 0 to 2048 [ 518.062738][ T8430] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 518.078127][ T8430] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 518.341911][ T6112] udevd[6112]: incorrect ext4 checksum on /dev/loop6 [ 518.956055][ T8448] loop7: detected capacity change from 0 to 16384 [ 519.539477][ T6601] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.985724][ T6601] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.483696][ T6601] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.691468][ T6601] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.555122][ T6601] bridge_slave_1: left allmulticast mode [ 521.560988][ T6601] bridge_slave_1: left promiscuous mode [ 521.613271][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.628654][ T6601] bridge_slave_0: left allmulticast mode [ 521.652525][ T6601] bridge_slave_0: left promiscuous mode [ 521.659070][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.850725][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.495812][ T6601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.583836][ T6601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.647913][ T6601] bond0 (unregistering): Released all slaves [ 522.763734][ T8469] loop2: detected capacity change from 0 to 4096 [ 523.045989][ T8469] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 523.062812][ T8469] UDF-fs: Scanning with blocksize 512 failed [ 523.300032][ T8469] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 523.417686][ T8469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.903801][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.921417][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.931005][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.952422][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.970245][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.284822][ T6601] hsr_slave_0: left promiscuous mode [ 524.310652][ T6601] hsr_slave_1: left promiscuous mode [ 524.342942][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.391755][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.444229][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.451792][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.602871][ T6601] veth1_macvtap: left promiscuous mode [ 524.608590][ T6601] veth0_macvtap: left promiscuous mode [ 524.635017][ T8473] loop6: detected capacity change from 0 to 2048 [ 524.679374][ T6601] veth1_vlan: left promiscuous mode [ 524.709948][ T6601] veth0_vlan: left promiscuous mode [ 524.749285][ T8473] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 524.769791][ T8473] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 524.963316][ T5963] udevd[5963]: incorrect ext4 checksum on /dev/loop6 [ 525.360488][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.605'. [ 525.372436][ T5777] jfs_flush_journal: synclist not empty [ 525.379298][ T5777] ===================================================== [ 525.391255][ T5777] BUG: KMSAN: uninit-value in hex_dump_to_buffer+0xe86/0xeb0 [ 525.399888][ T5777] hex_dump_to_buffer+0xe86/0xeb0 [ 525.405172][ T5777] print_hex_dump+0x10d/0x330 [ 525.409944][ T5777] jfs_flush_journal+0x13e9/0x1670 [ 525.415279][ T5777] jfs_umount+0x1e3/0x720 [ 525.419696][ T5777] jfs_put_super+0x112/0x3d0 [ 525.428069][ T5777] generic_shutdown_super+0x1b8/0x4c0 [ 525.433890][ T5777] kill_block_super+0x42/0xd0 [ 525.438671][ T5777] deactivate_locked_super+0xcb/0x3c0 [ 525.444252][ T5777] deactivate_super+0x12f/0x140 [ 525.449473][ T5777] cleanup_mnt+0x7eb/0x870 [ 525.454110][ T5777] __cleanup_mnt+0x22/0x30 [ 525.458605][ T5777] task_work_run+0x208/0x2b0 [ 525.463485][ T5777] exit_to_user_mode_loop+0x306/0x1b60 [ 525.469105][ T5777] do_syscall_64+0x24d/0xf80 [ 525.474665][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.480758][ T5777] [ 525.483187][ T5777] Uninit was stored to memory at: [ 525.488337][ T5777] hex_dump_to_buffer+0xe7f/0xeb0 [ 525.495796][ T5777] print_hex_dump+0x10d/0x330 [ 525.500576][ T5777] jfs_flush_journal+0x13e9/0x1670 [ 525.506746][ T5777] jfs_umount+0x1e3/0x720 [ 525.511167][ T5777] jfs_put_super+0x112/0x3d0 [ 525.515928][ T5777] generic_shutdown_super+0x1b8/0x4c0 [ 525.521381][ T5777] kill_block_super+0x42/0xd0 [ 525.526231][ T5777] deactivate_locked_super+0xcb/0x3c0 [ 525.531777][ T5777] deactivate_super+0x12f/0x140 [ 525.536814][ T5777] cleanup_mnt+0x7eb/0x870 [ 525.541323][ T5777] __cleanup_mnt+0x22/0x30 [ 525.545917][ T5777] task_work_run+0x208/0x2b0 [ 525.550603][ T5777] exit_to_user_mode_loop+0x306/0x1b60 [ 525.556341][ T5777] do_syscall_64+0x24d/0xf80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 525.561020][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.567133][ T5777] [ 525.569492][ T5777] Uninit was created at: [ 525.574019][ T5777] kmem_cache_alloc_noprof+0x37b/0x1270 [ 525.579698][ T5777] mempool_alloc_slab+0x36/0x50 [ 525.584896][ T5777] mempool_alloc_noprof+0x19d/0x3c0 [ 525.590255][ T5777] __get_metapage+0xa20/0x1790 [ 525.598578][ T5777] diWrite+0x58f/0x2190 [ 525.604239][ T5777] txCommit+0xca6/0x92c0 [ 525.608844][ T5777] jfs_create+0x124d/0x1380 [ 525.613926][ T5777] path_openat+0x339a/0x64c0 [ 525.618679][ T5777] do_file_open+0x2aa/0x680 [ 525.623470][ T5777] do_sys_openat2+0x163/0x380 [ 525.628327][ T5777] __x64_sys_creat+0xe1/0x150 [ 525.633286][ T5777] x64_sys_call+0x3c20/0x3ea0 [ 525.638145][ T5777] do_syscall_64+0x134/0xf80 [ 525.643072][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.649126][ T5777] [ 525.651547][ T5777] CPU: 0 UID: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 525.661304][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.671601][ T5777] ===================================================== [ 525.678842][ T5777] Disabling lock debugging due to kernel taint [ 525.877350][ T5777] Kernel panic - not syncing: kmsan.panic set ... [ 525.883932][ T5777] CPU: 0 UID: 0 PID: 5777 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 525.895139][ T5777] Tainted: [B]=BAD_PAGE [ 525.899374][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.909629][ T5777] Call Trace: [ 525.913092][ T5777] [ 525.916113][ T5777] __dump_stack+0x26/0x30 [ 525.920610][ T5777] dump_stack_lvl+0x50/0x1c0 [ 525.925367][ T5777] ? dump_stack+0x12/0x25 [ 525.929860][ T5777] dump_stack+0x1e/0x25 [ 525.934157][ T5777] vpanic+0x7b4/0x1430 [ 525.938404][ T5777] panic+0x15d/0x160 [ 525.942485][ T5777] kmsan_report+0x31a/0x320 [ 525.947159][ T5777] ? panic_on_this_cpu+0x5b/0x90 [ 525.952303][ T5777] ? __msan_warning+0x1b/0x30 [ 525.957129][ T5777] ? hex_dump_to_buffer+0xe86/0xeb0 [ 525.962474][ T5777] ? print_hex_dump+0x10d/0x330 [ 525.967468][ T5777] ? jfs_flush_journal+0x13e9/0x1670 [ 525.972904][ T5777] ? jfs_umount+0x1e3/0x720 [ 525.977540][ T5777] ? jfs_put_super+0x112/0x3d0 [ 525.982415][ T5777] ? generic_shutdown_super+0x1b8/0x4c0 [ 525.988114][ T5777] ? kill_block_super+0x42/0xd0 [ 525.993109][ T5777] ? deactivate_locked_super+0xcb/0x3c0 [ 525.998786][ T5777] ? deactivate_super+0x12f/0x140 [ 526.003951][ T5777] ? cleanup_mnt+0x7eb/0x870 [ 526.008685][ T5777] ? __cleanup_mnt+0x22/0x30 [ 526.013412][ T5777] ? task_work_run+0x208/0x2b0 [ 526.018335][ T5777] ? exit_to_user_mode_loop+0x306/0x1b60 [ 526.024134][ T5777] ? do_syscall_64+0x24d/0xf80 [ 526.029102][ T5777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.035303][ T5777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.041511][ T5777] ? kmsan_get_metadata+0xf1/0x160 [ 526.046786][ T5777] ? kmsan_get_metadata+0xf1/0x160 [ 526.052075][ T5777] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 526.058059][ T5777] ? kmsan_get_metadata+0xf1/0x160 [ 526.063335][ T5777] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 526.069833][ T5777] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 526.076066][ T5777] ? kmsan_get_metadata+0xf1/0x160 [ 526.081354][ T5777] __msan_warning+0x1b/0x30 [ 526.086012][ T5777] hex_dump_to_buffer+0xe86/0xeb0 [ 526.091232][ T5777] print_hex_dump+0x10d/0x330 [ 526.096082][ T5777] ? kmsan_get_metadata+0xf1/0x160 [ 526.101361][ T5777] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 526.107344][ T5777] jfs_flush_journal+0x13e9/0x1670 [ 526.112633][ T5777] ? kmsan_get_metadata+0xf1/0x160 [ 526.117947][ T5777] jfs_umount+0x1e3/0x720 [ 526.122457][ T5777] jfs_put_super+0x112/0x3d0 [ 526.127177][ T5777] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 526.133178][ T5777] ? __pfx_jfs_put_super+0x10/0x10 [ 526.138416][ T5777] generic_shutdown_super+0x1b8/0x4c0 [ 526.143945][ T5777] kill_block_super+0x42/0xd0 [ 526.148770][ T5777] ? __pfx_kill_block_super+0x10/0x10 [ 526.154300][ T5777] deactivate_locked_super+0xcb/0x3c0 [ 526.159829][ T5777] deactivate_super+0x12f/0x140 [ 526.164826][ T5777] cleanup_mnt+0x7eb/0x870 [ 526.169394][ T5777] ? __pfx___cleanup_mnt+0x10/0x10 [ 526.174641][ T5777] __cleanup_mnt+0x22/0x30 [ 526.179185][ T5777] task_work_run+0x208/0x2b0 [ 526.183941][ T5777] exit_to_user_mode_loop+0x306/0x1b60 [ 526.189574][ T5777] ? user_path_at+0x1fc/0x330 [ 526.194401][ T5777] ? __x64_sys_umount+0x1dc/0x250 [ 526.199595][ T5777] do_syscall_64+0x24d/0xf80 [ 526.204303][ T5777] ? clear_bhb_loop+0x50/0xa0 [ 526.209161][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.215200][ T5777] RIP: 0033:0x7f17db39d9d7 [ 526.219714][ T5777] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 526.239462][ T5777] RSP: 002b:00007ffff1edc3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 526.248010][ T5777] RAX: 0000000000000000 RBX: 00007f17db431f90 RCX: 00007f17db39d9d7 [ 526.256089][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff1edc460 [ 526.264163][ T5777] RBP: 00007ffff1edc460 R08: 00007ffff1edd460 R09: 00000000ffffffff [ 526.272259][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff1edd4f0 [ 526.280331][ T5777] R13: 00007f17db431f90 R14: 000000000007313c R15: 00007ffff1edd530 [ 526.288451][ T5777] [ 526.291826][ T5777] Kernel Offset: disabled [ 526.296220][ T5777] Rebooting in 86400 seconds..