last executing test programs: 1m7.759586444s ago: executing program 4 (id=521): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x64c2, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f00000000c0)={@remote, @empty, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x6, 0x800) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000140)=0x1) r3 = socket(0x15, 0x3, 0x4) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0xfb, 0x2, 0xff, 0x800, 0x1]}, &(0x7f0000000200)=0x54) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000240)={{0x2, 0x4e24, @loopback}, {0x1, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'veth0\x00'}) sendfile(r2, 0xffffffffffffffff, &(0x7f00000002c0)=0x80000000, 0x2) r4 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)=0x0) write$cgroup_pid(r4, &(0x7f0000000380)=r5, 0x12) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x4, @private0}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @multicast1}], 0x8c) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000480)={0x3, [0x3, 0xc5fe, 0x777c]}, &(0x7f00000004c0)=0xa) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000580)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x0, 0x6, {}, {0x5, 0x2, 0x0, 0x7, 0x8, 0x4, "e5c52670"}, 0x6, 0x3, {&(0x7f0000000500)=[{0x1, 0x3, {0x4}, 0x49ac}, {0x80000000, 0x80000001, {}, 0x7}]}, 0xd, 0x0, r2}) r6 = geteuid() statx(r2, &(0x7f0000000600)='./file0\x00', 0x2000, 0x800, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r6, r7) fsetxattr$security_capability(r2, &(0x7f0000000740), &(0x7f0000000780)=@v2={0x2000000, [{0x6, 0x7}, {0x9, 0x1fffe00}]}, 0x14, 0x2) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x10800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x5, @loopback}], 0x1c) r9 = openat$cgroup_ro(r2, &(0x7f0000000840)='memory.swap.current\x00', 0x0, 0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000880), 0x604000, 0x0) ioctl$TIOCGRS485(r10, 0x542e, &(0x7f00000008c0)) futex(&(0x7f0000000900)=0x2, 0x3, 0x0, &(0x7f0000000940), &(0x7f0000000980), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000009c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000a40)={0x3, r11, 0x2, 0x2, 0x1, 0x1, 0x4308}) 1m7.606718346s ago: executing program 4 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@private2, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x400}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x74}}, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x140, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffe43a}]}, 0x140}, 0x1, 0x0, 0x0, 0xc880}, 0x20000000) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000440)={0x7, 0x7, 0x1}, &(0x7f0000000480)=0x28) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x66a8, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48800}, 0x1010) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r4) (rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x947c}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040880}, 0x2400c001) r6 = geteuid() quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, r6, &(0x7f0000000740)) (async) r7 = fsmount(0xffffffffffffffff, 0x1, 0x70) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$nl_route(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@ipv6_getaddr={0x18, 0x16, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x18, 0x41, 0xfd, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4041}, 0x240008a0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'veth0_to_batadv\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'erspan0\x00', r2, 0x700, 0x85bb9533d5620c44, 0x5, 0x7f, {{0xe, 0x4, 0x2, 0x12, 0x38, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0xb1, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}]}, @end, @timestamp={0x44, 0x10, 0x99, 0x0, 0xa, [0x3, 0x2, 0xfff]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) (async) r9 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) (async) read$FUSE(r7, &(0x7f0000000c40)={0x2020, 0x0, 0x0}, 0x2020) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000002c80)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000002d80)=0xe8) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, &(0x7f0000002e00)=0xc) write$FUSE_ENTRY(r9, &(0x7f0000002e40)={0x90, 0x0, r10, {0x2, 0x0, 0x4, 0x6, 0x9, 0xdf7c, {0x6, 0x6, 0x3, 0x10, 0x2, 0x1, 0x6, 0x7, 0xc5d, 0x6000, 0x9e8, r11, r12, 0x1, 0x8}}}, 0x90) (async, rerun: 32) r13 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002f00)={{0x12, 0x1, 0x60, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2cf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0xe, {0x9, 0x21, 0x72, 0x8, 0x1, {0x22, 0x1b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x58, 0x6, 0x40}}]}}}]}}]}}, &(0x7f0000003280)={0xa, &(0x7f0000002f40)={0xa, 0x6, 0x310, 0x81, 0x3, 0x2, 0x10, 0x1}, 0x1f3, &(0x7f0000002f80)={0x5, 0xf, 0x1f3, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x1, 0x4, 0x5dd, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x0, 0x2, 0x8, 0x7e}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0xe5, 0xf, 0xfffd, [0xc00f, 0xff3f]}, @generic={0xdd, 0x10, 0x2, "1d44c45969327c75a13b68d65b06a138d198eb74c9f6f14bbe45b9de7a8872b6d8638215e4ed31f2f3be0099cbf2e22dde7aa41b8511e151322a039c70cc4ac7788e7717315cf24b2a9f8fe458abba7fa6ca90d6ec53ec40ab7e48d7438a1092d51271610408647cf8620381f13a223640ba3bb7976fd25fa798864e312edc3c272321338b37175c4e63fb90a24f12484f133bd3eb3ddd710a1dc86d8e433559478a4cab57b9a8e9502cc6c9431c7efe9c8a0eff3ab963d05f31a3734109ee115240805b012cb7b4d27cb942cbe46252bb072f6171180771c191"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xe, 0x3, 0x3}, @generic={0xdd, 0x10, 0x3, "33df7d33059ca2bee39923c52ddfc284f3b51a08067ccaf1ed16de918f6ba421e825611bb7fb3e44981313f95c0f038e105b0b281f7f36480ea6fb50f9244b9482b887315b935f2c34a326baa629f22d5f64a7092842b99c53730b80019cd9612cdf924079c9174d88d936c05b4278bed386797f222d63ac9c42162c62c9fefe6792a5154a632db6b4e8bc2bcc6a85b3bbf8777962a9e839184e35255706d54b59adac7600b598e7ef98b25a6ce21dc796a758b2585449c42318547fb26451f803e7e2258cf24e870ffc5bfe8258dd20db9675aa9a36727e0bc1"}]}, 0x2, [{0xa8, &(0x7f0000003180)=@string={0xa8, 0x3, "c93a745698744cdfa25ee58809f543b802768257298674524ea21f928beb5bdfa648cad57925e0c2c044d6106ede62231845c8332a33460b4ab08a9fd0b94ccb5306a6d12c4e4468f81a8ebda5c0f5c9e707a8539dde86e8814c48a7c2cf2a3af889efc2b30f29bb9f39ad645f0bc54b0c3669c1f943b96f73063e1746f23727806a817ca0c646877ef5bca688f5a2d7413888e634794a6203c251d0280c1988329d4e0eeb35"}}, {0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0x405}}]}) (rerun: 32) syz_usb_control_io$hid(r13, &(0x7f0000003480)={0x24, &(0x7f00000032c0)={0x20, 0x2, 0x7c, {0x7c, 0xd, "7cff9488502cc5c240da385f5049ab287082a6652fb15866f5a68029bddcec9f9b1760659eda3269442d67bb262820b8fcabc6557af521045bcdac893ea76c2d5e29f0636e0cc452e6c25993b197f9df12d98f9759ddc469e1c3601a754a23667b0060817005c58c83ceff9ffafad93b743b88a56f8ce75378c2"}}, &(0x7f0000003380)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "743f3d93c68c87d2223c86868ca5b1b657858bc88496d18b337f0a4c975a8ba6c4178187550eef4c3701307f400b6b655ca36976cada9946a41f1a2fb1ea0beb5a0e2c557eecb39cc795e67753"}}, &(0x7f0000003400)={0x0, 0x22, 0xf, {[@global=@item_012={0x1, 0x1, 0x3, "83"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x2, "a8"}, @main=@item_4={0x3, 0x0, 0x8, "2a6c6bea"}, @local=@item_4={0x3, 0x2, 0x5, "76f9f49f"}]}}, &(0x7f0000003440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x766}}}}, &(0x7f0000003780)={0x2c, &(0x7f00000034c0)={0x20, 0x1, 0xbe, "ec18595596a7da04fe3c548382faaa2ee71f0b6c6789846172fbd33898e3dcac5ce68626fbcffb72e2e7bc50e5e724e9450554c41f7aab4fb228a4904999c7f728c8b71ee1cc9323b74e798b9fc6338c8c51b17346c7497bcd1b7d12cc1c5d6f5c01316d58ae04924d6e664183225403f9ec6aff805eacaa7de3959c08cf84fdd86518d3ab547f22609ef750b8820fbe94b0136c84e1db7487fa7acabd32449b471fded00da13127ddadfabd90f007c3c208b1d8c785885203527a0e2bbc"}, &(0x7f00000035c0)={0x0, 0xa, 0x1, 0x59}, &(0x7f0000003600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000003640)={0x20, 0x1, 0xdd, "0931884f5b8657260b7c4df01ddcefb87820747918a8998b165b518d3fe6d7efef96756997fb358c796c4879e5bf4f9d8b1d5a2af66b1d9210b75bd31da8616a457383fa038f4f278d9c842e8574d90afa42626ca74e95455b569b6b9a4f372c6b2cd822a9c600332e4cbb8d0f2dd38b4c539a9d6c496ba0a3692b9ec73fa8aaff66d25b32fc4b4987b94bd8077536661cae82ae550d40f35188223949db3bbd7fcc7c2053182fb242b62a464d791a12b9aee1bd564cc3e07822f4a149109c6950f4029ef29ba2aaf3791c39d96b8b40287f4a7c048b2eefb39bf3176f"}, &(0x7f0000003740)={0x20, 0x3, 0x1, 0x4}}) (async, rerun: 64) r14 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000037c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 64) syz_usb_control_io$lan78xx(r14, &(0x7f0000003900)={0x14, &(0x7f0000003800)={0x0, 0xb, 0x31, {0x31, 0x21, "e3cacff37ba087d7f588394a2c08453664d31141ae8f11de248555d1649a940b251bffecb48c6d010e4096afd95913"}}, &(0x7f0000003840)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "2623ad8d278da70055b80902d31cf9286efb93c7195a5558f1dfc315b262c74cc2f1ea58d1508f0b61be642059240e10aec177bf01a9853ad577b75d90168d709c575fa9a65ec8e6a9537edeeb7e2cb1c8a3254d86f69f5b8970e19503cd8d1abd96c554c384f572e1bf1869dcb302464fe72b24249de69732603ffbffb3358175c66f302b4b993192a9646079bdbabcd46835cdabc896c47932bfcdb5d1fbef4a52786a81b671293cd565bf54d255869ac9"}}}, &(0x7f0000003b80)={0x34, &(0x7f0000003940)={0x0, 0x11, 0xe0, "1f6013afebf5d3899e8e32c5b9e23ff8d2bf958bd194dd3c785d7bfc5ff00203075e4ce17d83b1e14e4fc039bbd17f136255a257cd2dcdd7b33a14bf0561baa4da96dadfc5aeef80eb3f5c89d0e627c257c8c13b8b2278807f9407101409773248aa57e4892c7a6fe64d0746a95e8f75e351aefb95c3bc09453a3ae3087b8e458a7203d4b8bb0cf88d2f681705797b70481399f262e582bb00f031c2d2b57b1434946a23f77074dbaf03f21cef2f1e45aa0d2b4441fe5cc947831678e0b1ad146abead93969d207fed156ad95cc913d9d93ca8cb33d5efb6081df0ef1983cf0b"}, &(0x7f0000003a40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000003a80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003ac0)={0xc0, 0xa1, 0x4, 0xfff}, &(0x7f0000003b00)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000003b40)={0xc0, 0xa2, 0x2f, "0b1250c292b9f09a5b4c3e2be04c109c08b2b23c0f84e388b108b28ae76e2b4982abe2f2bcab8313e714d64d98696b"}}) 1m7.488312685s ago: executing program 4 (id=523): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) 1m3.897916098s ago: executing program 4 (id=533): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xde, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xe, 0x100}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000040000000000000000000000000000000400000000"], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fdatasync(r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="5aa3b7defd47e682212c531e9fa3d7519c777e196449d7d8b0722869565cc09acfedfc2166aeae386ebc8718a3bff2bad962ac7ff2beb575976dd241bac1182e3db98f72d1c289ae60f895196f725506edcbde86a2a47c8eb4895b26f7a4677ff512a21426455deed20faf148468b1284d1e044eb7191f5d3e58544ed23c8378d7d419bd5de08c1f61d505fb9b67d4bce0c3f34852a3cbe23894cb8018f67be848c6", 0xa2}, {&(0x7f0000000400)="1be7349d80dafa4d71987c1493de4feed5ecbff757fcacec26693ff49010b952b8a86b813e24fdcf705ddf1f002e705971304a85f6c369d1da96f86abb5eee037d4f5fa47a8dc42feca8dc4084f4ee8db8dc1c561df2b64428b13cfa5d742e508532c6b8c9", 0x65}, {&(0x7f00000004c0)="c69560328a4521e6ffc90aa08f1e01edc4950cfa61788a5af2d026a0d932ef4be8a6efe278ab43addd145753db9f22988bb31a30bea1df8a28db052fd2deb6cacede63d210f2e9719d81531fc0", 0x4d}], 0x3, &(0x7f0000000940)=[{0x40, 0x9b2d1348e065e137, 0xd89, "2d2e5397314a7418a34658e068bf2151f88b6745e34b6bb137cd991c710a288440877a04c9ec2e72dd4b66767e55"}, {0x30, 0x107, 0x2, "07ee55090f9b771c096f7ed6a645ad986973670e25db18a268ea4d02"}, {0x70, 0x1, 0x0, "8a92b88753d1a732b26f065aa1a0417cd0fe38a600f8afe83808b5dcba738d051b9da33a40429ccb5edb33e0b731177cb99aef6bb9cfe9e4c9d2f8b71e13de1ec58d350f48985b5fe370a3831c56527d4fc7009539dfe7e93d2cb17c0085"}, {0x18, 0x119, 0x135c, "868a"}, {0xe0, 0x11, 0x8, "4e929bcfab219495e8e4a479f56bd5d1a7568a2e038c06825499d78328a31671390689eef0305720a27f73deaa49c189e501fa0093ccaa1c2b8a579685af57cc196114c5ac078fa02dddd9112e26379e24ce5db7bf58d2e7a2955781413c1cf729e7014f1d28ff2cb5c4cf3e5c438d9900cafb8e90f9859d4f00773067223d253ac03b7d9aad6b13ad28527c6fb5b421f4d76e42f1414ef29ce2e7075990541f098788c4b7822c60dda603344168cc6cc9fcfbfe2f5d3e703db068235237be85132584e845d2194c1a3974eab8"}], 0x1d8}}], 0x1, 0x44) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 1m2.489423844s ago: executing program 4 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x24b5, 0x2}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0xd, r4, 0x19}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="28785ab688e0b2608e91dd339f5b43aa8c03b9916d6bb65c1c080bc9c1d58e44619b11fabe3b966d7ded2725e1ab5e19041b1c6cbf6a2d750d32aad47b6b53de80365382a6c6640efaec09caf3c5d119060a8a628194751020736d713ad7738aa44223b00ba88d4cc4ed0e34a8c00b5a659247b794beb15730c60085a4c64679b65f46aec2d7c1a9", 0x88}], 0x1, 0x0, 0x0, 0x40010}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 1m1.649064253s ago: executing program 4 (id=545): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x2, 0x100}, {0x0, 0x80005}, 0x51, [0x7, 0x5, 0x400e, 0x2, 0x9, 0x2000001, 0xd8e, 0x7fc0000, 0x9, 0x8000, 0x6, 0x2, 0xc, 0x49, 0xfffffffffffffffe, 0xc]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xfffe}, 0xffffffffffffff74) write(r1, &(0x7f0000000040)="05000000010000", 0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xe9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) readlink(0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a12207003893851f820008b1f2"], 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x4207, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) keyctl$get_security(0x11, r7, &(0x7f0000000480)=""/194, 0xb5c984c509d03210) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000001040)={0x0, 'pim6reg1\x00', {0x1}, 0x4}) 1m1.41147627s ago: executing program 32 (id=545): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x2, 0x100}, {0x0, 0x80005}, 0x51, [0x7, 0x5, 0x400e, 0x2, 0x9, 0x2000001, 0xd8e, 0x7fc0000, 0x9, 0x8000, 0x6, 0x2, 0xc, 0x49, 0xfffffffffffffffe, 0xc]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xfffe}, 0xffffffffffffff74) write(r1, &(0x7f0000000040)="05000000010000", 0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xe9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) readlink(0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a12207003893851f820008b1f2"], 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x4207, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) keyctl$get_security(0x11, r7, &(0x7f0000000480)=""/194, 0xb5c984c509d03210) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000001040)={0x0, 'pim6reg1\x00', {0x1}, 0x4}) 12.896343954s ago: executing program 5 (id=709): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000100)={'U+', 0x5}, 0x16, 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x83a5, 0x1, [0x5]}, 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) (async) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000100)={'U+', 0x5}, 0x16, 0x2) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x83a5, 0x1, [0x5]}, 0xa) (async) 12.895528534s ago: executing program 5 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0x40, 0x4, {{0x44, 0x4, 0x0, 0x1, 0x110, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x38, 0x0, [{0x1, 0x3, "c5"}, {0x2, 0x11, "8f7f3984c888c03848c0a7d3ad3a87"}, {0x2, 0x12, "cd8b61eafe481d5a19836ae41f3db9f2"}, {0x6, 0xc, "997744a96f4ed634bcfb"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x67, 0x0, 0x8, [0x1, 0xa7, 0x0]}, @timestamp_addr={0x44, 0x4c, 0x8a, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty, 0x80000001}, {@empty, 0x10}, {@multicast2, 0xffffffff}, {@broadcast, 0x1}, {@multicast1, 0x5}, {@multicast2, 0x5}, {@loopback, 0x2f0}, {@loopback, 0x200}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xa2, 0x3, 0x7, [{@loopback, 0x7}, {@multicast2, 0x4}, {@local, 0x5}, {@empty}, {@empty}, {@rand_addr=0x64010100, 0xfffffffa}]}, @cipso={0x86, 0x23, 0x3, [{0x2, 0xd, "8eb28f5535ecd33adbfffe"}, {0x1, 0x10, "2dedf711c7e2ccd96b43925ee2c9"}]}, @end, @lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@ipv6_getaddr={0x70, 0x16, 0x800, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x32, 0x0, r1}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffff9}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x12}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x15}, 0xc814) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10001, &(0x7f0000000040), 0xdd, 0x57c, &(0x7f0000000180)="$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") gettid() 12.852026006s ago: executing program 0 (id=711): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$eJzs28uu0lAUxvFv94KINxQviXHgkIkUMEFNHOijEKiEWJSIE4iJ+h4OdObDSYwzR2LoBaUSRbS7OYf/b3L26tq302TDSgEBOFqPdFtGRpV1cKtaf90wZW8JgCWr9O+3FYDj4379m96muI0AsGz5WJpK+vTl1UBuJSsLbmSNdd7P8tVf64flW+mml+ZNVWfz9cUHPVwmzYFMbef4Wja/Obcz31Q9yTvndUEXdUl1XdYVNdL8MBkvmev/UAkBAHA8jFr5eOuCoyfjKGxvYj+OO6p5SgqDtWZ3k6/E+bub+EwctwbPo2Fx/wSAgzhqffw5zp9/N3f+vfT8Azj5ZvPF034UhS8sNZLnA05xq6+2r3j/b2a9sXmj/tAwSj6nPXC4LytbzZ4n/abP570mfF/aDfetL+qp2CVc7dW5pBckANYELyfTYDZf3BlP+qNwFD7rdXu9B+379zpBXPgH2+U/gFPkx5t+2TsBAAAAAAAAAAAAAACHuqprZW8BAAAAgCUF/kBNeie+WQwAAAAAAAAAAAAAAAAAQAG+BwAA//8UAww+") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e33, 0x6, @local}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="8c692fa70df69a28cc2fbfbb72c37b1aee4a8085c11e96574d1dc109cda13aa7b97483b81a7ba1925aa3bfcad25ac73ec8bf2b3fe60e2a4e18024897c8987ac3c8d85ea58a226cd983711da04a3623474721ef46d53d8377494bf9006ab4d0e2922b0158774d29126b66b95b586ddd37e51354d2351808135f2a1df3fb7b6ba114d0a666bcd3c1238badcf931095c0493e54426cfee737fa1b06ed2dce760cb52ae4917205f4730a8fdf4932a9d9f0d8af274e706263179fbb1bf5db5a2dc6a25e7c322aa461a3ae6541ded5960fcc99d7c5645d4aa331642c80a8a260da88a599b98063b598f0a27738794217b5b204b1b27058c9e9478ac7f9b5fd4c88a14e361f300bae5eb1b6d5893087804066760f3f22bd2610dc37193aa2a5cbdb116cb7e759a5604f17b44a655ea410b6fe27df94ddb95a879d4980ce032c82a9c496e39fac51cc3609041e76bc137b3fbc10f20845da12433feff0f852bc075cc1a3721bc9149c71fbf7c7127237038e5e7ededf7afd0baa2a4f9efb928529df6a506423d527d1bbc4cda4adfa3d15e5a997ff5e0139b3d38b8c59ed6d6f7ebd40a9b2a3a4e6c34adb766b9b00c36d93df605bde139e5111001c2ac92d54d9bc3408758cd455487161e380cf649e6a55a6d0b8173fa8c38dd90a6ec9afab991d14733e783965a7657427b7f5bbc054bec8cd9d2d11b02cb9d4af78602250ccc24c50e295dc34b0f146d5a6169b26eecc56b97d02c63b59982426e48222199f08b8cea540406d5b3365fe64091f045f8a6435ac906c4cd87db3b21a198b9b2f30635434035f5171486abfc5be12b5f4056e0c23d97c67c4911d26092ecfd52462d3487921af53d0ad6c0b1eb0b4c4808276afeef3a18a3233c84915881c3fd83e3518f361989478ac3c84f25dc665e0f01e320f8f63bc36fc09ddcfec44c3d590a8726f5e048c5b20ad0efe778db7a6a10588caa1ea7a2447c224c1659b6a773d75728b5d368aeb7b236c82e32585c2b6f31a1bca5e096e5184c00e9ec3601ad6f6baa05e7efc7b85b165b83e5dbf40596653c780e4374cde5f8f2ea5238a366173f2b22fa017a4a0c4648ec293cb2abc9bfb7830063f97c79002f19cf1f554b56eb436b02d6a9cfd468968c358b8286ba28f940a9d8a108c97917f0cac80de945ca250e2351507a45b293ab8d332b87abb5f3d9654a42b53e42bc57547f3b03ab550168ad9e3889cded563ade48546c1567fa091ee2e97479901d94ae713ae732d2cf5d76514acd11af31c15f6bc52f68a490fa48701d1bce130f3400027538b00bf0291a09a7ab53816d09b0f9e0750339413674577a393b586eb203f8937349c9ff8d6bc5352065a413415cac26715684e652c07583ef1f230c4321e296d09dbd846c36ef619a29731cf06110a5225addb7c810319f76c67a8822854ca2b2e68911d16c2cfd0c5cdf128a4bcee2ebb176c885ec511884c864eb0f8ab11d2553a5c4afa8527cc7658f0f77507b552176ff1d63ddee007cd6f44f085b44f863bcc013ea6b5cd2b01dc20dbba78988b0de528659c3317aae3d90c1b818d794854a1aa2c9450d2a7f18e3ec4e99b2c76d2535559cf587f23c9093a09c8ac488f65c5b50a05c79bbe0394717e8dfc022d390e5d5c592c9a170c228c3c86d5bb7b65ab7f4e7db0aadb4e23a5c110660a5623612422d6da1abc2a0809c33ca62e4ebb15b4178a17346b441ee8bab4695412537374dd2eeeb0b5ea9ad2ee719abc202e7a483e835e17e7a1ae282cce10ee16b1ccb068ee35dd541e2ef3527d151082e0dd547d8109cebae1e68cef444c162fc699e0ce93884d2c0650b96c4c103ed15341d9237c79e1dbe756f49f35b8baaf95b6543240b525854a72d375a8dac0f3afd7b04b3d91a661ec05bc234f14e3f4aac60363b19867fdcb1980c09f1e065a1fd90fe50198ab48b12271d4ab837e153949f55f9b498682d45c2a3b0a7203f0ce8b7cc0fb5eec89c1531ac7a15a2b553ce6a39d3a03b6c7b224793a9db8e89789dc5f40926f333f73365d440fb88e3637c5e915a222dbfdc07ae91a080417440c7478aefbb962b69b006bb6a8c1edefa53bb54505b8ae7b0546f832a2c717c83f80694c42429b82d0deb6e8e42eedb3aa7789edc58530d3c8d2a1682df6647a1670ce420989b0938d34fe8e621b1c60b574f1bcc3f9ad627068d2ad2ecd844acb6691b78be7da54864885cf360f78533aa1a6052bd4b7d3ce181b27be5e25c38a6efc18a037cfc71d7c42da87b32de6a08b53314e568812c89488e4781a3f115d3be3192581692dcabd41257d8d4dc2718c616eaa1221f8cf00d36a80bc56d4509693f0e4c215fcdac553a043bfc51b5fc061ba9fdb66baf906439f7bf0e167213e244a53082eb8a4d3ff34b33644f57cb242fb73a91a17198051ded28800e2d7e1f17d6574c9cd8bfe3ed2b6357bea9861cd47077bdd2bc0d5093462f05152b55b45ba0da177b21076c4852fa4f551d79cddc378dd5aa7a45c1a3dbda0aa525f2ac6069d70617ef66e93b2cf374d87db3b93a51c2346da9b96f83a35916ad776698b7bd3f765f1805822861683dfd7be4043c0a63c9cc5ee5836f769f32fa7ce83e02a6442bb5981f744e938ac75d78f3bd6eb4e7e8bedf611cfbfef97350dc3f508d53b1c106af95583cc308e4906ab3d0a76a173ad707e832a8e35bb5fa1044bafdde78cee084ec49f08223a6beb8ba5c8d4a60a47606eae3afc7b04b375f2100b9f4b463d52c0b52993b45ee48b2d25a1d6e2bb05fad124939f53ba9064cf8b9844", 0x7c1}], 0x1}}], 0x2, 0x2000c081) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)={0x3a, 0x6, 0x1, 0x0, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, 0x38) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x99, 0x692400) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000080)) syz_usb_connect(0x0, 0x49, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007916ae20e20424140a8a0102030109023700010000000009040000000266b900052406000105240000000d240f0100000000000000000006241a0000000424060004"], 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) (async) getdents64(r0, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x80002, 0x88) (async) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e33, 0x6, @local}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="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", 0x7c1}], 0x1}}], 0x2, 0x2000c081) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)={0x3a, 0x6, 0x1, 0x0, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, 0x38) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x99, 0x692400) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000080)) (async) syz_usb_connect(0x0, 0x49, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007916ae20e20424140a8a0102030109023700010000000009040000000266b900052406000105240000000d240f0100000000000000000006241a0000000424060004"], 0x0) (async) 11.509437684s ago: executing program 5 (id=713): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socket$inet(0x2, 0x3, 0x400100) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) close(0x4) 9.905792045s ago: executing program 0 (id=714): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) (async, rerun: 64) r4 = syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5) (async, rerun: 64) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6f6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e2600200000000000000710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x7, 0x1512, &(0x7f0000001c80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) (async) rmdir(&(0x7f0000000140)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000007000010000000000000000000700000083a3c944dae7a387ae1bf77a1ea991673da8aaec6538ebf762cff0b93ea26fcd43b8d80e3f764f7ed481cf07f73290fd9e7a774770fff3afc64403f430506b92f276aeca0b048cd52f9bfaecba1982ed81c7aa3fa9004951cbb3c6c3970ce22c712bd8ba7200b574133d56ec56f07a8e72208b48f24a5e083854340d1967becbe7121f2f956556", @ANYRES32=r7, @ANYBLOB="10000180040004"], 0x28}}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000140)=0x9, 0x4) (async, rerun: 32) r8 = landlock_create_ruleset(&(0x7f0000000100)={0x804, 0x12, 0x2}, 0x18, 0x1) (rerun: 32) kcmp(r0, r1, 0x5, r4, r8) (async, rerun: 64) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) (async, rerun: 64) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") 9.011589404s ago: executing program 0 (id=721): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f0000000640), 0x1, 0x46b, &(0x7f0000001680)="$eJzs28tvG8UfAPDvbuL0/Ut+pTz6AAIFEfFImrZADxwAgcShSEhwgGOUpFWp26AmSG1VQYtQOSGExB1x5F/gBBeEOCFxhTuqVKFe2nIyWu9u47i2m6R2XOrPR9pkZnd2Z77eHXt2xw5gYI1nf5KI7RHxR0SM5tmVBcbzfzeuXZi9ee3CbBK12rt/J/Vy169dmC2LlvttKzITaUT6eRJ7W9S7eO78yZlqdf5MkZ9aOvXR1OK58y+cODVzfP74/OmD6ZHDh6Zffungi12JM2vT9T2fLOzb/dYHX7999Mts3UgZf1McXTLeaePTtVqXq+uvHQ3pZLiPDWFNhiIiO12Vev8fjaFYPnmj8eZnfW0c0FO1Wq22rf3mizXgPra14Z0gk3f5bIxfaVgL3H/KD/rs/rdcmgcBr/Zm6HFPuPpafgOUxX2jWPItw5EWZSpN97fdNB4R71/859tsid48hwAAWOHHbPzzfKvxXxoPNZT7XzE3NBYR/4+InRHxQETsiogHI+plH46IR9ZYf/Mkye3jn/TKugJbpWz890oxt7Vy/FeO/mJsqMjtqMdfSY6dqM4fKF6TiahsyvLTHer46Y3fv2q3rXH8ly1Z/eVYsGjHleFNK/eZm1mauZuYG129FLFnuFX8ya2ZgCQidkfEnnXWceLZ7/e123bn+DvowjxT7buIZ/LzfzGa4i8lLecnj5Tzk1Obozp/YKq8Km7362+X32lX/13F3wXZ+d/a8vq/Ff9Y0jhfu7j2Oi7/+UXbe5pVXv9jjftk1/9I8l49PVKsOzuztHRmOmIkOZo3unH9weV9y3xZPot/Yn/r/r8zll+JvRGRXcSPRsRjEfF40fYnIuLJiNjfIf5fXn/qw/XH31tZ/HNrOv/LiZFoXtM6MXTy5x9WVDp2W/w3O5//w/XURLFmNe9/q2nX+q5mAAAA+O9JI2J7JOnkrXSaTk7m35ffFZFWFxaXnju28PHpufw3AmNRScsnXaMNz0Oni9v6PH8pIvKvFpTbDxXPjb8Z2lLPT84uVOf6HTwMuG1t+n/mr6F+tw7oOb/XgsGl/8Pg0v9hcLXu/1s2vB3AxmvR/3V+GBCtPv8/7UM7gI3X1P9N+8EA8fwPBpf+D4NL/4eBtLgl7vwj+Y6J8kjr3L1TYvhsfujuH3kDElG5J5qRJzZ3/8iR3gNxSfQs0cc3JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC76NwAA//9G8NFr") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, 0x0, 0x0) eventfd2(0xe7, 0x800) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201d5b05f058e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724010f0c04000905030c4000014007080b71ad"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000001fc0)=""/169, 0xa9) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x2) copy_file_range(r3, &(0x7f0000000000)=0x1, r3, &(0x7f00000000c0)=0x52, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f0000000640), 0x1, 0x46b, &(0x7f0000001680)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) (async) getdents(r2, 0x0, 0x0) (async) eventfd2(0xe7, 0x800) (async) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201d5b05f058e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724010f0c04000905030c4000014007080b71ad"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) getdents(r2, &(0x7f0000001fc0)=""/169, 0xa9) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) fcntl$notify(r4, 0x402, 0x2) (async) copy_file_range(r3, &(0x7f0000000000)=0x1, r3, &(0x7f00000000c0)=0x52, 0x3, 0x0) (async) 7.471469797s ago: executing program 5 (id=731): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103) 7.329621581s ago: executing program 5 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3b}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x6c}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) 7.21671484s ago: executing program 0 (id=734): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000027c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f3800006d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") setxattr(&(0x7f000001f640)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73782e260373cf285246f619e46fc5a25a6c6e12338fc9"], 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f00000002c0), 0x4) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r9, r6, 0x25, 0x1c, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) syz_io_uring_submit(0x0, r11, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x5a, 0x0, r2, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) 6.987484849s ago: executing program 5 (id=737): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000019080)=0x30) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 5.757546078s ago: executing program 0 (id=741): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socket$inet(0x2, 0x3, 0x400100) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) close(0x4) 5.638372916s ago: executing program 1 (id=742): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000200)={[{@noauto_da_alloc}, {@test_dummy_encryption}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@nodiscard}, {@grpid}, {@errors_remount}, {@abort}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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") socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_QUOTAON(0xffffffff80000107, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c000201000000090400"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4b, 0x24, 0xd0, 0x20, 0xa2c, 0x8, 0xc7b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0}}]}}, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000b00)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/21) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000200)={[{@noauto_da_alloc}, {@test_dummy_encryption}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@nodiscard}, {@grpid}, {@errors_remount}, {@abort}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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") (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) quotactl$Q_QUOTAON(0xffffffff80000107, 0x0, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c000201000000090400"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4b, 0x24, 0xd0, 0x20, 0xa2c, 0x8, 0xc7b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0}}]}}, 0x0) (async) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000b00)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") (async) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/21) (async) 4.49753529s ago: executing program 2 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00') readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1800}], 0x2) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x2, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5dd814aa2eb7e4f8a75905a9850edbe30000000008008000", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40c5400"}}}}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3.538733818s ago: executing program 2 (id=750): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r2, r0, 0x16, 0x0, @void}, 0x10) (async) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000240)=0x8001, 0x4) 3.379336119s ago: executing program 2 (id=751): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c88604000000656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYBLOB="0569be040a0ba3ba43db6fcb648f069f626af0b9eab5cf4fb11a2ce510acee194b279ad6f8b6661cb52ca0b979de531329546b6bd278ccaea002ba8c5f8a37759c4da9ed46e2559fe9dbfa416d3ad7e6d4f8c877a230a9a5490e947f050d24e5aa54823cf9e7e76ca0ed6171a76000e01c0c4cf73e1af888d05bae6792896824848426d7a30d7292be05ce64d78ca5307d8027f8f787", @ANYRESDEC=0x0, @ANYRES16], 0x11, 0x2de, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r1 = syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000002780)="$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") lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000002c0)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x100}}, {@gid}, {@codepage={'codepage', 0x3d, 'macgreek'}}, {@part={'part', 0x3d, 0xe}}, {@part={'part', 0x3d, 0x200800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x10, 0x31c, &(0x7f0000000580)="$eJzs3U1P1EAcBvBn2u6yKwQrYEg8oiSeCOBB40ViiBe/gAdDRFgTQsVEMVES4+rZGG8mJh69eTb6FfRi/AJ64mA86YV4sGZmOn1Zpt2ywBayzy9h2bbz8p9OX2aWLAURDayri9/fXdiWP6IGwAVwGXAANAAPwGlMNh5ubK5tBq3VooJclUP+COicYlealY2WLavMp3JEfLnkYSS9jg5HGIbhj66pfvclFqqO0Of+Lg4wFJ2danuj75EdjrZu12BJ9bDYwQ4eYbTKcIiIqHrR/d+J7hIj0fjdcYDpaBx+3O//mfHNTnVxHAnx/d/Ry6GQ++ek2pTM99QUTva+Y2aJtrL0MTGSXRkmu7sOfWRlOkB0m1WqWJzmnbWgNdNWBTzHlUgq2YR6XYVpiJIXbV3/mrLMTQsUtb3YsGpDTbZhPif+8T3X+OknXturW/pSIibxWXwVS8LHG6zG4z8vFHLnqP3jd/SUjn82v0TVSl+nyrQymb+fUpWcMT3w8X3Symbefm3AlbHYyFJE5/jdN3G+qufnwhiyHyvo1s3lt07lGrfmmo+X/1pzTXTmanq1oDWzci8o/CjlwFhndOKluCGm8AsfsJga/zsy9TTyz8zMlV+olNGRUdgeT6XM6ccMdQLftZyZTonMA+2ataOLvcBtXMLog8db68tB0Lpf/RtzqhyRePSBGB2Oco38nUqDhnxTA3Bglf4Lw9C6yUM/mlxTTb34Nmny1vqyaOvF/VWBdlyg2bSQnxjAAoBojbki9FL70zjXUFJgqex/ZG+rNfYD0kTVhwPSVJXZ5GKo1JnS7KHS60/Wl4OerkR0zCSdjsmbVQdDVZDDK6Hnf6n5yqy66sgXv2A2EnYrPFXiXM4MaEy9nig3g4uLzZ3BDZs3XeZcZ88D5zpqdGBqfNZZrB/FiaP4V8m9/ylDLOIbbvHzfyIiIiIiIiIiIiIiIiIiIiIiIiKi42av30bo5esE2Rq3B/AfbxARERERERERERERERERERERERERERER7U/q+b+Aq54YU6/8+b9uief/mudSEFHP/gcAAP//NBBgTQ==") fsetxattr$system_posix_acl(r1, &(0x7f00000009c0)='system.posix_acl_access\x00', &(0x7f0000000cc0)={{}, {0x1, 0x5}, [{}, {}, {0x2, 0x1}, {0x2, 0x5}, {}, {0x2, 0x1, 0xee00}, {0x2, 0x4}, {}], {0x4, 0x4}, [{}], {0x10, 0x3}, {0x20, 0x1}}, 0x6c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f00000008c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@discard_sync}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") truncate(0x0, 0x96f) prlimit64(0x0, 0xe, 0x0, 0x0) setfsgid(0xee00) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) 3.378657249s ago: executing program 3 (id=752): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x40, &(0x7f0000000340)={[{@nombcache}, {@mblk_io_submit}, {@data_err_abort}, {@barrier}, {@nobarrier}], [{@euid_lt}, {@dont_hash}]}, 0x1, 0x4f7, &(0x7f0000000c80)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) (async) unshare(0x200) (async) io_setup(0x8, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x81, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(0x0, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x4041) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x1) (async) write$binfmt_elf32(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600030a0560d301000000000003000600010001001b00000038000000a40100000804000003002000020005000080ff0100000000050000001f00000003000000020000000100000007000000070000000900000051e574640a000000d1000000012bd8a809da6046a09c06882870000000010000"], 0x78) close(r6) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000a40)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x1483, 0x5}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x8e, 0x2, 0xa}}, @cpuid={0x64, 0x18, {0x7ff, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x0, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xb03, 0x5}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x1a, 0x7, 0x40}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x4def, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0xf570}}], 0x238}) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="baf80c66b87f29688866efbafc0cec0f01c20f01c90f01c8ba210066b80b00000066efd9e0660f383b9c0900d9eb66b8043800000f23c80f21f86635080040000f23f8b8d6008ec0", 0x48}], 0x1, 0x2, &(0x7f0000000500)=[@cr0={0x0, 0x20}], 0x1) 3.169360191s ago: executing program 3 (id=753): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.412540305s ago: executing program 1 (id=754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) 2.180484693s ago: executing program 3 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.179421012s ago: executing program 2 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4080) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 1.993562149s ago: executing program 3 (id=757): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (fail_nth: 4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) 1.870288637s ago: executing program 1 (id=758): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{}, {@val={0x8, 0x5, 0x24}, @val={0x8}, @void}}}, 0x24}}, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 1.519683044s ago: executing program 1 (id=759): r0 = socket$inet6(0xa, 0x4, 0xffffffbd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000040), 0x0, 0x81, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000a00)=0xc0000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x0, 0xffff1000, 0x1, 0x1, 0x996}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff04, @mcast2, 0xfffff0ca}, 0x1c) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$eJzs3AucT9XaOPDnWWvtMSbp1ySXYa31bH7JZZkkySVJLkmSJEluCUmTHElIDLklDUlILkNyGUJymZg07ve7JCRJkyQhuSXr/5ni73TqvOec9/Qe7+ed5/v57I/1zN7P2s/+PbNnXzDfdh1Wq0nt6o2ICP4t+OsfyQAQCwCDAOAaAAgAoHx8+fjs9bklJv97O2F/rofSrnQF7Eri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxsy4xC1/KScxd+/5+T8fX//4aLJx98ua7M9d0AYv7ZPO5/zsb9/z8r+Gc24v7nbNz/nCr2ShfA/hfg8z8nyPV313D/czbuP2M52ZV+/3ylF4jk7M/gSn//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLGc74yxQAXBpf6boYY4wxxhhjjDH25/G5rnQFjDHGGGOMMcYY+5+HIECCggBiIBfEQm6IAwEAV0NeuAYicC3Ew3WQD66H/FAACkIhSIDCUAQ0GIgBghCKQjGIwg1QHG6EElASSkFpcFAGEuEmKAs3Qzm4BcrDrVABboOKUAkqQxW4HarCHVAN7oTqcBfUgJpQC2rD3VAH7oG6cC/Ug/ugPtwPDeABaAgPQiN4CBrDw9AEHoGm8Cg0g+bQAlpCq/9W/gvQE16EXtAbkqEP9IWXoB/0hwEwEAbByzAYXoEh8CqkwFAYBq/BcHgdRsAbMBJGwWh4E8bAWzAWxsF4mACpMBEmwdswGd6BKTAVpsF0SIMZMBPehVkwG+bAezAX3od5MB8WwEJIhw9gESyGDPgQlsBHkAlLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHfAx7IRPYBd8CrthD+yFz2AffP4v5p/+m/xuCAgoUKBChTEYg7EYi3EYh3kwD+bFvBjBCMZjPObDfJgf82NBLIgJmIBFsAgaNEhIWBSLYhSjWByLYwksgaWwFDp0mIiJWBZvxnJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIV3493YB+tiXayH9bA+1r/0egobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AGTMAk7YkfshJ2wM3bGLtgFu2JX7IbdsXvWC7kAX8QXsTfWEH2wL/bFfpiSawAOxIH4Mg7GV/AVfBVTcCgOw9fwNXwdR+ApHImjcDSOxqriLRyL45DEBEzFVJyEk3AyTsYpOBWn4nRMwxk4E2fiLJyNs/E9nIvv4/s4H+fjQkzHdFyEizEDM3AJnsZMXIrLcDmuwJW4AlfjGlyN63A9rsONuBE342bciltxO27Hj/Fj/AQVAH6Ke3APpuA+3If7cT8ewAN4EA9iFmbhITyEh/EwHsEjeBSP4jE8jifwOJ7Ek3gKT+MZPIPn8Byex+cSvm78Scm1KSCyKaFEjIgRsSJWxIk4kUfkEXlFXhEREREv4kU+kU/kF/lFQVFQJIgEUUQUEUYYQSKMAQARFVFRXBQXJUQJUUqUEk44kSgSRVlRVpQT5UR5cauoIG4TFUUl0dZVEVVEVdHOVRN3iuqiuqghaopaoraoLeqIOqKuqCvqiXqivqgvGogHREPRBwfgQyK7M03EUGwqhmEz0VzIiz/BWosR2Ea0Fe3EE2IUjsQOorVLEk+LjmIsdhJ/EePwWdFFTMCu4nnRTXQXPcQLoqdo43qJ3mIK9hF9xXTsJ/qLAWKgmIU1xXs4N3ct8apIEUPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQaSKiWKSeFtMFu+IKWKqmCamizQxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJdfCAWicUiQ3woloiPRKZYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih/hY7BSfiF3iU7Fb7BF7xWdin/hc7BdfiAPiS3FQfCWyxNfikPhGHBbfiiPiO3FUfC+OiePihPhBnBQ/ilPitDgjzopz4idxXvwsLggvQKIUUkolAxkjc8lYmVvGyatkHhlc/HSvlfHyOplPXi/zywKyoCwkE2RhWURqaaSVJENZVBaTUXmDLC5vlCVkSVlKlpZOlpGJ8iZZVt4sy8lbZHl5q6wgb5MVZSVZWVaRt8uq8g4JkV/3UUPWlLVkbXm3TIZ7ZF15r6wn75P15f2ygXxANpQPykbyIdlYPiybyEdkU/mobCabyxaypWwlH5Ot5eOyjWwr28knZHv5pOwgn5JJ8mnZUfqL3yLPyi7yOdlVPi+7ye6yh/xZXpBe9pK9JfQB2Ve+JPvJ/nKAHCgHyZflYPmKHCJflSlyqBwmX5PD5etyhHxDjpSj5Gj5phwj35Jj5Tg5Xk6QqXKinCTflpPlO3KKnCqnyekyTc6QAy7ONEfKf5j/9h/kD/ll75vlFrlVbsOLrZCfyF1yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoMySWfKQPCQPy8PyiDwij8qj8pg8Ls/KH+RJ+aM8JU/L0/KsPCfPyfMXPwNQqISSSqlAxahcKlblVnHqKpVHXa3yqmtURF2r4tV1Kp+6XuVXBVRBVUglqMKqiNLKKKtIhaqoKqai6oZLVapSqrRyqoxKVDf9K/mquLpRlVAlf5N/qb7kv1NfK9VKtVatVRvVRrVT7VR71V51UB1UkkpSHVVH1Ul1Up1VZ9VFdVFdVVfVTXVTPVQP1VP1VL1UL5WsklVf9ZLqp/qrAWqgGqReVoPVYDVEDVEpKkUNU8PUcDVcjVAj1Eg1Uo1Wo9UYNUaNVWPVeDVepapUNUlNUpPVZDVFTVHT1DSVptLUTDVTzVKz1Bw1R81Vc9U8NU8tUAtUukpXi9QilaEy1BK1RGWqpWqpWq6Wq5VqpVqtVqu1aq1ar9arjWqjylRb1Ba1TW1TO9QOtVPtVLvULrVb7VZ71V61T+1T+9V+dUAdUAfVQZWlstQhdUgdVofVEXVEHVVH1TF1TJ1QJ9RJdVKdUqfUGXVGnVPn1Hl1Xl1QF7Jv+wIRiEAF2VfamCA2iA3igrggT5AnyBvkDSJBJIgP4oN8wfVB/qBAUDAoFCQEhYMigQ5MYANxsenR4IageHBjUCIoGZQKSgcuKBMkBjcFZYObg3LBLUH54NagQnBbUDGoFFQOqgS3B1WDO4JqwZ1B9eCuoEZQM6gV1A7uDuoE9wR1g3uDesF9Qf3g/qBB8EDQMHgwaBQ8FDQOHg6aBI8ETYNHg2ZB86BF0DJo9afO7/2pAo+7zbq3TtZ9dF/9ku6n++sBeqAepF/Wg/Ureoh+VafooXqYfk0P16/rEfoNPVKP0qP1m3qMfkuP1eP0eD1Bp+qJepJ+W0/W7+gpeqqepqfrND1Dz9Tv6ll6tp6j39Nz9ft6np6vF+iFOl1/oBfpxTpDf6iX6I90pl6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH/ljv1J/oXfpTvVvv0Xv1Z3qf/lzv11/oA/pLfVB/pbP01/qQ/kYf1t/qI/o7fVR/r4/p4/qE/kGf1D/qU/q0PqPP6nP6J31e/6wvaJ99c599eTfKKBNjYkysiTVxJs7kMXlMXpPXREzExJt4k8/kM/lNflPQFDQJJsEUMUVMNjJkipqiJmqiprgpbkqYEqaUKWWccSbRJJqypqwpZ8qZ8qa8qWAqmIqmoqlsKpvbze3mDnOHudPcae4yd5mapqapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlqmppmpplpYVqYVqaVaW1amzamjWln2pn2pr3pYDqYJJNkOpqOppPpZDqbzqaL6WK6mq6mm+lmepgepqfpaXqZXibZJJu+pq/pZ/qZAWaAGWQGmcFmsBlihpgUk2KGmWFmuBluRpgRZqQZZUZnnz7mLTPWjDPjzQSTalLNJDPJTDaTzRQzxUwz00yaSTMzzUwzy8wyc8wcM9fMNfPMPLPALDDpJt0sMotMhskwS8wSk2kyzTKzzKwwK8wqs8qsMWvMOrPObIANZpPZZLaYLWab2WZ2mB1mp9lpdpldZrfZbfaavWaf2Wf2m/3mgDlgDpqDJstkmUPmkDlsDpsj5og5ao6aY+aYOWFOmJPmpDllTpkz5ow5ZwpcvF56E2tz2zh7lc1jr7Z57TX2b+OCtpBNsIVtEattflvgN7Gx1pawJW0pW9o6W8Ym2pt+F1e0lWxlW8XebqvaO2y138V17D22rr3X1rP32dr27t/E9e39toF9xDZEBLDNbWPb0jaxj9im9lHbzDa3LWxL294+aTvYp2ySfdp2tM/8Ll5kF9s1dq1dZ9fb3XaPPWPP2sP2W3vO/mR72d52kH3ZDrav2CH2VZtih/4uHm3ftGPsW3asHWfH2wm/i6fZ6TbNzrAz7bt2lp39uzjdfmDn2gw7z863C+zCX+LsmjLsh3aJ/chm2gCW2eV2hV1pV9nV/7/W5Xaj3WQ32132U7vNbrc77Md256UbYbvH7rWf2X32c3vIfmMP2C/tQXvEZtmvf4mzj++I/c4etd/bY/a4PWF/sCftj+pSdvax/2B/thest0BIQJIUBRRDuSiWclMcXUV56GrKS9dQhK6leLqO8tH1lJ8KUEEqRAlUmIqQJkOWiEIqSsUoSjfQpfJKUWlyVIYS6SYqSzdTObqFytOtVIFuo4pUiSpTFbqdqtIdVI3upOp0F9WgmlSLatPdVIfuobp0L9WD+6g+3U8N6AFqSA9SI3qIGtPD1IQeoab0KDWj5tSCWlIreoxa0+PUhtpSO3qC2tOT1IGeoiR6mjrSM9SJ/kKd6VnqQs9RV3qeulF36kEvUE96kXpRb0qmPtSXXqJ+1J8G0EAaRC/TYHqFhtCrlEJDaRi9RsPpdRpBb9BIGkWj6U0aQ2/RWBpH42kCpdJEmkRv02R6h6bQVJpG0ymNZtBMepdm0WyaQ+/RXHqf5tF8WkALKZ0+oEW0mDLoQ1pCH1EmLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQx7STPqFd9Cntpj20lz6jffQ57acv6AB9SQfpK8qir+kQfUOH6Vs6Qt/53vQ9HaPjdIJ+oJP0I52i03SGztI5+onO0890gTxBiKEIZajCIIwJc4WxYe4wLrwqzBNeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdHwhrB4eGNYIiwZlgpLhy4sEyaGN4Vlw5vDcuEtYfnw1rBCeFtYMawUPnJflfD2sGp4R1gtvDOsHt4V1ghrhrXC2uHdYZ3wnrBueG9YL7wvLBfeHzYIHwgbhg+GjcKHwsbhw2GT8JGwafho2CxsHrYIW4atwsfC1uHjYZuwbdgufCJsHz4ZdgifCpPCp8OO4TO/rL9/8d9fnxz2CfuGL4Uvhd7fKxdEF0bTox9EF0UXRzOiH0aXRD+KZkaXRpdFl0dXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e9r50LHDrhpFMucDEul4t1uV2cu8rlcVe7vO4aF3HXunh3ncvnrnf5XQFX0BVyCa6wK+K0M846cqEr6oq5qLvBFXc3uhKupCvlSjvnyrhE19K1cq1ca/e4a+PaunbuCfeEe9I96Z5yT7mnXUf3jOvk/uI6u2ddF/ece84977q57q6He8H1dBPz/npOJru+rq/r5/q5AW6AG+QGucFusBvihrgUl+KGuWFuuBvuRrgRbqQb6Ua70W6MG+PGurFuvBvvUl2qm+QmucluspviprhpbppLc2luppvpZrlZrursX/cyz81zC9wCl+7S3SKXfc+Y4Za4JS7TZbplbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vldrnd/ppfJ3X73H633x1wB9xB95XLcl+7Q+4bd9h9646479xR97075o67E+4Hd9L96E650+6MO+vOuZ/cefezu+C8S41MjEyKvB2ZHHknMiUyNTItMj2SFpkRmRl5NzIrMjsyJ/JeZG7k/ci8yPzIgsjCSHrkg8iiyOJIRuTDyJLIR5HMyNLIssjyyIrIyoj3hbeFvqgv5qP+Bl/c3+hL+JK+lC/tnS/jE/1Nvqy/2Zfzt/jy/lZfwd/mK/pKvrJ/1DfzzX0L39K38o/51v5x38a39e38E769f9J38E/5JP+07+if8Z38X3xn/6zv4p/zXf3zvpvv7nv4F3xP/6Lv5Xv7ZN/H9/Uv+X6+vx/gB/pB/mU/2L/ih/hXfYof6of51/xw/7of4d/wI/0oPzrmTT/m0iMyTPCpfqKf5N/2k/07cKef6qf56T7Nz/Az/bt+lp/t5/j3/Fz/vp/n5/sFfqFP9x/4RX6xz/Af+iX+I5/pl156qexX+dV+jV/r1/n1foPf6Df5zX6L3+q3+e1+h//Y7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AP+S3/Qf+Wz/Nf+kP/GH/bf+iP+O3/Uf++P+eP+hP/Bn/Q/+lP+tD/jz/pz/id/3v/sL/D/WWOMMcYY+6dMvDwUv13z6+v8Pn+QI/5q474AcPX2Qll/vT77jnJD/l/H/UVC+wgAPN2760OXlho1kpOTL26bKSEoNh/g0t8EZYuBy/FSaAdPQhK0hbJ/WH9/0f0c/YP5o7cCxP1VTixcji/P/wUAJv/B/I89MXpRhfBM/H8x/3yAEsUu5+SGy/FSaPfL+5W2UO7v1F+g9T+oP/eXqQBt/ionD1yOL9efCI/DM5D0my0ZY4wxxhhjjLFf9ReVO196/rz0Lz7/6Pk8QV3OyQWX43/0fM4YY4wxxhhjjLEr79nuPZ56LCmpbed/fVDtv5X1Tw+awv/UzDz4w4H3AJe+ogDg35wQIHsg/5NHsfU/sq+Ui6fO365acdYH8L+jlX/G4Ar/YGKMMcYYY4z96S7f9P/26+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVA/4lfJ3alj5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//85evzE") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0x32600) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24000081) 1.519162684s ago: executing program 0 (id=760): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) 1.377262338s ago: executing program 3 (id=761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca2d410}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x118, 0x30, 0xc96f2b0dc02613b7, 0x71bd23, 0x25dfdbff, {}, [{0x104, 0x1, [@m_ife={0xa0, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10800, 0xffffffff, 0x4, 0x800004, 0xe4}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x30, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@bsdgroups}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000ac0)="a5fb", 0x2}], 0x2, 0x3000, 0x401, 0x19) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000540)={0x3, 'vlan0\x00', {0x7}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000fbdbdf256b00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000500000001000000000000000881bd330510970a0300060008021100000100000a00060008021100000000000a001a000802110000010000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 368.742486ms ago: executing program 1 (id=762): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18050000000000000000000000d00000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 285.242381ms ago: executing program 2 (id=763): r0 = syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) ioctl$FITHAW(r0, 0xc0045878) 142.708615ms ago: executing program 1 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGKEY(r2, 0x40284504, &(0x7f0000000580)=""/137) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="03717e20d37c4f7262602f00a70ea8dac5f0b7ff0cb70fce6ed26dc9cefe1946ec56e1d589f09c93fa3c404be2bc154343f2c31163f39b5af0aca78da892eba11d6fd46884e6d87a7915fd222260dd3918de48746b05b3d8b9ccb63a0a391e62cc479c14e8a1feb15fc68e"], 0x6) (async) write$bt_hci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="03717e20d37c4f7262602f00a70ea8dac5f0b7ff0cb70fce6ed26dc9cefe1946ec56e1d589f09c93fa3c404be2bc154343f2c31163f39b5af0aca78da892eba11d6fd46884e6d87a7915fd222260dd3918de48746b05b3d8b9ccb63a0a391e62cc479c14e8a1feb15fc68e"], 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x1, 0x1, 0x0, 0x200, r3, 0x7, '\x00', 0x0, r4, 0x3, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf257600000008000300", @ANYRES32=r5, @ANYBLOB="0008855a5064e2629a971e511cb18789362a4126a2d7edfe2cfda447ef360d815dccc99071f37042000000000000c98d0cfd6d"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x801) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf257600000008000300", @ANYRES32=r5, @ANYBLOB="0008855a5064e2629a971e511cb18789362a4126a2d7edfe2cfda447ef360d815dccc99071f37042000000000000c98d0cfd6d"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x801) 138.710315ms ago: executing program 3 (id=765): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT], 0x1, 0x4719, &(0x7f00000047c0)="$eJzs222IHGcBB/BnNqe5S5PrvaRN0vRlkwgeWo5LP1Xrh3pWbTRtXrStpsq5d7leTvduz7s9LRikBkEUBCUIKr5QFUq/1IIY6JdahIIvSKsQKorWLyKFKvjBoA30ZHdmcjtze53NbZLS5veDdm5enmee3f/OPPvMsykl6idml8qzS+XKfLk29dDSbeXP1arLc9OhdIW8rucP4Yq9zje6y5HT6/3Zu5odet8HPnL/bSH84cjXPrSysrISGgZCW/tb/j7375NTrctUKVemUW/72mJ/XH78lZ+/5bWOKHIshLB9TbsaNoUQPvaLEDaHEAaTbUPJsi+EsDWEEIUQnvjNv37c200TWpx+4KUXjpw6uPfU+FNPPn9+5vC6B0YhfLe669aZuZf3bbrjxXdcotMDAMBr+uDRQ/cdHtsfnolC/5metd/XdyTL9PvxPW/71L2P9azuX6Ezm65gqAAAAJCzOv4fiF5tM1+XzqylU4JPP3zsvmej1f0Gtm9sB+49dNf7x/Yn87/Rmv23J5v++d5NzTnU/Lxvfv53MFe+/fzv6nke++rZX86/dePtT9uXnncgRKXRzHqpNDoawpHxeH1ntKVUrS3V3/lQbXn++MbP+2aRzT8/e786od9p/kO54kXz/7s+8fmf9fV08wqGQ/5T21gvr/0o00Y2//Xv5T/5UtRR/sO5ckX53/3ctnO/2hz/fXZDvwPJn5GLkc0/vhD3th5Qjm8Ajfy/2VOc//Zc/UX5f3/8zBPHNpB74z4zEDXa2pu5A7yabF/nJ0zkZPOPg8jcOpM3cr3r/3+5/K/L1V+U/z21f/zub130/+vd/0fGu6nz6pHNPw6inDli9fofLBVf/9fn6i/K/7cn/nz2k1311Wvzb7R/RP/fkWz+SUecvXk238lO7/87cvUX5b9z+MFHZzfQ7g/3Je3sj8Jwy69OzzS6sP7V+ermkKaxe2EDJ7kKZPOP37XMpdMfL5rX/0Dx/X9nrv6i/B/d/fX3nOzq97/t7/9j7v8dyebf19x2Mfm/kst/V67+ovx/ePLvf3nwEt//G+tdfaSuItn8t6zZv/r8p9TR+O+GXPmi5z97h559/K9djP/T9qXnTZ//pM8hRqL4+Q/tZfO/Zt3jOu3/d+fKFV3/3/rPi8/t6+ZijXo9AehCNv+t8cY2A8BO878xV39R/l+4/8sf/9MGxn/Nb3y9af4t4//N8fbD+v+OZPPfFm/M/GOoR5r/b/b/0drc/5vL/6Zc/UX5nz8w2vOVS9z/N9o/0uZRNmtl8+9f97hG/r/voP+/OVeuKP8v7vnpy7d2+WVtzFh/w7L5X7vucc3rv7c4/1ty5Yry/843fv30I120/+1dlCWff9zXZy6n5Lt5p+P/cq7+ovx/NHLu9L7LMP67Xf/fkWz+8az5xeSfH//vydVflP/3Dv1gsecyPP+5W/4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbMpQsB0JUGs2sl0qjoyEMJ+s7w5ZosnJ8YrJam/rMUgjbk+3lMBTNVGuTlerE7Hzt+PREpVqtTYVwXbJ/e+iNlqq1+sRcZeH6C3X1RSemK4v1yelKPYSwI9l+Y9iW1jU5W5+rLDSPTctcE1U+u1yrV0aXl6YXw64L27em22cWa8sLN1yo69pSbXHhRGV+4vjs4rvHxsbGwu4LbR6Mph+uT8/X49bGextl0rIDUcuLae6+qeV8n64tL85Xqs3tN7eUqdamKtWWMre0nK++uDw/ValPT1RrM+n5yi1lW15bc/eeZN9IGMy8vrRs3p3J8q4DRz969OD+NfvLUTbv+eW56bFt7T8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx5PXPHu74dQtgUr5VCCHemf0TJfxmnH3jphSOnDu49Nf7Uk8+fnznc7hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFnft5ieKN4wD+zPrdrwVSShchj4EhInqTsKBfRFK5Rnbs0jmoU0JGRYFhRMeCIAjqFhUEnYLKvyDq4LFTdalDB4MIMkZnUnaNLbd8dOf1guGZYdhnPvDA7szznn0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYO05vm21L24s7Ns5v7d0htGbn/g8hDCYL+592t4SOEMKXzxMnwzJtrqOq/9ejU8O1V01+7u0dfnBtMFl5/fln8+u2h6TUt+R4e1Iq9fWtvP9mdbv36XhvEkIpdiFEMTP0+FQ5hNASuxCimPswfT79fv8vdiFE0f3+Tls6/uXYhRDF5p0fu8rZPd4fa/379bC6zlbO9S797a93C97ALTpr0Jvjl9+WDGrhvcie/5Ns8zxYDJPHDr17FrsIopmcGjscuwYAAGB1namT/4dNC/v3LiWho7029/9alf93VvW/fP6/6O7W60MTDYUQW2rmJtPj/j2N9Nn8TvRcufWqbL6nqOT/xSb/Lzb5fzObqjusDeX/rHvy/2KT/5N6Kf8vpEc3ds0+j10E/9bchV+ekv8DAEDxHDg6MlbpH0gf/jd8b63N67uytpLl6fdvjvc8XDJvJD9c3w4eGdm3v38gG/faCcHF9R9K82e/Ze97VLe50ar3Luqt/9D5ZGb66jL/J6z85vsbeX35da3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9idexoGwSgMo99tRdRGq6IJCz8JPtDAiACkMKMBHUwYgIEQUMBAzlnuTZ7lBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeL5/ldfF95fGSK81Ik1ll13753ia/cx9Oyzvs8eNWwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2IEDGQAAAABh/tZ5tB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD//6KnzaU=") 0s ago: executing program 2 (id=766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) kernel console output (not intermixed with test programs): T6234] XFS (loop2): Mounting V5 Filesystem [ 198.686856][ T4281] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 198.814059][ T6273] loop4: detected capacity change from 0 to 1024 [ 198.985230][ T4281] attempt to access beyond end of device [ 198.985230][ T4281] loop3: rw=1, want=74, limit=64 [ 199.174096][ T4281] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 199.287710][ T6234] XFS (loop2): log mount failed [ 199.321021][ T4281] attempt to access beyond end of device [ 199.321021][ T4281] loop3: rw=1, want=77, limit=64 [ 199.463871][ T6276] loop0: detected capacity change from 0 to 256 [ 199.487631][ T4281] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 199.496312][ T4281] attempt to access beyond end of device [ 199.496312][ T4281] loop3: rw=1, want=78, limit=64 [ 199.531215][ T4281] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 199.541092][ T4281] attempt to access beyond end of device [ 199.541092][ T4281] loop3: rw=1, want=142, limit=64 [ 199.552647][ T4281] hfs: request for non-existent node 31232 in B*Tree [ 199.584168][ T4281] hfs: request for non-existent node 31232 in B*Tree [ 199.647519][ T6276] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x769352d4, utbl_chksum : 0xe619d30d) [ 199.857928][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 200.457451][ T5257] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 200.606301][ T6271] loop1: detected capacity change from 0 to 32768 [ 200.767265][ T6271] XFS (loop1): Mounting V5 Filesystem [ 200.859570][ T5257] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.901250][ T5257] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 200.943796][ T5257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.006406][ T5257] usb 4-1: config 0 descriptor?? [ 201.028033][ T6271] XFS (loop1): Ending clean mount [ 201.038853][ T6271] XFS (loop1): Quotacheck needed: Please wait. [ 201.072137][ T5257] option 4-1:0.0: GSM modem (1-port) converter detected [ 201.096866][ T6271] XFS (loop1): Quotacheck: Done. [ 201.152436][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 201.175499][ T6271] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 201.221178][ T4185] XFS (loop1): Unmounting Filesystem [ 201.307456][ T5253] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 201.407746][ T5251] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 201.603697][ T5253] usb 5-1: Using ep0 maxpacket: 32 [ 201.826746][ T4281] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 201.977469][ T4281] Bluetooth: hci5: Frame reassembly failed (-84) [ 201.987346][ T4824] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 202.527778][ T5253] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.580486][ T4824] usb 2-1: Invalid ep0 maxpacket: 32 [ 202.612414][ T5253] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 202.620768][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.623323][ T6310] loop4: detected capacity change from 0 to 512 [ 202.632331][ T5253] usb 5-1: can't read configurations, error -71 [ 202.645570][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.657435][ T5251] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.671052][ T5251] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.680843][ T5251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.692777][ T5251] usb 3-1: config 0 descriptor?? [ 202.727083][ T4824] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 202.737112][ T6310] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.509: corrupted in-inode xattr [ 202.757984][ T6310] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.509: couldn't read orphan inode 15 (err -117) [ 202.776483][ T6310] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.086892][ T1325] usb 4-1: USB disconnect, device number 24 [ 203.095760][ T1325] option 4-1:0.0: device disconnected [ 203.171510][ T6314] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 203.225136][ T6316] loop3: detected capacity change from 0 to 512 [ 203.303955][ T6316] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 203.319320][ T6316] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.330195][ T4824] usb 2-1: Invalid ep0 maxpacket: 32 [ 203.335758][ T4824] usb usb2-port1: attempt power cycle [ 203.464872][ T26] audit: type=1804 audit(1772967338.659:16): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.510" name="/newroot/101/bus/file1" dev="loop3" ino=15 res=1 errno=0 [ 203.581718][ T6323] loop4: detected capacity change from 0 to 128 [ 203.612286][ T6323] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿ" or missing value [ 203.777485][ T4824] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 203.807608][ T5251] usbhid 3-1:0.0: can't add hid device: -71 [ 203.813763][ T5251] usbhid: probe of 3-1:0.0 failed with error -71 [ 203.844339][ T5251] usb 3-1: USB disconnect, device number 20 [ 203.857280][ T4827] Bluetooth: hci5: command 0x1003 tx timeout [ 203.877136][ T4824] usb 2-1: Invalid ep0 maxpacket: 32 [ 203.884993][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 203.893037][ T6334] loop3: detected capacity change from 0 to 256 [ 203.904446][ T6331] loop2: detected capacity change from 0 to 4096 [ 204.048110][ T4824] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 204.167467][ T4824] usb 2-1: Invalid ep0 maxpacket: 32 [ 204.173906][ T4824] usb usb2-port1: unable to enumerate USB device [ 204.417195][ T4824] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 204.700600][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 204.749871][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 204.762985][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 204.788842][ T6345] loop1: detected capacity change from 0 to 64 [ 204.837310][ T4824] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 204.845644][ T4824] usb 3-1: config 0 has no interface number 0 [ 204.893738][ T6345] Trying to free block not in datazone [ 204.923574][ T4824] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 204.927449][ T6345] Trying to free block not in datazone [ 205.073043][ T4824] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 205.117831][ T6345] Trying to free block not in datazone [ 205.260561][ T4824] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid maxpacket 33648, setting to 1024 [ 205.486011][ T4824] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 1024 [ 205.584414][ T6345] Trying to free block not in datazone [ 205.593801][ T4824] usb 3-1: config 0 interface 238 has no altsetting 0 [ 205.630389][ T6345] Trying to free block not in datazone [ 205.693603][ T6345] Trying to free block not in datazone [ 205.723589][ T6345] Trying to free block not in datazone [ 205.778231][ T6345] Trying to free block not in datazone [ 205.813886][ T6345] Trying to free block not in datazone [ 205.830168][ T6345] Trying to free block not in datazone [ 205.840453][ T4824] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 205.857510][ T6345] Trying to free block not in datazone [ 205.863094][ T6345] Trying to free block not in datazone [ 205.869132][ T6345] Trying to free block not in datazone [ 205.874842][ T6345] Trying to free block not in datazone [ 205.880676][ T4824] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 205.880705][ T4824] usb 3-1: Product: syz [ 205.880721][ T4824] usb 3-1: Manufacturer: syz [ 205.880736][ T4824] usb 3-1: SerialNumber: syz [ 205.888583][ T4824] usb 3-1: config 0 descriptor?? [ 205.890315][ T6345] Trying to free block not in datazone [ 205.915031][ T6345] Trying to free block not in datazone [ 205.925158][ T6345] Trying to free block not in datazone [ 205.931142][ T5253] Bluetooth: hci5: command 0x1001 tx timeout [ 205.943906][ T6331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.947098][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 205.960148][ T6345] Trying to free block not in datazone [ 205.965635][ T6345] Trying to free block not in datazone [ 205.971637][ T6345] Trying to free block not in datazone [ 205.977594][ T6345] Trying to free block not in datazone [ 205.983150][ T6345] Trying to free block not in datazone [ 205.989100][ T6345] Trying to free block not in datazone [ 205.991410][ T4229] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 205.994647][ T6345] Trying to free block not in datazone [ 206.009273][ T6345] Trying to free block not in datazone [ 206.015363][ T6345] Trying to free block not in datazone [ 206.021390][ T6345] Trying to free block not in datazone [ 206.025846][ T4824] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 206.026870][ T6345] Trying to free block not in datazone [ 206.026881][ T6345] Trying to free block not in datazone [ 206.026888][ T6345] Trying to free block not in datazone [ 206.026896][ T6345] Trying to free block not in datazone [ 206.026903][ T6345] Trying to free block not in datazone [ 206.076105][ T6345] Trying to free block not in datazone [ 206.082152][ T6345] Trying to free block not in datazone [ 206.088410][ T6345] Trying to free block not in datazone [ 206.094005][ T6345] Trying to free block not in datazone [ 206.100000][ T6345] Trying to free block not in datazone [ 206.105478][ T6345] Trying to free block not in datazone [ 206.111483][ T6345] Trying to free block not in datazone [ 206.117405][ T6345] Trying to free block not in datazone [ 206.123049][ T6345] Trying to free block not in datazone [ 206.130676][ T6345] Trying to free block not in datazone [ 206.137235][ T6345] Trying to free block not in datazone [ 206.142714][ T6345] Trying to free block not in datazone [ 206.148740][ T6345] Trying to free block not in datazone [ 206.154214][ T6345] Trying to free block not in datazone [ 206.160265][ T6345] Trying to free block not in datazone [ 206.165738][ T6345] Trying to free block not in datazone [ 206.171787][ T6345] Trying to free block not in datazone [ 206.192745][ T6345] Trying to free block not in datazone [ 206.198719][ T6345] Trying to free block not in datazone [ 206.205607][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 206.214972][ T6345] Trying to free block not in datazone [ 206.220979][ T6345] Trying to free block not in datazone [ 206.226536][ T6345] Trying to free block not in datazone [ 206.237420][ T6345] Trying to free block not in datazone [ 206.248082][ T5251] usb 3-1: USB disconnect, device number 21 [ 206.256751][ T6345] Trying to free block not in datazone [ 206.262867][ T6345] Trying to free block not in datazone [ 206.285437][ T6345] Trying to free block not in datazone [ 206.294345][ T6345] Trying to free block not in datazone [ 206.300574][ T6345] Trying to free block not in datazone [ 206.306129][ T6345] Trying to free block not in datazone [ 206.313396][ T6345] Trying to free block not in datazone [ 206.319017][ T6345] Trying to free block not in datazone [ 206.324497][ T6345] Trying to free block not in datazone [ 206.330262][ T6345] Trying to free block not in datazone [ 206.335754][ T6345] Trying to free block not in datazone [ 206.341980][ T6345] Trying to free block not in datazone [ 206.347971][ T6345] Trying to free block not in datazone [ 206.353519][ T6345] Trying to free block not in datazone [ 206.359581][ T6345] Trying to free block not in datazone [ 206.365122][ T6345] Trying to free block not in datazone [ 206.371084][ T6345] Trying to free block not in datazone [ 206.376622][ T6345] Trying to free block not in datazone [ 206.382739][ T6345] Trying to free block not in datazone [ 206.389095][ T6345] Trying to free block not in datazone [ 206.394568][ T6345] Trying to free block not in datazone [ 206.403154][ T6345] Trying to free block not in datazone [ 206.409110][ T6345] Trying to free block not in datazone [ 206.414851][ T6345] Trying to free block not in datazone [ 206.420836][ T6345] Trying to free block not in datazone [ 206.426424][ T6345] Trying to free block not in datazone [ 206.432532][ T6345] Trying to free block not in datazone [ 206.438541][ T6345] Trying to free block not in datazone [ 206.444099][ T6345] Trying to free block not in datazone [ 206.450124][ T6345] Trying to free block not in datazone [ 206.455706][ T6345] Trying to free block not in datazone [ 206.461787][ T5253] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 206.469875][ T6345] Trying to free block not in datazone [ 206.471398][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.475500][ T6345] Trying to free block not in datazone [ 206.492844][ T6345] Trying to free block not in datazone [ 206.498857][ T6345] Trying to free block not in datazone [ 206.504416][ T6345] Trying to free block not in datazone [ 206.506047][ T4229] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 206.512793][ T6345] Trying to free block not in datazone [ 206.524064][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.525393][ T6345] Trying to free block not in datazone [ 206.537060][ T4229] usb 4-1: config 0 descriptor?? [ 206.567160][ T6345] Trying to free block not in datazone [ 206.572674][ T6345] Trying to free block not in datazone [ 206.587040][ T4229] option 4-1:0.0: GSM modem (1-port) converter detected [ 206.594242][ T6345] Trying to free block not in datazone [ 206.610282][ T6345] Trying to free block not in datazone [ 206.616473][ T6345] Trying to free block not in datazone [ 206.630202][ T6345] Trying to free block not in datazone [ 206.635981][ T6345] Trying to free block not in datazone [ 206.644567][ T6345] Trying to free block not in datazone [ 206.654778][ T6345] Trying to free block not in datazone [ 206.663871][ T6345] Trying to free block not in datazone [ 206.673439][ T6345] Trying to free block not in datazone [ 206.681864][ T6345] Trying to free block not in datazone [ 206.691238][ T6345] Trying to free block not in datazone [ 206.696863][ T6345] Trying to free block not in datazone [ 206.705209][ T6345] Trying to free block not in datazone [ 206.714843][ T6345] Trying to free block not in datazone [ 206.723305][ T6345] Trying to free block not in datazone [ 206.732750][ T6345] Trying to free block not in datazone [ 206.741129][ T6345] Trying to free block not in datazone [ 206.746718][ T6345] Trying to free block not in datazone [ 206.756413][ T6345] Trying to free block not in datazone [ 206.764781][ T6345] Trying to free block not in datazone [ 206.775210][ T6345] Trying to free block not in datazone [ 206.795427][ T6345] Trying to free block not in datazone [ 206.817060][ T6345] Trying to free block not in datazone [ 206.834752][ T6345] Trying to free block not in datazone [ 206.837543][ T5253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.844075][ T6345] Trying to free block not in datazone [ 206.865110][ T5253] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 206.865288][ T6345] Trying to free block not in datazone [ 206.894316][ T5253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.904318][ T6345] Trying to free block not in datazone [ 206.916756][ T6345] Trying to free block not in datazone [ 206.918143][ T5251] usb 4-1: USB disconnect, device number 25 [ 206.922555][ T6345] Trying to free block not in datazone [ 206.934126][ T6345] Trying to free block not in datazone [ 206.935497][ T5253] usb 5-1: config 0 descriptor?? [ 206.945692][ T6345] Trying to free block not in datazone [ 206.951518][ T6345] Trying to free block not in datazone [ 206.958718][ T5251] option 4-1:0.0: device disconnected [ 206.962885][ T6345] Trying to free block not in datazone [ 206.990036][ T5253] option 5-1:0.0: GSM modem (1-port) converter detected [ 207.014894][ T6345] Trying to free block not in datazone [ 207.041190][ T6345] Trying to free block not in datazone [ 207.046708][ T6345] Trying to free block not in datazone [ 207.074556][ T6345] Trying to free block not in datazone [ 207.105257][ T6365] loop2: detected capacity change from 0 to 512 [ 207.111723][ T6345] Trying to free block not in datazone [ 207.123869][ T6345] Trying to free block not in datazone [ 207.148414][ T6345] Trying to free block not in datazone [ 207.159863][ T6345] Trying to free block not in datazone [ 207.185823][ T6345] Trying to free block not in datazone [ 207.195928][ T6345] Trying to free block not in datazone [ 207.213832][ T6345] Trying to free block not in datazone [ 207.227076][ T6345] Trying to free block not in datazone [ 207.233186][ T6345] Trying to free block not in datazone [ 207.252810][ T6345] Trying to free block not in datazone [ 207.265227][ T6345] Trying to free block not in datazone [ 207.276549][ T6345] Trying to free block not in datazone [ 207.290399][ T6345] Trying to free block not in datazone [ 207.309071][ T6345] Trying to free block not in datazone [ 207.320458][ T6345] Trying to free block not in datazone [ 207.346616][ T6345] Trying to free block not in datazone [ 207.358585][ T6345] Trying to free block not in datazone [ 207.364082][ T6345] Trying to free block not in datazone [ 207.387054][ T6345] Trying to free block not in datazone [ 207.397269][ T6345] Trying to free block not in datazone [ 207.437478][ T6345] Trying to free block not in datazone [ 207.442983][ T6345] Trying to free block not in datazone [ 207.457186][ T6345] Trying to free block not in datazone [ 207.462783][ T6345] Trying to free block not in datazone [ 207.474846][ T6345] Trying to free block not in datazone [ 207.481437][ T6345] Trying to free block not in datazone [ 207.502320][ T6345] Trying to free block not in datazone [ 207.515470][ T6374] netlink: 88 bytes leftover after parsing attributes in process `syz.3.526'. [ 207.527042][ T6345] Trying to free block not in datazone [ 207.532523][ T6345] Trying to free block not in datazone [ 207.544102][ T6374] netlink: 76 bytes leftover after parsing attributes in process `syz.3.526'. [ 207.566962][ T6345] Trying to free block not in datazone [ 207.567932][ T6374] netlink: 88 bytes leftover after parsing attributes in process `syz.3.526'. [ 207.573988][ T6345] Trying to free block not in datazone [ 207.604189][ T6345] Trying to free block not in datazone [ 207.625708][ T6345] Trying to free block not in datazone [ 207.646861][ T6345] Trying to free block not in datazone [ 207.658623][ T6345] Trying to free block not in datazone [ 207.672107][ T6345] Trying to free block not in datazone [ 207.685650][ T6345] Trying to free block not in datazone [ 207.700457][ T6345] Trying to free block not in datazone [ 207.713268][ T6345] Trying to free block not in datazone [ 207.760448][ T6345] Trying to free block not in datazone [ 207.777587][ T6345] Trying to free block not in datazone [ 207.789669][ T6345] Trying to free block not in datazone [ 207.811386][ T6345] Trying to free block not in datazone [ 207.831219][ T6345] Trying to free block not in datazone [ 207.845234][ T6345] Trying to free block not in datazone [ 207.862691][ T6345] Trying to free block not in datazone [ 207.872896][ T6345] Trying to free block not in datazone [ 207.884272][ T6345] Trying to free block not in datazone [ 207.895672][ T6345] Trying to free block not in datazone [ 207.907521][ T6345] Trying to free block not in datazone [ 207.917674][ T6345] Trying to free block not in datazone [ 207.930568][ T6345] Trying to free block not in datazone [ 207.944960][ T6345] Trying to free block not in datazone [ 207.955071][ T6345] Trying to free block not in datazone [ 207.961119][ T6345] Trying to free block not in datazone [ 207.966666][ T6345] Trying to free block not in datazone [ 207.978799][ T6345] Trying to free block not in datazone [ 207.984500][ T6345] Trying to free block not in datazone [ 207.993823][ T6345] Trying to free block not in datazone [ 208.001991][ T6345] Trying to free block not in datazone [ 208.008070][ T5253] Bluetooth: hci5: command 0x1009 tx timeout [ 208.022775][ T6345] Trying to free block not in datazone [ 208.034203][ T6345] Trying to free block not in datazone [ 208.043235][ T6345] Trying to free block not in datazone [ 208.053524][ T6345] Trying to free block not in datazone [ 208.060853][ T6345] Trying to free block not in datazone [ 208.066448][ T6345] Trying to free block not in datazone [ 208.076830][ T6345] Trying to free block not in datazone [ 208.084012][ T6345] Trying to free block not in datazone [ 208.094401][ T6345] Trying to free block not in datazone [ 208.102955][ T6345] Trying to free block not in datazone [ 208.114118][ T6345] Trying to free block not in datazone [ 208.121273][ T6345] Trying to free block not in datazone [ 208.131595][ T6345] Trying to free block not in datazone [ 208.138914][ T6345] Trying to free block not in datazone [ 208.144668][ T6345] Trying to free block not in datazone [ 208.159053][ T6345] Trying to free block not in datazone [ 208.164628][ T6345] Trying to free block not in datazone [ 208.173905][ T6345] Trying to free block not in datazone [ 208.182960][ T6345] Trying to free block not in datazone [ 208.189044][ T6345] Trying to free block not in datazone [ 208.194603][ T6345] Trying to free block not in datazone [ 208.200663][ T6345] Trying to free block not in datazone [ 208.206207][ T6345] Trying to free block not in datazone [ 208.212172][ T6345] Trying to free block not in datazone [ 208.217762][ T6345] Trying to free block not in datazone [ 208.223451][ T6345] Trying to free block not in datazone [ 208.229173][ T6345] Trying to free block not in datazone [ 208.234882][ T6345] Trying to free block not in datazone [ 208.240928][ T6345] Trying to free block not in datazone [ 208.246553][ T6345] Trying to free block not in datazone [ 208.252711][ T6345] Trying to free block not in datazone [ 208.261324][ T6345] Trying to free block not in datazone [ 208.267354][ T6345] Trying to free block not in datazone [ 208.272938][ T6345] Trying to free block not in datazone [ 208.278956][ T6345] Trying to free block not in datazone [ 208.284631][ T6345] Trying to free block not in datazone [ 208.290691][ T6345] Trying to free block not in datazone [ 208.296307][ T6345] Trying to free block not in datazone [ 208.302361][ T6345] Trying to free block not in datazone [ 208.308482][ T6345] Trying to free block not in datazone [ 208.314067][ T6345] Trying to free block not in datazone [ 208.320153][ T6345] Trying to free block not in datazone [ 208.325740][ T6345] Trying to free block not in datazone [ 208.331942][ T6345] Trying to free block not in datazone [ 208.338040][ T6345] Trying to free block not in datazone [ 208.343685][ T6345] Trying to free block not in datazone [ 208.350900][ T6345] Trying to free block not in datazone [ 208.356511][ T6345] Trying to free block not in datazone [ 208.362585][ T6345] Trying to free block not in datazone [ 208.371462][ T6345] Trying to free block not in datazone [ 208.400284][ T6345] Trying to free block not in datazone [ 208.405905][ T6345] Trying to free block not in datazone [ 208.413230][ T6345] Trying to free block not in datazone [ 208.431942][ T6345] Trying to free block not in datazone [ 208.445454][ T6345] Trying to free block not in datazone [ 208.456749][ T6345] Trying to free block not in datazone [ 208.472728][ T6345] Trying to free block not in datazone [ 208.522682][ T6345] Trying to free block not in datazone [ 208.548959][ T6345] Trying to free block not in datazone [ 208.554474][ T6345] Trying to free block not in datazone [ 208.560973][ T6345] Trying to free block not in datazone [ 208.566458][ T6345] Trying to free block not in datazone [ 208.572472][ T6345] Trying to free block not in datazone [ 208.584584][ T6345] Trying to free block not in datazone [ 208.610852][ T6345] Trying to free block not in datazone [ 209.523706][ T5253] usb 5-1: USB disconnect, device number 18 [ 209.549050][ T5253] option 5-1:0.0: device disconnected [ 209.655923][ T26] audit: type=1326 audit(1772967344.849:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc01fe8799 code=0x0 [ 209.758753][ T6401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.534'. [ 209.773822][ T6384] loop3: detected capacity change from 0 to 32768 [ 209.778036][ T6399] loop4: detected capacity change from 0 to 1024 [ 209.891557][ T6384] XFS (loop3): Mounting V5 Filesystem [ 209.966583][ T6399] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.000172][ T6384] XFS (loop3): Ending clean mount [ 210.383002][ T6424] loop1: detected capacity change from 0 to 136 [ 210.450571][ T4194] XFS (loop3): Unmounting Filesystem [ 210.478593][ T6424] Attempt to read inode for relocated directory [ 210.555579][ T6424] attempt to access beyond end of device [ 210.555579][ T6424] loop1: rw=524288, want=335544432, limit=136 [ 210.635062][ T6424] attempt to access beyond end of device [ 210.635062][ T6424] loop1: rw=0, want=335544432, limit=136 [ 210.645327][ T6401] loop2: detected capacity change from 0 to 32768 [ 210.677798][ T26] audit: type=1800 audit(1772967345.879:18): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.537" name="file1" dev="loop1" ino=1487 res=0 errno=0 [ 210.866225][ T6401] XFS (loop2): Mounting V5 Filesystem [ 210.955550][ T6401] XFS (loop2): Ending clean mount [ 210.982980][ T4184] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 211.054277][ T6401] XFS (loop2): Quotacheck needed: Please wait. [ 211.125403][ T4184] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 211.204321][ T6401] XFS (loop2): Quotacheck: Done. [ 211.476585][ T6443] loop1: detected capacity change from 0 to 64 [ 211.559251][ T4192] XFS (loop2): Unmounting Filesystem [ 212.290253][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 212.326086][ T6463] loop0: detected capacity change from 0 to 512 [ 212.333869][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 212.379999][ T6460] loop3: detected capacity change from 0 to 64 [ 212.462015][ T6460] Trying to free block not in datazone [ 212.504935][ T6460] Trying to free block not in datazone [ 212.559262][ T4229] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 212.568053][ T6460] Trying to free block not in datazone [ 212.575234][ T6460] Trying to free block not in datazone [ 212.581673][ T6460] Trying to free block not in datazone [ 212.613077][ T26] audit: type=1800 audit(1772967347.809:19): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.549" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 212.637859][ T6460] Trying to free block not in datazone [ 212.643440][ T6460] Trying to free block not in datazone [ 212.680686][ T6460] Trying to free block not in datazone [ 212.686300][ T6460] Trying to free block not in datazone [ 212.693293][ T6460] Trying to free block not in datazone [ 212.702336][ T6460] Trying to free block not in datazone [ 212.707891][ T6460] Trying to free block not in datazone [ 212.713913][ T6460] Trying to free block not in datazone [ 212.720308][ T6460] Trying to free block not in datazone [ 212.725786][ T6460] Trying to free block not in datazone [ 212.736691][ T6460] Trying to free block not in datazone [ 212.744183][ T6460] Trying to free block not in datazone [ 212.749801][ T6460] Trying to free block not in datazone [ 212.756059][ T6460] Trying to free block not in datazone [ 212.805503][ T6460] Trying to free block not in datazone [ 212.845210][ T6460] Trying to free block not in datazone [ 212.857383][ T6460] Trying to free block not in datazone [ 212.871221][ T6460] Trying to free block not in datazone [ 212.881596][ T1167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.893270][ T6460] Trying to free block not in datazone [ 212.904147][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 212.913614][ T6460] Trying to free block not in datazone [ 212.913627][ T6460] Trying to free block not in datazone [ 212.913635][ T6460] Trying to free block not in datazone [ 212.913643][ T6460] Trying to free block not in datazone [ 212.913651][ T6460] Trying to free block not in datazone [ 212.913659][ T6460] Trying to free block not in datazone [ 212.913666][ T6460] Trying to free block not in datazone [ 212.913673][ T6460] Trying to free block not in datazone [ 212.913681][ T6460] Trying to free block not in datazone [ 212.913689][ T6460] Trying to free block not in datazone [ 212.913697][ T6460] Trying to free block not in datazone [ 212.913705][ T6460] Trying to free block not in datazone [ 212.913713][ T6460] Trying to free block not in datazone [ 212.913721][ T6460] Trying to free block not in datazone [ 212.913728][ T6460] Trying to free block not in datazone [ 212.913736][ T6460] Trying to free block not in datazone [ 212.913744][ T6460] Trying to free block not in datazone [ 213.009410][ T6460] Trying to free block not in datazone [ 213.014937][ T6460] Trying to free block not in datazone [ 213.020508][ T6460] Trying to free block not in datazone [ 213.026391][ T6460] Trying to free block not in datazone [ 213.047214][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.057496][ T4229] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 213.057559][ T6460] Trying to free block not in datazone [ 213.067132][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.069957][ T4229] usb 3-1: config 0 descriptor?? [ 213.090961][ T6460] Trying to free block not in datazone [ 213.100237][ T1167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.110907][ T6460] Trying to free block not in datazone [ 213.116541][ T6460] Trying to free block not in datazone [ 213.126310][ T6467] chnl_net:caif_netlink_parms(): no params data found [ 213.128480][ T4229] option 3-1:0.0: GSM modem (1-port) converter detected [ 213.145518][ T6460] Trying to free block not in datazone [ 213.157672][ T5251] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 213.161739][ T6460] Trying to free block not in datazone [ 213.170795][ T6460] Trying to free block not in datazone [ 213.181045][ T6460] Trying to free block not in datazone [ 213.187684][ T6460] Trying to free block not in datazone [ 213.193164][ T6460] Trying to free block not in datazone [ 213.201865][ T6460] Trying to free block not in datazone [ 213.207472][ T6460] Trying to free block not in datazone [ 213.213089][ T6460] Trying to free block not in datazone [ 213.218941][ T6460] Trying to free block not in datazone [ 213.224438][ T6460] Trying to free block not in datazone [ 213.230144][ T6460] Trying to free block not in datazone [ 213.235842][ T6460] Trying to free block not in datazone [ 213.238145][ T1167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.241355][ T6460] Trying to free block not in datazone [ 213.259368][ T6460] Trying to free block not in datazone [ 213.264865][ T6460] Trying to free block not in datazone [ 213.276433][ T6460] Trying to free block not in datazone [ 213.285054][ T6460] Trying to free block not in datazone [ 213.290628][ T6460] Trying to free block not in datazone [ 213.300332][ T6460] Trying to free block not in datazone [ 213.306003][ T6460] Trying to free block not in datazone [ 213.326990][ T6460] Trying to free block not in datazone [ 213.334469][ T1167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.345327][ T6460] Trying to free block not in datazone [ 213.351112][ T6460] Trying to free block not in datazone [ 213.356619][ T6460] Trying to free block not in datazone [ 213.358039][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.362185][ T6460] Trying to free block not in datazone [ 213.374772][ T6460] Trying to free block not in datazone [ 213.381047][ T6460] Trying to free block not in datazone [ 213.384333][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.386514][ T6460] Trying to free block not in datazone [ 213.386524][ T6460] Trying to free block not in datazone [ 213.386532][ T6460] Trying to free block not in datazone [ 213.386540][ T6460] Trying to free block not in datazone [ 213.386548][ T6460] Trying to free block not in datazone [ 213.386556][ T6460] Trying to free block not in datazone [ 213.405172][ T6467] device bridge_slave_0 entered promiscuous mode [ 213.410571][ T6460] Trying to free block not in datazone [ 213.410581][ T6460] Trying to free block not in datazone [ 213.410589][ T6460] Trying to free block not in datazone [ 213.410597][ T6460] Trying to free block not in datazone [ 213.410604][ T6460] Trying to free block not in datazone [ 213.410612][ T6460] Trying to free block not in datazone [ 213.410619][ T6460] Trying to free block not in datazone [ 213.410627][ T6460] Trying to free block not in datazone [ 213.410635][ T6460] Trying to free block not in datazone [ 213.410643][ T6460] Trying to free block not in datazone [ 213.410650][ T6460] Trying to free block not in datazone [ 213.410658][ T6460] Trying to free block not in datazone [ 213.424177][ T5251] usb 2-1: Using ep0 maxpacket: 32 [ 213.427124][ T6460] Trying to free block not in datazone [ 213.427134][ T6460] Trying to free block not in datazone [ 213.427142][ T6460] Trying to free block not in datazone [ 213.427149][ T6460] Trying to free block not in datazone [ 213.427156][ T6460] Trying to free block not in datazone [ 213.427164][ T6460] Trying to free block not in datazone [ 213.427171][ T6460] Trying to free block not in datazone [ 213.427178][ T6460] Trying to free block not in datazone [ 213.427185][ T6460] Trying to free block not in datazone [ 213.427193][ T6460] Trying to free block not in datazone [ 213.427201][ T6460] Trying to free block not in datazone [ 213.427208][ T6460] Trying to free block not in datazone [ 213.427215][ T6460] Trying to free block not in datazone [ 213.427222][ T6460] Trying to free block not in datazone [ 213.427230][ T6460] Trying to free block not in datazone [ 213.427237][ T6460] Trying to free block not in datazone [ 213.427252][ T6460] Trying to free block not in datazone [ 213.427259][ T6460] Trying to free block not in datazone [ 213.427266][ T6460] Trying to free block not in datazone [ 213.427273][ T6460] Trying to free block not in datazone [ 213.427281][ T6460] Trying to free block not in datazone [ 213.427288][ T6460] Trying to free block not in datazone [ 213.427295][ T6460] Trying to free block not in datazone [ 213.427302][ T6460] Trying to free block not in datazone [ 213.427310][ T6460] Trying to free block not in datazone [ 213.427317][ T6460] Trying to free block not in datazone [ 213.427324][ T6460] Trying to free block not in datazone [ 213.427331][ T6460] Trying to free block not in datazone [ 213.427338][ T6460] Trying to free block not in datazone [ 213.427346][ T6460] Trying to free block not in datazone [ 213.427353][ T6460] Trying to free block not in datazone [ 213.427360][ T6460] Trying to free block not in datazone [ 213.427368][ T6460] Trying to free block not in datazone [ 213.427375][ T6460] Trying to free block not in datazone [ 213.427382][ T6460] Trying to free block not in datazone [ 213.427389][ T6460] Trying to free block not in datazone [ 213.427396][ T6460] Trying to free block not in datazone [ 213.427403][ T6460] Trying to free block not in datazone [ 213.427411][ T6460] Trying to free block not in datazone [ 213.427418][ T6460] Trying to free block not in datazone [ 213.427426][ T6460] Trying to free block not in datazone [ 213.427432][ T6460] Trying to free block not in datazone [ 213.427440][ T6460] Trying to free block not in datazone [ 213.427447][ T6460] Trying to free block not in datazone [ 213.427454][ T6460] Trying to free block not in datazone [ 213.427462][ T6460] Trying to free block not in datazone [ 213.427469][ T6460] Trying to free block not in datazone [ 213.427476][ T6460] Trying to free block not in datazone [ 213.427483][ T6460] Trying to free block not in datazone [ 213.427490][ T6460] Trying to free block not in datazone [ 213.427498][ T6460] Trying to free block not in datazone [ 213.427505][ T6460] Trying to free block not in datazone [ 213.427512][ T6460] Trying to free block not in datazone [ 213.427520][ T6460] Trying to free block not in datazone [ 213.427527][ T6460] Trying to free block not in datazone [ 213.427535][ T6460] Trying to free block not in datazone [ 213.427542][ T6460] Trying to free block not in datazone [ 213.427549][ T6460] Trying to free block not in datazone [ 213.427557][ T6460] Trying to free block not in datazone [ 213.427564][ T6460] Trying to free block not in datazone [ 213.427571][ T6460] Trying to free block not in datazone [ 213.427579][ T6460] Trying to free block not in datazone [ 213.427586][ T6460] Trying to free block not in datazone [ 213.427594][ T6460] Trying to free block not in datazone [ 213.427602][ T6460] Trying to free block not in datazone [ 213.451264][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.456650][ T6460] Trying to free block not in datazone [ 213.456661][ T6460] Trying to free block not in datazone [ 213.456669][ T6460] Trying to free block not in datazone [ 213.463605][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.474110][ T6460] Trying to free block not in datazone [ 213.481751][ T6467] device bridge_slave_1 entered promiscuous mode [ 213.484868][ T6460] Trying to free block not in datazone [ 213.484879][ T6460] Trying to free block not in datazone [ 213.484887][ T6460] Trying to free block not in datazone [ 213.484895][ T6460] Trying to free block not in datazone [ 213.484902][ T6460] Trying to free block not in datazone [ 213.484909][ T6460] Trying to free block not in datazone [ 213.546372][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.551600][ T6460] Trying to free block not in datazone [ 213.564268][ T5251] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 213.568012][ T6460] Trying to free block not in datazone [ 213.568023][ T6460] Trying to free block not in datazone [ 213.568031][ T6460] Trying to free block not in datazone [ 213.568039][ T6460] Trying to free block not in datazone [ 213.568046][ T6460] Trying to free block not in datazone [ 213.568054][ T6460] Trying to free block not in datazone [ 213.568061][ T6460] Trying to free block not in datazone [ 213.568069][ T6460] Trying to free block not in datazone [ 213.568076][ T6460] Trying to free block not in datazone [ 213.568083][ T6460] Trying to free block not in datazone [ 213.568090][ T6460] Trying to free block not in datazone [ 213.568098][ T6460] Trying to free block not in datazone [ 213.568106][ T6460] Trying to free block not in datazone [ 213.568113][ T6460] Trying to free block not in datazone [ 213.568121][ T6460] Trying to free block not in datazone [ 213.568128][ T6460] Trying to free block not in datazone [ 213.568136][ T6460] Trying to free block not in datazone [ 213.568143][ T6460] Trying to free block not in datazone [ 213.568150][ T6460] Trying to free block not in datazone [ 213.568158][ T6460] Trying to free block not in datazone [ 213.568166][ T6460] Trying to free block not in datazone [ 213.568174][ T6460] Trying to free block not in datazone [ 213.568181][ T6460] Trying to free block not in datazone [ 213.568189][ T6460] Trying to free block not in datazone [ 213.568196][ T6460] Trying to free block not in datazone [ 213.568204][ T6460] Trying to free block not in datazone [ 213.568211][ T6460] Trying to free block not in datazone [ 213.568219][ T6460] Trying to free block not in datazone [ 213.568226][ T6460] Trying to free block not in datazone [ 213.568233][ T6460] Trying to free block not in datazone [ 213.568248][ T6460] Trying to free block not in datazone [ 213.568256][ T6460] Trying to free block not in datazone [ 213.568263][ T6460] Trying to free block not in datazone [ 213.568270][ T6460] Trying to free block not in datazone [ 213.568277][ T6460] Trying to free block not in datazone [ 213.568285][ T6460] Trying to free block not in datazone [ 213.568292][ T6460] Trying to free block not in datazone [ 213.568299][ T6460] Trying to free block not in datazone [ 213.568307][ T6460] Trying to free block not in datazone [ 213.568314][ T6460] Trying to free block not in datazone [ 213.568322][ T6460] Trying to free block not in datazone [ 213.568329][ T6460] Trying to free block not in datazone [ 213.568336][ T6460] Trying to free block not in datazone [ 213.568344][ T6460] Trying to free block not in datazone [ 213.568351][ T6460] Trying to free block not in datazone [ 213.568359][ T6460] Trying to free block not in datazone [ 213.568366][ T6460] Trying to free block not in datazone [ 213.568374][ T6460] Trying to free block not in datazone [ 213.568381][ T6460] Trying to free block not in datazone [ 213.568388][ T6460] Trying to free block not in datazone [ 213.568395][ T6460] Trying to free block not in datazone [ 213.568402][ T6460] Trying to free block not in datazone [ 213.568410][ T6460] Trying to free block not in datazone [ 213.568417][ T6460] Trying to free block not in datazone [ 213.568425][ T6460] Trying to free block not in datazone [ 213.568432][ T6460] Trying to free block not in datazone [ 213.568439][ T6460] Trying to free block not in datazone [ 213.568447][ T6460] Trying to free block not in datazone [ 213.568454][ T6460] Trying to free block not in datazone [ 213.568462][ T6460] Trying to free block not in datazone [ 213.568469][ T6460] Trying to free block not in datazone [ 213.568477][ T6460] Trying to free block not in datazone [ 213.568484][ T6460] Trying to free block not in datazone [ 213.568491][ T6460] Trying to free block not in datazone [ 213.568499][ T6460] Trying to free block not in datazone [ 213.568506][ T6460] Trying to free block not in datazone [ 213.568513][ T6460] Trying to free block not in datazone [ 213.568521][ T6460] Trying to free block not in datazone [ 213.568529][ T6460] Trying to free block not in datazone [ 213.568537][ T6460] Trying to free block not in datazone [ 213.568545][ T6460] Trying to free block not in datazone [ 213.568553][ T6460] Trying to free block not in datazone [ 213.568560][ T6460] Trying to free block not in datazone [ 213.568568][ T6460] Trying to free block not in datazone [ 213.568575][ T6460] Trying to free block not in datazone [ 213.568583][ T6460] Trying to free block not in datazone [ 213.568592][ T6460] Trying to free block not in datazone [ 213.590354][ T5251] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 213.590618][ T6460] Trying to free block not in datazone [ 213.596209][ T5251] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 213.601541][ T6460] Trying to free block not in datazone [ 213.601552][ T6460] Trying to free block not in datazone [ 213.601560][ T6460] Trying to free block not in datazone [ 213.601568][ T6460] Trying to free block not in datazone [ 213.601576][ T6460] Trying to free block not in datazone [ 213.601583][ T6460] Trying to free block not in datazone [ 213.601591][ T6460] Trying to free block not in datazone [ 213.605362][ T6460] Trying to free block not in datazone [ 213.615113][ T5251] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 213.621543][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.645019][ T5251] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.695300][ T6467] team0: Port device team_slave_0 added [ 213.907562][ T5251] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 213.933366][ T6467] team0: Port device team_slave_1 added [ 213.976858][ T5251] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 214.254144][ T6486] loop0: detected capacity change from 0 to 32768 [ 214.264211][ T5251] usb 2-1: Product: syz [ 214.555544][ T5251] usb 2-1: Manufacturer: syz [ 214.560217][ T5251] usb 2-1: SerialNumber: syz [ 214.569836][ T5251] usb 2-1: config 0 descriptor?? [ 214.609017][ T5251] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 214.610180][ T6486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.556 (6486) [ 214.657787][ T4229] Bluetooth: hci0: command 0x0409 tx timeout [ 214.688031][ T5251] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 214.723868][ T6486] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 214.740978][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.741085][ T6486] BTRFS info (device loop0): using free space tree [ 214.756300][ T6486] BTRFS info (device loop0): has skinny extents [ 214.759248][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.819029][ T6486] BTRFS info (device loop0): enabling ssd optimizations [ 214.828714][ T5251] usb 2-1: USB disconnect, device number 26 [ 214.864077][ T5251] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 214.937463][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.980912][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.018752][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.101010][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.121559][ T6508] device bridge_slave_1 left promiscuous mode [ 215.137774][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.142623][ T4229] usb 3-1: USB disconnect, device number 22 [ 215.153545][ T4229] option 3-1:0.0: device disconnected [ 215.475046][ T6508] device bridge_slave_0 left promiscuous mode [ 215.482004][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.612451][ T6467] device hsr_slave_0 entered promiscuous mode [ 215.623910][ T6467] device hsr_slave_1 entered promiscuous mode [ 215.631563][ T6467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.639767][ T6467] Cannot create hsr debugfs directory [ 215.749563][ T1167] tipc: Left network mode [ 215.879589][ T6467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.897299][ T6467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.906630][ T6467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.942129][ T6467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.062735][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.081611][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.097952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.105810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.167705][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.186438][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.195122][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.202306][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.210935][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.220130][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.228605][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.235638][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.243568][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.252615][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.262192][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.271026][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.281648][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.290159][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.320142][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.331217][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.355926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.375290][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.395733][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.590741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.599982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.611921][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.727135][ T5253] Bluetooth: hci0: command 0x041b tx timeout [ 216.793566][ T1167] device hsr_slave_0 left promiscuous mode [ 216.807680][ T1167] device hsr_slave_1 left promiscuous mode [ 216.816701][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.829117][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.846370][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.854217][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.867574][ T1167] device bridge_slave_1 left promiscuous mode [ 216.875814][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.888714][ T1167] device bridge_slave_0 left promiscuous mode [ 216.894979][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.911515][ T1167] device veth1_macvtap left promiscuous mode [ 216.918620][ T1167] device veth0_macvtap left promiscuous mode [ 216.924689][ T1167] device veth1_vlan left promiscuous mode [ 216.931696][ T1167] device veth0_vlan left promiscuous mode [ 217.135229][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 217.148899][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 217.162205][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.174984][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.237991][ T1167] bond0 (unregistering): Released all slaves [ 217.406117][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.415161][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.445661][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.454563][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.473073][ T6467] device veth0_vlan entered promiscuous mode [ 217.486072][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.499596][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.517755][ T6467] device veth1_vlan entered promiscuous mode [ 217.564770][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.573555][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.601827][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.617551][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.639457][ T6467] device veth0_macvtap entered promiscuous mode [ 217.663827][ T6467] device veth1_macvtap entered promiscuous mode [ 217.687895][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.707028][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.716874][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.731006][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.740987][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.751573][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.763621][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.774585][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.786163][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.796699][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.806115][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.817551][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.837835][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.857082][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.873256][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.883198][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.893956][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.903927][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.915068][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.926371][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.964599][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.973531][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.991204][ T6467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.008432][ T6467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.018088][ T6467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.027670][ T6467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.163790][ T5237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.187012][ T5237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.218146][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.254317][ T5237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.263791][ T5237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.275253][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.767097][ T5253] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 218.807625][ T6512] Bluetooth: hci0: command 0x040f tx timeout [ 219.129988][ T5253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.147194][ T5253] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 219.161908][ T5253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.177870][ T5253] usb 6-1: config 0 descriptor?? [ 219.228681][ T5253] option 6-1:0.0: GSM modem (1-port) converter detected [ 219.509004][ T4827] usb 6-1: USB disconnect, device number 2 [ 219.533034][ T4827] option 6-1:0.0: device disconnected [ 220.887098][ T5253] Bluetooth: hci0: command 0x0419 tx timeout [ 221.351777][ T6656] 9pnet: Insufficient options for proto=fd [ 222.380435][ T6653] loop0: detected capacity change from 0 to 4096 [ 222.462563][ T6653] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 222.491342][ T6675] loop5: detected capacity change from 0 to 1764 [ 222.565023][ T6653] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 222.599457][ T6675] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 222.627166][ T6653] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 222.658505][ T6653] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 222.670430][ T6675] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 222.679223][ T6653] ntfs: volume version 3.1. [ 222.901624][ T6694] overlayfs: filesystem on './file0' not supported [ 223.053657][ T5248] Bluetooth: hci0: command 0x0c20 tx timeout [ 223.203632][ T6687] team0 (unregistering): Port device team_slave_0 removed [ 223.430762][ T6687] team0 (unregistering): Port device team_slave_1 removed [ 223.520969][ T4280] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 223.542154][ T6698] device bridge_slave_1 left promiscuous mode [ 223.584229][ T4193] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 223.597390][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.641813][ T6698] device bridge_slave_0 left promiscuous mode [ 223.693013][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.819334][ T6703] bridge0: port 3(vlan2) entered blocking state [ 223.836229][ T6703] bridge0: port 3(vlan2) entered disabled state [ 223.855477][ T6703] device vlan2 entered promiscuous mode [ 224.051383][ T6717] loop2: detected capacity change from 0 to 4096 [ 224.171876][ T4828] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 224.667494][ T4828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.821692][ T4828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.939467][ T6512] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 225.050809][ T4828] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 225.060096][ T4828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.070016][ T4828] usb 6-1: config 0 descriptor?? [ 225.079676][ T6726] loop0: detected capacity change from 0 to 64 [ 225.114657][ T6726] MINIX-fs: bad superblock [ 225.191467][ T6730] loop2: detected capacity change from 0 to 8 [ 225.292532][ T6730] SQUASHFS error: lzo decompression failed, data probably corrupt [ 225.312605][ T6730] SQUASHFS error: Failed to read block 0x1c6: -5 [ 225.319838][ T6730] SQUASHFS error: Unable to read metadata cache entry [1c4] [ 225.347955][ T6730] SQUASHFS error: Unable to read inode 0x11f [ 225.615546][ T4828] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 225.815022][ T4828] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 225.992200][ T4828] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 226.018943][ T4828] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 226.046412][ T4828] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 226.084568][ T4828] elan 0003:04F3:0755.000B: failed to start in urb: -90 [ 226.114014][ T4828] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 226.127410][ T5257] Bluetooth: hci1: command 0x0c20 tx timeout [ 226.183281][ T4828] usb 6-1: USB disconnect, device number 3 [ 226.186483][ T6737] loop2: detected capacity change from 0 to 4096 [ 226.207157][ T6512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.219052][ T6512] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 226.228361][ T6512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.387851][ T6512] usb 4-1: config 0 descriptor?? [ 226.428465][ T6512] option 4-1:0.0: GSM modem (1-port) converter detected [ 226.439012][ T6743] fido_id[6743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 226.603493][ T3085] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 226.625738][ T3085] Bluetooth: hci5: Frame reassembly failed (-84) [ 227.263594][ T6512] usb 4-1: USB disconnect, device number 26 [ 227.270440][ T6512] option 4-1:0.0: device disconnected [ 227.356959][ T6756] netlink: 288 bytes leftover after parsing attributes in process `syz.3.587'. [ 227.585294][ T6754] loop0: detected capacity change from 0 to 4096 [ 227.620825][ T6756] loop3: detected capacity change from 0 to 32768 [ 227.677178][ T4823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 227.755386][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.772602][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.816194][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 227.823210][ T6754] ntfs3: loop0: ino=0, "file1" failed to extend initialized size to 103000. [ 227.831956][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 227.859565][ T6756] JBD2: Ignoring recovery information on journal [ 227.904203][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 227.929264][ T6756] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 227.944355][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 227.965661][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 228.103370][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 228.138829][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 228.153393][ T6756] (syz.3.587,6756,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 228.168719][ T6756] (syz.3.587,6756,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 228.180429][ T6756] (syz.3.587,6756,0):ocfs2_quota_read:201 ERROR: status = -5 [ 228.188036][ T6756] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 228.197597][ T6756] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 228.207219][ T6756] (syz.3.587,6756,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 228.219146][ T6756] (syz.3.587,6756,0):ocfs2_mknod:314 ERROR: status = -5 [ 228.226197][ T6756] (syz.3.587,6756,0):ocfs2_mknod:502 ERROR: status = -5 [ 228.236859][ T6756] (syz.3.587,6756,0):ocfs2_create:676 ERROR: status = -5 [ 228.257562][ T4823] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.287808][ T4823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.295928][ T4823] usb 6-1: Product: syz [ 228.334316][ T4823] usb 6-1: Manufacturer: syz [ 228.351611][ T4823] usb 6-1: SerialNumber: syz [ 228.500391][ T4823] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 229.119619][ T4827] Bluetooth: hci5: command 0x1003 tx timeout [ 229.127769][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 229.705793][ T6778] loop2: detected capacity change from 0 to 32768 [ 229.747492][ T1107] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 229.764062][ T6778] XFS (loop2): Invalid device [./bus], error=-15 [ 229.953104][ T6786] loop0: detected capacity change from 0 to 512 [ 230.002155][ T6786] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 230.017174][ T6786] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 230.064036][ T6786] EXT4-fs (loop0): 1 truncate cleaned up [ 230.072802][ T6786] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 230.077097][ T5251] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 230.314618][ T6759] loop5: detected capacity change from 0 to 512 [ 230.440122][ T6759] EXT4-fs (loop5): Ignoring removed orlov option [ 230.446781][ T6759] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 230.457406][ T6759] EXT4-fs (loop5): can't mount with commit=58400, fs mounted w/o journal [ 230.470722][ T4827] usb 6-1: USB disconnect, device number 4 [ 230.654897][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 230.767013][ T5251] usb 4-1: device not accepting address 27, error -71 [ 230.977132][ T1107] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 230.984712][ T1107] ath9k_htc: Failed to initialize the device [ 231.030157][ T4827] usb 6-1: ath9k_htc: USB layer deinitialized [ 231.124059][ T6820] loop5: detected capacity change from 0 to 64 [ 231.219527][ T4823] Bluetooth: hci5: command 0x1001 tx timeout [ 231.225642][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 231.741685][ T6804] loop2: detected capacity change from 0 to 40427 [ 231.806583][ T6804] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 231.897308][ T6837] hfs: request for non-existent node 31232 in B*Tree [ 231.904157][ T6837] hfs: request for non-existent node 31232 in B*Tree [ 231.911272][ T6837] hfs: request for non-existent node 31232 in B*Tree [ 231.917999][ T6837] hfs: request for non-existent node 31232 in B*Tree [ 231.928383][ T6804] F2FS-fs (loop2): invalid crc value [ 231.977542][ T6804] F2FS-fs (loop2): Found nat_bits in checkpoint [ 232.229960][ T6804] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.310884][ T5251] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 232.356621][ T5237] attempt to access beyond end of device [ 232.356621][ T5237] loop5: rw=1, want=66, limit=64 [ 232.404390][ T5237] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 232.433009][ T5237] attempt to access beyond end of device [ 232.433009][ T5237] loop5: rw=1, want=67, limit=64 [ 232.459291][ T6830] loop0: detected capacity change from 0 to 32768 [ 232.464544][ T5237] Buffer I/O error on dev loop5, logical block 66, lost async page write [ 232.498315][ T5237] attempt to access beyond end of device [ 232.498315][ T5237] loop5: rw=1, want=68, limit=64 [ 232.518317][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 232.522213][ T5237] Buffer I/O error on dev loop5, logical block 67, lost async page write [ 232.556440][ T5237] attempt to access beyond end of device [ 232.556440][ T5237] loop5: rw=1, want=69, limit=64 [ 232.587250][ T5237] Buffer I/O error on dev loop5, logical block 68, lost async page write [ 232.595802][ T5237] attempt to access beyond end of device [ 232.595802][ T5237] loop5: rw=1, want=73, limit=64 [ 232.620271][ T6830] device team1 entered promiscuous mode [ 232.632046][ T5237] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 232.651222][ T5237] attempt to access beyond end of device [ 232.651222][ T5237] loop5: rw=1, want=74, limit=64 [ 232.656660][ T6830] 8021q: adding VLAN 0 to HW filter on device team1 [ 232.673292][ T5237] Buffer I/O error on dev loop5, logical block 73, lost async page write [ 232.677151][ T5251] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.683426][ T5237] attempt to access beyond end of device [ 232.683426][ T5237] loop5: rw=1, want=77, limit=64 [ 232.698927][ T5251] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 232.705157][ T5237] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 232.723573][ T5251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.726867][ T4192] attempt to access beyond end of device [ 232.726867][ T4192] loop2: rw=2049, want=45104, limit=40427 [ 232.754832][ T5251] usb 4-1: config 0 descriptor?? [ 232.763545][ T5237] attempt to access beyond end of device [ 232.763545][ T5237] loop5: rw=1, want=78, limit=64 [ 232.784304][ T5237] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 232.802125][ T5237] attempt to access beyond end of device [ 232.802125][ T5237] loop5: rw=1, want=142, limit=64 [ 232.811688][ T5251] option 4-1:0.0: GSM modem (1-port) converter detected [ 232.813408][ T5237] hfs: request for non-existent node 31232 in B*Tree [ 232.828206][ T5237] hfs: request for non-existent node 31232 in B*Tree [ 233.073041][ T5251] usb 4-1: USB disconnect, device number 28 [ 233.081891][ T5251] option 4-1:0.0: device disconnected [ 233.274284][ T6869] loop0: detected capacity change from 0 to 64 [ 233.287510][ T1107] Bluetooth: hci5: command 0x1009 tx timeout [ 233.587112][ T6512] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 233.683325][ T6874] loop2: detected capacity change from 0 to 512 [ 233.723651][ T6878] loop3: detected capacity change from 0 to 512 [ 233.806405][ T6878] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 233.977045][ T6512] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.991516][ T6878] ubi0: attaching mtd0 [ 234.010458][ T6512] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 234.021796][ T6878] ubi0: scanning is finished [ 234.026463][ T6878] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 234.027458][ T6512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.091634][ T6512] usb 6-1: config 0 descriptor?? [ 234.140874][ T6512] option 6-1:0.0: GSM modem (1-port) converter detected [ 234.214167][ T6878] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 234.417066][ T1107] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 234.507382][ T6893] loop2: detected capacity change from 0 to 514 [ 234.541655][ T26] audit: type=1800 audit(1772967369.739:20): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 234.565168][ T4827] usb 6-1: USB disconnect, device number 5 [ 234.577826][ T4827] option 6-1:0.0: device disconnected [ 234.797306][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.823060][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 234.844456][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 234.854654][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.863200][ T6905] device gretap0 entered promiscuous mode [ 234.885461][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.889416][ T6905] device macsec1 entered promiscuous mode [ 234.906988][ T1107] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 234.921242][ T6905] device gretap0 left promiscuous mode [ 234.925472][ T4828] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 234.941304][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.963548][ T1107] usb 4-1: config 0 descriptor?? [ 234.997295][ T6885] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 235.137012][ T4828] usb 1-1: device descriptor read/64, error -71 [ 235.206035][ T6917] netlink: 104 bytes leftover after parsing attributes in process `syz.5.610'. [ 235.266542][ T5251] usb 4-1: USB disconnect, device number 29 [ 235.361139][ T6917] loop5: detected capacity change from 0 to 4096 [ 235.392967][ T6917] ntfs3: Unknown parameter '00000000000000000003' [ 235.408251][ T4828] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 235.523913][ T6923] netlink: 52 bytes leftover after parsing attributes in process `syz.5.611'. [ 235.550078][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.557581][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.646994][ T4828] usb 1-1: device descriptor read/64, error -71 [ 235.767557][ T4828] usb usb1-port1: attempt power cycle [ 235.993178][ T6941] loop3: detected capacity change from 0 to 8 [ 236.207275][ T4828] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 236.297265][ T4828] usb 1-1: device descriptor read/8, error -71 [ 236.557909][ T6950] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:21 [ 236.967052][ T4827] Bluetooth: hci0: command 0x0c20 tx timeout [ 237.067283][ T4828] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 237.207898][ T4828] usb 1-1: Using ep0 maxpacket: 16 [ 237.397802][ T4828] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.497436][ T4828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.527656][ T4828] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 237.554119][ T4828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.680660][ T4828] usb 1-1: config 0 descriptor?? [ 237.822202][ T6964] loop3: detected capacity change from 0 to 512 [ 238.189554][ T4827] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 238.733871][ T6934] loop2: detected capacity change from 0 to 32768 [ 238.817777][ T6934] ALSA: mixer_oss: invalid OSS volume '' [ 238.897168][ T4827] usb 4-1: device descriptor read/64, error -71 [ 238.967801][ T4177] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4177) [ 239.137456][ T1107] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 239.177110][ T4827] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 239.378243][ T4827] usb 4-1: device descriptor read/64, error -71 [ 239.449875][ T6996] loop2: detected capacity change from 0 to 512 [ 239.498153][ T4827] usb usb4-port1: attempt power cycle [ 239.547258][ T1107] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 239.572059][ T1107] usb 2-1: can't read configurations, error -61 [ 239.587228][ T6996] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.623: inode has both inline data and extents flags [ 239.613733][ T6996] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.623: couldn't read orphan inode 15 (err -117) [ 239.679194][ T6996] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.757131][ T1107] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 239.777145][ T4828] usbhid 1-1:0.0: can't add hid device: -71 [ 239.783163][ T4828] usbhid: probe of 1-1:0.0 failed with error -71 [ 239.820200][ T4828] usb 1-1: USB disconnect, device number 27 [ 239.877368][ T7009] loop0: detected capacity change from 0 to 512 [ 239.919385][ T4827] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 240.027478][ T4827] usb 4-1: device descriptor read/8, error -71 [ 240.149375][ T7009] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 240.209018][ T7009] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.324082][ T7020] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 241.065194][ T7024] loop3: detected capacity change from 0 to 64 [ 241.150171][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'. [ 241.177079][ T1107] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 241.186752][ T1107] usb 2-1: can't read configurations, error -61 [ 241.193532][ T1107] usb usb2-port1: attempt power cycle [ 241.205568][ T7024] device syzkaller1 entered promiscuous mode [ 241.349970][ T4280] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 241.373236][ T4280] Bluetooth: hci5: Frame reassembly failed (-84) [ 241.447052][ T4828] Bluetooth: hci0: command 0x0c20 tx timeout [ 241.637488][ T1107] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 241.938295][ T1107] usb 2-1: device descriptor read/8, error -71 [ 242.807148][ T4823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 243.039483][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 243.077246][ T4823] usb 6-1: Using ep0 maxpacket: 8 [ 243.197222][ T4823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.224764][ T4823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.244523][ T4823] usb 6-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 243.244716][ T7058] loop3: detected capacity change from 0 to 2048 [ 243.257169][ T4823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.293363][ T7058] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 243.324007][ T7058] NILFS (loop3): mounting unchecked fs [ 243.346381][ T4174] udevd[4174]: incorrect nilfs2 checksum on /dev/loop3 [ 243.384574][ T7058] NILFS (loop3): recovery complete [ 243.443354][ T4827] Bluetooth: hci5: command 0x1003 tx timeout [ 243.450520][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 243.477594][ T4823] usb 6-1: config 0 descriptor?? [ 243.486284][ T7061] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.812475][ T4281] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 244.373061][ T4281] Bluetooth: hci6: Frame reassembly failed (-84) [ 244.514266][ T7053] loop1: detected capacity change from 0 to 32768 [ 244.569635][ T7053] XFS: attr2 mount option is deprecated. [ 244.632487][ T7067] netlink: 'syz.3.640': attribute type 13 has an invalid length. [ 244.693994][ T7053] XFS (loop1): Mounting V5 Filesystem [ 244.735915][ T7076] loop3: detected capacity change from 0 to 256 [ 244.812598][ T7053] XFS (loop1): Ending clean mount [ 244.845052][ T7053] XFS (loop1): Quotacheck needed: Please wait. [ 244.958834][ T7053] XFS (loop1): Quotacheck: Done. [ 245.100072][ T4185] XFS (loop1): Unmounting Filesystem [ 245.517157][ T4823] usbhid 6-1:0.0: can't add hid device: -71 [ 245.523284][ T4823] usbhid: probe of 6-1:0.0 failed with error -71 [ 245.549416][ T4823] usb 6-1: USB disconnect, device number 6 [ 245.557991][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 245.563311][ T7086] loop3: detected capacity change from 0 to 2048 [ 245.564460][ T146] Bluetooth: hci5: sending frame failed (-49) [ 245.571952][ T7088] loop5: detected capacity change from 0 to 1024 [ 245.697531][ T7088] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,block_validity,dax=never,bsdgroups,,errors=continue. Quota mode: none. [ 245.712873][ T7086] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 245.767067][ T1107] Bluetooth: hci6: command 0x1003 tx timeout [ 245.778321][ T146] Bluetooth: hci6: sending frame failed (-49) [ 245.790442][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 245.874735][ T7086] netlink: 84 bytes leftover after parsing attributes in process `syz.3.644'. [ 245.975848][ T7088] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3885: comm syz.5.645: Allocating blocks 497-513 which overlap fs metadata [ 246.022038][ T7088] EXT4-fs (loop5): pa ffff888058407000: logic 256, phys. 385, len 8 [ 246.031010][ T7088] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 246.326415][ T6467] EXT4-fs error (device loop5): mb_free_blocks:1874: group 0, inode 21: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 246.496592][ T7105] netlink: 3 bytes leftover after parsing attributes in process `syz.5.648'. [ 246.533954][ T7105] netlink: 'syz.5.648': attribute type 11 has an invalid length. [ 247.417059][ T7114] netlink: 96 bytes leftover after parsing attributes in process `syz.3.652'. [ 247.526427][ T7120] loop1: detected capacity change from 0 to 2048 [ 247.728769][ T4823] Bluetooth: hci5: command 0x1009 tx timeout [ 247.754657][ T7122] netlink: 277 bytes leftover after parsing attributes in process `syz.3.655'. [ 247.777337][ T7120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.847064][ T4823] Bluetooth: hci6: command 0x1001 tx timeout [ 247.857765][ T146] Bluetooth: hci6: sending frame failed (-49) [ 248.011888][ T7113] loop5: detected capacity change from 0 to 40427 [ 248.041428][ T7113] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 248.050042][ T7113] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 248.075592][ T7113] F2FS-fs (loop5): invalid crc value [ 248.115658][ T7113] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.225356][ T7113] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 248.232528][ T7113] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 248.294271][ T26] audit: type=1400 audit(1772967383.489:21): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7112 comm="syz.5.653" [ 248.527717][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 249.007664][ T7138] loop5: detected capacity change from 0 to 64 [ 249.216178][ T7136] loop3: detected capacity change from 0 to 32768 [ 249.266351][ T7136] XFS (loop3): Mounting V5 Filesystem [ 249.362010][ T7136] XFS (loop3): Ending clean mount [ 249.494167][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.661'. [ 249.510865][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.661'. [ 249.530326][ T4194] XFS (loop3): Unmounting Filesystem [ 249.928239][ T4823] Bluetooth: hci6: command 0x1009 tx timeout [ 250.145835][ T7166] loop1: detected capacity change from 0 to 512 [ 250.304151][ T7166] EXT4-fs (loop1): Test dummy encryption mode enabled [ 250.338001][ T7166] EXT4-fs (loop1): 1 truncate cleaned up [ 250.343843][ T7166] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,data_err=abort,barrier,test_dummy_encryption,noauto_da_alloc,,errors=continue. Quota mode: none. [ 250.420578][ T7177] x_tables: unsorted entry at hook 1 [ 250.475515][ T7177] ax25_connect(): syz.5.666 uses autobind, please contact jreuter@yaina.de [ 250.493298][ T7177] loop5: detected capacity change from 0 to 256 [ 250.518051][ T7166] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 250.528653][ T7166] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.664: bg 0: block 7: invalid block bitmap [ 250.571601][ T7177] FAT-fs (loop5): Directory bread(block 64) failed [ 250.578441][ T7177] FAT-fs (loop5): Directory bread(block 65) failed [ 250.594267][ T7177] FAT-fs (loop5): Directory bread(block 66) failed [ 250.605220][ T7177] FAT-fs (loop5): Directory bread(block 67) failed [ 250.624649][ T7177] FAT-fs (loop5): Directory bread(block 68) failed [ 250.631901][ T7177] FAT-fs (loop5): Directory bread(block 69) failed [ 250.639112][ T7177] FAT-fs (loop5): Directory bread(block 70) failed [ 250.645686][ T7177] FAT-fs (loop5): Directory bread(block 71) failed [ 250.665016][ T7177] FAT-fs (loop5): Directory bread(block 72) failed [ 250.674071][ T7177] FAT-fs (loop5): Directory bread(block 73) failed [ 250.811063][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 251.005658][ T7192] loop1: detected capacity change from 0 to 512 [ 251.063463][ T7192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.118839][ T7192] EXT4-fs (loop1): 1 truncate cleaned up [ 251.124624][ T7192] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 251.265149][ T7199] loop3: detected capacity change from 0 to 2048 [ 251.381715][ T7201] loop1: detected capacity change from 0 to 64 [ 251.393106][ T7202] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.411823][ T7199] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 251.452664][ T7205] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.483211][ T7199] Remounting filesystem read-only [ 251.527149][ T7205] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.557673][ T7205] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.590065][ T7205] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.609809][ T7205] device geneve2 entered promiscuous mode [ 251.785860][ T7206] team0 (unregistering): Port device team_slave_0 removed [ 251.810633][ T7206] team0 (unregistering): Failed to send options change via netlink (err -105) [ 251.819891][ T7206] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 251.832095][ T7206] team0 (unregistering): Port device team_slave_1 removed [ 251.963416][ T7217] loop3: detected capacity change from 0 to 128 [ 251.977399][ T6512] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 252.020103][ T7219] loop5: detected capacity change from 0 to 512 [ 252.033291][ T7217] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.059983][ T7217] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.079818][ T7217] syz.3.678 (pid 7217) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 252.101935][ T7219] EXT4-fs (loop5): Ignoring removed oldalloc option [ 252.160965][ T7219] EXT4-fs (loop5): 1 truncate cleaned up [ 252.166834][ T7219] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,nodelalloc,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 252.237048][ T6512] usb 2-1: Using ep0 maxpacket: 16 [ 252.261917][ T7217] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 252.417434][ T6512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.447251][ T6512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.457470][ T6512] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.471275][ T6512] usb 2-1: New USB device found, idVendor=056a, idProduct=020e, bcdDevice= 0.00 [ 252.501765][ T6512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.532807][ T7232] loop3: detected capacity change from 0 to 512 [ 252.548967][ T6512] usb 2-1: config 0 descriptor?? [ 252.578813][ T7234] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 252.647213][ T4828] Bluetooth: hci4: command 0x0406 tx timeout [ 252.677943][ T7232] EXT4-fs error (device loop3): ext4_quota_enable:6438: comm syz.3.682: Bad quota inum: 68943875, type: 0 [ 252.758081][ T7232] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=68943875). Please run e2fsck to fix. [ 252.783088][ T7232] EXT4-fs (loop3): mount failed [ 252.949882][ T7227] loop5: detected capacity change from 0 to 32768 [ 252.976431][ T7227] (syz.5.680,7227,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "cohe2ency=full" or missing value [ 253.016446][ T7227] (syz.5.680,7227,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 253.300823][ T6512] usbhid 2-1:0.0: can't add hid device: -71 [ 253.316073][ T7244] loop5: detected capacity change from 0 to 64 [ 253.324752][ T6512] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.376823][ T6512] usb 2-1: USB disconnect, device number 31 [ 254.118857][ T7249] hfs: request for non-existent node 31232 in B*Tree [ 254.125733][ T7249] hfs: request for non-existent node 31232 in B*Tree [ 254.133015][ T7249] hfs: request for non-existent node 31232 in B*Tree [ 254.139777][ T7249] hfs: request for non-existent node 31232 in B*Tree [ 254.619105][ T4280] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 254.708143][ T3085] Bluetooth: hci5: Frame reassembly failed (-84) [ 254.722766][ T3085] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.321781][ T4258] attempt to access beyond end of device [ 255.321781][ T4258] loop5: rw=1, want=66, limit=64 [ 255.415345][ T4258] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 255.445700][ T4258] attempt to access beyond end of device [ 255.445700][ T4258] loop5: rw=1, want=67, limit=64 [ 255.463033][ T5257] Bluetooth: hci0: command 0x0c20 tx timeout [ 255.463989][ T7264] netlink: 76 bytes leftover after parsing attributes in process `syz.2.690'. [ 255.469855][ T4258] Buffer I/O error on dev loop5, logical block 66, lost async page write [ 255.493250][ T4258] attempt to access beyond end of device [ 255.493250][ T4258] loop5: rw=1, want=68, limit=64 [ 255.511457][ T4258] Buffer I/O error on dev loop5, logical block 67, lost async page write [ 255.522003][ T4258] attempt to access beyond end of device [ 255.522003][ T4258] loop5: rw=1, want=69, limit=64 [ 255.543881][ T4258] Buffer I/O error on dev loop5, logical block 68, lost async page write [ 255.555606][ T4258] attempt to access beyond end of device [ 255.555606][ T4258] loop5: rw=1, want=73, limit=64 [ 255.603295][ T4258] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 255.633272][ T4258] attempt to access beyond end of device [ 255.633272][ T4258] loop5: rw=1, want=74, limit=64 [ 255.695276][ T4258] Buffer I/O error on dev loop5, logical block 73, lost async page write [ 255.707713][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714035][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.763241][ T4258] attempt to access beyond end of device [ 255.763241][ T4258] loop5: rw=1, want=77, limit=64 [ 255.795231][ T7278] set_capacity_and_notify: 1 callbacks suppressed [ 255.795248][ T7278] loop2: detected capacity change from 0 to 4096 [ 255.816792][ T4258] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 255.839144][ T4258] attempt to access beyond end of device [ 255.839144][ T4258] loop5: rw=1, want=78, limit=64 [ 255.851165][ T4258] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 255.860142][ T4258] attempt to access beyond end of device [ 255.860142][ T4258] loop5: rw=1, want=142, limit=64 [ 255.871209][ T4258] hfs: request for non-existent node 31232 in B*Tree [ 255.878055][ T4258] hfs: request for non-existent node 31232 in B*Tree [ 256.067068][ T1107] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 256.167217][ T4828] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 256.187171][ T4827] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 256.237179][ T4823] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 256.307146][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 256.427388][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.438700][ T4827] usb 3-1: Using ep0 maxpacket: 16 [ 256.444043][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.457550][ T1107] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 256.466684][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.477664][ T1107] usb 4-1: config 0 descriptor?? [ 256.487008][ T4823] usb 6-1: Using ep0 maxpacket: 16 [ 256.537167][ T4828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.550549][ T4828] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 256.560200][ T4827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.573939][ T4828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.582163][ T4827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.596882][ T4828] usb 1-1: config 0 descriptor?? [ 256.607235][ T4823] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 256.615783][ T4823] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 256.624234][ T4823] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 256.632801][ T4823] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 256.642592][ T4828] option 1-1:0.0: GSM modem (1-port) converter detected [ 256.649739][ T4823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.664974][ T4823] usb 6-1: config 0 has no interface number 0 [ 256.671582][ T4823] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 256.682750][ T4823] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 256.692933][ T4823] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.702880][ T4823] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.716415][ T4823] usb 6-1: config 0 interface 125 has no altsetting 0 [ 256.723776][ T4823] usb 6-1: config 0 interface 125 has no altsetting 2 [ 256.731973][ T4828] Bluetooth: hci5: command 0x1003 tx timeout [ 256.738893][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 256.747377][ T4827] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.756738][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.764856][ T4827] usb 3-1: Product: syz [ 256.769383][ T4827] usb 3-1: Manufacturer: syz [ 256.774057][ T4827] usb 3-1: SerialNumber: syz [ 256.887153][ T4823] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 256.896448][ T4823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.904734][ T4823] usb 6-1: Product: syz [ 256.909044][ T4823] usb 6-1: Manufacturer: syz [ 256.913678][ T4823] usb 6-1: SerialNumber: syz [ 256.921106][ T4823] usb 6-1: config 0 descriptor?? [ 256.959705][ T4823] usb 6-1: selecting invalid altsetting 2 [ 257.028779][ T7278] smc: net device bond0 applied user defined pnetid SYZ2 [ 257.037768][ T7278] netlink: 14 bytes leftover after parsing attributes in process `syz.2.696'. [ 257.081667][ T7278] smc: removing net device bond0 with user defined pnetid SYZ2 [ 257.095792][ T7278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.097170][ T1107] usbhid 4-1:0.0: can't add hid device: -71 [ 257.341713][ T7278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.490111][ T7278] bond0 (unregistering): Released all slaves [ 257.726035][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.692'. [ 257.914258][ T1107] usbhid: probe of 4-1:0.0 failed with error -71 [ 257.923023][ T1107] usb 4-1: USB disconnect, device number 34 [ 258.007175][ T4823] get_1284_register timeout [ 258.012286][ T4823] uss720: probe of 6-1:0.125 failed with error -5 [ 258.026960][ C1] usb 6-1: async_complete: urb error -104 [ 258.033192][ C1] usb 6-1: async_complete: urb error -104 [ 258.039103][ C1] usb 6-1: async_complete: urb error -104 [ 258.044855][ C1] usb 6-1: async_complete: urb error -104 [ 258.119496][ T5253] usb 6-1: USB disconnect, device number 7 [ 258.142362][ T4827] usb 3-1: 0:2 : does not exist [ 258.174608][ T4827] usb 3-1: USB disconnect, device number 23 [ 258.409900][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.537134][ T5253] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 258.589829][ T4192] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 258.600369][ T4192] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 258.690365][ T7304] loop2: detected capacity change from 0 to 1024 [ 258.791843][ T7306] netlink: 288 bytes leftover after parsing attributes in process `syz.2.702'. [ 258.801925][ T6512] usb 1-1: USB disconnect, device number 28 [ 258.810951][ T6512] option 1-1:0.0: device disconnected [ 258.827893][ T5257] Bluetooth: hci5: command 0x1001 tx timeout [ 258.835281][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 258.967303][ T5253] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 259.008526][ T5253] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 259.045127][ T7306] loop2: detected capacity change from 0 to 32768 [ 259.070842][ T5253] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.110257][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 259.144283][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 259.184268][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 259.187675][ T5253] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.209554][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 259.223956][ T7306] JBD2: Ignoring recovery information on journal [ 259.240226][ T5253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.272614][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 259.286489][ T7306] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 259.313478][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 259.318993][ T5253] usb 6-1: SerialNumber: syz [ 259.334468][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 259.369819][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 259.466284][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 259.481969][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 259.495373][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 259.508383][ T7306] (syz.2.702,7306,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 259.516993][ T7306] (syz.2.702,7306,1):ocfs2_quota_read:201 ERROR: status = -5 [ 259.524412][ T7306] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 259.531539][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 259.533925][ T7306] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 259.552496][ T7306] (syz.2.702,7306,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 259.560314][ T7306] (syz.2.702,7306,1):ocfs2_mknod:314 ERROR: status = -5 [ 259.567611][ T7306] (syz.2.702,7306,1):ocfs2_mknod:502 ERROR: status = -5 [ 259.574698][ T7306] (syz.2.702,7306,1):ocfs2_create:676 ERROR: status = -5 [ 259.657574][ T5253] usb 6-1: bad CDC descriptors [ 259.788230][ T7324] netlink: 52 bytes leftover after parsing attributes in process `syz.0.707'. [ 259.798143][ T7310] i2c i2c-0: Invalid block write size 33 [ 259.807973][ T7324] netlink: 76 bytes leftover after parsing attributes in process `syz.0.707'. [ 259.820494][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.827627][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.835031][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.842152][ T7324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.850818][ T7324] netlink: 52 bytes leftover after parsing attributes in process `syz.0.707'. [ 259.852260][ T5253] usb 6-1: USB disconnect, device number 8 [ 259.866486][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.873696][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.067109][ T4823] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 260.088765][ T5253] Bluetooth: hci0: command 0x0405 tx timeout [ 260.118090][ T7310] loop3: detected capacity change from 0 to 40427 [ 260.189463][ T7310] F2FS-fs (loop3): inline encryption not supported [ 260.203520][ T7310] F2FS-fs (loop3): invalid crc value [ 260.214420][ T7310] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.259747][ T7310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 260.369278][ T7331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.718'. [ 260.394875][ T7331] FAULT_INJECTION: forcing a failure. [ 260.394875][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.412283][ T7331] CPU: 0 PID: 7331 Comm: syz.0.718 Not tainted syzkaller #0 [ 260.419974][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.430148][ T7331] Call Trace: [ 260.433550][ T7331] [ 260.436477][ T7331] dump_stack_lvl+0x188/0x250 [ 260.441156][ T7331] ? show_regs_print_info+0x20/0x20 [ 260.446356][ T7331] ? load_image+0x400/0x400 [ 260.451205][ T7331] ? __lock_acquire+0x7d10/0x7d10 [ 260.456525][ T7331] should_fail+0x38c/0x4c0 [ 260.460940][ T7331] _copy_from_user+0x2e/0x170 [ 260.465607][ T7331] __copy_msghdr_from_user+0xc9/0x630 [ 260.470983][ T7331] ? verify_lock_unused+0x140/0x140 [ 260.476219][ T7331] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 260.481557][ T7331] ___sys_sendmsg+0x19a/0x2e0 [ 260.486268][ T7331] ? __sys_sendmsg+0x2a0/0x2a0 [ 260.491091][ T7331] ? vfs_write+0x8b2/0xd60 [ 260.495560][ T7331] __se_sys_sendmsg+0x1af/0x290 [ 260.500437][ T7331] ? __x64_sys_sendmsg+0x80/0x80 [ 260.505402][ T7331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 260.511616][ T7331] ? lockdep_hardirqs_on+0x94/0x140 [ 260.516840][ T7331] do_syscall_64+0x4c/0xa0 [ 260.517527][ T4823] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 260.521279][ T7331] ? clear_bhb_loop+0x30/0x80 [ 260.535213][ T7331] ? clear_bhb_loop+0x30/0x80 [ 260.539128][ T4823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.540014][ T7331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.553892][ T7331] RIP: 0033:0x7f646701a799 [ 260.558444][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.563514][ T7338] loop5: detected capacity change from 0 to 512 [ 260.578184][ T7331] RSP: 002b:00007f6465274028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.578217][ T7331] RAX: ffffffffffffffda RBX: 00007f6467293fa0 RCX: 00007f646701a799 [ 260.578232][ T7331] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 260.578244][ T7331] RBP: 00007f6465274090 R08: 0000000000000000 R09: 0000000000000000 [ 260.578256][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.578268][ T7331] R13: 00007f6467294038 R14: 00007f6467293fa0 R15: 00007ffe27cd07c8 [ 260.578298][ T7331] [ 260.643235][ T4823] usb 3-1: config 0 descriptor?? [ 260.660727][ T7341] loop0: detected capacity change from 0 to 64 [ 260.700212][ T4823] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 260.727927][ T7338] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.772531][ T7338] EXT4-fs (loop5): orphan cleanup on readonly fs [ 260.779532][ T7338] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.710: bad orphan inode 15 [ 260.818598][ T7338] ext4_test_bit(bit=14, block=18) = 1 [ 260.824123][ T7338] is_bad_inode(inode)=0 [ 260.828410][ T7338] NEXT_ORPHAN(inode)=1023 [ 260.832773][ T7338] max_ino=32 [ 260.836420][ T7338] i_nlink=0 [ 260.857943][ T7338] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.710: bg 0: block 440: padding at end of block bitmap is not set [ 260.947467][ T4823] gp8psk: usb in 128 operation failed. [ 261.759567][ T6512] Bluetooth: hci5: command 0x1009 tx timeout [ 261.828389][ T7338] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 261.848401][ T7338] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.882530][ T5253] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 261.990621][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 262.004153][ T7306] (syz.2.702,7306,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 262.017001][ T7306] (syz.2.702,7306,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 262.025515][ T7306] (syz.2.702,7306,1):ocfs2_quota_read:201 ERROR: status = -5 [ 262.033134][ T7306] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 262.043346][ T7306] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 262.046967][ T7350] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:21 [ 262.236506][ T7306] (syz.2.702,7306,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 262.247451][ T7306] (syz.2.702,7306,1):ocfs2_mknod:314 ERROR: status = -5 [ 262.255635][ T7306] (syz.2.702,7306,1):ocfs2_mknod:502 ERROR: status = -5 [ 262.262737][ T7306] (syz.2.702,7306,1):ocfs2_create:676 ERROR: status = -5 [ 262.817218][ T4828] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 262.927163][ T4823] gp8psk: FW Version = 16.241.56 (0x10f138) Build 2069/99/242 [ 262.997332][ T5253] usb 1-1: Using ep0 maxpacket: 32 [ 263.096962][ T4828] usb 4-1: Using ep0 maxpacket: 16 [ 263.217148][ T4828] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.228236][ T4828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.234889][ T4828] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 263.243985][ T4828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.267847][ T4828] usb 4-1: config 0 descriptor?? [ 263.277380][ T5253] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 263.287011][ T5251] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 263.294699][ T5253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.303324][ T5253] usb 1-1: Product: syz [ 263.308298][ T5253] usb 1-1: Manufacturer: syz [ 263.313032][ T5253] usb 1-1: SerialNumber: syz [ 263.320167][ T5253] usb 1-1: config 0 descriptor?? [ 263.370225][ T5253] xr_serial 1-1:0.0: skipping garbage [ 263.580822][ T5253] usb 1-1: USB disconnect, device number 29 [ 263.687148][ T5251] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.701217][ T5251] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 263.712580][ T7360] loop0: detected capacity change from 0 to 256 [ 263.720700][ T5251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.740840][ T5251] usb 6-1: config 0 descriptor?? [ 263.742819][ T7360] exfat: Deprecated parameter 'namecase' [ 263.770836][ T7360] exfat: Deprecated parameter 'namecase' [ 263.792733][ T5251] option 6-1:0.0: GSM modem (1-port) converter detected [ 263.827073][ T4823] gp8psk: usb in 149 operation failed. [ 263.831487][ T7360] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd4ca984e, utbl_chksum : 0xe619d30d) [ 263.833804][ T4823] gp8psk: failed to get FPGA version [ 263.868005][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 263.877525][ T4823] gp8psk: usb in 138 operation failed. [ 263.896391][ T4823] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 263.916993][ T4823] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 263.938608][ T4823] usb 3-1: USB disconnect, device number 24 [ 264.555052][ T7374] loop0: detected capacity change from 0 to 512 [ 264.587849][ T7374] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 264.599787][ T7377] netlink: 76 bytes leftover after parsing attributes in process `syz.2.720'. [ 264.630974][ T7374] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 264.833473][ T7384] loop2: detected capacity change from 0 to 128 [ 264.855466][ T7384] qnx6: invalid mount options. [ 264.927096][ T5253] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 265.067182][ T4828] usbhid 4-1:0.0: can't add hid device: -71 [ 265.073467][ T4828] usbhid: probe of 4-1:0.0 failed with error -71 [ 265.090245][ T4828] usb 4-1: USB disconnect, device number 35 [ 265.134982][ T7389] loop3: detected capacity change from 0 to 4096 [ 265.176984][ T5253] usb 1-1: Using ep0 maxpacket: 16 [ 265.241759][ T7387] loop2: detected capacity change from 0 to 32768 [ 265.337345][ T5253] usb 1-1: unable to get BOS descriptor or descriptor too short [ 265.363181][ T7387] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.725 (7387) [ 265.427393][ T5253] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 265.448929][ T5253] usb 1-1: config 1 has no interface number 0 [ 265.648945][ T5253] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 265.675118][ T5253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.719360][ T5253] usb 1-1: Product: syz [ 265.741489][ T5253] usb 1-1: Manufacturer: syz [ 265.785555][ T5253] usb 1-1: SerialNumber: syz [ 265.843712][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 265.991880][ T5251] usb 6-1: USB disconnect, device number 9 [ 266.006280][ T7387] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 266.019694][ T7399] device bond1 entered promiscuous mode [ 266.037260][ T5251] option 6-1:0.0: device disconnected [ 266.052857][ T7399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.057267][ T7387] BTRFS info (device loop2): using free space tree [ 266.066348][ T7387] BTRFS info (device loop2): has skinny extents [ 266.132956][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 266.202765][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 266.219267][ T7417] loop3: detected capacity change from 0 to 4096 [ 266.252677][ T7417] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 266.298576][ T7387] BTRFS info (device loop2): enabling ssd optimizations [ 266.359701][ T7436] loop0: detected capacity change from 0 to 1024 [ 266.362783][ T7412] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 266.438679][ T5253] usb 1-1: USB disconnect, device number 30 [ 266.680705][ T7445] hfsplus: found bad thread record in catalog [ 266.897583][ T3085] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 266.962253][ T3085] Bluetooth: hci5: Frame reassembly failed (-84) [ 267.644631][ T7458] loop1: detected capacity change from 0 to 512 [ 267.718798][ T7454] netlink: 76 bytes leftover after parsing attributes in process `syz.3.738'. [ 267.778083][ T7458] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 267.935004][ T7469] loop1: detected capacity change from 0 to 512 [ 268.080836][ T7469] EXT4-fs (loop1): Test dummy encryption mode enabled [ 268.094367][ T7469] EXT4-fs (loop1): Test dummy encryption mode enabled [ 268.148006][ T7469] EXT4-fs error (device loop1): __ext4_iget:4912: inode #11: block 1: comm syz.1.742: invalid block [ 268.247328][ T7469] EXT4-fs (loop1): Remounting filesystem read-only [ 268.254519][ T7469] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.742: couldn't read orphan inode 11 (err -117) [ 268.280411][ T4337] hfsplus: b-tree write err: -5, ino 25 [ 268.286213][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 268.344838][ T4337] hfsplus: b-tree write err: -5, ino 2 [ 268.351000][ T7469] EXT4-fs (loop1): Remounting filesystem read-only [ 268.368628][ T4337] hfsplus: b-tree write err: -5, ino 17 [ 268.379746][ T7469] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,grpid,errors=remount-ro,abort,test_dummy_encryption,. Quota mode: none. [ 268.384305][ T7481] loop3: detected capacity change from 0 to 512 [ 268.425873][ T7484] FAULT_INJECTION: forcing a failure. [ 268.425873][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.442451][ T7484] CPU: 1 PID: 7484 Comm: syz.2.739 Not tainted syzkaller #0 [ 268.449858][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.459920][ T7484] Call Trace: [ 268.463250][ T7484] [ 268.466222][ T7484] dump_stack_lvl+0x188/0x250 [ 268.470936][ T7484] ? show_regs_print_info+0x20/0x20 [ 268.476163][ T7484] ? load_image+0x400/0x400 [ 268.480694][ T7484] ? __lock_acquire+0x7d10/0x7d10 [ 268.485752][ T7484] should_fail+0x38c/0x4c0 [ 268.490291][ T7484] _copy_from_user+0x2e/0x170 [ 268.495006][ T7484] iovec_from_user+0x142/0x370 [ 268.499807][ T7484] __import_iovec+0x70/0x490 [ 268.504439][ T7484] import_iovec+0x6f/0xa0 [ 268.508912][ T7484] ___sys_sendmsg+0x1fd/0x2e0 [ 268.513631][ T7484] ? __sys_sendmsg+0x2a0/0x2a0 [ 268.518438][ T7484] ? vfs_write+0x8b2/0xd60 [ 268.522907][ T7484] __se_sys_sendmsg+0x1af/0x290 [ 268.527794][ T7484] ? __x64_sys_sendmsg+0x80/0x80 [ 268.532750][ T7484] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 268.538852][ T7484] ? lockdep_hardirqs_on+0x94/0x140 [ 268.544074][ T7484] do_syscall_64+0x4c/0xa0 [ 268.548483][ T7484] ? clear_bhb_loop+0x30/0x80 [ 268.553150][ T7484] ? clear_bhb_loop+0x30/0x80 [ 268.557825][ T7484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.563825][ T7484] RIP: 0033:0x7fdc01fe8799 [ 268.568237][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.587843][ T7484] RSP: 002b:00007fdc00200028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.596450][ T7484] RAX: ffffffffffffffda RBX: 00007fdc02262180 RCX: 00007fdc01fe8799 [ 268.604414][ T7484] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 268.612696][ T7484] RBP: 00007fdc00200090 R08: 0000000000000000 R09: 0000000000000000 [ 268.620793][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.628788][ T7484] R13: 00007fdc02262218 R14: 00007fdc02262180 R15: 00007ffc09597588 [ 268.636816][ T7484] [ 268.720073][ T7481] EXT4-fs (loop3): Ignoring removed orlov option [ 268.727097][ T7481] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 268.727391][ T7489] EXT4-fs (loop2): Ignoring removed nobh option [ 268.750824][ T7481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 268.761146][ T7481] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.746: corrupted in-inode xattr [ 268.782066][ T7481] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.746: couldn't read orphan inode 15 (err -117) [ 268.794876][ T7481] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000603,inode_readahead_blks=0x0000000004000000,errors=continue,,errors=continue. Quota mode: none. [ 268.794938][ T7489] EXT4-fs (loop2): Invalid want_extra_isize 231539022 [ 268.832766][ T5251] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 268.869148][ T7489] overlayfs: missing 'lowerdir' [ 268.967130][ T4823] Bluetooth: hci5: command 0x1003 tx timeout [ 268.986601][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 269.027847][ T5253] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 270.051988][ T7508] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 270.101803][ T7511] set_capacity_and_notify: 1 callbacks suppressed [ 270.101819][ T7511] loop3: detected capacity change from 0 to 512 [ 270.121180][ T7512] loop2: detected capacity change from 0 to 64 [ 270.164524][ T7511] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 270.174453][ T7511] EXT4-fs (loop3): Unrecognized mount option "euid<00000000000000000000" or missing value [ 270.243799][ T5253] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.257012][ T5251] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 270.266406][ T5251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.281075][ T5253] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 270.290386][ T5251] usb 2-1: Product: syz [ 270.294673][ T5253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.303123][ T5251] usb 2-1: Manufacturer: syz [ 270.308041][ T5251] usb 2-1: SerialNumber: syz [ 270.315766][ T5253] usb 1-1: config 0 descriptor?? [ 270.351030][ T5251] usb 2-1: config 0 descriptor?? [ 270.378585][ T5253] option 1-1:0.0: GSM modem (1-port) converter detected [ 270.465285][ T5251] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 270.921160][ T7527] hfs: request for non-existent node 31232 in B*Tree [ 270.928059][ T7527] hfs: request for non-existent node 31232 in B*Tree [ 270.935224][ T7527] hfs: request for non-existent node 31232 in B*Tree [ 270.942077][ T7527] hfs: request for non-existent node 31232 in B*Tree [ 271.027226][ T5251] usb 2-1: USB disconnect, device number 32 [ 271.050925][ T5251] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected [ 271.316422][ T4823] Bluetooth: hci5: command 0x1001 tx timeout [ 271.322698][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 271.342744][ T7530] netlink: 52 bytes leftover after parsing attributes in process `syz.1.754'. [ 271.371904][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.379538][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.388057][ T4281] attempt to access beyond end of device [ 271.388057][ T4281] loop2: rw=1, want=66, limit=64 [ 271.398946][ T4281] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 271.407758][ T4281] attempt to access beyond end of device [ 271.407758][ T4281] loop2: rw=1, want=67, limit=64 [ 271.425174][ T7533] netlink: 76 bytes leftover after parsing attributes in process `syz.1.754'. [ 271.437071][ T4281] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 271.445758][ T4281] attempt to access beyond end of device [ 271.445758][ T4281] loop2: rw=1, want=68, limit=64 [ 271.456461][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.463600][ T7533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.472751][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.479891][ T7533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.494439][ T4281] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 271.503454][ T4281] attempt to access beyond end of device [ 271.503454][ T4281] loop2: rw=1, want=69, limit=64 [ 271.508592][ T7533] netlink: 52 bytes leftover after parsing attributes in process `syz.1.754'. [ 271.526624][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.530750][ T4281] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 271.533995][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.544694][ T4281] attempt to access beyond end of device [ 271.544694][ T4281] loop2: rw=1, want=73, limit=64 [ 271.569764][ T4281] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 271.582401][ T4281] attempt to access beyond end of device [ 271.582401][ T4281] loop2: rw=1, want=74, limit=64 [ 271.596242][ T4281] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 271.618333][ T4281] attempt to access beyond end of device [ 271.618333][ T4281] loop2: rw=1, want=77, limit=64 [ 271.651576][ T4281] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 271.657706][ T7542] FAULT_INJECTION: forcing a failure. [ 271.657706][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 271.670355][ T4281] attempt to access beyond end of device [ 271.670355][ T4281] loop2: rw=1, want=78, limit=64 [ 271.701392][ T7542] CPU: 0 PID: 7542 Comm: syz.3.757 Not tainted syzkaller #0 [ 271.708736][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.717938][ T4823] usb 1-1: USB disconnect, device number 31 [ 271.719001][ T7542] Call Trace: [ 271.719012][ T7542] [ 271.731149][ T7542] dump_stack_lvl+0x188/0x250 [ 271.735953][ T7542] ? show_regs_print_info+0x20/0x20 [ 271.741185][ T7542] ? load_image+0x400/0x400 [ 271.745730][ T7542] ? __might_sleep+0xf0/0xf0 [ 271.750363][ T7542] ? __lock_acquire+0x7d10/0x7d10 [ 271.755425][ T7542] ? netlink_insert+0xe95/0x11f0 [ 271.760592][ T7542] should_fail+0x38c/0x4c0 [ 271.765056][ T7542] should_failslab+0x5/0x20 [ 271.769595][ T7542] slab_pre_alloc_hook+0x51/0xc0 [ 271.774567][ T7542] kmem_cache_alloc_node+0x47/0x2d0 [ 271.779794][ T7542] ? __alloc_skb+0xf4/0x750 [ 271.784335][ T7542] __alloc_skb+0xf4/0x750 [ 271.785516][ T4823] option 1-1:0.0: device disconnected [ 271.788699][ T7542] netlink_sendmsg+0x654/0xbe0 [ 271.788732][ T7542] ? netlink_getsockopt+0x570/0x570 [ 271.788754][ T7542] ? aa_sock_msg_perm+0x94/0x150 [ 271.788778][ T7542] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 271.788799][ T7542] ? security_socket_sendmsg+0x7c/0xa0 [ 271.788822][ T7542] ? netlink_getsockopt+0x570/0x570 [ 271.796787][ T4281] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 271.798972][ T7542] ____sys_sendmsg+0x5b7/0x8f0 [ 271.799008][ T7542] ? __sys_sendmsg_sock+0x30/0x30 [ 271.799038][ T7542] ? import_iovec+0x6f/0xa0 [ 271.799064][ T7542] ___sys_sendmsg+0x236/0x2e0 [ 271.799093][ T7542] ? __sys_sendmsg+0x2a0/0x2a0 [ 271.799129][ T7542] ? vfs_write+0x8b2/0xd60 [ 271.799178][ T7542] __se_sys_sendmsg+0x1af/0x290 [ 271.816519][ T4281] attempt to access beyond end of device [ 271.816519][ T4281] loop2: rw=1, want=142, limit=64 [ 271.820033][ T7542] ? __x64_sys_sendmsg+0x80/0x80 [ 271.820060][ T7542] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 271.820097][ T7542] ? lockdep_hardirqs_on+0x94/0x140 [ 271.820123][ T7542] do_syscall_64+0x4c/0xa0 [ 271.820142][ T7542] ? clear_bhb_loop+0x30/0x80 [ 271.820170][ T7542] ? clear_bhb_loop+0x30/0x80 [ 271.827208][ T4281] hfs: request for non-existent node 31232 in B*Tree [ 271.833766][ T7542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.850235][ T4281] hfs: request for non-existent node 31232 in B*Tree [ 271.852819][ T7542] RIP: 0033:0x7f93874e4799 [ 271.930960][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.951104][ T7542] RSP: 002b:00007f93856fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.959664][ T7542] RAX: ffffffffffffffda RBX: 00007f938775e180 RCX: 00007f93874e4799 [ 271.967657][ T7542] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 271.975635][ T7542] RBP: 00007f93856fc090 R08: 0000000000000000 R09: 0000000000000000 [ 271.983608][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.991588][ T7542] R13: 00007f938775e218 R14: 00007f938775e180 R15: 00007ffe16ec2e88 [ 271.999678][ T7542] [ 272.033323][ T7547] loop1: detected capacity change from 0 to 2048 [ 272.097772][ T4174] Alternate GPT is invalid, using primary GPT. [ 272.107022][ T4174] loop1: p2 p3 p7 [ 272.165868][ T7547] Alternate GPT is invalid, using primary GPT. [ 272.180199][ T7554] loop3: detected capacity change from 0 to 1024 [ 272.188832][ T7547] loop1: p2 p3 p7 [ 272.363400][ T7554] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.649695][ T7554] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,bsdgroups,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,min_batch_time=0x00000000. Quota mode: none. [ 273.229548][ T7561] loop2: detected capacity change from 0 to 64 [ 273.248611][ T26] audit: type=1800 audit(1772967408.449:22): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.761" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 273.287110][ T4823] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 273.314629][ T7561] hfs: unable to locate alternate MDB [ 273.327211][ T7561] hfs: continuing without an alternate MDB [ 273.367082][ T4828] Bluetooth: hci5: command 0x1009 tx timeout [ 273.398019][ T26] audit: type=1800 audit(1772967408.599:23): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.763" name="bus" dev="loop2" ino=21 res=0 errno=0 [ 273.435974][ T9] hfs: new node 0 already hashed? [ 273.466858][ T9] ------------[ cut here ]------------ [ 273.473040][ T9] WARNING: CPU: 0 PID: 9 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 [ 273.486595][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 273.486711][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 273.510701][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 273.554826][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 273.555230][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 273.567284][ T9] Modules linked in: [ 273.590955][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 273.596332][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 273.634043][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.665520][ T9] Workqueue: writeback wb_workfn (flush-7:2) [ 273.677020][ T9] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 273.682876][ T9] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 273.697089][ T4823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.705249][ T9] RSP: 0018:ffffc90000ce6e90 EFLAGS: 00010246 [ 273.725273][ T9] RAX: 000000000000001f RBX: ffff8880478ac000 RCX: 643407e1540ff600 [ 273.729233][ T4823] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 273.734769][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 273.756048][ T4823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.756620][ T9] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 273.778440][ T9] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 273.781904][ T4823] usb 1-1: config 0 descriptor?? [ 273.786497][ T9] R13: ffff8880478ac0e0 R14: ffff88805ccd6500 R15: dffffc0000000000 [ 273.786521][ T9] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 273.786543][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.786561][ T9] CR2: 00007f937d890000 CR3: 000000007e14c000 CR4: 00000000003506f0 [ 273.831981][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.838375][ T4823] option 1-1:0.0: GSM modem (1-port) converter detected [ 273.841676][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 273.855325][ T9] Call Trace: [ 273.862722][ T9] [ 273.865800][ T9] ? do_raw_spin_unlock+0x11d/0x230 [ 273.871562][ T9] hfs_bmap_alloc+0x5b8/0x670 [ 273.877954][ T9] ? hfs_bmap_reserve+0x420/0x420 [ 273.883029][ T9] hfs_btree_inc_height+0xfd/0xac0 [ 273.888780][ T9] ? hfs_brec_insert+0x6f6/0xbd0 [ 273.893802][ T9] ? hfs_brec_insert+0xbd0/0xbd0 [ 273.898964][ T9] ? do_raw_spin_unlock+0x11d/0x230 [ 273.904197][ T9] hfs_brec_insert+0x744/0xbd0 [ 273.909522][ T9] ? hfs_brec_keylen+0x350/0x350 [ 273.914502][ T9] __hfs_ext_write_extent+0x2a1/0x470 [ 273.920362][ T9] hfs_ext_write_extent+0x17b/0x200 [ 273.925681][ T9] ? verify_lock_unused+0x140/0x140 [ 273.931083][ T9] ? hfs_ext_keycmp+0x310/0x310 [ 273.935958][ T9] ? writeback_sb_inodes+0x418/0x1680 [ 273.942458][ T9] hfs_write_inode+0xd8/0xa20 [ 273.948972][ T9] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 273.954416][ T9] ? __writeback_single_inode+0x471/0xda0 [ 273.960219][ T9] ? __lock_acquire+0x7d10/0x7d10 [ 273.965371][ T9] ? do_raw_spin_lock+0x128/0x2f0 [ 273.970623][ T9] ? __rwlock_init+0x140/0x140 [ 273.975642][ T9] __writeback_single_inode+0x6c3/0xda0 [ 273.981284][ T9] writeback_sb_inodes+0xa4e/0x1680 [ 273.986521][ T9] ? queue_io+0x550/0x550 [ 273.991049][ T9] ? rcu_is_watching+0x11/0xa0 [ 273.995848][ T9] wb_writeback+0x45d/0xbe0 [ 274.000531][ T9] ? rcu_lock_release+0x20/0x20 [ 274.005400][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 274.014221][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 274.020309][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 274.025677][ T9] wb_workfn+0x43a/0xf20 [ 274.030114][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 274.036154][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 274.042357][ T9] ? read_lock_is_recursive+0x10/0x10 [ 274.049020][ T9] ? try_to_wake_up+0x6cf/0x1050 [ 274.054024][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 274.060682][ T9] process_one_work+0x85f/0x1010 [ 274.065910][ T9] ? worker_detach_from_pool+0x240/0x240 [ 274.071796][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 274.077160][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 274.082219][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 274.088299][ T9] ? wq_worker_running+0x97/0x170 [ 274.093495][ T9] worker_thread+0xaa6/0x1290 [ 274.098492][ T9] kthread+0x436/0x520 [ 274.102601][ T9] ? rcu_lock_release+0x20/0x20 [ 274.107784][ T9] ? kthread_blkcg+0xd0/0xd0 [ 274.112405][ T9] ret_from_fork+0x1f/0x30 [ 274.117269][ T9] [ 274.120408][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 274.127897][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 274.135211][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.140450][ T4823] usb 1-1: USB disconnect, device number 32 [ 274.145383][ T9] Workqueue: writeback wb_workfn (flush-7:2) [ 274.157473][ T9] Call Trace: [ 274.160867][ T9] [ 274.163919][ T9] dump_stack_lvl+0x188/0x250 [ 274.168625][ T9] ? show_regs_print_info+0x20/0x20 [ 274.173870][ T9] ? load_image+0x400/0x400 [ 274.174142][ T4823] option 1-1:0.0: device disconnected [ 274.178501][ T9] panic+0x2e5/0x810 [ 274.178536][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 274.178565][ T9] ? ret_from_fork+0x1f/0x30 [ 274.178588][ T9] ? hfs_bnode_create+0x3d1/0x450 [ 274.178614][ T9] __warn+0x248/0x2b0 [ 274.206122][ T9] ? hfs_bnode_create+0x3d1/0x450 [ 274.211687][ T9] report_bug+0x1b7/0x2e0 [ 274.216114][ T9] handle_bug+0x3a/0x70 [ 274.220309][ T9] exc_invalid_op+0x16/0x40 [ 274.224908][ T9] asm_exc_invalid_op+0x16/0x20 [ 274.229781][ T9] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 274.235443][ T9] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 274.255519][ T9] RSP: 0018:ffffc90000ce6e90 EFLAGS: 00010246 [ 274.261796][ T9] RAX: 000000000000001f RBX: ffff8880478ac000 RCX: 643407e1540ff600 [ 274.269788][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 274.277876][ T9] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 274.285879][ T9] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 274.293937][ T9] R13: ffff8880478ac0e0 R14: ffff88805ccd6500 R15: dffffc0000000000 [ 274.302062][ T9] ? do_raw_spin_unlock+0x11d/0x230 [ 274.307289][ T9] hfs_bmap_alloc+0x5b8/0x670 [ 274.312423][ T9] ? hfs_bmap_reserve+0x420/0x420 [ 274.317697][ T9] hfs_btree_inc_height+0xfd/0xac0 [ 274.322825][ T9] ? hfs_brec_insert+0x6f6/0xbd0 [ 274.327762][ T9] ? hfs_brec_insert+0xbd0/0xbd0 [ 274.332695][ T9] ? do_raw_spin_unlock+0x11d/0x230 [ 274.337989][ T9] hfs_brec_insert+0x744/0xbd0 [ 274.342779][ T9] ? hfs_brec_keylen+0x350/0x350 [ 274.347732][ T9] __hfs_ext_write_extent+0x2a1/0x470 [ 274.353122][ T9] hfs_ext_write_extent+0x17b/0x200 [ 274.358321][ T9] ? verify_lock_unused+0x140/0x140 [ 274.363546][ T9] ? hfs_ext_keycmp+0x310/0x310 [ 274.368402][ T9] ? writeback_sb_inodes+0x418/0x1680 [ 274.373789][ T9] hfs_write_inode+0xd8/0xa20 [ 274.378464][ T9] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 274.384033][ T9] ? __writeback_single_inode+0x471/0xda0 [ 274.389779][ T9] ? __lock_acquire+0x7d10/0x7d10 [ 274.394908][ T9] ? do_raw_spin_lock+0x128/0x2f0 [ 274.400070][ T9] ? __rwlock_init+0x140/0x140 [ 274.404897][ T9] __writeback_single_inode+0x6c3/0xda0 [ 274.410598][ T9] writeback_sb_inodes+0xa4e/0x1680 [ 274.415828][ T9] ? queue_io+0x550/0x550 [ 274.420354][ T9] ? rcu_is_watching+0x11/0xa0 [ 274.425280][ T9] wb_writeback+0x45d/0xbe0 [ 274.429797][ T9] ? rcu_lock_release+0x20/0x20 [ 274.434660][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 274.440653][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 274.446831][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 274.452032][ T9] wb_workfn+0x43a/0xf20 [ 274.456283][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 274.462029][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 274.468036][ T9] ? read_lock_is_recursive+0x10/0x10 [ 274.473403][ T9] ? try_to_wake_up+0x6cf/0x1050 [ 274.478342][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 274.483558][ T9] process_one_work+0x85f/0x1010 [ 274.488515][ T9] ? worker_detach_from_pool+0x240/0x240 [ 274.494265][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 274.499586][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 274.504812][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 274.510486][ T9] ? wq_worker_running+0x97/0x170 [ 274.515515][ T9] worker_thread+0xaa6/0x1290 [ 274.520323][ T9] kthread+0x436/0x520 [ 274.524506][ T9] ? rcu_lock_release+0x20/0x20 [ 274.529352][ T9] ? kthread_blkcg+0xd0/0xd0 [ 274.533937][ T9] ret_from_fork+0x1f/0x30 [ 274.538372][ T9] [ 274.541973][ T9] Kernel Offset: disabled [ 274.546634][ T9] Rebooting in 86400 seconds..