last executing test programs: 1m46.143675278s ago: executing program 2 (id=162): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x1dc00, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$eJzs3c9uEmEQAPChpfwxHnozMTFZ40FPjfoENaYmRhKTGg56a2JP5QQX4NI+hq/ge/kApicu5jO4bEGgiERA9Pe7dLrzze4OG5a9MKTIfbn3KWq1Uuwdx3EMSnEYe1G4imnlmS0AwO4YpBRfU+73qz0HAMAuWuLz/9uGTwkAWLN37z+8edFonJxmWS3i+qrb7Dbzv3n+1evGydPsh8Nx1XW329y/yT/Lpp8dhvmDuDPKP8/rs5t0JSKalXjyKM8Pcy/fNrKf66vxcc29AwAAAAAAAAAAAAAAAAAAAADAtjyIrDB3vs/R0XS+Psrn/03MB5qa31OO+8V44PF4oHS5iaYAAAAAAAAAAAAAAAAAAABgx3R6/YuzVuu8PQ6qETG5pTxnze1BabTjpRZvP9iL1crrozZXOGhp9BKtt8H6/Iu7TBDlv+XqrBpkf2qH1eIyz6bqUVpQntIwmP8uKMZi3FpeiYjFJ/b4dNW+Biml1ueH7U4v0sLF43tEdWN3IwAAAAAAAAAAAAAAAAAA+L9NfOt7Rm1/G2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvX6fWLX/nvX5y1WuftTm/p4DIi7sYvFxfHOoja9hoFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn/Y9AAD//ybtHK4=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003d00)=ANY=[@ANYBLOB="200000001200010a00000000000000000a"], 0x24}}, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 1m44.478051132s ago: executing program 2 (id=164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioprio_get$pid(0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xf00, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m42.220318662s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) 1m40.625537707s ago: executing program 2 (id=174): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB="666c7573682c00dfdc60e6f8ae70f974d28b08f3e7f6eeadbb536bb3d76f65f183a068ef36638d4fa7d933a72784f4bc309448beb20b52b437cf0c96dffafecf17cbc6d4179e094b0e"], 0x1, 0x22c, &(0x7f0000000440)="$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") sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x27, 0x80000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0700000000000005"], 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x38f9, 0x0) splice(r5, 0x0, r4, 0x0, 0xec0, 0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m31.829283944s ago: executing program 2 (id=192): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x129642, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f0000000000)='\x00', 0xb0302, &(0x7f0000000040)={@align=0xc, {0xf76, 0x4, 0xfff, 0x4}}, 0xfffffff8, &(0x7f0000000080), &(0x7f00000000c0)=0x80}, 0x2, &(0x7f0000000340)=[{0x3, 0x1, &(0x7f0000000140)=')(,\'!{{]/{%\x00', &(0x7f0000000180)="8e73145e8f7bb183661dce98598bcd2700d4f3a8e89c26d84b75be7462f58914183cc753921031e87ef56963c26124c6a0765092b2859053953c35be94e7566cd7391c342e2dc21d6036c1b815fedbca565d9f531c6bfde885605e640bc876bdfa7ae027cfbe984434d8d68831ff8f78b0d7afb89956fc5d02ed8cb2953d20a6cd70ec43074e7c054c25b2d21af7995042253ca96495ede196d60a8bfcb97488cc1b7c93a3bd9083da11271293a73451e208", 0xb2, 0x4}, {0x994ee43f588d0dc3, 0x9, &(0x7f0000000240)='\x00', &(0x7f0000000280)="7bd95db448a330d8fc40d1d6a841d23379a1f1176df0f2012edef04ab9515079100978c83b76641f5e358516149652154d655317be44263795fa777d3de0e4f03fb697fe222369a370486878f105087c1911553f6482e70643e75392fba636aa5ef3fd6dc28fee79afd51577dd56760f4d8aec2db340dd74396f859935f4ef74ada9aec2361f52e4d97c87b7", 0x8c, 0x40}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c054}, 0x4044074) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 1m29.974167419s ago: executing program 2 (id=193): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$alg(r2, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="4cd24f533034819af5c28d38c9c8371edc0b3ca18bb0e4e445f5f55a539656eebc551804e8f27df404feb2fc27743b5d185df9242a94a16fc0883e337b031b15db4cf05ec27ea827288fc108c1ed5be414811d479d73bff6c26293372d75e0db961527075dc2ed11d03f2696c6f84fd08f78b466ac64b14e136d96e7dbd3524dcd61416ac7caa59ea39021a650b0121959407030b3e8e7edf2b70a04e5", 0x9d}], 0x1, &(0x7f0000003540), 0x0, 0x20000000}, 0x0) r3 = syz_ublk_setup_io_uring(0x3a0b, &(0x7f0000000200)={0x0, 0xca6b, 0x4, 0x2, 0x32e}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) syz_ublk_setup_io_uring(0x5614, &(0x7f0000000340)={0x0, 0x38ef, 0x80, 0x1, 0x132}, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) r6 = mmap$IORING_OFF_SQES(0x0, 0x8, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000) r7 = syz_open_dev$amidi(&(0x7f0000000480), 0x4, 0x40000) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001800)=@IORING_OP_READV_FIXED={0x3c, 0x4, 0x2000, @fd=r7, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/64, 0x40}, {&(0x7f0000000680)=""/234, 0xea}], 0x4, 0x14, 0x1, {0x0, 0x0, 0x8, '\x00', &(0x7f00000017c0)={0x0, 0x2, 0x1000, &(0x7f00000007c0)="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", 0xfffffffffffffff7}, 0x9}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b1b, &(0x7f0000000040)) syz_io_uring_setup(0x1a6c, &(0x7f0000001880)={0x0, 0x2343, 0x8, 0x1, 0x17b, 0x0, r3}, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r10, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0xdde91000) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1, 0x50, 0x59, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0xb}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1m14.326862548s ago: executing program 32 (id=193): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$alg(r2, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="4cd24f533034819af5c28d38c9c8371edc0b3ca18bb0e4e445f5f55a539656eebc551804e8f27df404feb2fc27743b5d185df9242a94a16fc0883e337b031b15db4cf05ec27ea827288fc108c1ed5be414811d479d73bff6c26293372d75e0db961527075dc2ed11d03f2696c6f84fd08f78b466ac64b14e136d96e7dbd3524dcd61416ac7caa59ea39021a650b0121959407030b3e8e7edf2b70a04e5", 0x9d}], 0x1, &(0x7f0000003540), 0x0, 0x20000000}, 0x0) r3 = syz_ublk_setup_io_uring(0x3a0b, &(0x7f0000000200)={0x0, 0xca6b, 0x4, 0x2, 0x32e}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) syz_ublk_setup_io_uring(0x5614, &(0x7f0000000340)={0x0, 0x38ef, 0x80, 0x1, 0x132}, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) r6 = mmap$IORING_OFF_SQES(0x0, 0x8, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000) r7 = syz_open_dev$amidi(&(0x7f0000000480), 0x4, 0x40000) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001800)=@IORING_OP_READV_FIXED={0x3c, 0x4, 0x2000, @fd=r7, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/64, 0x40}, {&(0x7f0000000680)=""/234, 0xea}], 0x4, 0x14, 0x1, {0x0, 0x0, 0x8, '\x00', &(0x7f00000017c0)={0x0, 0x2, 0x1000, &(0x7f00000007c0)="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", 0xfffffffffffffff7}, 0x9}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b1b, &(0x7f0000000040)) syz_io_uring_setup(0x1a6c, &(0x7f0000001880)={0x0, 0x2343, 0x8, 0x1, 0x17b, 0x0, r3}, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r10, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0xdde91000) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1, 0x50, 0x59, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0xb}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 24.018999698s ago: executing program 0 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x3}, {}, {0x1, 0x1}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x2, 0x2}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @enum64={0x5, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x5, 0x3, 0x2}, {0x7, 0xf6ad, 0x80000000}, {0xc, 0x3, 0x9}, {0x3, 0x0, 0x5}, {0xa, 0x2, 0x8001}, {0x8, 0x8001, 0x20000000}, {0x5, 0x0, 0x3}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x56, 0x3}, @float={0xf, 0x0, 0x0, 0x10, 0x2}, @struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x7, [{0x9, 0x0, 0x68}, {0x6, 0x3, 0x9}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000840)=""/126, 0x110, 0x7e, 0x1, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x10000) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) getpid() setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='\x00!', 0x5ea}], 0x1}}], 0x1, 0x20008800) 20.743362932s ago: executing program 0 (id=317): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000010000007e"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r1, &(0x7f0000000080), 0x0}, 0x20) unshare(0x20040600) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x9, 0x41, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x50) socket$netlink(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x760, @empty, 0x4000005}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r5 = fanotify_init(0x200, 0x800) fanotify_mark(r5, 0x201, 0x40000036, r4, 0x0) fanotify_mark(r5, 0x441, 0x8000001, r4, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) preadv2(r6, &(0x7f00000037c0)=[{&(0x7f0000000380)=""/248, 0xf8}, {0x0}, {0x0}], 0x3, 0x3, 0x5, 0x14) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0x0, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x0, 0x9}, 0x0, 0x0) 19.299236792s ago: executing program 0 (id=321): syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000004) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)) 16.492020937s ago: executing program 0 (id=328): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = open(&(0x7f0000000180)='./file0\x00', 0x80301, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000004000000180a0700000000000000c0ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e23, 0xb7, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "b88bb62777e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x800800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}], [{@obj_type={'obj_type', 0x3d, 'wfdno'}}]}}) 15.252148985s ago: executing program 3 (id=329): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = open(&(0x7f0000000180)='./file0\x00', 0x80301, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000004000000180a0700000000000000c0ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e23, 0xb7, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "b88bb62777e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x800800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}], [{@obj_type={'obj_type', 0x3d, 'wfdno'}}]}}) 13.11784638s ago: executing program 4 (id=331): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01008f17717718000000000000001000000010000000020000000100000000000001050000000800"], 0x0, 0x2a, 0x0, 0x1, 0x4000663}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa000000a}) read$FUSE(r1, &(0x7f0000003a40)={0x2020}, 0x2020) ppoll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x88380, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000003c0)={r6}, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x16) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0xbf7}, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0xfffffffffffffe5e) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0x9) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@echo=0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES16=r6, @ANYBLOB="ad292197e9", @ANYRESDEC=r3, @ANYRESDEC, @ANYRES64=0x0], 0x0) 12.866296673s ago: executing program 0 (id=332): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x38, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xf, 0x20, 0xae, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x1, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x5, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) shutdown(r4, 0x0) unshare(0x2040400) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000cc0)=""/236, 0xec, 0x0, 0xe6489f04b0138b18, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/120, 0x78, 0x0, 0x0, 0x3}}, 0x48) 11.03944363s ago: executing program 3 (id=333): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000140)) 10.522085048s ago: executing program 1 (id=334): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r1, 0x7da16000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r3, 0x1, 0x4a, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0406"], 0x6) 10.246958135s ago: executing program 3 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x800) 10.232393091s ago: executing program 0 (id=336): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x8d4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102) r1 = socket(0x10, 0x803, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) socket(0xa, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010004000000000000000c0000000c0000000200a726000000000000000c010000000000"], 0x0, 0x26, 0x0, 0x1, 0x7fff}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) bind(r1, &(0x7f0000000280)=@in6={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2003}, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0x2c4d, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xd27}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffd) sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 10.010843406s ago: executing program 1 (id=337): syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000004) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)) 10.010050722s ago: executing program 3 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') close(r0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141542, 0xeaff) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x29f) 7.803966175s ago: executing program 4 (id=339): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r0, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c80", 0xb8}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e145755626689", 0x14}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a950", 0x5c}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f7", 0xab}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x13d, @mcast2, 0x100002}, 0xfffffffffffffd0f) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, 0xffffffffffffffff, 0x4a028000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r6) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000400)={0x14, r7, 0x601, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400048c0}, 0x200000c0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0xa, @win={{0xca84, 0x4, 0x34565348, 0xffff}, 0x1, 0xc838, 0x0, 0x101, 0x0}}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000000c0)=""/227) socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.785051968s ago: executing program 1 (id=340): openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420540, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, 0xdfd}}, {@space_cache_v2}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1a22a}}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0x1, 0x510a, &(0x7f000000d000)="$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") fallocate(0xffffffffffffffff, 0x1, 0x100efc, 0x890003) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 6.363099999s ago: executing program 4 (id=341): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = open(&(0x7f0000000180)='./file0\x00', 0x80301, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000004000000180a0700000000000000c0ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e23, 0xb7, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "b88bb62777e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x800800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}], [{@obj_type={'obj_type', 0x3d, 'wfdno'}}]}}) 5.292718849s ago: executing program 3 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') close(r0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141542, 0xeaff) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x29f) 4.586905773s ago: executing program 4 (id=343): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x38, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xf, 0x20, 0xae, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x1, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x5, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) shutdown(r4, 0x0) unshare(0x2040400) lseek(0xffffffffffffffff, 0x100, 0x4) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/120, 0x78, 0x0, 0x0, 0x3}}, 0x48) 3.893483467s ago: executing program 1 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141542, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) 2.921521876s ago: executing program 4 (id=345): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x38, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xf, 0x20, 0xae, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x1, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x5, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) shutdown(r4, 0x0) unshare(0x2040400) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000cc0)=""/236, 0xec, 0x0, 0xe6489f04b0138b18, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/120, 0x78, 0x0, 0x0, 0x3}}, 0x48) 1.438182145s ago: executing program 4 (id=346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r5 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x100000) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000140)=@generic={0x0, 0x1, 0x5}) r7 = creat(&(0x7f0000000100)='./file1\x00', 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x1, 0x5800003a, r8, 0x0) pwrite64(r7, &(0x7f0000000c00)='W', 0x1, 0x4) read$FUSE(r9, &(0x7f0000004fc0)={0x2020}, 0x2020) sendmsg$can_j1939(r2, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r4, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r12, 0x10f, 0x7f, &(0x7f0000000340)=0xffffffff, 0x4) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 1.124572004s ago: executing program 3 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r1, 0x4af3eab60045971, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xeb9, 0x61}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x2, 0x2}, {0xed}, {0x24, 0x1}, {0xe7}, {0x8, 0x6}, {0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x5}, {0x5, 0x1}, {0xa, 0x7}], "f3017acb928736e5"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xff}, {0x4, 0xc0}, {0x80}, {0x5, 0x4}, {0xe5, 0x6}], "2fb313958f00ebe3"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xa5, 0x5}, {0x5, 0x1}, {0xfe}, {0x2, 0x7}, {0xae, 0x1}, {0xb9, 0x2}, {0x0, 0x5}], "df74ee4349f4ba17"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x4, 0x6}, {0x81, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0x64, 0x3}, {0x3, 0x2}], "b42cf4dc0f4b7aad"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4, 0x7}, {0x0, 0x3}, {0xf}, {0x1, 0x3}, {0x8, 0x7}], "5685eccfa194dcf3"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xe, 0x5}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0x4}], "87cbcae9ee076048"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xb4, 0x2}, {0x8, 0x2}, {0x8, 0x5}, {0x8}], "620919cd9963997a"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0xa}, {0x8, 0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x9, 0x7}, {0x5, 0x7}, {0x4, 0x6}, {0x80, 0x2}, {0x7, 0x5}], "ff5a371a8e71ea7c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x9, 0x5}, {0x6, 0x2}, {0x9, 0x3}, {0x9}, {0x2, 0x4}, {0xfc, 0x6}, {0x8, 0x6}, {0x9, 0x2}, {0x6, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x9, 0x6}, {0x9}, {0x7b, 0x3}, {0x14, 0x4}], "09baef9d9bccf4ea"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x8, 0x6}, {0x6, 0x6}, {0x61, 0x1}, {0x5a, 0x6}, {0x4, 0x1}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x1}], "a462b4be7e49957e"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r3 = gettid() sched_getattr(r3, &(0x7f00000002c0)={0x38}, 0x38, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020000}, 0x44010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_ID={0x8}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x204}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x124}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x48}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4080) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg(r6, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="c61c9584e6dd69892b11ce3fb6dac73af7f2e3619f53520c4c463f8e9eeb9c14ed589119068469b8894eabc80c5397cef07df802a69a55114ce1a1959181b88894524e052a5f1fc5d1e4eb57512c5f95035b4749bf823902dbf3ce0839cc4b5ea7a1cbefdb6d148b4d8a0e4515d9ef58722a904185a8e4e2d7f05debb76f6761763597732cab0df6a74e894d20f01157", 0x90}, {&(0x7f0000000740)="c36afba5f966e7e85f60ac29650f0b34f26aa1f6278e4ae0c022134293b8df96d8d86712358cba9759c8b550ed3c", 0x2e}, {&(0x7f0000000780)="7041ffa2a76b1813c7529ab493055ada559086eba80ef23aaedde910f2d044b61febcc22c15f7abc2dc7cb9b65bcd5a717bb7b8f2025a3dffa031eae6671220d613595d0e929184d3c430b79e31a15cabfbc4c320067230bf98325b93f77a4820c2befed2fa6", 0x66}, {&(0x7f0000000800)="8cfdd507210b419338ebbee1e16a41a4766d640b529ee88fc3237b29bf6f7475a6532dbd8a88d967d8ea3b7127e125973bf4bfd52cbbff3d17fd82ecededbc2bfbe6e098946ac3c51d77cd5b5b249ae553b5db22793b019f561361b1e7a526bc7df701705ab7f219fbdb2da8ce3e8ba6eba06e525b36c638ae31327b63073c775fe9737fe558fda4403001ed3ee151be0585f0e48a764a4e30dc086547d9bb7c2d81d801c9019e6ed9633f68b2468e78", 0xb0}, {&(0x7f00000008c0)="92060de0a06ce8649e79565c4861e875d7f4fa2497ff94150b6cb6d5a1757aba6033819b5f48a4d507fc6b12603fae4af69977094eac3e9382ef057631168c10d81daa17004fa127b405505f3d2126fadc1a8644a4343df72dfe3d9a5453d26e4647fed22ef6092094cac39cc9f0c35e343f71a9f5259b9a3fdefef131b8361a4a520f6eb6d162164d406797ff5f76ecb1b98d5a52", 0x95}, {&(0x7f0000000980)="c82c7c8ca7c80fd4392aae70472ed6011c072431ed7c21a5591a7ce19cf5675f43537d36a775058c53bf60e25238c1ad1194258fb70681a3c999a4f64972b10c26496b4008c2be9114", 0x49}], 0x6, &(0x7f0000000a80)=[{0x10, 0x29, 0x3eaf}, {0xf8, 0x84, 0x80, "8ff80d993d2d497cd00b8ef2ff667f8af39674c0ca77dc46654e4c86d9b70871c7f8800be664c68d272360ec2cd9e9e409339af70c5a03717e318f9e5534c7b02cea2cac00e84a4e4ee5fe9b02ccc8cbca201533f700a7873b4a36a63ffe3d273119ca20d0a6307057fe57a8bb6b611fee382b1bef158daa85294637a9be9fe79f29d0564dd2df8af585c4572b3b353d3119345f1dce2b0304627e704b601b2518b664563b9a86427d52f0c5e82c19a59d16f5446c42a932ecb8e28648c8a75be12cf7f7030ba5bf71911eb2c7f3dcfba2c317db98c8ba3c7432d5f3babccbacc556d084"}, {0xa8, 0x10b, 0x2, "3befa356267f0e9a51e28628d9b1956949e189807155776b510694c59b9de9ef0e22e5ff52c58b562825aa78d9cc7da6511ff846f1aa8702250d78e1b254c25016f2e446ddd9098aa5f68f1461413eebde6ed4eebd10425a8be079e379695ad26149882db32d4b6fc2ae8db79844297a6857615c262314976c8febd9c48c03875f259c080dc54567a6c486636b0d7d5de1dcda4f6cacb7"}], 0x1b0}}, {{&(0x7f0000000c40)=@llc={0x1a, 0x8, 0xd, 0x1, 0x9, 0x6, @multicast}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="cd2ab867ced089824120f5d0eb9be0cec339ab512d603d80ec13e35ef3", 0x1d}, {&(0x7f0000000d00)="b2538182a62311b96bb9156c69a1f930415ab16f1da3f9ab1315ec1626494f9a1c53c1733c8aba1b419877105ddeec733090bcc975a1ae5f4b", 0x39}, {&(0x7f0000000d40)="d4f055c827e3a22ffee283e56b86e29bed371361b966d81818d4906413af38beb3a7dd8fe9d2bc0cfe5c35acd3c2c2e096a1d175d7199e2b1e94cb12d583f991b20d744271741b10e53869993c65ef63890c358e9e9472a6abfa85b6f04196c6f05a95eb92ba1baa97aba8055bedd51df09af0ddd2de38609d430bf9271d1d14f3", 0x81}], 0x3}}, {{&(0x7f0000000e40)=@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}, 0xccd}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)="eace031c13779696281ce2633d2ee01ea55817605fa7cd0db0b45bea16a192cb5125c290530c99c25c6f253eff4d09a345bedb99b82c64c3f958948a6cb93b808426c71e089b58d836dc2d4a4c33f474529e7fd131be9da6df34f7fdce4cf8652ef1828182b2a2ba53fc62b820ed179988b5e0c62977c68adec6977eda9ff8ddd2d24a848ae00bb08c07d7c614577b621a041ca8afc6bb28e1722a92467979ae18697413b231b5d0bab52c", 0xab}, {&(0x7f0000000f80)="4c5e57c99a4ecca54e814b22bdd744daf55e3c23632f108f9a08a79bf0945c524783ba960a94e8283efdc7fea2de80a5f3c0fe56b3918c23ed5afddd6dfbf61e7dce0285e249288d84c4d516d9cd8588d4929a39c0dc79864d475a4257eb8b8d32f25a77859c613df2feee8a78088651c54cad9132dcec622f2d334cbc68b05b093990d7882e9dd1697a9f37be91ebb69c67d5c54b014a023662112bee57d1cc", 0xa0}], 0x2, &(0x7f0000001080)=[{0x1010, 0x10d, 0x80000001, "c35112417d56e79f02471fe7ff2ac8e8692cc728679cd4afe2ef22a767e0c0ac3788504cdb36636c4c8980f598dc04e77b98291f2d83baa12ed9b7c4a1f3eded5da6157f6ec58fe43a81d66a7aea3af02566ecdfa9263d8954df141c7d91ad7e68f515863b6bc94caf2934ecd10558c47cee5617a2fb7c48e420ff1c57d3ae470430d76d8d521792455dead08ac082752176689717f4dfb021ee002f81d6ffad0392c04077a0f32f60f71d013b053c5792be62312eac6688730b03379cd91edce6221d84149330340ce5f75adb6096f82141a31e8cc9927a306e2854516ad15cd967fe0778bed8c68438ab65afac050af3715c4339d5777d3014f08c4989301a01783f89a2beb2b37f6d20c57ce724920ae1f66b59ddb68e6d10f8d442ea40697a347dedeaf8f0e048a44c91cca5df0eb5dbcd0f2874ef8fd01082d88a2249bd23fb1d4fe64b8c55f9070f94f2ec4020e2d2f9b4fe3ff74e81e0600b6277b887e98a94de612aa8f02b0e32117e36b29a96017dca66019540133908fa8450dff8bd59c1296226855c5395ac06f31ee706c3664bdc893501de4d6e3f5dfa1d06fceed08fd20b2ba71165f2a9b55b2a4e9ffa62e98adbc56d987ee24240be1249174df0fb85955ebcf6227cb39f273035712469dcb48fa87c587209adf5fcbae13bece140f9d21d56b6688a6b05c24c60efdaa86a83eac2e7664b490dc13e7d328edf860c9603164ffdcb776f33e43515bd4cf3d2b70e3e20efa57e5bab3e856e7558578f879d36ca19bd9a434590ab9a9c72b4c555761896c14ac24383505e9196ab1cb1935b29bff2c63321adc6e1f41513de9abfee2334634da3a2937a56170371f414760ae5dff996a1c860352a6021b3b0b2fc7a35d98adf4eb599f13fe2ea23e74d5801c96de2ca932ea0d788385a91e679eead1dc8b3360b594efae00b45acd9e6b9a119193b5f24d8ba47350d2b62dbaf38f849b4fbf07a0e274709a9b6950fe825f5a4121dc2b2cf144517d7c606a3089e8011a6a01621980a72d67839a2fcd66a06a63bc2b55dda37b57f2f03b2557957eeb2cd77a568baecdcc1fa64829ae9e124ddf1475d684a48c67bd4c44d41b73a426a9ec209ceaf0b0c0212fbe06a78e74b3f732dd59dd8370cd57e8fb7fb761b5130b0fb87e5ef94af6207740371bb3d144edf1af9f527f330556985070860eb69d3a7f006b6bf6a37f7fcf68e53673d7ea1d7b4d16e681f7a9fe922e467606e54c1744c098f750b4b7594db55319d9df56a16212f2bdf823fd14e97c5f1f676cdf0593ef24c6bb8c320465b56ae36603a3972c2bb459f4c3b3a00ed18a68de5f999689b1cc02f3b3100bcf7b5f7b91162a039e00a238b8d5dfaa43fb812da4f268be52556caad5464250f941fc7cc6ac5066efa36c3278c285adc3ba0edd8609f07858930f5bad555bb7b1ed34127848396c333694e1e16172b61f4c66c24c4a792766f2aa0a9095a109222b448c64c99ff61c13ebc6ed63c41743664bd1e0790c897e5378392d5f1ed106a71f7f44939a7e61886f2ebb1e10f52e11c6df4a6fffbb42a6406b7657062e4480b139e6401b8d1726876eaa3a04cb548ea610a767b9e907c322d1aa7a4e915417a74effea41fda32e74dd406b6e511068f1a8713b68b2b60e473af2fe0d167f9b37684529f8de31f7113fa329ab836593af16d24836e9dc0655dd91aa2523d72e22c1d98cad892fe3de4206465922170a768f434473c2a192ec0bd7dcd3fe5c726066bdb18946dafb9856b84dc9d80a07b99b579878dbaa4059011226c34a0891586a77a79b943e5ae09af020b63e7def983791fce3892b4ad7875661fc0e1f604ae911a69b9af3822f9b4ee2031d699c5bde7475e3fa078e3d7c6e1adb47b16333b2724aecc8a4d4211bb475421f0c3bfea4fe3fb071f8b8141dfc872db73d47c064f1983f1421293ae4e7de045263189c34ee1cea07bda411781f6a6b24795b3624856b5eecc66190a65267c2278cc3df08f402e551b6117d7e28369be5a15774b589b6296a625560b66df8549576e021461ee25477dead6307e312996aec4ada12eebc55a236f2fce7c54b98c7522da439a71593f259c8db3ef6bdafa6d77a24505e99e5d5e5a440e42fd4e1bd7aab81d7c39cc72d260fc253e2ea423f8d64eb1f9efb3fa4f75eaa4dc4d5c6d22b82fa26ba013e1555fa5dd44e102c75a9dd5b294dcc008199cd73906d361c3009a09defeb8a64edf0502cf4d19132fc6f6609227ac4dcc3ad63b0b63ef3b89f01b040c9bc62c3455ba42fce71003d03fc404e76fd379be3b89da9f57f7f3d4d03a41a1cbf6abf9616cb23cb7a98e7367db7a5010e7e13062ba96afeebd381ae9ac52d26ad81e4cd403e9ace056148d8de9c43139c9e8156da1540388c393bba076836cf1589617c10a2b0d71d7426a916382a17863a6f7b9e660c0d41f7edfdf9925b718aa8a56d7559d4975203dceceef96c9413f9134710dea62baa551ec01fc922959bc75cabe42cdf43e22cfb5158b213d6f1cc7b0924374f658d9e6db7d32c8bbd67c5e51bbb5d2c3be7f9f9adf04e54c3a3679a6e09343c642aa7323380106c9e7db19ea21475d95b6d413468b26a174ba164c14fd998b6d542ab793cf4190160caf3a07703f664d2dd023dc1305a2ab8615806f1903c3f2fff273ebae38477e063d0b0b72e901500676b7d5cad5e9d2bc34b05a328366672bd8db650c2d9862976e2781a846915d909b72b3301ce879f718a5a99a1615a4f4357805504dd4141435d107a0efe234cbfb9f06901c7dd2857449d92954b97a8b521c689c1b26d083470421d1fafde1b77ad1c67493fb6e0ece9956bdf1600270f243b59b0bdf260a6f94ac9689e4cce52364ab027848eac4bb521bef154e33d4c46c2624189f832b9563459a6974f228826f959f2ad4f6a79cd781c0ea834f17770b15bdba487fbe94769f436e4632321da4e19bda470bb38639774466569f9304f0eaf143441eae87891e74f9bec99cf94daf6a1df38905c0aa8a7c5ae4439a8a3e469443a80e4c99f7d5cfbfe108d301bacd8883ebdc5bc64624a84a220823673ab86fd3b3e78a6282905f3453b3813f07a15c6dbfc00ee53a6258e351f54dcc2562cf34298340234cfa64dc13fcb5f806b7c9553443e78ef30c907b8e3a2bbecf7041d1be48c9306eab45dc9171241ac58344176b36b8647766dc68aaec9fef94bb73c76566472d1b6d59a69e4059847fd09f5f3d19f0f285024eea8c6c9078df042286e539435ad213261b23c00b162efd89a6b917e7d18c1d2bfa294811a6614f2ec5e2eca031f2afd65d34f9705446d904548489bf50c8e7ac2dd001d88309a5de2d03a0c82850f8ba125a94c263ba05751380b33a75371b62e8f016a283d4cae232d9c9066411653f4f1ea3c23a241e4b798fe345c63fd768128524b24725f2cf8e4dd2b874b1676c05e0d9dc36aec5df11486efed7768029eba2a7de38d3d6e3ec83cc7048ecaba2be317fc671a8386872e0af99c09366fe27ce12ee28e3b4f011d43b81f39966f592cb95b0e39399452aa47a7c798ba02fab43bd49ff7fd2b1dc7903a5dfe51fad6ec53a8711a3c5d85b405d7eecd6b5836e4b9276d189d01e7374514ec1fa26f1311f5868307f6f219f586bae8d33fb68df95ae12277fca19b0763c5febf35d1829dce1c2e36cd5e32a33f0bb3988b0a1365fa4ebb30ae1e4e47b8ef954fc5e7090fab5253c2f0c1e2618c85b1a44400d08462f592e89de1d1597ac489ebad184d7db1898121974f5b6298065dde6d150c39e351bcd4fe1d893f94e77bb658246af45b7415628c0cd169a0158f2ecf6cec3a573ddcc219f09232ff6f587f6eb7ae7b43ea02be83df4d675898c1ad269068602cc0904b73d7b10802d4890966325e02fa213a9f56c38dcee2f02c71742b0189beefceb9b036df9112fddff09ebd5825fc5fc50a1dc40709d87e8df423e03fe631207ac7472f901df8181cbe73a91966b008b7c88532552b75be042cd8aa1806b4a1737a1c041dfe8229c1c3879d8f950bac9d8abc3e185e72ea0d652cfc5c2157bd0579edf9c48917a1ed6a6e1573f77b8296b84aa4121fd6b817e564b49fdfd8b2e04415192035f5b222e2d6a5b31c95145872c1384d72d7e7ed4bce5ccae20ecbff9624839d7a3cab2588dbc2f84bc0e8a61a754365c1cb99e40a211b016b01d3b4bfb07eed0b66329a9eaa609295867d697d297b38ad66a6c2da358d36afe57c274f6ca70cea07bed9e8012b92429c4062e2202b70bf3c5f38867fe75aa04e1ea399bc4fb86afa6a4b42f844791f17725abb07a14b5670f06547f33d6782a3dfecf2784c8c33d0dd0d58be4fc357e2a83b0e4dde4dab078421531e56260a959296e307865f98e384f79a8c31d6c151c2eabd1e6eae65a649c27bd67251cb699b949ab5ca05a888c0e86f6ff3d8bfd9c8d731c763bdda61067f48b2a50a2d1ee89b33ca21db5734c2d7ba4487c685665bcad7462f1eb6e0ee8562a9549f1dfdb78c45246c4fb138c6a7232d40fa88fe3d02ccf45736dc75e033a082ef38e29a8c294438c38b1eb150d9b9f12a1aaccd65a6a57192d0699127d6eeaf8af4f58b1966075f0ac4a361f0927fe2730ae83966adbe8eb819a4e0559d470d0d5585945925610fb95b1596b80580aaeadba62453813f969da9687089891aafd47ec05cf44474bba9d44ac5d97fc3ffa1a8bb6ca69e60d1c5a3e4dca28a33f916aff01882e3bee5fed6507f808d87857c59203bd031edb69555329900067bb59dbb85b1207caae3ee0fc153764a61292ea85e1b3ea5a25ebcd3de2716c51c4fafea19e044802e616771a5f27db4e2f1dc1bca35d6a120661f5d511538efa0646c9e7b36d9d5d6eb641d90d0b2a21d0028f9aaba9b3248734cbab2ab463bd41f8972424603a6e0c6c8e04e8e535aa1c5f6d6b475314473e84ad361d6c9463e6e8109f36fada9bbbe91d8d61bc40abd8462978a09d38c374fac7d9c9b4f4c50dcbd6509b4290cd2322c32564015ee7909f549267e4a639aa4657b16af8ab236abbc45ed89d91331ae73a90f9b1b18337b4269f54db6617defe4474ae188a3a55126418e2793f60b17eeafaba3b68a8b5f9b594c308b6513da66ae12afa8170d6ed02ca74eef69ee3d7ef04face4430eb03eacc3081bdb845c3f3480c1c8be3d9e80a14c3e08211deeeae0a4bb247f735c12f7dcb22b42ddfcaf02793a13c0d34917e6a15cccb9b8b6b5b830d60cd36be23b2df03e2186e44599c9c3ea932e889f61e463365f25f81278f5338393a59bd7f8394c0b2d357e4474934144fdac0d56c023f59d10650e95c3a21824ae838ac62516604f2a84ffdadd58c9b4a126a402238095419618b0939f5da663326279a1c7466346b6f6012968f8b84683b6715842e7e3b2979e9c5e3f843c678944a360b6691343207e94d47eed3a3771f9c7ce7037f51eb3cdc078b487b94b73f896286c0e8af4d54284c33193900140fd8798a510fd9555ec64dd257c44dab538c1f84a86410ac01f008bd6e770c935fef2e33f0ef9b74c80872e3079fa5a319cadef373c1df2dc7902e392dfcd474568788a0c03105fa5da28dcd2ff8209c79b465f924822718eba704e0be85130ec7898f99db0ef10aacc7ac2455b1d3a24f457b737b00f91ec0174a4e6571c5a48aff54bc21229809b4b96d5c61a95bef9d09de9628a69cc4e30cb2df314b751045ee7e754a04d3a14f16063f86e297c66be36dd0bce3b2083ee9bfd4e41f"}, {0x90, 0x88, 0x81, "cca19a7770b91257c783f076d14f70b76e731915af5adc7b3346ab9c8b0fcec3d36ad44f8fe322f8e2a65fa41c89afb1d7cf65122f887d4c5438d75c2b401a784b0f597d3a5ffba077ce1db8f3808f090da584c2bdf8cebd47e3e38102a1e01bd8424e6828bd1697a355d345cb028ca707b757b6b830dd6edd420c"}, {0x48, 0xff, 0x1, "3d1c0b803e348439bb4c9a48f7af5af3a10c50a267c398701eb7ce7ff4e4b853583fb38d7a650b8fafc3f18aa06c61ce5f86292e86883e"}, {0x98, 0x104, 0x0, "39ed444d3694845e84f54a97fdd19b5c003e73685f6f770d623fab4347031131544de7ec10936fa2dbc58ccaaef4d98c16f049a467bf114e281d58c923aee8a3c5004b9ac6bfc216d5aec74b7ae7c4c9c24a47d7a05a14a8959b5f979388de84adaf8e335fcc70a8f67099a24e631b1aafb3be7e15b8eacca9cb4556af1868c99e0bc7"}, {0x38, 0x107, 0x1000, "a64c58e26c6a55ec05e84a3a514304c9ad7417b40a8a2d63c615f2df485a927ea7d4243008"}], 0x11b8}}, {{&(0x7f0000002240)=@ax25={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000002380)=[{&(0x7f00000022c0)="da9882996da0bcfc05472e2bd54a", 0xe}, {&(0x7f0000002300)="710ec08ced6bf04bb2486de67d69018058b836d492401104e729641ca248686ba70c5ed833f52e257a94255f82b53fe8a2f0c362b456a491c44c62cbbfde28575e10644f36", 0x45}], 0x2, &(0x7f00000023c0)=[{0x68, 0x102, 0xfd31, "af68dc0f2967558c0f0f09bcb10d77c0eec1e2c9776a0ac55e0a0053331b24bf319e6455587eed705f0e2be4523946f30aaba58612fe28898051de4a650bf78a8e360485bc33d8fe62bbfd68d48dcfec389536bf"}], 0x68}}, {{&(0x7f0000002440)=@l2tp6={0xa, 0x0, 0x2, @loopback, 0x1ff, 0x4}, 0x80, &(0x7f0000003940)=[{&(0x7f00000024c0)="c9051b97a516cc774b7449002782cd5d983716a5d502403c38de4cf1aedfb9b66298626274eb440e78ccfa56fcbe0892e905a58c95f7e68d64b389408f6aa2903ff1637af5d404750fb8cbce75258ce602db5594ae624aecc2bac334030c00bfed2c48f842e25606a729f88387f9201b770d1a2c6b428615639406eefa353c39bb110e4a469e14eeca8f584e460f2d8f5833efe6cf8d265a5102f8d0f51b853e5d2426220eef053db0f0946d8b3fa8c2aa6728e5fb5ea18bfba4f709ab4094d8929f1909c99c36f0b47f2ce3c86e9a5b609c859f4df2a997", 0xd8}, {&(0x7f00000025c0)="706d6172b908e6bc1758e4f95f484ac9470723bc7923b5ec4402b8e5a7720fa9adff4060d782a4581a5711e09157566064f548ad38805ea07b2f399faafcf824d834864e3e068ea8af4724655c56e8910b6fc398a4830c63a7b82403acd717d7c2f09cec176d84e38b025c080b33b00b6badf9bf8e", 0x75}, {&(0x7f0000002640)="9ecb39d9ce2384d07fd80053efad18cd35dc08f5c89397def33de29f330f1f18b6f0fb224ba4d3e59c13cfd3cd43c942177280d81be6b0a3e1877dce", 0x3c}, {&(0x7f0000002680)="0d149174caea3896639dbf55cfba7dc4243b9917fa0dd8ba037828ae5159d19e362b09375322dff8580015989d80f5a0954d609083010db0e3e0ab9c04f68ce944aacd15ff01af93a78342d8d2e992f313d4121ac946848499ce04211e2a7e5c9625f3670e61b5d559d850c3d4caf0e3a4ae27cc3050b137", 0x78}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="380cd08cdf884a11e1130d26401ca3886f3bd38f1488444bd148dfeabe8d3e2e06a53bb59f0c03f70000d9920b2ee553c99429f60a2b69d8505696664477db40440815787702e51e7e971678f521686f852db0004bccad41c319e73bc5aba6af19c73ec7c84f705610523f1cbb8be28f2af338f57c44134ddbf8223211aa8a567eed35e595fd60d295303016a81e1e0b8bbaaa814250e2947acaa2c01096caf8a812", 0xa2}, {&(0x7f00000037c0)="f60acb1a0766a42d418a95851c2d647d367caff3eaa3e90ace9163dae706ada56941233a0def6944406356e11a82798dc2fd52214e8ed59f4fd2abe213f0f8e7c422220ec5c2ec41ff58ab8f32305f4dd53a5b3fff4fbf67eaea8d954498d85724c2040dca200a301ed3", 0x6a}, {&(0x7f0000003840)="4de10eba828b2b1106e0c18c5d31a6ae1362af4840d5c496b760bc2186b15a988dcc1686d359de1024b82c180eb603671104256fd32e9e070632743e99958b73bc0f890a740a27bd99ffb1d03496c698969d4bc977250c", 0x57}, {&(0x7f00000038c0)="6e42793a7c88ba74b0f6125b20124e09f31d27591288a8f11bafee43fcc8abaf2263923f13e822168e71a8ea9a01fae3968b39707ec42af396aae37ddab93adcda05c4d20e", 0x45}], 0x9, &(0x7f0000003a00)=[{0x88, 0x1, 0x95c1, "1c1d4f453256de615f37707870662081c5cb66473acc8e29ae24a92b532715d522843e286dfd5cf277260cf8477bccc03a2c3412c6a3f82e7f5a46581f6c633eeee7e4b4ac8787b0aeb5b20e9f7e18da6acbab27a264402553e70b7014e3af38df3a6ee9c15ef019bc63757226a6de5622e0e44bd9"}, {0x70, 0x110, 0x7, "2b4b7eb1f377b1772b3f1026e27352c3319a9b85092d32d0bd4f0eda40e1d2a25bff9b97d31c561d34e4da1b5559a4d19928ab259014486eeb9802d2ac717fe0b73d5980b3ed135bfaa45a38d970f0ed3c7fb31d85873f99932ef026fea3d6"}, {0xc0, 0x112, 0x8, "7af004fffbbe9e2ec576bf44eca696c2f4ff8780b4de9a4d8df3674381937b947009a9415203d08f6b986162930d4f009471e2faceee5456665bc9c61acffdbf405643c736dfe2c05664d420bce8c7ffb387bcd6f1ef8dd3b1a4233fdde0ab5fd3ac9cd0eda58990a26c1e6063a0712b99b984447279661e881035ec4add712f8f98286ec7f6fe32b16dfc6c3ce3ac7eef5bb3481e09bacf4e09a5066ee7068f8f1cf0657b701f8f8b9853ec4eb7b1c6"}, {0x20, 0x103, 0x6, "3afdf0c8802dae793a29ef3d0e"}, {0x98, 0x10d, 0x0, "ff53e5fcd8f36666d9df254c5423585ecb176e8453df530dcb2380b2d07246907458ff40a522f1b325469fc6a32fc0932e4a0338eaa48d7db8e41baf2cc03995c15734cb103f3669f854da07634200bb316654c13de97a9fa2a5c99e6426d09b648c7981864750a590d6faafb7d47439e1d7776df4cd72b1b4d1f8a2d6e27c38b5a30cb3ed0f"}, {0x1010, 0x110, 0x4, "b7eb85d0a6683235f97d326f74ad441aa6aef2b250b74101d1620a31f4aa92fa2beaee586fb9d9071f5338c47b96dccb20b6f0956a6999d624a4fb54fac3eac9f5fb831c6baa661685e9d57410d2deaf0e776f4dff74d667607c9db5998e88e30127b51863ac4d6051d8d3f1429128720929abf817794f6024878b188d1f655675c5e124cca7327db91659250446bdf662ec3646560484f76390d9b2e59853a5f29bc5ae4f2384e296aea0e41092358a4a9ed0bec0e39bedc8f5ca8219dd675b80dff1a1547fd8e4edddd90fb4809be9a4ad41f1d68efa9d4a23d63e97c189a00b2c9e0bcf8f3f2305ead6b5784b800a381186685e9932654ce8a7d6dd3bd6e468837331fc5f35599601620e425f444c42ab53c9523ae3c7a6022774c1787ed4853f0f54455e06429642450400e3ffe96187b3b5733fb699487696fffa5a789c22858b115153309889ab60d245e950be7b9a1fc3fa4c55c5e93285a661b55b6f527b95d0b09fe601011900e22712f5a66b125da263401e7defea0141b8388f5a2476261834fa26ce4f803bd33696da34a57f6ae892b4aec10cd507bfa175664d82fb3f22950db64be30b8ae922ef2fafafe45b0dbc8a2175ab16db4e5d4abb25c759f4ea1d074bbf026f5c430819304c5859d358072e5efe304100326e7f98096ef78d94ffa2b27a4f1a961dcf0b1988e1b14e8fbff5d5dee9a8199648a795844223b613e5167d4e1478a9e06b9f930bb079c2aa9bf4b41060fa4463c973c5990d8094ce68f5e0ad650a29f70f2604f7550b875ffad53500f14d17b93ee1ba7756555525662811ae3c1f581338b0fe85500f9543afe8f532731738e17b449e08a9016ac52b2d824e421ca1fa54a6cf021d442de587f2a1b8640b4bf58dba0d21915a6bcc5b3c483dd127ae7cd89504b011140b9081cdd14a734ad435972160cf30289cd692f9ca34aae24917917f2474c4f1483e966b7516c781c02478abd230d765fdbeb90aeb734e7e071ee086bdc54f73510b636d6870468e87e9636e6fa611397d9f0039ab18158a6705792c76faf5a43ee499839a160b29cd7cb622b10c23a6609eb343d86c8c8a8c2a297e31df2312e176f780034643dffac2bed3fb13eba11a172973d9a1ed3a09f8e3645d69474f716b5d63922ad13c48c0b998c70f23f41656ef39f93aebc8028f05bfebf389dcbdb3bf998d5d97e3f5364e0e946708c44191a3e5428c34d5257a40c091e1b3fdcabd000ff4285169906372d27a54412d9973448d3438faa9104bd98ca46ea8450fde0b11d590b46827a9d7503126359c255de4b2655af5d41c191fe8dfdb694feb9722e7bfb3663088abccedef77f059c1f9de7d6c7630c863e8366d523e42340760ffd788da5d4fbfc0566fe0e13b758c8606893cb7f08262be803ea314267c211053aefab7ee1c49087adf79f8f635c6d3f250ce7d219512f06be5d261f07fb41d29d5b9838368d9ea75e5a4f93917fdfe7e434006b59f2303dbee1f546dbefa224688710ae3ee6c78787b6ecb61d4e4710d10dde245675918ccd221a8c17284d64bc517e3e3045e4b369b432e163ff0a3c93de7a2d640c461d6e21944e1cb6edc8657f5a2867939eeee06599f6148cc32b2e0bc59327a61a08a76cad060c88d9349798e268512634e2d9303fac3fd6b76061cc012af0d7b5f59d5d68236cae0d546d9e5d9712eb6985ebef089dcd41517c4a43601d0072bdc529bef0cbb1d3f49ec7f35d0817cbdf0a3448ee398ad00629d471559020ccb98555b1ff2f647060d54d7d3af02c4b7f9dfe00ed33dc252b4091ee2a59a3833da889f543eea3f745d3f676696fee2b98b9b3e16aac7ed3d6e27144807018b86b97032aaf36d8a23616be6b387943d8987714b95318deb5efa5bf1a186944af4e6a4ef76646f9fb97ef4a726e80b12e4103a7edf454f2111381a2331a46e702f88ca677a6640f7b6e724cc832b81d1038234d2f604e6fce2984f5ff9e3dc90711c534c6fa0eed3b32995440a8e967b3b1b385186eec5761f7ccc43b379ee88a1680d18878dd681b12a0f947a57f5a443ca6eed3cde46775b83ba88651aaf97a9f658ef9fa487a6911526b8cc876b606b9dafcdf0313a559183d721b7307a91c7967d47b23728a88b0c7473d8c9c129b5a2e88781558e1ba4eac0ba32c9841fddd7e2bebb78232959759bc8d248d522e300c877174498ac3852dbabdd975e61caf0f9ed7c58dece4e3d45afefa657c14bdd295114e568f9112aeaa79ea409f7fb09c6155fbbadaffbb1a856a98fa2de536fc51ee76c993673abcec325487e1e024ff60de0cfc4033e3a0dd3a7b40d475aa46d6e61b47e3ef5342b64d339cba5d4de71532663c3e01e2921c169dcd24908ea98c117d174d344c13a73274ff5f09308ed5afa4860494d6b41e326967e4dd3d70350479dccc7257a67f7365098b9061aac88321ea9b554e2dbb02bec93e88597fdb28f01ec53d944f6e312ff02cd00f5147a9d50fac7e8dafc65473d42dddff42a81417635931e9229358588d73c890e78be0ab8206ef1ebc3a693a4f73ab83c95d248984c39401e1ad2caa25000ff359cb784d361d7f524d2107c5e131c526d3488d01506df31eb845b08f1b22359a13849430a2c6f076502be57a168c1f1dbe9d4e89d7e006305cf8bfb43c7d6b9db0e195dd2ac0d94b2123559232a38a99d8d0cb7a7bd0271664f56dba8409401cad61761ce3ea29f611bdfeb6877542c462a0684b44e21db791ac247fe27c62fadd90e2587702e513969605c3262d900ce87cd9f496a7182678f73889406add59e3f7eb7879482af4947eb22b8219b3c3aeca28d191a8c4ea441d493077c0504d8e46d527ed5a07d6f890071a87b3ee839479b6863c71a44b41db0df36c5e345ed0db10e18f8e6bd2e26a38d7a2c1b06f7fcb59d51307cf2ab7329c0423ba031112b3577cf3fde4f67d7e7593603bc9eaf028ce9be28f25bcc458a40f7f0dbb3cfb4e7bff9bd92eca65e5d25ca1b67c54228ba9ed126d159c71f3588dcc14698d39aa54c0cc6d876ffcea2d4d166abd78153265ef57ee45f6f5ef0ccb785f429a38b0a6496760b3fb7153efd32698b722a1cebfccac74fcc8a09ba83f45f735ef35b8ac232634ad384cfc352eadd7a35f5ccc17bbebde4d920fc8fa8db506429f6db689c634da8ac903b362896dc6152420ca13235c58ab7daad1a25ed5df67aad8d120550f938b56f65abb1655185ef9c99fb3ec7511962b7e2b05067990e47d69441e3c9ad1485869844475d8399bb493e544fdadf1d6125255df425343235b27f2fd34706845ecd5b9e16532ac1382ec3ba3764231823454ae9e75c0404b2b329a0dde38610cd58328dc782d4d0d0dd50f65df58cdc2415dce3e5fc06a5763e013273bf4017bc1d6eb2d9801779832ea6e23d994507f690d1994425d265e17339d7f9c0cc7309327fdb4fe0d3d7625e2b5c1f6a75a8f7c4131e30af55c32cab735ff52939ceb4cf49615becb6504e47c744274032c750a30fcb0719c19656440f299327cb5296ec5556b2d213fa02b602930f5a66be0ffbe716df682add2c285a6e6f71d865ecd3b999829c428a3da4b412c65471d5b1d032adaad92b8133c9abbf83aff5a353cc173fe3b34199ddcea3338b4e3b2f7b14f921d94e0b5938fbc8f5dce35d8e66a810481515c1716d21550c48edd45428a0a2efa693592f991d9b16390c05a088ac46bc92629bed3df94f9103a4fdcac5ea0811c38d661abdde8f5e0e56db4a0a4bb9695e12170d9c73f39e83a33b32c230472ef41421488aae641db27c78946ecd782bd047e17115e400229621b328404ebcc0d23fbc86a61645eb55ddfc614e552138e84c171b05556612311bfa9396d404d13d1c334e24e8ed1451ee19a8c71e45e39c6dc59918a96a6d1e120c2bc2f4dc220d38c73c9d8ec167298666a576253ae44949f39c084813573936c1a4eff68d3d8ee20fa07d992e77442a9f44598194849887536177ff8b267d4193cfc34f5bc01a33186a90b9364097d8f6e7bfb64b21b7b5af5d9c449cfa2ba26e156914c33536720c3b1ffa345b5d422589c48d4b5455f81848cb3319dadd8a2667576a5c96232b71e2c4d13b335bb0b982515d2f506e47272264fc32de39ee733c6f30a8ad8f93454dc01ca2c7e68a2799001ecf5d821fd55a774e699b81d5959bd9b9b75f88d44b93253e84dd051d31808072dc8443a6108c64f70ca3e0e2b921772b390635eff18e5a0788d9d17232b6b00486de525496b67ccaca2aae97f50f3999b889096fd3a60c5181632deb86155d42cf2b03e110299ac9eae0d29f2e5d6a89446b939f0c20477ca80980720576743857e82944335de845dd55b876f2f0e8684d9b9d5a1eaaa586281f4e49932abb18a50e932d2e1a21934c469bfd9706e3a7cd2a89e193db86f6b30b6c03075ae822ad46d278fd49dfd40dfbafce17d75af63bf62d817a4b1277f29c89d32d79346faa404a65c54fb16705c68196e035974a7e089e79a15f1d2cf10fc2967dd9e58078bdc35005b26f1529ebb4badf4f39a30e76f0db4e6f771364a2a786751d481f764ac223c1898d74d0888203e8f76b8983a012aac1ce6af4551bf9bc2cc46c309498194dfd8e014da50b7c0da5f5e6f8327bf3739d2165e1e87ca7272b64ddb1c588d0eae0e88a0d741784e013c6641a02a26bbf68b740e0b43fbecf017db38bc12db7abba1275ad8eda257a069b4a780a94055d925745d55a2f44d11fba0e2d4ce90862f337530ff346315a75551e983bb3465a6acca9e2fb76cc01a20d2b1d8b16737d7e9c23994dec422da8f750755f3b29e1197be20e4b51264f137059ee7ad37e81e2f14a9d9d70dd1ca2f1c98f2fc47362d05608e8a89c9f787da0ece36b36be4dd63da4ba261db131abe6eda9b5ae30cf8c24ada370862dda44a3dd85f8646e09241aa390ee422dceeecc88a5b69a763306865bc8a72b393b8639549ad9f2e73acc25ca9dd38e0a6cf99cf415dd242c5e9abdaaa4158c96a3a7a614b556b59ac8cd156fcf7c69513cc3051d94114d5d1c7e05270fea7a34b6619339409e46497c4bccae4d83952177f078a8ec92f71ca8391519fd86604c5831b7a0d0575ce99c130f22100009c639e05853c7b65559dc090089d4722131b76fd297eec33e945783059593c3cd15fb5e0c966f881fb6809dc618cca3ce5f48a31d2fa85e897f5c3f01c1c06303c8193ffcd9a689182d9c2b877773bdebba71475d0a6f9ec3f2a27df1e9552f4399367e6047b90ef51751285d3457c69321b98c94089af087272e196bf8ba9f205545b29e9a187b25e5e9553691962c77155b47223c32e500ff3b83b7ee608f29c119701e83d3a2776b8999ea51bcac96258746df1d6cd3a074311009d3d490c94675f3e149232b4690e8384429d47224f0c75a0b2593dfd3711fa50b79f8976c7d1dadcc1cbce0b0f00a4ab6c103687d524e3b5da83d85ab4419363b63bf09036ef24e18afd24c4acf87bd79f00a8da830f29dbe0a194f874039c5930dfdecf702447ed3ec9a912ffdfd0ec3e54ad3829c16781198589c3fca71921373a7a6c84865e3ed963a3d63e612b384d71bf0a8d4e7d34e292690927b21d47f976bb9ef462fc765f54522e51d5d6e26d4e4cbfc443b43aa7ed2d0817296ee4cf7824408c0cab0dd0968d6196940a9fb79430cc57069b60c8c15ecf9a7c8daa0d42e060a94b84c10b26cf75963cf928b9f96fc2ea13fba5c01ef0a60c442c73ea478d95ec7d1"}, {0xd0, 0x118, 0x9, "ad445abda48b19d16641879a50b403dbd517169ff2df93e2b0dc2d550777a500d32123d0a803560266f5aec8eabc2f1453949272ea4beb30728661b10adfd7e1e0784ba0a7159862cd0587e6139d9d2d486d74dee5f3f8bb521b66aca3be3eeca2f77721ad63d8b7148be0daab49c9bc1069e0f5fa8c8f21fe2b4fb9e80486ab11fa08f3207a1d83beed962700fa21d695d824b6e1b5402715e07ce96f84215d53098deba7b5025f54b984b73ca16204b998b2e1f7a348d91a07f18601"}], 0x1350}}], 0x5, 0x20044020) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000004ec0)={0x1, 0x2, 0x1cb6f536, 0x5, 0x7fffffff, 0x8}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004f00), 0x98040, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000004f80), r7) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000005040)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_usb_connect(0x5, 0xab3, &(0x7f0000005080)={{0x12, 0x1, 0x91, 0x2d, 0xb9, 0xa9, 0x8, 0x4b3, 0x454c, 0x6be6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa1, 0x4, 0x2, 0x5, 0xc403415582704fc5, 0x3, "", [{{0x9, 0x4, 0x1d, 0x3c, 0x4, 0x36, 0xe9, 0x8b, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x35, 0x1, {0x22, 0x34}}], [{{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xf0, 0x80, 0x7, [@generic={0x3a, 0x22, "69069560accb1fd1a7ca1ed3e79157b8a03a967eda74cbc5c8316edfa592c483dc84e6928412d51ab962b6c9d6dc0f365e45bfc3780c23e4"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x2, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x2}, @generic={0xc2, 0x5, "185a84443922affa7c87f54f71499eda080a0cf8945e96ea22bd268d140a531f53ecd07e2f665cbebf35e173aa012061b5bba58c7ed160d2def04a034ceabb7f54016549a03ac665a7120c7b6221ba26d360aef208dd9d79dabf95cb7e0776b12e8214db8891b30c81702fc07d3f35cab6b3831326b80f6ab0e9cbd389ffc2f1ab6367d2fdd9146f322d182e5cc9a6f14bb82816f2a196c5205973eeaa6ec02e128ec2c21a81e525c56e926714a75331cf7ec52faca9b6d6d1fb076cc54741c4"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xa, 0xc1, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x1, 0x7, 0x7, [@generic={0x19, 0x4, "54c1323c46e456408c7c1842b86799b96d4555be450a38"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2a, 0x8}]}}]}}, {{0x9, 0x4, 0x8, 0x3, 0xa, 0xd, 0x7c, 0xbb, 0x5, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "fc5b55b790"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xab, 0xb, 0xa}, [@country_functional={0x12, 0x24, 0x7, 0x6, 0x80, [0xff, 0x7ff, 0x81, 0x40, 0x4, 0xfffb]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x1, 0xe1d}]}, @generic={0xfd, 0x30, "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"}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0x4, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0xc6, 0x5, 0x7, [@generic={0xa8, 0x7, "a7eac2e78113322be6df1fbd093fe2566dce64acc462b2f00018e82e348fd6c66744a1e5eef32ee6af5b34b5c9a41d907f3a26e0c9084b4d91243bd400b33d1e3964db8cec32fa8720d8402770e51726a7963cc739942c2783832c9c894bb76a9bb0d926d4998af1c6abe6022012e306fe7cfa56565f4a265343ebff3d91af99ca4e5349e51bfdf5bddba29c583eb15e886e4d72717426c26b882eb4c4634485c0e44307b06b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x8, 0x8, 0x40}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0xff, 0x1, 0x9}}, {{0x9, 0x5, 0xf, 0x9, 0x8, 0x1, 0x2, 0xc}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd8, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x37, 0x0, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x84}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xba, 0x4e, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x9, 0xba, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x5, 0x43, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x3}]}}]}}, {{0x9, 0x4, 0xc5, 0x0, 0xf, 0x8a, 0x6, 0xcd, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x13, 0xc2, 0x8}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xac, 0x0, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x3, 0x7, 0x9}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x7, 0x7, 0xd2}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x1, 0xa, 0x8, [@generic={0x3f, 0xa, "55a0255896f24ab07117305942c7b45e1f155e0d227bde81ea915dbcaeff13a27f76c7e6dac935cf5813b5b90de8b2a6556fb88344127f15ff952ff0ea"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xe4, 0xa, 0x4, [@generic={0x5e, 0x0, "6e91a6f9c37dc1b798cfb29ad6eccd54b7fe4376f2cfda01e37a6b8d61b70faa073b7fad3aa237648180c1b29fde40876ba929e5e2545be4ade095928dfb73d0df5c0f46b47c04631de09b7a17113bbac5075154036b47fde940e5f3"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x240, 0x6, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xa81}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0xd5, 0xd, 0xfc}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7f, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x6, 0x1, 0x9, [@generic={0x88, 0x31, "a755aac24ed31a4201d6050aaff87ce12659f706f9fdba6d1369e42328d6e938bc7c27f63aa48960efc0f45a4995f7136a334fe9a6495280cb522a8b38dcbaf87d7c14f5f240aba65e4e456554caec0a8a343d4291d4ca1f7f2c14e703255c20784dbcf1ea0db6caefb746d4dff4cb1adc306dab2f1092be1eeb84c7427316acbe7f93685274"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x5, 0x5, 0x1, [@generic={0x99, 0x6, "3a6e005a33a033c584da44de078de3255882513dd194d947eecc768cd7aab478bebe34a5ae7108c84170a5638243c0f15d7c486bff5529eb48d0c82be133f9361cc7a555098ba6b60bbadec2392d6ee530d8a74e8902d32f9167327c330ee1ffac527f1caa4c6fc66b09cf714ef8c4ec6762c65ef89083a5d0bfecd4c6ef3d6b7c9add35bf9bdf11ece0797eb60976ef55244a331f47aa"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x3}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x41, 0xc, 0x6, [@generic={0x9f, 0x9, "dd90cbd332b26240acdbc5e36ced5969b2ca23a06c4579e15257332929bd4e34c9dd6cffd2aa5094f92f195ac776aeec07b1e09e3fe4257f11a43c604e5490ba8643c252252061fb2b1f53bacb35781ad8095f5261ffae976683127083d045b0f93120dffb1283ab172bc308cb85e33380604fcc15a620d187bdffc459b7dd5ae56f09b7e84de6cc3cbf610596c5f7837aae122f24523802db03c2cf02"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0xd, 0x2}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x80, 0x3, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3a, 0x4}]}}]}}, {{0x9, 0x4, 0x45, 0x80, 0xd, 0xff, 0x1, 0x3, 0x9, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "acea"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x100, 0xf, 0x7, 0xa}, {0x6, 0x24, 0x1a, 0x5}, [@country_functional={0x8, 0x24, 0x7, 0x10, 0xc, [0xfff7]}, @mbim_extended={0x8, 0x24, 0x1c, 0xfa, 0x4, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "b001bf97"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xea, 0x9, 0x200, 0x7}, {0x6, 0x24, 0x1a, 0xffff, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x7fff, 0x7ff, 0xd, 0x7, 0x3, 0x4}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x70, 0x40, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x8, 0xf, 0x3}, @dmm={0x7, 0x24, 0x14, 0x8, 0x1}]}], [{{0x9, 0x5, 0x9, 0x6, 0x40, 0x7, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x2, 0x7, 0x7, [@generic={0x65, 0x23, "3fd650492dbb8945c209dbebbbaebf64f8d6fc9661299485c41c784e2d62270a0ea5a54bf4deef97096f0cee5ca11eef174290a0fe7b9dfdb72f9083535690ca591ce1a1796486e5d238c02a501a58f57c086fb0356a5f0df78ea824ce81e1293d897a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xb4b1}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x4, 0x8}}, {{0x9, 0x5, 0x80, 0x1, 0x4a0, 0x1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7ff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xbd, 0x63, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xedbf}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0x81, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x7fff}, @generic={0x33, 0x24, "6d496020e436d158b11b532c378dd2638bb5ed96fb9e20852541851f9d412289d58cb8d64fd017eac97d79b4fbda888290"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x2, 0x80, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x3}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x0, 0x1a, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xe6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x2}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x1, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x90, 0xd7b}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x5, 0x0, 0xfd, [@generic={0xf1, 0x8, "4f08d5a18e9c4f35f6145e8d0d426b9b4bd468a50488c468ae65eaed093c7b9617ce3f979404a1b9c7758ed3c898761ff1203d619b43c78942b7491633c2cf03b77af819049acb29f8f0e315ef4b1b72b709af30d3d7d03fd8e04ac9a2808977fb6c3716eecc6782c623c76c6b02dc67ea9ecdf629667af14df10ab527135b9f508e3b48768e0429343640590139284fe895887651307062429d5822882307ba1c70387a4180e8686bac46eb6718a3658d1e5354bb4ba2a9ca5f8299ac385f7d87c66621c04dae2e33d57584bc19a8d744f11d80997a2118d6086a88e5b633d48e947d18fb999f8a8d1c64d827203a"}, @generic={0xe0, 0x22, "5b15d6c67e1315bcffd02c14cc64c827be35308ad8081245920c206186bde1c986c2c977ea43fad966396b598ee689a862a9d1efbf79c212cb662fb809150eb99c9450f71f1f29fc4492ee73083a776719a5d40646bafb6c318d6429a6d13021d399295b089073545f3a5e939af78456a5a67293f67adf7b7615199cb5d2d55b1be649d107ed0eeb8df415cfb0b0bb1a881595a3eb5bed415a88b5778e00c2ebb458d1b314e0ae09418cd05f6bc64b739f016bd5b8deb1568798601f8f9bce4943d0311860279fac7c01414610563d9b946e5404c04f92df0d2c81b508f3"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0xf9, 0x2, 0x5, [@generic={0x4, 0x11, "ee48"}]}}]}}]}}]}}, &(0x7f0000006080)={0xa, &(0x7f0000005b40)={0xa, 0x6, 0x310, 0x7, 0x6, 0x5, 0x40, 0x3}, 0xc4, &(0x7f0000005b80)={0x5, 0xf, 0xc4, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0x2, 0xa, 0x6}, @generic={0x12, 0x10, 0x2, "9722bbed040b90609d33f676924455"}, @generic={0x6e, 0x10, 0xb, "1c99a0632ddcae32776af377445c405facd7ae2af1f8d481ce7b28ccebe4a43be7a35ffc21c14b3c013342978b4c7f4b357839682952f3d0760d5b02510f66979d84620407961acf376f76d02ee986790a2cd4aa32309b68ca2c97f790c48b71be719e61c4356dd8905814"}, @ssp_cap={0x24, 0x10, 0xa, 0xf0, 0x6, 0x1, 0x0, 0xca, [0x3f00, 0xff00, 0xf0, 0x30, 0xc0, 0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0xc8, "1e1163069133604d38d8a93d2bd05263"}]}, 0x8, [{0x4, &(0x7f0000005c80)=@lang_id={0x4, 0x3, 0x44d}}, {0x4e, &(0x7f0000005cc0)=@string={0x4e, 0x3, "b0fadddc9be9c39a0ca727e15fe3fa632462480b8d30eb21cb1d97d5fa50d96046c2dcc1fd5ec53f740f247387943cc39da7c0ca213bb1e15b90e93046a666d21a5c7f5dfe28a0ab4aa0850e"}}, {0xea, &(0x7f0000005d40)=@string={0xea, 0x3, "5b5c20ded6f8b7983d31bf1342b058b4de3e6b908648e3b61e3759389f8a924d91fbace97fe72a9059447f296465191505bbe512f6caee83abe9963e859f20a8a25106cc4457a48783a889ac64b10c2f82b6f4780e7a103b398debdd506d0656775be74462779b8fb75f311e35d717d63312c7745d5c4c0bbd08cf2f66da174a31471c057dafe65805af026625490e4269c17809359cb782737812900ad34eab68108d37c791aa184c264e26f79f11fb23bf9a8950225bef79e36cbf5198ba87be7799e49f94061597aef5a77331a1e998a7bf7227ec2f4d3f323a086c9ef51b062f5c365bba9d8a"}}, {0xad, &(0x7f0000005e40)=@string={0xad, 0x3, "030c45d4b55d1712a34bfb0373f9c4fe11cea3d696e263b66bc11162887ec5698e7224538fff2475f8b3a59d48c21fb175a7ce4723931cc141bc73d9aead75d23fedbf2a402e2354735f6eed99a32b0112900b0ed93cb48e1e97d96750247de1e59b416aed8d070086ef2fd303f4bf249d1a368176866b86697c614ba0258861b3710ded912a1fb4d947ca793dd83b4a09814a07ce7a91a0f454ddd0487a8ea0053cdc809f20ad5d91938d"}}, {0x50, &(0x7f0000005f00)=@string={0x50, 0x3, "fe442cd6c240574a2891753c386857f6b5cea7516662ae96bbb59af4679bd6abefc5f641e213046ecc8b335939e40e614ff1b18abc11d5871c6062662a1f4c533eb21dfea16a4ed45b47fe05cfab"}}, {0x4, &(0x7f0000005f80)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000005fc0)=@lang_id={0x4, 0x3, 0x426}}, {0x47, &(0x7f0000006000)=@string={0x47, 0x3, "b1ec2fdd9838d8c7c9cc33a449dce1e25fc9c2c981b332cb275077693944e861c0ccb2d56d5e1d301097c4d03c734212f812bb6aab0920f2e101b5cb974c3641b295dc9480"}}]}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000006400)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000063c0)={&(0x7f0000006140)={0x24c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb49}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9a6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6637264e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000006540)={&(0x7f0000006440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006500)={&(0x7f00000064c0)={0x2c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r11 = fspick(0xffffffffffffff9c, &(0x7f0000006580)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000006680)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x42002000}, 0xc, &(0x7f0000006640)={&(0x7f0000006600)={0x30, r8, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6, 0x1000, 0x2, 0xfff}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80c4}, 0x40) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000066c0), 0x20080, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000006700)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000006740)={0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r12, 0xc06864b8, &(0x7f0000006780)={0x0, 0xffffffff, 0x89c0, 0x6, 0x0, [r13, r14], [0x1000, 0x52, 0x3, 0x5], [0x2, 0x7, 0x9, 0x4], [0xff, 0x5b800000000000, 0x2]}) syz_open_dev$media(&(0x7f0000006800), 0x1, 0x640840) 1.095450886s ago: executing program 1 (id=348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) stat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000d100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 0s ago: executing program 1 (id=349): syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000004) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)) kernel console output (not intermixed with test programs): 7 [ 138.359438][ C1] EXT4-fs (loop1): initial error at time 1782191664: ext4_validate_block_bitmap:441 [ 138.359478][ C1] EXT4-fs (loop1): last error at time 1782191664: ext4_validate_block_bitmap:441 [ 138.617586][ T5946] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 138.617615][ T5946] loop1: lost filesystem error report for type 5 error -117 [ 138.790556][ T5946] EXT4-fs (loop1): 1 truncate cleaned up [ 138.841813][ T5946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.535177][ T5963] tipc: Started in network mode [ 139.535207][ T5963] tipc: Node identity 4, cluster identity 4711 [ 139.535223][ T5963] tipc: Node number set to 4 [ 140.540375][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.452940][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 142.509709][ T5978] loop2: detected capacity change from 0 to 131072 [ 142.569238][ T5978] F2FS-fs (loop2): invalid crc value [ 142.790163][ T5978] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 142.811886][ T5978] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 142.869776][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 143.103946][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.362216][ T5993] capability: warning: `syz.4.41' uses 32-bit capabilities (legacy support in use) [ 143.598435][ T5990] loop1: detected capacity change from 0 to 64 [ 143.834433][ T822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.922326][ T5996] capability: warning: `syz.0.43' uses deprecated v2 capabilities in a way that may be insecure [ 144.072214][ T822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.072257][ T822] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 144.072280][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.179560][ T822] usb 5-1: config 0 descriptor?? [ 144.439228][ T822] (null): keene_cmd_main failed (-71) [ 144.789690][ T822] video4linux radio48: keene_cmd_main failed (-71) [ 144.789717][ T822] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 144.878974][ T822] usb 5-1: USB disconnect, device number 2 [ 145.253779][ T5999] netlink: 192 bytes leftover after parsing attributes in process `syz.3.45'. [ 145.326089][ T5743] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.711156][ T6010] loop1: detected capacity change from 0 to 256 [ 145.786040][ T5743] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.786127][ T5743] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 145.798092][ T5743] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 145.798136][ T5743] usb 1-1: can't read configurations, error -71 [ 146.332736][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 146.332759][ T38] audit: type=1326 audit(1782191672.373:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 146.392897][ T38] audit: type=1326 audit(1782191672.393:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 146.392954][ T38] audit: type=1326 audit(1782191672.443:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 146.488442][ T6016] FAULT_INJECTION: forcing a failure. [ 146.488442][ T6016] name failslab, interval 1, probability 0, space 0, times 1 [ 146.488474][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.488496][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.488507][ T6016] Call Trace: [ 146.488514][ T6016] [ 146.488523][ T6016] dump_stack_lvl+0xe8/0x150 [ 146.488556][ T6016] should_fail_ex+0x467/0x600 [ 146.488587][ T6016] should_failslab+0xa8/0x100 [ 146.488614][ T6016] kmem_cache_alloc_node_noprof+0xae/0x670 [ 146.488637][ T6016] ? __alloc_skb+0x1d7/0x7a0 [ 146.488662][ T6016] ? __alloc_skb+0x1d7/0x7a0 [ 146.488691][ T6016] __alloc_skb+0x1d7/0x7a0 [ 146.488722][ T6016] audit_log_start+0x1bb/0xa30 [ 146.488749][ T6016] ? __pfx_audit_log_start+0x10/0x10 [ 146.488773][ T6016] ? get_pid_task+0x20/0x1f0 [ 146.488809][ T6016] ? get_pid_task+0x20/0x1f0 [ 146.488834][ T6016] ? get_pid_task+0x20/0x1f0 [ 146.488870][ T6016] audit_seccomp+0x63/0x190 [ 146.488909][ T6016] __seccomp_filter+0xd14/0x1e00 [ 146.488956][ T6016] ? __pfx___seccomp_filter+0x10/0x10 [ 146.488988][ T6016] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.489019][ T6016] ? rt_mutex_slowunlock+0x219/0x460 [ 146.489044][ T6016] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 146.489075][ T6016] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 146.489108][ T6016] ? fput+0xa0/0xd0 [ 146.489137][ T6016] ? __pfx_ksys_write+0x10/0x10 [ 146.489172][ T6016] ? __secure_computing+0xe7/0x2b0 [ 146.489207][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.489232][ T6016] do_syscall_64+0x10e/0x580 [ 146.489263][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.489287][ T6016] ? clear_bhb_loop+0x40/0x90 [ 146.489313][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.489334][ T6016] RIP: 0033:0x7f2effbdce59 [ 146.489354][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.489372][ T6016] RSP: 002b:00007f2efde36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 146.489395][ T6016] RAX: ffffffffffffffda RBX: 00007f2effe55fa0 RCX: 00007f2effbdce59 [ 146.489409][ T6016] RDX: 0000000000008971 RSI: 0000000000000105 RDI: ffffffffffffffff [ 146.489423][ T6016] RBP: 00007f2efde36090 R08: 0000000000000000 R09: 0000000000000000 [ 146.489435][ T6016] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 146.489449][ T6016] R13: 00007f2effe56038 R14: 00007f2effe55fa0 R15: 00007ffc3c9dd548 [ 146.489480][ T6016] [ 146.489506][ T6016] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 146.489521][ T6016] audit: out of memory in audit_log_start [ 146.494489][ T38] audit: type=1326 audit(1782191672.443:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 146.494550][ T38] audit: type=1326 audit(1782191672.523:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 146.494600][ T38] audit: type=1326 audit(1782191672.523:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 146.494648][ T38] audit: type=1326 audit(1782191672.553:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 146.494697][ T38] audit: type=1326 audit(1782191672.553:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.48" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2effbdce59 code=0x7ffc0000 [ 147.885544][ T5743] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.062549][ T5743] usb 1-1: device descriptor read/64, error -71 [ 148.071702][ T6026] loop4: detected capacity change from 0 to 512 [ 148.247342][ T6026] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.366973][ T6026] EXT4-fs (loop4): 1 truncate cleaned up [ 148.392353][ T6026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.426263][ T5743] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.574925][ T5743] usb 1-1: device descriptor read/64, error -71 [ 148.686151][ T5743] usb usb1-port1: attempt power cycle [ 149.036697][ T5743] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.066281][ T5743] usb 1-1: device descriptor read/8, error -71 [ 149.605647][ T6037] loop1: detected capacity change from 0 to 32768 [ 149.607723][ T6037] BTRFS warning: excessive commit interval 3581, use with care [ 149.664103][ T6037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.56 (6037) [ 149.720246][ T6037] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.720286][ T6037] BTRFS info (device loop1): using crc32c checksum algorithm [ 149.764410][ T5743] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.785716][ T5743] usb 1-1: device descriptor read/8, error -71 [ 149.893972][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.908514][ T5743] usb usb1-port1: unable to enumerate USB device [ 150.059908][ T6037] BTRFS info (device loop1): enabling ssd optimizations [ 150.059945][ T6037] BTRFS info (device loop1): turning on flush-on-commit [ 150.059991][ T6037] BTRFS info (device loop1): enabling free space tree [ 150.060027][ T6037] BTRFS info (device loop1): force zlib compression, level 3 [ 150.060050][ T6037] BTRFS info (device loop1): max_inline set to 4096 [ 150.434345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.618023][ T5613] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.161310][ T6059] loop2: detected capacity change from 0 to 7 [ 152.027292][ T6059] Dev loop2: unable to read RDB block 7 [ 152.027343][ T6059] loop2: unable to read partition table [ 152.027537][ T6059] loop2: partition table beyond EOD, truncated [ 152.027581][ T6059] loop_reread_partitions: partition scan of loop2 (被x <) failed (rc=-5) [ 152.848503][ T6069] tipc: Started in network mode [ 152.848535][ T6069] tipc: Node identity 4, cluster identity 4711 [ 152.848550][ T6069] tipc: Node number set to 4 [ 155.362235][ T6080] FAULT_INJECTION: forcing a failure. [ 155.362235][ T6080] name failslab, interval 1, probability 0, space 0, times 0 [ 155.362274][ T6080] CPU: 1 UID: 0 PID: 6080 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.362299][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.362312][ T6080] Call Trace: [ 155.362321][ T6080] [ 155.362331][ T6080] dump_stack_lvl+0xe8/0x150 [ 155.362364][ T6080] should_fail_ex+0x467/0x600 [ 155.362400][ T6080] should_failslab+0xa8/0x100 [ 155.362431][ T6080] kmem_cache_alloc_noprof+0xa4/0x650 [ 155.362455][ T6080] ? skb_clone+0x212/0x3a0 [ 155.362489][ T6080] ? skb_clone+0x212/0x3a0 [ 155.362531][ T6080] skb_clone+0x212/0x3a0 [ 155.362571][ T6080] __netlink_deliver_tap+0x410/0x880 [ 155.362606][ T6080] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.362650][ T6080] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.362687][ T6080] netlink_deliver_tap+0x19c/0x1b0 [ 155.362723][ T6080] netlink_unicast+0x7b8/0x990 [ 155.362767][ T6080] netlink_sendmsg+0x813/0xb40 [ 155.362813][ T6080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.362852][ T6080] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 155.362901][ T6080] ? aa_sock_msg_perm+0x122/0x200 [ 155.362934][ T6080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.362968][ T6080] sock_sendmsg_nosec+0x13a/0x180 [ 155.363002][ T6080] ____sys_sendmsg+0x565/0x870 [ 155.363036][ T6080] ? __might_fault+0xaf/0x130 [ 155.363078][ T6080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.363122][ T6080] ? import_iovec+0x73/0xa0 [ 155.363148][ T6080] ___sys_sendmsg+0x2a5/0x360 [ 155.363181][ T6080] ? __lock_acquire+0x683/0x2ce0 [ 155.363218][ T6080] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.363290][ T6080] ? __fget_files+0x2a/0x420 [ 155.363315][ T6080] ? __fget_files+0x3a8/0x420 [ 155.363351][ T6080] __x64_sys_sendmsg+0x1b7/0x290 [ 155.363390][ T6080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.363443][ T6080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.363466][ T6080] do_syscall_64+0x174/0x580 [ 155.363494][ T6080] ? trace_irq_disable+0x3b/0x140 [ 155.363519][ T6080] ? clear_bhb_loop+0x40/0x90 [ 155.363541][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.363560][ T6080] RIP: 0033:0x7f3c76efce59 [ 155.363580][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.363595][ T6080] RSP: 002b:00007f3c7514e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.363615][ T6080] RAX: ffffffffffffffda RBX: 00007f3c77175fa0 RCX: 00007f3c76efce59 [ 155.363628][ T6080] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 155.363641][ T6080] RBP: 00007f3c7514e090 R08: 0000000000000000 R09: 0000000000000000 [ 155.363652][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.363662][ T6080] R13: 00007f3c77176038 R14: 00007f3c77175fa0 R15: 00007ffc35939698 [ 155.363693][ T6080] [ 155.396578][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 155.744771][ T6079] loop2: detected capacity change from 0 to 1024 [ 155.784693][ T6079] EXT4-fs: Ignoring removed oldalloc option [ 156.310598][ T6079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.310746][ T6079] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.468334][ T6087] loop1: detected capacity change from 0 to 256 [ 157.054473][ T32] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 157.179333][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.467541][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.468716][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 157.476801][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.476860][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 157.476891][ T32] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 157.476916][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 157.476943][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 157.578723][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.66'. [ 157.578757][ T6095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.66'. [ 157.676239][ T32] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.36 [ 157.676263][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.676278][ T32] usb 4-1: Product: syz [ 157.676289][ T32] usb 4-1: Manufacturer: syz [ 157.676299][ T32] usb 4-1: SerialNumber: syz [ 157.831961][ T6090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.227951][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.237722][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.855786][ T6105] netlink: 5 bytes leftover after parsing attributes in process `syz.1.68'. [ 158.942659][ T32] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.942731][ T32] usb 4-1: MIDIStreaming interface descriptor not found [ 159.362346][ T6115] FAULT_INJECTION: forcing a failure. [ 159.362346][ T6115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.362384][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.4.72 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.362408][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.362421][ T6115] Call Trace: [ 159.362430][ T6115] [ 159.362438][ T6115] dump_stack_lvl+0xe8/0x150 [ 159.362474][ T6115] should_fail_ex+0x467/0x600 [ 159.362511][ T6115] _copy_from_iter+0x1d3/0x1660 [ 159.362548][ T6115] ? rcu_is_watching+0x15/0xb0 [ 159.362572][ T6115] ? trace_kmem_cache_alloc+0x29/0xe0 [ 159.362599][ T6115] ? __pfx__copy_from_iter+0x10/0x10 [ 159.362632][ T6115] ? __alloc_skb+0x276/0x7a0 [ 159.362661][ T6115] ? __alloc_skb+0x276/0x7a0 [ 159.362694][ T6115] ? netlink_sendmsg+0x650/0xb40 [ 159.362728][ T6115] ? skb_put+0x112/0x210 [ 159.362766][ T6115] netlink_sendmsg+0x6c0/0xb40 [ 159.362809][ T6115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.362854][ T6115] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 159.362895][ T6115] ? aa_sock_msg_perm+0x122/0x200 [ 159.362931][ T6115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.362963][ T6115] sock_sendmsg_nosec+0x13a/0x180 [ 159.362991][ T6115] ____sys_sendmsg+0x565/0x870 [ 159.363025][ T6115] ? __might_fault+0xaf/0x130 [ 159.363055][ T6115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.363095][ T6115] ? import_iovec+0x73/0xa0 [ 159.363118][ T6115] ___sys_sendmsg+0x2a5/0x360 [ 159.363150][ T6115] ? __lock_acquire+0x683/0x2ce0 [ 159.363185][ T6115] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.363242][ T6115] ? __fget_files+0x2a/0x420 [ 159.363260][ T6115] ? __fget_files+0x3a8/0x420 [ 159.363285][ T6115] __x64_sys_sendmsg+0x1b7/0x290 [ 159.363312][ T6115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.363351][ T6115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.363368][ T6115] do_syscall_64+0x174/0x580 [ 159.363392][ T6115] ? trace_irq_disable+0x3b/0x140 [ 159.363414][ T6115] ? clear_bhb_loop+0x40/0x90 [ 159.363434][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.363450][ T6115] RIP: 0033:0x7f2effbdce59 [ 159.363465][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.363478][ T6115] RSP: 002b:00007f2efde36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.363496][ T6115] RAX: ffffffffffffffda RBX: 00007f2effe55fa0 RCX: 00007f2effbdce59 [ 159.363508][ T6115] RDX: 0000000020000114 RSI: 0000200000000180 RDI: 0000000000000003 [ 159.363519][ T6115] RBP: 00007f2efde36090 R08: 0000000000000000 R09: 0000000000000000 [ 159.363529][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.363538][ T6115] R13: 00007f2effe56038 R14: 00007f2effe55fa0 R15: 00007ffc3c9dd548 [ 159.363561][ T6115] [ 159.726814][ T6116] loop3: detected capacity change from 0 to 256 [ 160.124477][ T5348] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 160.124722][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 160.238797][ T6116] exfat: Deprecated parameter 'utf8' [ 160.238856][ T6116] exfat: Deprecated parameter 'namecase' [ 160.238886][ T6116] exfat: Deprecated parameter 'utf8' [ 160.280299][ T5348] usb 2-1: device descriptor read/64, error -32 [ 160.345698][ T6099] loop2: detected capacity change from 0 to 32768 [ 160.535725][ T5348] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.535998][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 160.665686][ T5348] usb 2-1: device descriptor read/64, error -32 [ 160.783041][ T5348] usb usb2-port1: attempt power cycle [ 161.149549][ T6116] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 161.230883][ T6099] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.233372][ T6099] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 161.357960][ T5348] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.359799][ T6099] XFS (loop2): log mount failed [ 161.397578][ T5348] usb 2-1: Using ep0 maxpacket: 32 [ 161.497657][ T5348] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.497683][ T5348] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.539770][ T5348] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.539795][ T5348] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 161.539810][ T5348] usb 2-1: Product: syz [ 161.539820][ T5348] usb 2-1: Manufacturer: syz [ 161.904339][ T5348] usb 2-1: can't set config #4, error -71 [ 162.031592][ T37] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.285075][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 162.287616][ T37] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 162.287653][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.291570][ T5348] usb 2-1: USB disconnect, device number 4 [ 162.302136][ T37] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 162.302229][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.302301][ T37] usb 1-1: Product: syz [ 162.302350][ T37] usb 1-1: Manufacturer: syz [ 162.302393][ T37] usb 1-1: SerialNumber: syz [ 162.752240][ T37] usb 1-1: config 0 descriptor?? [ 162.812813][ T32] usb 4-1: USB disconnect, device number 5 [ 162.865464][ T6137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.76'. [ 162.906955][ T6137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.76'. [ 162.941376][ T37] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 162.941407][ T37] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 163.502007][ T6143] loop1: detected capacity change from 0 to 256 [ 163.631230][ T6145] loop4: detected capacity change from 0 to 64 [ 163.781761][ T37] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 163.785970][ T37] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 165.010892][ T37] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 165.012476][ T37] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 165.012929][ T37] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 165.013349][ T37] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 165.013738][ T37] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 165.016329][ T37] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 165.198910][ T37] usb 1-1: USB disconnect, device number 9 [ 167.288197][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.452943][ T6155] hfs: can't find a HFS filesystem on dev nullb0 [ 167.469276][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 167.519155][ T37] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 167.519179][ T37] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 167.519195][ T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 167.519210][ T37] usb 3-1: config 1 has no interface number 0 [ 167.519243][ T37] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xB has an invalid bInterval 113, changing to 10 [ 167.519264][ T37] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid maxpacket 58116, setting to 1024 [ 167.519297][ T37] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 167.519328][ T37] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 167.519345][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.526116][ T6166] openvswitch: netlink: Actions may not be safe on all matching packets [ 167.678505][ T6155] comedi comedi3: pcl818: I/O base address not correctly aligned [ 167.716596][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.867726][ T37] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 167.892294][ T6161] loop1: detected capacity change from 0 to 1024 [ 168.181652][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.210002][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.220381][ T37] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 168.220708][ T37] snd_usb_pod 3-1:1.1: invalid control EP [ 168.220725][ T37] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 168.279290][ T37] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 168.279711][ T37] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 168.404725][ T32] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 168.429947][ T6169] loop2: detected capacity change from 0 to 128 [ 168.597562][ T32] usb 1-1: Invalid ep0 maxpacket: 32 [ 168.795524][ T32] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 168.801876][ T6161] hfsplus: failed to load root directory [ 168.945440][ T6181] netlink: 277 bytes leftover after parsing attributes in process `syz.4.89'. [ 169.087940][ T32] usb 1-1: Invalid ep0 maxpacket: 32 [ 169.088446][ T32] usb usb1-port1: attempt power cycle [ 169.120649][ T6169] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 169.326758][ T6169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.557914][ T32] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 169.645690][ T32] usb 1-1: Invalid ep0 maxpacket: 32 [ 169.804914][ T32] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 169.830127][ T32] usb 1-1: Invalid ep0 maxpacket: 32 [ 169.830631][ T32] usb usb1-port1: unable to enumerate USB device [ 170.206132][ T6188] loop4: detected capacity change from 0 to 256 [ 170.784808][ T6189] No source specified [ 171.187376][ T6189] netlink: 156 bytes leftover after parsing attributes in process `syz.1.90'. [ 171.187471][ T6189] netlink: 156 bytes leftover after parsing attributes in process `syz.1.90'. [ 171.874341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.894376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.904367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.914369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.924614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.119018][ T5615] Bluetooth: hci2: unexpected cc 0x2005 length: 8 > 1 [ 174.559469][ T6204] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 174.559514][ T6204] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 174.559537][ T6204] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 176.112432][ T6219] FAULT_INJECTION: forcing a failure. [ 176.112432][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 176.112484][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz.1.103 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 176.112520][ T6219] Tainted: [L]=SOFTLOCKUP [ 176.112528][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.112542][ T6219] Call Trace: [ 176.112551][ T6219] [ 176.112565][ T6219] dump_stack_lvl+0xe8/0x150 [ 176.112602][ T6219] should_fail_ex+0x467/0x600 [ 176.112640][ T6219] should_failslab+0xa8/0x100 [ 176.112672][ T6219] __kmalloc_noprof+0xfe/0x780 [ 176.112700][ T6219] ? sock_kmalloc+0xd6/0x160 [ 176.112720][ T6219] ? sock_kmalloc+0xd6/0x160 [ 176.112748][ T6219] sock_kmalloc+0xd6/0x160 [ 176.112773][ T6219] af_alg_alloc_areq+0x8c/0x200 [ 176.112801][ T6219] aead_recvmsg+0x465/0xd10 [ 176.112938][ T6219] ? __pfx_aead_recvmsg+0x10/0x10 [ 176.112976][ T6219] ? __lock_acquire+0x683/0x2ce0 [ 176.113016][ T6219] ? aa_sock_msg_perm+0x122/0x200 [ 176.113050][ T6219] ? __pfx_aead_recvmsg+0x10/0x10 [ 176.113080][ T6219] sock_recvmsg_nosec+0x130/0x170 [ 176.113112][ T6219] ____sys_recvmsg+0x242/0x4f0 [ 176.113161][ T6219] ? __pfx_____sys_recvmsg+0x10/0x10 [ 176.113217][ T6219] ? import_iovec+0x73/0xa0 [ 176.113244][ T6219] ___sys_recvmsg+0x213/0x5a0 [ 176.113288][ T6219] ? __pfx____sys_recvmsg+0x10/0x10 [ 176.113332][ T6219] ? __fget_files+0x2a/0x420 [ 176.113378][ T6219] ? __fget_files+0x3a8/0x420 [ 176.113417][ T6219] __x64_sys_recvmsg+0x1b4/0x290 [ 176.113458][ T6219] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 176.113517][ T6219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.113543][ T6219] do_syscall_64+0x174/0x580 [ 176.113577][ T6219] ? trace_irq_disable+0x3b/0x140 [ 176.113609][ T6219] ? clear_bhb_loop+0x40/0x90 [ 176.113639][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.113663][ T6219] RIP: 0033:0x7f3c76efce59 [ 176.113686][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.113706][ T6219] RSP: 002b:00007f3c7512d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 176.113732][ T6219] RAX: ffffffffffffffda RBX: 00007f3c77176090 RCX: 00007f3c76efce59 [ 176.113749][ T6219] RDX: 0000000000000038 RSI: 0000200000001d80 RDI: 0000000000000004 [ 176.113763][ T6219] RBP: 00007f3c7512d090 R08: 0000000000000000 R09: 0000000000000000 [ 176.113777][ T6219] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.113792][ T6219] R13: 00007f3c77176128 R14: 00007f3c77176090 R15: 00007ffc35939698 [ 176.113829][ T6219] [ 176.507095][ T5898] usb 3-1: USB disconnect, device number 3 [ 176.611873][ T6225] loop4: detected capacity change from 0 to 128 [ 176.613239][ T6225] udf: Unknown parameter '00000000000000000000003000000000000000000001844674407370955161500000000000000000003' [ 176.664154][ T6225] loop4: detected capacity change from 0 to 65 [ 176.742532][ T6225] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 177.077902][ T6231] loop2: detected capacity change from 0 to 256 [ 177.324031][ T5615] Bluetooth: hci3: unexpected cc 0x2005 length: 8 > 1 [ 179.565002][ T6228] netlink: 156 bytes leftover after parsing attributes in process `syz.0.104'. [ 179.565083][ T6228] netlink: 156 bytes leftover after parsing attributes in process `syz.0.104'. [ 179.833478][ T6227] No source specified [ 182.375625][ T5743] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.547989][ T5743] usb 3-1: device descriptor read/64, error -71 [ 182.566049][ T6271] netlink: 400 bytes leftover after parsing attributes in process `syz.3.119'. [ 182.641755][ T6272] loop4: detected capacity change from 0 to 512 [ 182.785790][ T6272] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 182.822192][ T5743] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 183.176509][ T6272] EXT4-fs (loop4): 1 truncate cleaned up [ 183.314484][ T5743] usb 3-1: device descriptor read/64, error -71 [ 183.320494][ T6272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.438697][ T5743] usb usb3-port1: attempt power cycle [ 183.694420][ T32] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 183.896613][ T32] usb 5-1: device descriptor read/64, error -71 [ 184.075103][ T6285] loop2: detected capacity change from 0 to 256 [ 184.155095][ T32] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 184.394488][ T32] usb 5-1: device descriptor read/64, error -71 [ 184.515747][ T32] usb usb5-port1: attempt power cycle [ 184.644383][ T5745] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 184.807424][ T5745] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.807454][ T5745] usb 1-1: config 0 has no interface number 0 [ 184.807507][ T5745] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.807553][ T5745] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.807578][ T5745] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.809425][ T5745] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 184.809455][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 184.809477][ T5745] usb 1-1: Product: syz [ 184.907716][ T32] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 184.947731][ T5745] usb 1-1: config 0 descriptor?? [ 185.009535][ T32] usb 5-1: device descriptor read/8, error -71 [ 185.571741][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.617352][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.806397][ T32] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 186.149375][ T32] usb 5-1: device descriptor read/8, error -71 [ 186.191005][ T6276] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 186.257675][ T32] usb usb5-port1: unable to enumerate USB device [ 186.677558][ T6276] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 186.856505][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.830869][ T5745] usbhid 1-1:0.1: can't add hid device: -71 [ 187.831011][ T5745] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 187.866758][ T5745] usb 1-1: USB disconnect, device number 14 [ 188.380360][ T6310] loop1: detected capacity change from 0 to 1024 [ 188.616391][ T6326] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 188.766370][ T6328] netlink: 164 bytes leftover after parsing attributes in process `syz.2.135'. [ 189.912183][ T6339] loop3: detected capacity change from 0 to 256 [ 191.326523][ T6361] loop1: detected capacity change from 0 to 64 [ 191.810988][ T6365] loop2: detected capacity change from 0 to 64 [ 191.812129][ T6365] /dev/loop2: Can't open blockdev [ 192.458480][ T6366] trusted_key: syz.3.146 sent an empty control message without MSG_MORE. [ 192.729549][ T6373] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 193.423223][ T6379] tipc: Started in network mode [ 193.423328][ T6379] tipc: Node identity 4, cluster identity 4711 [ 193.423368][ T6379] tipc: Node number set to 4 [ 194.219591][ T6386] loop3: detected capacity change from 0 to 256 [ 194.363695][ T6386] netlink: 'syz.3.153': attribute type 21 has an invalid length. [ 194.363785][ T6386] netlink: 'syz.3.153': attribute type 6 has an invalid length. [ 194.363802][ T6386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.153'. [ 195.948686][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.954648][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.774910][ T1247] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.990771][ T1247] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.992098][ T1247] usb 5-1: config 7 has an invalid interface number: 46 but max is 0 [ 196.992128][ T1247] usb 5-1: config 7 has no interface number 0 [ 196.992177][ T1247] usb 5-1: config 7 interface 46 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 196.992209][ T1247] usb 5-1: config 7 interface 46 altsetting 85 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 196.992240][ T1247] usb 5-1: config 7 interface 46 has no altsetting 0 [ 197.076681][ T1247] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=85.68 [ 197.076715][ T1247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.076736][ T1247] usb 5-1: Product: syz [ 197.076752][ T1247] usb 5-1: Manufacturer: syz [ 197.076767][ T1247] usb 5-1: SerialNumber: syz [ 197.668512][ T6408] loop1: detected capacity change from 0 to 512 [ 197.877307][ T6408] EXT4-fs (loop1): Test dummy encryption mode enabled [ 197.938047][ T6408] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.157: inode has both inline data and extents flags [ 197.938320][ T6408] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.947067][ C1] EXT4-fs (loop1): initial error at time 1782191723: ext4_orphan_get:1399: inode 15 [ 197.947109][ C1] EXT4-fs (loop1): last error at time 1782191723: ext4_orphan_get:1399: inode 15 [ 198.078659][ T6408] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.157: couldn't read orphan inode 15 (err -117) [ 198.078699][ T6408] loop1: lost filesystem error report for type 5 error -117 [ 198.135700][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 198.321496][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.461882][ T6415] loop3: detected capacity change from 0 to 164 [ 198.830228][ T6417] FAULT_INJECTION: forcing a failure. [ 198.830228][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 198.830260][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.2.159 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.830283][ T6417] Tainted: [L]=SOFTLOCKUP [ 198.830289][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.830298][ T6417] Call Trace: [ 198.830304][ T6417] [ 198.830311][ T6417] dump_stack_lvl+0xe8/0x150 [ 198.830341][ T6417] should_fail_ex+0x467/0x600 [ 198.830367][ T6417] should_failslab+0xa8/0x100 [ 198.830390][ T6417] __kmalloc_noprof+0xfe/0x780 [ 198.830409][ T6417] ? tomoyo_encode+0x2ad/0x570 [ 198.830434][ T6417] ? tomoyo_encode+0x2ad/0x570 [ 198.830464][ T6417] tomoyo_encode+0x2ad/0x570 [ 198.830493][ T6417] tomoyo_realpath_from_path+0x5fa/0x640 [ 198.830526][ T6417] ? tomoyo_path_number_perm+0x219/0x5f0 [ 198.830547][ T6417] tomoyo_path_number_perm+0x246/0x5f0 [ 198.830570][ T6417] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.830594][ T6417] ? sb_end_write+0xe5/0x190 [ 198.830611][ T6417] ? vfs_write+0x9e0/0xbb0 [ 198.830637][ T6417] ? hook_file_ioctl+0x1f3/0x600 [ 198.830677][ T6417] ? ksys_write+0x202/0x270 [ 198.830703][ T6417] security_file_ioctl+0xc3/0x2a0 [ 198.830725][ T6417] __se_sys_ioctl+0x47/0x170 [ 198.830748][ T6417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.830765][ T6417] do_syscall_64+0x174/0x580 [ 198.830817][ T6417] ? trace_irq_disable+0x3b/0x140 [ 198.830849][ T6417] ? clear_bhb_loop+0x40/0x90 [ 198.830877][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.830901][ T6417] RIP: 0033:0x7f55620bce59 [ 198.830927][ T6417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.830956][ T6417] RSP: 002b:00007f556030e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.830973][ T6417] RAX: ffffffffffffffda RBX: 00007f5562335fa0 RCX: 00007f55620bce59 [ 198.830985][ T6417] RDX: 0000000000000000 RSI: 000000004004550d RDI: 0000000000000003 [ 198.830994][ T6417] RBP: 00007f556030e090 R08: 0000000000000000 R09: 0000000000000000 [ 198.831004][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.831013][ T6417] R13: 00007f5562336038 R14: 00007f5562335fa0 R15: 00007fff10a2ef58 [ 198.831038][ T6417] [ 198.831107][ T6417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.780532][ T1247] kvaser_usb 5-1:7.46: error -ENODEV: Cannot get usb endpoint(s) [ 199.794900][ T6405] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 199.890560][ T1247] usb 5-1: USB disconnect, device number 7 [ 200.583123][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.594104][ T6423] loop2: detected capacity change from 0 to 256 [ 200.841432][ T6427] tipc: Started in network mode [ 200.841536][ T6427] tipc: Node identity 4, cluster identity 4711 [ 200.841579][ T6427] tipc: Node number set to 4 [ 204.134460][ T5864] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 204.212271][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 204.240623][ T6441] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 204.315657][ T5864] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 204.315693][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.315716][ T5864] usb 2-1: Product: syz [ 204.315732][ T5864] usb 2-1: Manufacturer: syz [ 204.315748][ T5864] usb 2-1: SerialNumber: syz [ 204.370501][ T5864] usb 2-1: config 0 descriptor?? [ 204.396831][ T5864] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 204.703870][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.748326][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.796182][ T5864] gspca_m5602: Failed to find a sensor [ 204.796198][ T5864] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 204.826199][ T5864] usb 2-1: USB disconnect, device number 5 [ 204.984818][ T6447] Zero length message leads to an empty skb [ 204.991611][ T6447] tmpfs: Bad value for 'mpol' [ 205.289166][ T5736] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.524939][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 205.534626][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.534672][ T5736] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 205.534699][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.719895][ T5736] usb 4-1: config 0 descriptor?? [ 206.094883][ T6458] loop2: detected capacity change from 0 to 128 [ 206.262909][ T6458] FAT-fs (loop2): bogus logical sector size 23296 [ 206.262938][ T6458] FAT-fs (loop2): Can't find a valid FAT filesystem [ 206.282213][ T5736] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x2 [ 206.282253][ T5736] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x6 [ 206.282346][ T5736] corsair 0003:1B1C:1B02.0002: ignoring exceeding usage max [ 206.344481][ T5864] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.448461][ T5736] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.01 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 206.609618][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 206.612166][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.612246][ T5864] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 206.615663][ T5864] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 206.615760][ T5864] usb 2-1: can't read configurations, error -61 [ 206.757227][ T5736] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -32). [ 206.842457][ T5736] usb 4-1: USB disconnect, device number 6 [ 206.881437][ T6463] fido_id[6463]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B1C:1B02.0002/report_descriptor': No such device [ 206.915674][ T5864] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 207.074419][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 207.099865][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.099942][ T5864] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 207.107600][ T5864] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 207.107709][ T5864] usb 2-1: can't read configurations, error -61 [ 207.116877][ T5864] usb usb2-port1: attempt power cycle [ 207.236348][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.450197][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.485755][ T5864] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 207.510204][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 207.513213][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.513304][ T5864] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 207.552238][ T5864] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 207.552281][ T5864] usb 2-1: can't read configurations, error -61 [ 207.757414][ T5864] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 207.786746][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 207.823339][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.823430][ T5864] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 207.867601][ T5864] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 207.867631][ T5864] usb 2-1: can't read configurations, error -61 [ 207.876422][ T5864] usb usb2-port1: unable to enumerate USB device [ 207.969752][ T6477] loop3: detected capacity change from 0 to 512 [ 207.970978][ T6477] EXT4-fs: inline encryption not supported [ 208.422134][ T6481] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 208.422316][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.177: iget: bad extra_isize 90 (inode size 256) [ 208.422352][ T6477] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 208.432090][ C0] EXT4-fs (loop3): initial error at time 1782191734: ext4_xattr_inode_iget:441: inode 11 [ 208.432145][ C0] EXT4-fs (loop3): last error at time 1782191734: ext4_xattr_inode_iget:441: inode 11 [ 208.508151][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.177: error while reading EA inode 11 err=-117 [ 208.508191][ T6477] loop3: lost filesystem error report for type 5 error -117 [ 208.509184][ T6477] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 208.645631][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.177: iget: bad extra_isize 90 (inode size 256) [ 208.645783][ T6477] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 209.103945][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.177: error while reading EA inode 11 err=-117 [ 209.103975][ T6477] loop3: lost filesystem error report for type 5 error -117 [ 209.133885][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.177: iget: bad extra_isize 90 (inode size 256) [ 209.133936][ T6477] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 209.214148][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.177: error while reading EA inode 18 err=-117 [ 209.214188][ T6477] loop3: lost filesystem error report for type 5 error -117 [ 209.289440][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.177: iget: bad extra_isize 90 (inode size 256) [ 209.289481][ T6477] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 209.353979][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.177: error while reading EA inode 18 err=-117 [ 209.354018][ T6477] loop3: lost filesystem error report for type 5 error -117 [ 209.448072][ T6477] EXT4-fs (loop3): 1 orphan inode deleted [ 209.486211][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.610431][ T6475] bond1: option fail_over_mac: invalid value (3) [ 210.357603][ T6475] bond1 (unregistering): Released all slaves [ 210.838300][ T6497] loop4: detected capacity change from 0 to 256 [ 212.339649][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.612841][ T6515] FAULT_INJECTION: forcing a failure. [ 213.612841][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.612888][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.4.187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 213.612945][ T6515] Tainted: [L]=SOFTLOCKUP [ 213.612959][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.612983][ T6515] Call Trace: [ 213.612991][ T6515] [ 213.613001][ T6515] dump_stack_lvl+0xe8/0x150 [ 213.613039][ T6515] should_fail_ex+0x467/0x600 [ 213.613076][ T6515] _copy_from_user+0x2d/0xb0 [ 213.613101][ T6515] ___sys_recvmsg+0x173/0x5a0 [ 213.613144][ T6515] ? __pfx____sys_recvmsg+0x10/0x10 [ 213.613190][ T6515] ? __fget_files+0x2a/0x420 [ 213.613258][ T6515] do_recvmmsg+0x320/0x7f0 [ 213.613305][ T6515] ? __pfx_do_recvmmsg+0x10/0x10 [ 213.613341][ T6515] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 213.613386][ T6515] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 213.613427][ T6515] __x64_sys_recvmmsg+0x198/0x250 [ 213.613468][ T6515] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 213.613516][ T6515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.613541][ T6515] do_syscall_64+0x174/0x580 [ 213.613573][ T6515] ? trace_irq_disable+0x3b/0x140 [ 213.613605][ T6515] ? clear_bhb_loop+0x40/0x90 [ 213.613634][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.613657][ T6515] RIP: 0033:0x7f2effbdce59 [ 213.613678][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.613697][ T6515] RSP: 002b:00007f2efde36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 213.613722][ T6515] RAX: ffffffffffffffda RBX: 00007f2effe55fa0 RCX: 00007f2effbdce59 [ 213.613739][ T6515] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 213.613753][ T6515] RBP: 00007f2efde36090 R08: 0000000000000000 R09: 0000000000000000 [ 213.613766][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.613779][ T6515] R13: 00007f2effe56038 R14: 00007f2effe55fa0 R15: 00007ffc3c9dd548 [ 213.613815][ T6515] [ 217.359215][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.194'. [ 218.285213][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 218.502332][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.502375][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 256, setting to 64 [ 218.502405][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.504211][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.544394][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 218.544425][ T9] usb 1-1: SerialNumber: syz [ 218.583744][ T6536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.619310][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 218.619354][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 218.641627][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 219.027980][ T6547] loop3: detected capacity change from 0 to 512 [ 219.752997][ T6547] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 220.187760][ T6547] EXT4-fs (loop3): orphan cleanup on readonly fs [ 220.190078][ T6547] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.197: inode #15: comm syz.3.197: iget: illegal inode # [ 220.190115][ T6547] loop3: lost filesystem error report for type 5 error -117 [ 220.194325][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 220.194350][ C1] EXT4-fs (loop3): initial error at time 1782191746: ext4_orphan_get:1399 [ 220.194373][ C1] EXT4-fs (loop3): last error at time 1782191746: ext4_orphan_get:1399 [ 220.338401][ T6547] EXT4-fs (loop3): Remounting filesystem read-only [ 220.341320][ T6547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.746276][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.831533][ T6550] loop4: detected capacity change from 0 to 4096 [ 220.901060][ T6550] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 221.204026][ T6557] tun0: tun_chr_ioctl cmd 1074812118 [ 221.616069][ T6560] loop3: detected capacity change from 0 to 128 [ 221.693357][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 221.902744][ T9] usb 1-1: USB disconnect, device number 15 [ 222.162516][ T6550] ntfs3(loop4): ino=19, mi_enum_attr [ 222.177419][ T6550] ntfs3(loop4): Failed to load root (-22). [ 222.479245][ T6560] affs: No valid root block on device loop3 [ 222.572239][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 222.572282][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 222.572310][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 222.646239][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 222.661397][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 223.024304][ T6560] loop3: detected capacity change from 0 to 4096 [ 223.618849][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 223.667131][ T6577] netlink: 'syz.4.207': attribute type 7 has an invalid length. [ 223.667154][ T6577] netlink: 'syz.4.207': attribute type 8 has an invalid length. [ 223.672039][ T6577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.207'. [ 224.469432][ T6560] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 224.737542][ T6560] ntfs3(loop3): Failed to read $UpCase (-4). [ 225.155678][ T6589] loop4: detected capacity change from 0 to 512 [ 225.826499][ T6589] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.863767][ T6589] EXT4-fs (loop4): orphan cleanup on readonly fs [ 225.866940][ T6589] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.209: inode #15: comm syz.4.209: iget: illegal inode # [ 225.867034][ T6589] loop4: lost filesystem error report for type 5 error -117 [ 225.871853][ T6589] EXT4-fs (loop4): Remounting filesystem read-only [ 225.882479][ T6589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.974859][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 226.507807][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.564691][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 226.567457][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.567495][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.567519][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 226.567563][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 226.567588][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.643954][ T10] usb 2-1: config 0 descriptor?? [ 227.182508][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.183162][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.214558][ T822] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.265474][ T5864] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 227.371449][ T822] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 227.371484][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.417590][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.418376][ T5864] usb 4-1: not running at top speed; connect to a high speed hub [ 227.465956][ T5864] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 76, changing to 4 [ 227.488624][ T5864] usb 4-1: string descriptor 0 read error: -22 [ 227.488780][ T5864] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 227.488818][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.679542][ T822] usb 5-1: config 0 descriptor?? [ 227.784583][ T822] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 228.626111][ T822] gspca_sunplus: reg_w_riv err -110 [ 228.909055][ T822] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 229.371582][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.476435][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.864360][ T6598] loop4: detected capacity change from 0 to 32768 [ 230.145480][ T6598] JBD2: Ignoring recovery information on journal [ 230.356062][ T5864] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 230.392917][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 230.393051][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.478280][ T6598] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 230.733365][ T5736] usb 5-1: USB disconnect, device number 8 [ 230.745863][ T10] usb 2-1: USB disconnect, device number 10 [ 231.631252][ T6618] loop3: detected capacity change from 0 to 64 [ 231.889761][ T5736] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 232.053538][ T5736] usb 1-1: Using ep0 maxpacket: 16 [ 232.054109][ T6618] loop3: detected capacity change from 0 to 32768 [ 232.056728][ T6618] btrfs: Deprecated parameter 'usebackuproot' [ 232.056788][ T6618] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 232.113583][ T6618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.220 (6618) [ 232.114429][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 232.114458][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.172579][ T5736] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.172614][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.172652][ T5736] usb 1-1: Product: syz [ 232.172667][ T5736] usb 1-1: Manufacturer: syz [ 232.172683][ T5736] usb 1-1: SerialNumber: syz [ 232.202023][ T6618] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.202062][ T6618] BTRFS info (device loop3): using crc32c checksum algorithm [ 232.522349][ T5736] usb 1-1: config 0 descriptor?? [ 232.532841][ T1130] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 232.532991][ T6618] BTRFS error (device loop3): failed to load root extent [ 232.536020][ T6618] BTRFS warning (device loop3): try to load backup roots slot 1 [ 232.572099][ T57] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 232.572238][ T6618] BTRFS warning (device loop3): couldn't read tree root [ 232.572258][ T6618] BTRFS warning (device loop3): try to load backup roots slot 2 [ 232.625366][ T3385] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 232.625522][ T6618] BTRFS warning (device loop3): couldn't read tree root [ 232.625545][ T6618] BTRFS warning (device loop3): try to load backup roots slot 3 [ 232.728486][ T6618] BTRFS info (device loop3): rebuilding free space tree [ 232.779362][ T5736] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.779401][ T5736] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 232.838397][ T5864] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 233.101621][ T5864] usb 4-1: USB disconnect, device number 7 [ 233.132043][ T6618] BTRFS info (device loop3): checking UUID tree [ 233.147165][ T6618] BTRFS info (device loop3): enabling ssd optimizations [ 233.147198][ T6618] BTRFS info (device loop3): turning on async discard [ 233.147218][ T6618] BTRFS info (device loop3): enabling free space tree [ 233.147236][ T6618] BTRFS info (device loop3): force clearing of disk cache [ 233.147255][ T6618] BTRFS info (device loop3): enabling auto defrag [ 233.147274][ T6618] BTRFS info (device loop3): trying to use backup root at mount time [ 233.147295][ T6618] BTRFS info (device loop3): use zstd compression, level 3 [ 233.736136][ T5736] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 233.757113][ T5736] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 234.325854][ T6648] FAULT_INJECTION: forcing a failure. [ 234.325854][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 234.325889][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.1.225 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 234.325919][ T6648] Tainted: [L]=SOFTLOCKUP [ 234.325925][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.325936][ T6648] Call Trace: [ 234.325943][ T6648] [ 234.325950][ T6648] dump_stack_lvl+0xe8/0x150 [ 234.325983][ T6648] should_fail_ex+0x467/0x600 [ 234.326014][ T6648] should_failslab+0xa8/0x100 [ 234.326042][ T6648] __kmalloc_cache_noprof+0xa0/0x6b0 [ 234.326065][ T6648] ? sget_fc+0x70c/0x1910 [ 234.326087][ T6648] ? sget_fc+0x70c/0x1910 [ 234.326115][ T6648] sget_fc+0x70c/0x1910 [ 234.326146][ T6648] ? __pfx_set_anon_super_fc+0x10/0x10 [ 234.326175][ T6648] ? __pfx_sget_fc+0x10/0x10 [ 234.326208][ T6648] ? __pfx_proc_fill_super+0x10/0x10 [ 234.326237][ T6648] get_tree_nodev+0x2a/0x150 [ 234.326268][ T6648] vfs_get_tree+0x92/0x2a0 [ 234.326298][ T6648] vfs_cmd_create+0xa2/0x200 [ 234.326332][ T6648] __se_sys_fsconfig+0x6bf/0x810 [ 234.326368][ T6648] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 234.326396][ T6648] ? ksys_write+0x248/0x270 [ 234.326425][ T6648] ? __pfx_ksys_write+0x10/0x10 [ 234.326461][ T6648] ? __x64_sys_fsconfig+0x20/0xc0 [ 234.326499][ T6648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.326518][ T6648] do_syscall_64+0x174/0x580 [ 234.326544][ T6648] ? trace_irq_disable+0x3b/0x140 [ 234.326568][ T6648] ? clear_bhb_loop+0x40/0x90 [ 234.326590][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.326607][ T6648] RIP: 0033:0x7f3c76efce59 [ 234.326624][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.326639][ T6648] RSP: 002b:00007f3c7510c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 234.326658][ T6648] RAX: ffffffffffffffda RBX: 00007f3c77176180 RCX: 00007f3c76efce59 [ 234.326671][ T6648] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000009 [ 234.326681][ T6648] RBP: 00007f3c7510c090 R08: 0000000000000000 R09: 0000000000000000 [ 234.326692][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.326703][ T6648] R13: 00007f3c77176218 R14: 00007f3c77176180 R15: 00007ffc35939698 [ 234.326731][ T6648] [ 234.369583][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.668175][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.736267][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.737406][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.738128][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.698404][ T5736] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 235.699623][ T5736] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 235.703389][ T5736] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 235.703880][ T5736] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 235.711208][ T6647] Process accounting resumed [ 235.763342][ T5736] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 235.782211][ T5736] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 235.949354][ T5611] ocfs2: Unmounting device (7,4) on (node local) [ 236.138025][ T6655] 9p: Bad value for 'rfdno' [ 236.728556][ T6655] loop1: detected capacity change from 0 to 32768 [ 236.758610][ T6655] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.227 (6655) [ 236.787588][ T6655] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 236.787626][ T6655] BTRFS info (device loop1): using blake2b checksum algorithm [ 237.195044][ T5626] usb 1-1: USB disconnect, device number 16 [ 237.217449][ T6655] BTRFS info (device loop1): setting nodatasum [ 237.217477][ T6655] BTRFS info (device loop1): setting nodatacow [ 237.217495][ T6655] BTRFS info (device loop1): enabling ssd optimizations [ 237.217515][ T6655] BTRFS info (device loop1): turning on async discard [ 237.217531][ T6655] BTRFS info (device loop1): enabling free space tree [ 237.364404][ T5622] Bluetooth: hci5: command tx timeout [ 237.504836][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 237.504857][ T38] audit: type=1800 audit(1782191763.533:44): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 237.620245][ T5610] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.460686][ T5622] Bluetooth: hci5: command tx timeout [ 241.558741][ T5622] Bluetooth: hci5: command tx timeout [ 242.124567][ T5613] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 242.406120][ T6718] loop4: detected capacity change from 0 to 128 [ 242.479738][ T6718] FAT-fs (loop4): bogus logical sector size 23296 [ 242.479767][ T6718] FAT-fs (loop4): Can't find a valid FAT filesystem [ 242.493992][ T1485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.613444][ T6722] netlink: 144 bytes leftover after parsing attributes in process `syz.0.241'. [ 242.623300][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 243.620300][ T5622] Bluetooth: hci5: command tx timeout [ 245.171544][ T6728] loop1: detected capacity change from 0 to 32768 [ 246.590780][ T6728] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop1": -EINTR [ 246.798575][ T1485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.870895][ T1485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.222269][ T6764] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 248.314392][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 248.468235][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 248.470889][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.470999][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.471032][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.471057][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 248.471083][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 248.472709][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.472739][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 248.472762][ T10] usb 2-1: SerialNumber: syz [ 248.703829][ T1485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.732583][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 248.732608][ T10] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 248.732647][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 248.940873][ T10] usb 2-1: USB disconnect, device number 11 [ 251.631502][ T6786] FAULT_INJECTION: forcing a failure. [ 251.631502][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.631538][ T6786] CPU: 1 UID: 0 PID: 6786 Comm: syz.4.255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 251.631565][ T6786] Tainted: [L]=SOFTLOCKUP [ 251.631572][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.631601][ T6786] Call Trace: [ 251.631609][ T6786] [ 251.631617][ T6786] dump_stack_lvl+0xe8/0x150 [ 251.631647][ T6786] should_fail_ex+0x467/0x600 [ 251.631682][ T6786] _copy_to_user+0x31/0xb0 [ 251.631702][ T6786] simple_read_from_buffer+0xe1/0x170 [ 251.631726][ T6786] proc_fail_nth_read+0x1be/0x230 [ 251.631749][ T6786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.631771][ T6786] ? rw_verify_area+0x250/0x4d0 [ 251.631796][ T6786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.631815][ T6786] vfs_read+0x219/0xa90 [ 251.631844][ T6786] ? __pfx_vfs_read+0x10/0x10 [ 251.631869][ T6786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.631901][ T6786] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.631926][ T6786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 251.631952][ T6786] ? mutex_lock_nested+0x152/0x1d0 [ 251.631970][ T6786] ? fdget_pos+0x252/0x320 [ 251.631999][ T6786] ksys_read+0x156/0x270 [ 251.632026][ T6786] ? __pfx_ksys_read+0x10/0x10 [ 251.632055][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.632074][ T6786] do_syscall_64+0x174/0x580 [ 251.632101][ T6786] ? trace_irq_disable+0x3b/0x140 [ 251.632126][ T6786] ? clear_bhb_loop+0x40/0x90 [ 251.632148][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.632166][ T6786] RIP: 0033:0x7f2effb9d68e [ 251.632183][ T6786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.632199][ T6786] RSP: 002b:00007f2efde35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.632221][ T6786] RAX: ffffffffffffffda RBX: 00007f2efde366c0 RCX: 00007f2effb9d68e [ 251.632234][ T6786] RDX: 000000000000000f RSI: 00007f2efde360a0 RDI: 0000000000000004 [ 251.632245][ T6786] RBP: 00007f2efde36090 R08: 0000000000000000 R09: 0000000000000000 [ 251.632257][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.632268][ T6786] R13: 00007f2effe56038 R14: 00007f2effe55fa0 R15: 00007ffc3c9dd548 [ 251.632297][ T6786] [ 252.975714][ T5348] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 253.144771][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 253.147513][ T5348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.147563][ T5348] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.147587][ T5348] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.147606][ T5348] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.147626][ T5348] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 253.148716][ T5348] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.148739][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.148756][ T5348] usb 4-1: SerialNumber: syz [ 253.331858][ T5348] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 253.331882][ T5348] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 253.331920][ T5348] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 254.525558][ T5736] usb 4-1: USB disconnect, device number 8 [ 254.876170][ T6823] tmpfs: Bad value for 'mpol' [ 254.929123][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.929521][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.929898][ T6644] bridge_slave_0: entered allmulticast mode [ 254.953870][ T6644] bridge_slave_0: entered promiscuous mode [ 255.094158][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.103002][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.118550][ T6644] bridge_slave_1: entered allmulticast mode [ 255.134465][ T6644] bridge_slave_1: entered promiscuous mode [ 256.432354][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.432449][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.658164][ T6838] loop1: detected capacity change from 0 to 32768 [ 256.661871][ T6838] BTRFS warning: excessive commit interval 3581, use with care [ 256.717008][ T6838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.270 (6838) [ 258.010444][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.254796][ T6838] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.254834][ T6838] BTRFS info (device loop1): using crc32c checksum algorithm [ 258.458453][ T1485] bridge_slave_1: left allmulticast mode [ 258.458700][ T1485] bridge_slave_1: left promiscuous mode [ 258.495750][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.4.276'. [ 258.498056][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 258.540201][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.544489][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 258.603905][ T6856] loop5: detected capacity change from 0 to 7 [ 258.618655][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 258.626535][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 258.626890][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 258.647853][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 258.649996][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 258.680258][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 258.681682][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 258.723202][ T6838] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 258.791747][ T6838] BTRFS error (device loop1): open_ctree failed: -12 [ 259.477435][ T6856] Dev loop5: unable to read RDB block 7 [ 259.477483][ T6856] loop5: unable to read partition table [ 259.477696][ T6856] loop5: partition table beyond EOD, truncated [ 259.477734][ T6856] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 259.500457][ T6864] FAULT_INJECTION: forcing a failure. [ 259.500457][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 259.500565][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.4.276 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 259.500648][ T6864] Tainted: [L]=SOFTLOCKUP [ 259.500669][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.500701][ T6864] Call Trace: [ 259.500724][ T6864] [ 259.500754][ T6864] dump_stack_lvl+0xe8/0x150 [ 259.500849][ T6864] should_fail_ex+0x467/0x600 [ 259.500939][ T6864] should_failslab+0xa8/0x100 [ 259.501037][ T6864] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 259.501144][ T6864] ? __get_vm_area_node+0x136/0x300 [ 259.501200][ T6864] ? __get_vm_area_node+0x136/0x300 [ 259.501265][ T6864] ? bdev_disk_changed+0x4ca/0x17a0 [ 259.501342][ T6864] __get_vm_area_node+0x136/0x300 [ 259.501424][ T6864] __vmalloc_node_range_noprof+0x358/0x1730 [ 259.501499][ T6864] ? bdev_disk_changed+0x4e0/0x17a0 [ 259.501644][ T6864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.501720][ T6864] ? __kasan_kmalloc+0x93/0xb0 [ 259.501768][ T6864] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 259.501842][ T6864] ? bdev_disk_changed+0x4e0/0x17a0 [ 259.501889][ T6864] vzalloc_noprof+0xb2/0xe0 [ 259.501927][ T6864] ? bdev_disk_changed+0x4e0/0x17a0 [ 259.502007][ T6864] bdev_disk_changed+0x4e0/0x17a0 [ 259.502112][ T6864] ? loop_reread_partitions+0x46/0xf0 [ 259.502217][ T6864] ? __pfx_bdev_disk_changed+0x10/0x10 [ 259.502300][ T6864] ? loop_reread_partitions+0x46/0xf0 [ 259.502387][ T6864] ? mutex_lock_nested+0x168/0x1d0 [ 259.502418][ T6864] loop_reread_partitions+0x5f/0xf0 [ 259.502525][ T6864] lo_ioctl+0x1c71/0x1fe0 [ 259.502637][ T6864] ? __pfx_lo_ioctl+0x10/0x10 [ 259.502721][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.502818][ T6864] ? register_lock_class+0x31/0x2e0 [ 259.502902][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.502991][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.503101][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.503209][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.503315][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.503395][ T6864] ? unwind_next_frame+0x8f/0x2550 [ 259.503510][ T6864] ? is_bpf_text_address+0x26/0x2b0 [ 259.503630][ T6864] ? is_bpf_text_address+0x26/0x2b0 [ 259.503734][ T6864] ? is_bpf_text_address+0x292/0x2b0 [ 259.503822][ T6864] ? is_bpf_text_address+0x26/0x2b0 [ 259.503921][ T6864] ? kernel_text_address+0xa5/0xe0 [ 259.504033][ T6864] ? __kernel_text_address+0xd/0x30 [ 259.504108][ T6864] ? unwind_get_return_address+0x4d/0x90 [ 259.504153][ T6864] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.504220][ T6864] ? arch_stack_walk+0xfb/0x150 [ 259.504265][ T6864] ? stack_trace_save+0xa9/0x100 [ 259.504315][ T6864] ? __pfx_stack_trace_save+0x10/0x10 [ 259.504390][ T6864] ? kasan_save_track+0x4f/0x80 [ 259.504464][ T6864] ? stack_depot_save_flags+0x33/0x800 [ 259.504541][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.504637][ T6864] ? kasan_save_track+0x4f/0x80 [ 259.504693][ T6864] ? kasan_save_track+0x3e/0x80 [ 259.504748][ T6864] ? kasan_save_free_info+0x40/0x50 [ 259.504832][ T6864] ? __kasan_slab_free+0x5c/0x80 [ 259.504870][ T6864] ? kfree+0x1c5/0x6c0 [ 259.504889][ T6864] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 259.504966][ T6864] ? security_file_ioctl+0xc3/0x2a0 [ 259.505031][ T6864] ? __se_sys_ioctl+0x47/0x170 [ 259.505108][ T6864] ? do_syscall_64+0x174/0x580 [ 259.505184][ T6864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.505260][ T6864] ? __asan_memset+0x22/0x50 [ 259.505328][ T6864] ? blk_get_meta_cap+0x19d/0x780 [ 259.505445][ T6864] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 259.505541][ T6864] ? blkdev_common_ioctl+0x14b7/0x3250 [ 259.505638][ T6864] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 259.505729][ T6864] ? kasan_quarantine_put+0xbb/0x1f0 [ 259.505797][ T6864] ? tomoyo_path_number_perm+0x219/0x5f0 [ 259.505828][ T6864] ? tomoyo_path_number_perm+0x219/0x5f0 [ 259.505859][ T6864] ? do_vfs_ioctl+0x1184/0x1550 [ 259.505895][ T6864] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 259.506007][ T6864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.506089][ T6864] ? hook_file_ioctl+0x1f3/0x600 [ 259.506165][ T6864] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.506291][ T6864] ? __pfx_lo_ioctl+0x10/0x10 [ 259.506369][ T6864] blkdev_ioctl+0x5e6/0x750 [ 259.506441][ T6864] ? __pfx_blkdev_ioctl+0x10/0x10 [ 259.506516][ T6864] ? __fget_files+0x2a/0x420 [ 259.506592][ T6864] ? bpf_lsm_file_ioctl+0x9/0x20 [ 259.506675][ T6864] ? __pfx_blkdev_ioctl+0x10/0x10 [ 259.506780][ T6864] __se_sys_ioctl+0xff/0x170 [ 259.506865][ T6864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.506923][ T6864] do_syscall_64+0x174/0x580 [ 259.507007][ T6864] ? clear_bhb_loop+0x40/0x90 [ 259.507079][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.507135][ T6864] RIP: 0033:0x7f2effbdce59 [ 259.507196][ T6864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.507242][ T6864] RSP: 002b:00007f2efde15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.507304][ T6864] RAX: ffffffffffffffda RBX: 00007f2effe56090 RCX: 00007f2effbdce59 [ 259.507339][ T6864] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 259.507381][ T6864] RBP: 00007f2efde15090 R08: 0000000000000000 R09: 0000000000000000 [ 259.507413][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.507453][ T6864] R13: 00007f2effe56128 R14: 00007f2effe56090 R15: 00007ffc3c9dd548 [ 259.507538][ T6864] [ 259.555806][ T1485] bridge_slave_0: left allmulticast mode [ 259.555843][ T1485] bridge_slave_0: left promiscuous mode [ 259.556422][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.587284][ T6864] syz.4.276: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 259.737284][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.4.276 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 259.737380][ T6864] Tainted: [L]=SOFTLOCKUP [ 259.737402][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.737442][ T6864] Call Trace: [ 259.737465][ T6864] [ 259.737489][ T6864] dump_stack_lvl+0xe8/0x150 [ 259.737578][ T6864] warn_alloc+0x24c/0x270 [ 259.737673][ T6864] ? __pfx_warn_alloc+0x10/0x10 [ 259.737762][ T6864] ? __get_vm_area_node+0x2af/0x300 [ 259.737867][ T6864] __vmalloc_node_range_noprof+0x37d/0x1730 [ 259.738038][ T6864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.738106][ T6864] ? __kasan_kmalloc+0x93/0xb0 [ 259.738182][ T6864] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 259.738252][ T6864] ? bdev_disk_changed+0x4e0/0x17a0 [ 259.738326][ T6864] vzalloc_noprof+0xb2/0xe0 [ 259.738400][ T6864] ? bdev_disk_changed+0x4e0/0x17a0 [ 259.738443][ T6864] bdev_disk_changed+0x4e0/0x17a0 [ 259.738482][ T6864] ? loop_reread_partitions+0x46/0xf0 [ 259.738524][ T6864] ? __pfx_bdev_disk_changed+0x10/0x10 [ 259.738658][ T6864] ? loop_reread_partitions+0x46/0xf0 [ 259.738690][ T6864] ? mutex_lock_nested+0x168/0x1d0 [ 259.738778][ T6864] loop_reread_partitions+0x5f/0xf0 [ 259.738864][ T6864] lo_ioctl+0x1c71/0x1fe0 [ 259.738988][ T6864] ? __pfx_lo_ioctl+0x10/0x10 [ 259.739093][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.739139][ T6864] ? register_lock_class+0x31/0x2e0 [ 259.739179][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.739224][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.739382][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.739515][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.739624][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.739752][ T6864] ? unwind_next_frame+0x8f/0x2550 [ 259.739874][ T6864] ? is_bpf_text_address+0x26/0x2b0 [ 259.740002][ T6864] ? is_bpf_text_address+0x26/0x2b0 [ 259.740104][ T6864] ? is_bpf_text_address+0x292/0x2b0 [ 259.740139][ T6864] ? is_bpf_text_address+0x26/0x2b0 [ 259.740232][ T6864] ? kernel_text_address+0xa5/0xe0 [ 259.740319][ T6864] ? __kernel_text_address+0xd/0x30 [ 259.740405][ T6864] ? unwind_get_return_address+0x4d/0x90 [ 259.740498][ T6864] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.740577][ T6864] ? arch_stack_walk+0xfb/0x150 [ 259.740710][ T6864] ? stack_trace_save+0xa9/0x100 [ 259.740796][ T6864] ? __pfx_stack_trace_save+0x10/0x10 [ 259.740855][ T6864] ? kasan_save_track+0x4f/0x80 [ 259.740925][ T6864] ? stack_depot_save_flags+0x33/0x800 [ 259.741013][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 259.741047][ T6864] ? kasan_save_track+0x4f/0x80 [ 259.741068][ T6864] ? kasan_save_track+0x3e/0x80 [ 259.741142][ T6864] ? kasan_save_free_info+0x40/0x50 [ 259.741261][ T6864] ? __kasan_slab_free+0x5c/0x80 [ 259.741329][ T6864] ? kfree+0x1c5/0x6c0 [ 259.741403][ T6864] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 259.741478][ T6864] ? security_file_ioctl+0xc3/0x2a0 [ 259.741551][ T6864] ? __se_sys_ioctl+0x47/0x170 [ 259.741627][ T6864] ? do_syscall_64+0x174/0x580 [ 259.741730][ T6864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.741805][ T6864] ? __asan_memset+0x22/0x50 [ 259.741866][ T6864] ? blk_get_meta_cap+0x19d/0x780 [ 259.741960][ T6864] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 259.742057][ T6864] ? blkdev_common_ioctl+0x14b7/0x3250 [ 259.742154][ T6864] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 259.742239][ T6864] ? kasan_quarantine_put+0xbb/0x1f0 [ 259.742323][ T6864] ? tomoyo_path_number_perm+0x219/0x5f0 [ 259.742410][ T6864] ? tomoyo_path_number_perm+0x219/0x5f0 [ 259.742503][ T6864] ? do_vfs_ioctl+0x1184/0x1550 [ 259.742612][ T6864] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 259.742743][ T6864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.742823][ T6864] ? hook_file_ioctl+0x1f3/0x600 [ 259.742902][ T6864] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.743022][ T6864] ? __pfx_lo_ioctl+0x10/0x10 [ 259.743109][ T6864] blkdev_ioctl+0x5e6/0x750 [ 259.743204][ T6864] ? __pfx_blkdev_ioctl+0x10/0x10 [ 259.743276][ T6864] ? __fget_files+0x2a/0x420 [ 259.743360][ T6864] ? bpf_lsm_file_ioctl+0x9/0x20 [ 259.743438][ T6864] ? __pfx_blkdev_ioctl+0x10/0x10 [ 259.743521][ T6864] __se_sys_ioctl+0xff/0x170 [ 259.743599][ T6864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.743664][ T6864] do_syscall_64+0x174/0x580 [ 259.743749][ T6864] ? clear_bhb_loop+0x40/0x90 [ 259.743816][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.743882][ T6864] RIP: 0033:0x7f2effbdce59 [ 259.743955][ T6864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.744020][ T6864] RSP: 002b:00007f2efde15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.744092][ T6864] RAX: ffffffffffffffda RBX: 00007f2effe56090 RCX: 00007f2effbdce59 [ 259.744134][ T6864] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 259.744166][ T6864] RBP: 00007f2efde15090 R08: 0000000000000000 R09: 0000000000000000 [ 259.744206][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.744226][ T6864] R13: 00007f2effe56128 R14: 00007f2effe56090 R15: 00007ffc3c9dd548 [ 259.744258][ T6864] [ 259.849505][ T6864] Mem-Info: [ 259.849552][ T6864] active_anon:9342 inactive_anon:0 isolated_anon:0 [ 259.849552][ T6864] active_file:0 inactive_file:56836 isolated_file:0 [ 259.849552][ T6864] unevictable:768 dirty:179 writeback:0 [ 259.849552][ T6864] slab_reclaimable:11877 slab_unreclaimable:101751 [ 259.849552][ T6864] mapped:33223 shmem:4180 pagetables:1246 [ 259.849552][ T6864] sec_pagetables:0 bounce:0 [ 259.849552][ T6864] kernel_misc_reclaimable:0 [ 259.849552][ T6864] free:1311589 free_pcp:5239 free_cma:0 [ 259.849714][ T6864] Node 0 active_anon:37368kB inactive_anon:0kB active_file:0kB inactive_file:227136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132892kB dirty:716kB writeback:0kB shmem:15184kB kernel_stack:13416kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 259.849863][ T6864] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 259.849999][ T6864] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.850183][ T6864] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 259.850282][ T6864] Node 0 DMA32 free:1297040kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37368kB inactive_anon:0kB active_file:0kB inactive_file:227136kB unevictable:1536kB writepending:716kB zspages:0kB present:3129332kB managed:2554316kB mlocked:0kB bounce:0kB free_pcp:20948kB local_pcp:14840kB free_cma:0kB [ 259.856817][ T6864] lowmem_reserve[]: 0 0 1 1 1 [ 259.856948][ T6864] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1160kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 259.857196][ T6864] lowmem_reserve[]: 0 0 0 0 0 [ 259.857302][ T6864] Node 1 Normal free:3933956kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.857628][ T6864] lowmem_reserve[]: 0 0 0 0 0 [ 259.858200][ T6864] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 259.858520][ T6864] Node 0 DMA32: 330*4kB (UME) 873*8kB (UME) 668*16kB (UME) 267*32kB (UME) 266*64kB (UM) 141*128kB (UME) 120*256kB (UM) 43*512kB (UM) 12*1024kB (M) 3*2048kB (UM) 284*4096kB (UM) = 1297040kB [ 259.879878][ T6864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.880237][ T6864] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 10*16kB (UM) 8*32kB (UM) 11*64kB (UM) 5*128kB (UM) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3933956kB [ 259.880885][ T6864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.880948][ T6864] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.881000][ T6864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.881047][ T6864] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.881097][ T6864] 61010 total pagecache pages [ 259.881119][ T6864] 0 pages in swap cache [ 259.881141][ T6864] Free swap = 124996kB [ 259.881163][ T6864] Total swap = 124996kB [ 259.881186][ T6864] 2097051 pages RAM [ 259.881207][ T6864] 0 pages HighMem/MovableOnly [ 259.881235][ T6864] 426568 pages reserved [ 259.881264][ T6864] 0 pages cma reserved [ 261.589992][ T5626] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 261.776922][ T6887] loop4: detected capacity change from 0 to 1024 [ 261.792431][ T5626] usb 4-1: Using ep0 maxpacket: 32 [ 261.814404][ T5626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.814476][ T5626] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.814507][ T5626] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.814533][ T5626] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 261.814560][ T5626] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 261.820228][ T5626] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.820265][ T5626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.820290][ T5626] usb 4-1: SerialNumber: syz [ 261.944246][ T5626] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 261.944273][ T5626] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 261.944313][ T5626] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 262.043163][ T6887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.021683][ T6892] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 263.091413][ T6892] EXT4-fs (loop4): Remounting filesystem read-only [ 263.252920][ T5626] usb 4-1: USB disconnect, device number 9 [ 265.007000][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.286'. [ 265.007047][ T6906] netlink: 'syz.3.286': attribute type 2 has an invalid length. [ 265.007064][ T6906] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 265.007079][ T6906] netlink: 96 bytes leftover after parsing attributes in process `syz.3.286'. [ 265.112554][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.295795][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.375428][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.440969][ T1485] bond0 (unregistering): Released all slaves [ 266.770034][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.763744][ T6644] team0: Port device team_slave_0 added [ 267.816817][ T6644] team0: Port device team_slave_1 added [ 268.101291][ T6913] loop4: detected capacity change from 0 to 32768 [ 268.102459][ T6913] BTRFS warning: excessive commit interval 3581, use with care [ 268.240449][ T6913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.287 (6913) [ 268.594911][ T1485] tipc: Left network mode [ 269.312487][ T6913] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.312532][ T6913] BTRFS info (device loop4): using crc32c checksum algorithm [ 269.315552][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 269.315941][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 269.316420][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 269.316798][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 269.317227][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 269.317617][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 269.317934][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 269.321417][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 269.321815][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 269.322191][ T6913] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 269.484055][ T6913] BTRFS error (device loop4): open_ctree failed: -12 [ 269.648822][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.648841][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.648873][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.869081][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.869101][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.869135][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.420035][ T6958] loop1: detected capacity change from 0 to 2048 [ 271.426163][ T6958] udf: Unknown parameter '0x000000000000000001777777777777777777777' [ 271.593577][ T5736] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.838770][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 271.842492][ T5736] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.842558][ T5736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.842590][ T5736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.842616][ T5736] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 271.842643][ T5736] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 271.968018][ T5736] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.968055][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.968077][ T5736] usb 4-1: SerialNumber: syz [ 272.323239][ T6958] loop1: detected capacity change from 0 to 32768 [ 272.366046][ T5736] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 272.366067][ T5736] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 272.366097][ T5736] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 272.475274][ T6958] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 272.652469][ T6958] XFS (loop1): Ending clean mount [ 272.705087][ T6958] XFS (loop1): Quotacheck needed: Please wait. [ 272.725749][ T5626] usb 4-1: USB disconnect, device number 10 [ 273.062801][ T6644] hsr_slave_0: entered promiscuous mode [ 273.092447][ T6644] hsr_slave_1: entered promiscuous mode [ 273.112703][ T6644] debugfs: 'hsr0' already exists in 'hsr' [ 273.112725][ T6644] Cannot create hsr debugfs directory [ 275.199231][ T6992] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 275.430202][ T6958] XFS (loop1): Quotacheck: Done. [ 275.773352][ T5613] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.072246][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 278.341725][ T7015] loop4: detected capacity change from 0 to 128 [ 278.577275][ T7015] FAT-fs (loop4): bogus logical sector size 23296 [ 278.577301][ T7015] FAT-fs (loop4): Can't find a valid FAT filesystem [ 278.633403][ T7009] loop3: detected capacity change from 0 to 32768 [ 278.658435][ T7009] BTRFS warning: excessive commit interval 3581, use with care [ 278.692377][ T7009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.306 (7009) [ 279.573397][ T7009] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.573437][ T7009] BTRFS info (device loop3): using crc32c checksum algorithm [ 279.918780][ T5745] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 280.064751][ T5745] usb 1-1: Using ep0 maxpacket: 32 [ 280.075413][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.075569][ T5745] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.075656][ T5745] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.075721][ T5745] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.075788][ T5745] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 280.079757][ T5745] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.079844][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.079909][ T5745] usb 1-1: SerialNumber: syz [ 280.423650][ T5745] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 280.423674][ T5745] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 280.423710][ T5745] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 281.178024][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 281.178076][ T7047] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 281.608745][ T7009] BTRFS error (device loop3): open_ctree failed: -4 [ 281.798362][ T5745] usb 1-1: USB disconnect, device number 17 [ 281.962321][ T7050] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 286.671078][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 287.395960][ T7085] loop1: detected capacity change from 0 to 256 [ 287.441146][ T7107] FAULT_INJECTION: forcing a failure. [ 287.441146][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.441187][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.3.320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.441220][ T7107] Tainted: [L]=SOFTLOCKUP [ 287.441229][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.441243][ T7107] Call Trace: [ 287.441251][ T7107] [ 287.441261][ T7107] dump_stack_lvl+0xe8/0x150 [ 287.441298][ T7107] should_fail_ex+0x467/0x600 [ 287.441334][ T7107] _copy_from_user+0x2d/0xb0 [ 287.441359][ T7107] ___sys_sendmsg+0x1c6/0x360 [ 287.441395][ T7107] ? __lock_acquire+0x683/0x2ce0 [ 287.441433][ T7107] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.441506][ T7107] ? __fget_files+0x2a/0x420 [ 287.441531][ T7107] ? __fget_files+0x3a8/0x420 [ 287.441569][ T7107] __x64_sys_sendmsg+0x1b7/0x290 [ 287.441607][ T7107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.441662][ T7107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.441687][ T7107] do_syscall_64+0x174/0x580 [ 287.441720][ T7107] ? trace_irq_disable+0x3b/0x140 [ 287.441753][ T7107] ? clear_bhb_loop+0x40/0x90 [ 287.441783][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.441806][ T7107] RIP: 0033:0x7febd43dce59 [ 287.441826][ T7107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.441847][ T7107] RSP: 002b:00007febd2636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.441872][ T7107] RAX: ffffffffffffffda RBX: 00007febd4655fa0 RCX: 00007febd43dce59 [ 287.441888][ T7107] RDX: 0000000020000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 287.441903][ T7107] RBP: 00007febd2636090 R08: 0000000000000000 R09: 0000000000000000 [ 287.441919][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.441932][ T7107] R13: 00007febd4656038 R14: 00007febd4655fa0 R15: 00007ffe5a7526a8 [ 287.441967][ T7107] [ 287.787579][ T5864] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 288.254001][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 288.264475][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.264537][ T5864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.264569][ T5864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.264594][ T5864] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 288.264619][ T5864] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 288.265833][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.265865][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.265890][ T5864] usb 1-1: SerialNumber: syz [ 288.268064][ T1485] hsr_slave_0: left promiscuous mode [ 289.042385][ T5864] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 289.042418][ T5864] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 289.042459][ T5864] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 289.245855][ T1485] hsr_slave_1: left promiscuous mode [ 289.247232][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.247369][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.314543][ T37] usb 1-1: USB disconnect, device number 18 [ 289.389630][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.389662][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.615876][ T1485] veth1_macvtap: left promiscuous mode [ 289.667787][ T1485] veth0_macvtap: left promiscuous mode [ 289.668207][ T1485] veth1_vlan: left promiscuous mode [ 289.695318][ T1485] veth0_vlan: left promiscuous mode [ 289.738809][ T7128] loop3: detected capacity change from 0 to 512 [ 289.768002][ T7128] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.326: inode has both inline data and extents flags [ 289.768043][ T7128] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.771706][ T7128] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.326: couldn't read orphan inode 15 (err -117) [ 289.771747][ T7128] loop3: lost filesystem error report for type 5 error -117 [ 289.784847][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 289.784897][ C0] EXT4-fs (loop3): initial error at time 1782191815: ext4_orphan_get:1399: inode 15 [ 289.784995][ C0] EXT4-fs (loop3): last error at time 1782191815: ext4_orphan_get:1404 [ 289.899975][ T7128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.953062][ T7137] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 291.642121][ T7131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 291.994059][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.518868][ T7148] loop1: detected capacity change from 0 to 64 [ 293.124817][ T7148] loop1: detected capacity change from 0 to 32768 [ 293.127239][ T7148] btrfs: Deprecated parameter 'usebackuproot' [ 293.127264][ T7148] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 293.438521][ T7148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.330 (7148) [ 293.527303][ T7148] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.527335][ T7148] BTRFS info (device loop1): using crc32c checksum algorithm [ 293.885212][ T174] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 293.885334][ T7148] BTRFS error (device loop1): failed to load root extent [ 293.885373][ T7148] BTRFS warning (device loop1): try to load backup roots slot 1 [ 293.885947][ T3385] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 293.886102][ T7148] BTRFS warning (device loop1): couldn't read tree root [ 293.886124][ T7148] BTRFS warning (device loop1): try to load backup roots slot 2 [ 293.886751][ T174] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 293.889100][ T7148] BTRFS warning (device loop1): couldn't read tree root [ 293.889126][ T7148] BTRFS warning (device loop1): try to load backup roots slot 3 [ 294.036672][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.038017][ T7148] BTRFS info (device loop1): rebuilding free space tree [ 294.239474][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.306840][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.461647][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.522563][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.705730][ T7148] BTRFS info (device loop1): checking UUID tree [ 295.705820][ T7148] BTRFS error (device loop1): failed to check the UUID tree: -4 [ 295.818829][ T7148] BTRFS error (device loop1): open_ctree failed: -4 [ 296.246211][ T5864] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 296.394513][ T5864] usb 5-1: device descriptor read/64, error -71 [ 296.719822][ T5864] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 296.890676][ T5864] usb 5-1: device descriptor read/64, error -71 [ 296.984827][ T5745] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 297.120294][ T5864] usb usb5-port1: attempt power cycle [ 297.168191][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 297.170902][ T5745] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.170959][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.170990][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.171015][ T5745] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 297.171041][ T5745] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 297.444562][ T5622] Bluetooth: hci0: command tx timeout [ 297.457833][ T5745] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.457868][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.457890][ T5745] usb 2-1: SerialNumber: syz [ 297.569416][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 297.668693][ T5745] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 297.668720][ T5745] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 297.668759][ T5745] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 297.846830][ T7201] loop3: detected capacity change from 0 to 64 [ 298.026496][ T10] usb 2-1: USB disconnect, device number 12 [ 298.319993][ T5864] usb 5-1: device descriptor read/8, error -71 [ 298.653814][ T7201] loop3: detected capacity change from 0 to 32768 [ 298.654724][ T7201] btrfs: Deprecated parameter 'usebackuproot' [ 298.654740][ T7201] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 298.664792][ T7201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.338 (7201) [ 298.727937][ T7201] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.727967][ T7201] BTRFS info (device loop3): using crc32c checksum algorithm [ 299.002409][ T3385] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 299.002624][ T7201] BTRFS error (device loop3): failed to load root extent [ 299.002667][ T7201] BTRFS warning (device loop3): try to load backup roots slot 1 [ 299.025832][ T148] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 299.026002][ T7201] BTRFS warning (device loop3): couldn't read tree root [ 299.026026][ T7201] BTRFS warning (device loop3): try to load backup roots slot 2 [ 299.040290][ T3420] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 299.040454][ T7201] BTRFS warning (device loop3): couldn't read tree root [ 299.040479][ T7201] BTRFS warning (device loop3): try to load backup roots slot 3 [ 299.374867][ T7201] BTRFS info (device loop3): rebuilding free space tree [ 299.630401][ T5622] Bluetooth: hci0: command tx timeout [ 299.920062][ T7201] BTRFS info (device loop3): checking UUID tree [ 299.930321][ T7201] BTRFS info (device loop3): enabling ssd optimizations [ 299.930353][ T7201] BTRFS info (device loop3): turning on async discard [ 299.930372][ T7201] BTRFS info (device loop3): enabling free space tree [ 299.930391][ T7201] BTRFS info (device loop3): force clearing of disk cache [ 299.930410][ T7201] BTRFS info (device loop3): enabling auto defrag [ 299.930429][ T7201] BTRFS info (device loop3): trying to use backup root at mount time [ 299.930451][ T7201] BTRFS info (device loop3): use zstd compression, level 3 [ 301.490330][ T7217] loop1: detected capacity change from 0 to 32768 [ 301.521880][ T7217] BTRFS warning: excessive commit interval 3581, use with care [ 301.589827][ T7217] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 2bfd8a05-0208-4ba6-af92-f45e89df3444 [ 301.589903][ T7217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.340 (7217) [ 301.688393][ T5622] Bluetooth: hci0: command tx timeout [ 301.846609][ T7217] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.846646][ T7217] BTRFS info (device loop1): using crc32c checksum algorithm [ 302.029571][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 302.059370][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 302.060570][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 302.096809][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 302.097747][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 302.101696][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 302.103911][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 302.109621][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 302.144787][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 302.201082][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 302.284692][ T7217] BTRFS error (device loop1): open_ctree failed: -12 [ 302.293828][ T5610] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.222115][ T7246] loop1: detected capacity change from 0 to 64 [ 303.463540][ T7248] loop3: detected capacity change from 0 to 64 [ 303.589465][ T7246] loop1: detected capacity change from 0 to 32768 [ 303.590657][ T7246] btrfs: Deprecated parameter 'usebackuproot' [ 303.590679][ T7246] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 303.751386][ T7246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.344 (7246) [ 303.764466][ T5622] Bluetooth: hci0: command tx timeout [ 303.832613][ T7248] loop3: detected capacity change from 0 to 32768 [ 303.833815][ T7248] btrfs: Deprecated parameter 'usebackuproot' [ 303.833839][ T7248] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 303.923858][ T7248] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 1603f515-dba2-4185-bbef-353f1b30eba1 [ 303.923911][ T7246] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.923929][ T7248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.342 (7248) [ 303.923941][ T7246] BTRFS info (device loop1): using crc32c checksum algorithm [ 303.959808][ T7248] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.959846][ T7248] BTRFS info (device loop3): using crc32c checksum algorithm [ 304.303340][ T3385] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 304.303511][ T7246] BTRFS error (device loop1): failed to load root extent [ 304.303557][ T7246] BTRFS warning (device loop1): try to load backup roots slot 1 [ 304.304929][ T3420] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 304.313750][ T7246] BTRFS warning (device loop1): couldn't read tree root [ 304.313780][ T7246] BTRFS warning (device loop1): try to load backup roots slot 2 [ 304.316655][ T3420] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 304.316893][ T7246] BTRFS warning (device loop1): couldn't read tree root [ 304.316915][ T7246] BTRFS warning (device loop1): try to load backup roots slot 3 [ 304.458824][ T3402] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 304.459024][ T7248] BTRFS error (device loop3): failed to load root extent [ 304.459066][ T7248] BTRFS warning (device loop3): try to load backup roots slot 1 [ 304.470103][ T174] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 304.470314][ T7248] BTRFS warning (device loop3): couldn't read tree root [ 304.470338][ T7248] BTRFS warning (device loop3): try to load backup roots slot 2 [ 304.492150][ T44] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 304.492379][ T7248] BTRFS warning (device loop3): couldn't read tree root [ 304.492404][ T7248] BTRFS warning (device loop3): try to load backup roots slot 3 [ 304.515547][ T7246] BTRFS info (device loop1): rebuilding free space tree [ 304.586741][ T7248] BTRFS info (device loop3): rebuilding free space tree [ 304.744449][ T7248] BTRFS info (device loop3): checking UUID tree [ 304.749467][ T7248] BTRFS info (device loop3): enabling ssd optimizations [ 304.749497][ T7248] BTRFS info (device loop3): turning on async discard [ 304.749515][ T7248] BTRFS info (device loop3): enabling free space tree [ 304.749532][ T7248] BTRFS info (device loop3): force clearing of disk cache [ 304.749550][ T7248] BTRFS info (device loop3): enabling auto defrag [ 304.749567][ T7248] BTRFS info (device loop3): trying to use backup root at mount time [ 304.749588][ T7248] BTRFS info (device loop3): use zstd compression, level 3 [ 305.027268][ T7246] BTRFS info (device loop1): checking UUID tree [ 305.038840][ T7246] BTRFS info (device loop1): enabling ssd optimizations [ 305.038870][ T7246] BTRFS info (device loop1): turning on async discard [ 305.038890][ T7246] BTRFS info (device loop1): enabling free space tree [ 305.038907][ T7246] BTRFS info (device loop1): force clearing of disk cache [ 305.038926][ T7246] BTRFS info (device loop1): enabling auto defrag [ 305.038944][ T7246] BTRFS info (device loop1): trying to use backup root at mount time [ 305.038964][ T7246] BTRFS info (device loop1): use zstd compression, level 3 [ 305.537517][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 305.766789][ T7286] loop4: detected capacity change from 0 to 512 [ 305.898559][ T5610] BTRFS info (device loop3): last unmount of filesystem 1603f515-dba2-4185-bbef-353f1b30eba1 [ 305.969657][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 306.050477][ T5613] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.113563][ T5626] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 307.274500][ T5626] usb 2-1: Using ep0 maxpacket: 32 [ 307.276895][ T5626] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.276953][ T5626] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.276984][ T5626] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.277006][ T5626] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 307.277045][ T5626] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 307.278443][ T5626] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.278481][ T5626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.278514][ T5626] usb 2-1: SerialNumber: syz [ 307.281970][ T5745] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 307.432774][ T7286] EXT4-fs (loop4): 1 orphan inode deleted [ 307.504756][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 307.510637][ T5745] usb 4-1: config 2 has an invalid interface number: 29 but max is 3 [ 307.510668][ T5745] usb 4-1: config 2 has an invalid interface number: 84 but max is 3 [ 307.510690][ T5745] usb 4-1: config 2 has an invalid interface number: 8 but max is 3 [ 307.510715][ T5745] usb 4-1: config 2 has an invalid interface number: 197 but max is 3 [ 307.510739][ T5745] usb 4-1: config 2 has an invalid interface number: 69 but max is 3 [ 307.510765][ T5745] usb 4-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 307.510798][ T5745] usb 4-1: config 2 has no interface number 0 [ 307.510817][ T5745] usb 4-1: config 2 has no interface number 1 [ 307.510835][ T5745] usb 4-1: config 2 has no interface number 2 [ 307.510854][ T5745] usb 4-1: config 2 has no interface number 3 [ 307.511021][ T5745] usb 4-1: config 2 has no interface number 4 [ 307.511143][ T5745] usb 4-1: config 2 interface 29 altsetting 60 endpoint 0xA has an invalid bInterval 240, changing to 11 [ 307.511179][ T5745] usb 4-1: config 2 interface 29 altsetting 60 has an endpoint descriptor with address 0x18, changing to 0x8 [ 307.511210][ T5745] usb 4-1: config 2 interface 29 altsetting 60 endpoint 0x8 has invalid maxpacket 17540, setting to 1024 [ 307.511242][ T5745] usb 4-1: config 2 interface 29 altsetting 60 bulk endpoint 0x8 has invalid maxpacket 1024 [ 307.511273][ T5745] usb 4-1: config 2 interface 29 altsetting 60 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 307.511305][ T5745] usb 4-1: too many endpoints for config 2 interface 84 altsetting 193: 50, using maximum allowed: 30 [ 307.511474][ T5745] usb 4-1: config 2 interface 84 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 307.511543][ T5745] usb 4-1: config 2 interface 8 altsetting 3 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 307.511576][ T5745] usb 4-1: config 2 interface 8 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 307.511626][ T5745] usb 4-1: config 2 interface 8 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 307.511653][ T5745] usb 4-1: config 2 interface 8 altsetting 3 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 307.511679][ T5745] usb 4-1: config 2 interface 8 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 307.511700][ T5745] usb 4-1: config 2 interface 8 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 307.511721][ T5745] usb 4-1: config 2 interface 8 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 307.511753][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 307.511773][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.511791][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.511810][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 307.511830][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 307.511858][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 307.511884][ T5745] usb 4-1: config 2 interface 197 altsetting 0 endpoint 0x5 has an invalid bInterval 213, changing to 7 [ 307.511909][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 307.511929][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 307.511951][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 307.511974][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 307.511995][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.512016][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 307.512037][ T5745] usb 4-1: config 2 interface 197 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 307.512071][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 307.512093][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 307.618100][ T44] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 307.619381][ T44] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 307.619456][ T44] loop4: lost filesystem error report for type 5 error -117 [ 307.789100][ T7286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.805669][ T7286] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.810126][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 307.810157][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 307.810180][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 307.810204][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 307.810230][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 307.810256][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 307.810282][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 307.810307][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 307.810335][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 307.810362][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 307.810389][ T5745] usb 4-1: config 2 interface 69 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 307.810422][ T5745] usb 4-1: config 2 interface 29 has no altsetting 0 [ 307.810442][ T5745] usb 4-1: config 2 interface 84 has no altsetting 0 [ 307.810462][ T5745] usb 4-1: config 2 interface 8 has no altsetting 0 [ 307.810481][ T5745] usb 4-1: config 2 interface 69 has no altsetting 0 [ 307.882683][ T5745] usb 4-1: New USB device found, idVendor=04b3, idProduct=454c, bcdDevice=6b.e6 [ 307.882719][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.882740][ T5745] usb 4-1: Product: 屛颷ㄽᎿ끂둘㻞遫䢆뛣㜞㡙誟䶒ﮑ逪䑙⥿敤ᔙ묅ዥ쫶菮㺖龅ꠠ冢찆坄螤ꢃ겉녤⼌뚂磴税㬐费浐嘆孷䓧睢辛德ḱ휵혗ሳ瓇屝ୌࢽ⿏䨗䜱Ԝ꽽壦꼅昂䤥䈎셩ॸ鰵芷硳递팊ꭎၨ㞍采ᢪ♌♎鿷﬑뼣覚≐뽬顑螺瞾钟ᔆ꺗ꟵㅳꞘ犿䴯㈿࠺鹬᯵⼆㙜멛誝 [ 307.882777][ T5745] usb 4-1: Manufacturer: 練髃꜌揺戤ୈろ⇫᷋햗僺惙쉆쇜廽㿅ུ猤钇쌼ꞝ쫀㬡遛ラꙆ퉦尚嵿⣾ꮠꁊ຅ [ 307.882799][ T5745] usb 4-1: SerialNumber: ః푅嶵ሗ䮣ϻ拾ﻄ츑횣뙣셫我纈槅犎匤ﾏ甤돸鶥쉈넟ꝵ䟎錣서뱁궮퉵⪿⹀吣彳ꎙī递ซ㳙躴霞柙⑐鯥橁跭팯Ⓙ᪝脶虶虫籩䭡■憈熳⪑됟䟙秊䨻脉݊竎ꂑ哴택穈ꂎ㰅胜₟嶭鎑 [ 308.373890][ T7286] [ 308.373903][ T7286] ====================================================== [ 308.373914][ T7286] WARNING: possible circular locking dependency detected [ 308.373934][ T7286] syzkaller #0 Tainted: G L [ 308.373947][ T7286] ------------------------------------------------------ [ 308.373957][ T7286] syz.4.346/7286 is trying to acquire lock: [ 308.373971][ T7286] ffff8880292a47f0 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 308.374036][ T7286] [ 308.374036][ T7286] but task is already holding lock: [ 308.374045][ T7286] ffff88801bbc8cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 308.374094][ T7286] [ 308.374094][ T7286] which lock already depends on the new lock. [ 308.374094][ T7286] [ 308.374103][ T7286] [ 308.374103][ T7286] the existing dependency chain (in reverse order) is: [ 308.374111][ T7286] [ 308.374111][ T7286] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 308.374141][ T7286] percpu_down_read_internal+0x48/0x1d0 [ 308.374163][ T7286] ext4_writepages+0x205/0x3b0 [ 308.374183][ T7286] do_writepages+0x338/0x560 [ 308.374218][ T7286] __writeback_single_inode+0x12e/0xf90 [ 308.374242][ T7286] writeback_single_inode+0x4dd/0xe10 [ 308.374276][ T7286] write_inode_now+0x1c2/0x290 [ 308.374307][ T7286] iput+0x98b/0xf00 [ 308.374329][ T7286] ext4_xattr_block_set+0x1b0c/0x2a80 [ 308.374349][ T7286] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 308.374368][ T7286] __ext4_expand_extra_isize+0x30d/0x400 [ 308.374402][ T7286] __ext4_mark_inode_dirty+0x455/0x700 [ 308.374428][ T7286] ext4_evict_inode+0x976/0x10c0 [ 308.374454][ T7286] evict+0x624/0xb50 [ 308.374480][ T7286] ext4_orphan_cleanup+0xc7a/0x14c0 [ 308.374508][ T7286] ext4_fill_super+0x5cc0/0x65d0 [ 308.374532][ T7286] get_tree_bdev_flags+0x430/0x4f0 [ 308.374559][ T7286] vfs_get_tree+0x92/0x2a0 [ 308.374587][ T7286] do_new_mount+0x319/0xdc0 [ 308.374608][ T7286] __se_sys_mount+0x31d/0x420 [ 308.374629][ T7286] do_syscall_64+0x174/0x580 [ 308.374659][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.374681][ T7286] [ 308.374681][ T7286] -> #0 (sb_internal){.+.+}-{0:0}: [ 308.374713][ T7286] __lock_acquire+0x1520/0x2ce0 [ 308.374747][ T7286] lock_acquire+0x106/0x350 [ 308.374776][ T7286] percpu_down_read_internal+0x48/0x1d0 [ 308.374852][ T7286] ext4_evict_inode+0x426/0x10c0 [ 308.374878][ T7286] evict+0x624/0xb50 [ 308.374908][ T7286] ext4_ext_migrate+0xddf/0x10e0 [ 308.374929][ T7286] ext4_ioctl+0x234f/0x4b80 [ 308.374953][ T7286] __se_sys_ioctl+0xff/0x170 [ 308.374984][ T7286] do_syscall_64+0x174/0x580 [ 308.375015][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.375036][ T7286] [ 308.375036][ T7286] other info that might help us debug this: [ 308.375036][ T7286] [ 308.375044][ T7286] Possible unsafe locking scenario: [ 308.375044][ T7286] [ 308.375052][ T7286] CPU0 CPU1 [ 308.375059][ T7286] ---- ---- [ 308.375067][ T7286] lock(&sbi->s_writepages_rwsem); [ 308.375083][ T7286] lock(sb_internal); [ 308.375100][ T7286] lock(&sbi->s_writepages_rwsem); [ 308.375119][ T7286] rlock(sb_internal); [ 308.375134][ T7286] [ 308.375134][ T7286] *** DEADLOCK *** [ 308.375134][ T7286] [ 308.375140][ T7286] 3 locks held by syz.4.346/7286: [ 308.375153][ T7286] #0: ffff8880292a4500 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 308.375222][ T7286] #1: ffff888060be3388 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: ext4_ioctl+0x2347/0x4b80 [ 308.375285][ T7286] #2: ffff88801bbc8cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 308.375339][ T7286] [ 308.375339][ T7286] stack backtrace: [ 308.375357][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.4.346 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.375388][ T7286] Tainted: [L]=SOFTLOCKUP [ 308.375396][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.375411][ T7286] Call Trace: [ 308.375419][ T7286] [ 308.375429][ T7286] dump_stack_lvl+0xe8/0x150 [ 308.375460][ T7286] print_circular_bug+0x2e1/0x300 [ 308.375486][ T7286] check_noncircular+0x12e/0x150 [ 308.375513][ T7286] __lock_acquire+0x1520/0x2ce0 [ 308.375548][ T7286] ? __lock_acquire+0x683/0x2ce0 [ 308.375585][ T7286] ? ext4_evict_inode+0x426/0x10c0 [ 308.375610][ T7286] lock_acquire+0x106/0x350 [ 308.375641][ T7286] ? ext4_evict_inode+0x426/0x10c0 [ 308.375677][ T7286] percpu_down_read_internal+0x48/0x1d0 [ 308.375699][ T7286] ? ext4_evict_inode+0x426/0x10c0 [ 308.375726][ T7286] ext4_evict_inode+0x426/0x10c0 [ 308.375771][ T7286] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 308.375812][ T7286] ? __pfx_ext4_evict_inode+0x10/0x10 [ 308.375839][ T7286] ? rt_spin_unlock+0x157/0x200 [ 308.375866][ T7286] ? rt_spin_unlock+0x163/0x200 [ 308.375892][ T7286] ? __pfx_ext4_evict_inode+0x10/0x10 [ 308.375921][ T7286] evict+0x624/0xb50 [ 308.375959][ T7286] ? __pfx_evict+0x10/0x10 [ 308.375999][ T7286] ? rt_spin_unlock+0x163/0x200 [ 308.376025][ T7286] ? iput+0xb84/0xf00 [ 308.376054][ T7286] ext4_ext_migrate+0xddf/0x10e0 [ 308.376083][ T7286] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 308.376109][ T7286] ? rwbase_write_lock+0x550/0x720 [ 308.376150][ T7286] ext4_ioctl+0x234f/0x4b80 [ 308.376180][ T7286] ? __pfx_ext4_ioctl+0x10/0x10 [ 308.376206][ T7286] ? is_bpf_text_address+0x292/0x2b0 [ 308.376243][ T7286] ? is_bpf_text_address+0x26/0x2b0 [ 308.376281][ T7286] ? kernel_text_address+0xa5/0xe0 [ 308.376310][ T7286] ? __kernel_text_address+0xd/0x30 [ 308.376417][ T7286] ? unwind_get_return_address+0x4d/0x90 [ 308.376455][ T7286] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.376488][ T7286] ? arch_stack_walk+0xfb/0x150 [ 308.376531][ T7286] ? stack_trace_save+0xa9/0x100 [ 308.376559][ T7286] ? __pfx_stack_trace_save+0x10/0x10 [ 308.376586][ T7286] ? kasan_save_track+0x4f/0x80 [ 308.376612][ T7286] ? stack_depot_save_flags+0x33/0x800 [ 308.376645][ T7286] ? __lock_acquire+0x683/0x2ce0 [ 308.376679][ T7286] ? kasan_save_track+0x4f/0x80 [ 308.376703][ T7286] ? kasan_save_track+0x3e/0x80 [ 308.376724][ T7286] ? kasan_save_free_info+0x40/0x50 [ 308.376756][ T7286] ? __kasan_slab_free+0x5c/0x80 [ 308.376782][ T7286] ? kfree+0x1c5/0x6c0 [ 308.376800][ T7286] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 308.376828][ T7286] ? security_file_ioctl+0xc3/0x2a0 [ 308.376854][ T7286] ? __se_sys_ioctl+0x47/0x170 [ 308.376918][ T7286] ? do_syscall_64+0x174/0x580 [ 308.376951][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.376999][ T7286] ? kasan_quarantine_put+0xbb/0x1f0 [ 308.377029][ T7286] ? tomoyo_path_number_perm+0x219/0x5f0 [ 308.377074][ T7286] ? tomoyo_path_number_perm+0x219/0x5f0 [ 308.377107][ T7286] ? do_vfs_ioctl+0x1184/0x1550 [ 308.377143][ T7286] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 308.377180][ T7286] ? hook_file_ioctl+0x1f3/0x600 [ 308.377221][ T7286] ? __fget_files+0x2a/0x420 [ 308.377248][ T7286] ? __fget_files+0x2a/0x420 [ 308.377273][ T7286] ? __fget_files+0x3a8/0x420 [ 308.377298][ T7286] ? __fget_files+0x2a/0x420 [ 308.377325][ T7286] ? bpf_lsm_file_ioctl+0x9/0x20 [ 308.377364][ T7286] ? __pfx_ext4_ioctl+0x10/0x10 [ 308.377391][ T7286] __se_sys_ioctl+0xff/0x170 [ 308.377426][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.377451][ T7286] do_syscall_64+0x174/0x580 [ 308.377484][ T7286] ? trace_irq_disable+0x3b/0x140 [ 308.377516][ T7286] ? clear_bhb_loop+0x40/0x90 [ 308.377544][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.377568][ T7286] RIP: 0033:0x7f2effbdce59 [ 308.377590][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.377612][ T7286] RSP: 002b:00007f2efde15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.377638][ T7286] RAX: ffffffffffffffda RBX: 00007f2effe56090 RCX: 00007f2effbdce59 [ 308.377656][ T7286] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000007 [ 308.377671][ T7286] RBP: 00007f2effc72e6f R08: 0000000000000000 R09: 0000000000000000 [ 308.377686][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.377701][ T7286] R13: 00007f2effe56128 R14: 00007f2effe56090 R15: 00007ffc3c9dd548 [ 308.377726][ T7286] [ 308.436990][ T5626] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 308.437046][ T5626] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 308.437118][ T5626] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 308.509335][ T3192] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 308.509547][ T3192] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:13: Failed to release dquot type 1 [ 308.596383][ T7301] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 308.764883][ T7286] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.346: iget: bad i_size value: 360287970189639690 [ 308.806279][ T5864] usb 2-1: USB disconnect, device number 13 [ 308.887788][ T7286] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 308.918290][ T7286] tipc: Trying to set illegal importance in message [ 309.379043][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 309.413189][ T5745] ti_usb_3410_5052 4-1:2.29: TI USB 3410 1 port adapter converter detected [ 309.425637][ T5745] ti_usb_3410_5052 4-1:2.29: missing endpoints [ 309.466572][ T5745] ti_usb_3410_5052 4-1:2.84: required endpoints missing [ 309.485627][ T5745] ti_usb_3410_5052 4-1:2.8: required endpoints missing [ 309.504676][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.531808][ T5745] ti_usb_3410_5052 4-1:2.197: required endpoints missing [ 309.548049][ T5745] ti_usb_3410_5052 4-1:2.69: required endpoints missing [ 309.558016][ T5745] usb 4-1: USB disconnect, device number 11 [ 310.281796][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 310.825350][ T5273] veth1_vlan: left promiscuous mode [ 311.261470][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.261870][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.262218][ T7173] bridge_slave_0: entered allmulticast mode [ 311.314736][ T7173] bridge_slave_0: entered promiscuous mode [ 311.324064][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.326764][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.327083][ T7173] bridge_slave_1: entered allmulticast mode [ 311.329535][ T7173] bridge_slave_1: entered promiscuous mode [ 311.511341][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.570499][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.697865][ T7173] team0: Port device team_slave_0 added [ 311.702397][ T7173] team0: Port device team_slave_1 added [ 311.749585][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.749604][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.749638][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.752836][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.752855][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.752888][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.934236][ T7173] hsr_slave_0: entered promiscuous mode [ 311.936117][ T7173] hsr_slave_1: entered promiscuous mode [ 311.937689][ T7173] debugfs: 'hsr0' already exists in 'hsr' [ 311.937709][ T7173] Cannot create hsr debugfs directory [ 312.354389][ T1485] bridge_slave_1: left allmulticast mode [ 312.354419][ T1485] bridge_slave_1: left promiscuous mode [ 312.354613][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.515062][ T1485] bridge_slave_0: left allmulticast mode [ 312.515093][ T1485] bridge_slave_0: left promiscuous mode [ 312.515300][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.924815][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.024853][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.085701][ T1485] bond0 (unregistering): Released all slaves [ 313.218035][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 313.544362][ T1485] hsr_slave_0: left promiscuous mode [ 313.584454][ T1485] hsr_slave_1: left promiscuous mode [ 313.585281][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.625385][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.964860][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 314.005509][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 314.167901][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 315.019834][ T7173] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 315.048578][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.049470][ T7173] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 315.088707][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.091263][ T7173] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.134975][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.137074][ T7173] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.167869][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.303441][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.357331][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.380003][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.380152][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.408814][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.408968][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.927817][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.198359][ T7173] veth0_vlan: entered promiscuous mode [ 316.211570][ T7173] veth1_vlan: entered promiscuous mode [ 316.253349][ T7173] veth0_macvtap: entered promiscuous mode [ 316.265577][ T7173] veth1_macvtap: entered promiscuous mode [ 316.292447][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.311220][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.329502][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.330852][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.330897][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.330932][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.475705][ T7173] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 316.518633][ T3420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.518655][ T3420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.521099][ T7173] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 316.569504][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.569528][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.686278][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.686369][ T1340] ieee802154 phy1 wpan1: encryption failed: -22