last executing test programs: 4m41.410844222s ago: executing program 4 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x5, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0xfffffffc, 0x4}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 4m39.999475877s ago: executing program 4 (id=77): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2000c12, &(0x7f0000000100)={[{@sbsector={'sbsector', 0x3d, 0x1}}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x32}}, {@map_off}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2eb}}, {@check_relaxed}, {@map_off}, {@nocompress}, {@overriderock}]}, 0x4, 0xa29, &(0x7f00000002c0)="$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") faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) 4m38.877094145s ago: executing program 4 (id=80): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040010}, 0x4044050) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x200408f0) fcntl$lock(r4, 0x7, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 4m32.604347003s ago: executing program 4 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) 4m30.205610553s ago: executing program 4 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4m27.833450142s ago: executing program 4 (id=102): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c1", 0x23}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d3", 0xe}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m26.996587284s ago: executing program 32 (id=102): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c1", 0x23}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d3", 0xe}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m48.644937167s ago: executing program 5 (id=104): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 3m45.894678886s ago: executing program 5 (id=175): syz_open_dev$sndpcmp(0x0, 0x0, 0x28002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rename(0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000240)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000000)='-\xf2B\xd3\xd1]\xc4\x85RB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\x84F\xf6\xb9\x06Yc\xdfIGQ\xa0B\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8bS\x85\xab\x93\x02\xc9\xe5\xd8mZ\x03\xee\xd3\x1e\xf6)`s\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1[G\r', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) 3m29.848094849s ago: executing program 33 (id=175): syz_open_dev$sndpcmp(0x0, 0x0, 0x28002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rename(0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000240)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000000)='-\xf2B\xd3\xd1]\xc4\x85RB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\x84F\xf6\xb9\x06Yc\xdfIGQ\xa0B\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8bS\x85\xab\x93\x02\xc9\xe5\xd8mZ\x03\xee\xd3\x1e\xf6)`s\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1[G\r', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) 3m3.53034474s ago: executing program 3 (id=250): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xcc5, 0xffffffffffffffff, 'id1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100ffffffff000000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x104}, 0x1, 0x0, 0x0, 0x24000801}, 0xc000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000000)={r6, 0x5, 0x30, 0x2b, 0x1000}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 3m1.440940212s ago: executing program 3 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000580)={0x20000008}) r5 = fanotify_init(0x1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x2}) 2m59.924641991s ago: executing program 3 (id=254): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 2m58.155523495s ago: executing program 3 (id=255): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 2m56.700984872s ago: executing program 3 (id=258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r7 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x1, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34424752}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m52.625145544s ago: executing program 3 (id=267): mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x1, @raw_data="26d7c444f211b8972bddf47686906d1978555caa82244e9dc082656d19b527a5193f15b14603c44905fb5daa85be926e554ddb229748c7751bc1a11f02991f8c5f23425349851ea418ffcf7af74c0d7f27ea463e1f43b70e8922b3882036c95f5862493dd45b923cccd2b60b5a0cad268f4783e96738825b733cf60deea364f5686859fb2751f1023e359917c8a5f96306a1a533a89e66f430ad8d0c8b518799925b4d02339d33faecaa4a8b0f24eaa5f615fda560308f205780f52d843a8c07f3abbc5e1ecfd880"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x56, &(0x7f0000006280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x2, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x0, &(0x7f0000000180)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000000)={0xb, 0x9}) 2m51.885481652s ago: executing program 34 (id=267): mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x1, @raw_data="26d7c444f211b8972bddf47686906d1978555caa82244e9dc082656d19b527a5193f15b14603c44905fb5daa85be926e554ddb229748c7751bc1a11f02991f8c5f23425349851ea418ffcf7af74c0d7f27ea463e1f43b70e8922b3882036c95f5862493dd45b923cccd2b60b5a0cad268f4783e96738825b733cf60deea364f5686859fb2751f1023e359917c8a5f96306a1a533a89e66f430ad8d0c8b518799925b4d02339d33faecaa4a8b0f24eaa5f615fda560308f205780f52d843a8c07f3abbc5e1ecfd880"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x56, &(0x7f0000006280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x2, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x0, &(0x7f0000000180)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000000)={0xb, 0x9}) 9.125425121s ago: executing program 6 (id=842): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8808, &(0x7f0000000100)=ANY=[], 0xf, 0xb9, &(0x7f0000002300)="$eJzs1zFKxEAYBeCXKJJWBBsLaxvv4FHEUhuxUgRvIF7EygN4A4+Q3sIirYUjySi7y5YLWRa+r5jhzWPgb/+P79eTl7OkPCXlLbefZeHu/uH68qaeqY6GUrLkvQm7rE32x7tLcno45Xxd1K6pffrh8aof9tY/HzzPPS4AALCBNuer+af8PYwbwbgFTuH4v+9mng8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg234DAAD//3rfKMs=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r0, r1, 0x0, 0x8001) 8.545718896s ago: executing program 6 (id=846): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1004001, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@commit={'commit', 0x3d, 0x6}}, {@barrier={'barrier', 0x3d, 0x2}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@intr}]}, 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x30101a, 0x0, 0x1, 0x0, &(0x7f0000000500)) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) 7.796081184s ago: executing program 1 (id=850): mount(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') 7.530463141s ago: executing program 1 (id=853): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 6.619489264s ago: executing program 6 (id=857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.544102036s ago: executing program 1 (id=860): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) socket(0x2, 0x3, 0xff) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c90001"], 0x18) 5.428462314s ago: executing program 1 (id=865): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, &(0x7f00000002c0), 0x4, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3}) remap_file_pages(&(0x7f0000748000/0x3000)=nil, 0x3000, 0x1000006, 0x4, 0x3) 5.385304775s ago: executing program 2 (id=866): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000002640)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,iocharset=macgreekAmap=acorn,iocharset=macgaelic,session=0x0000000000000057,cruft,block=0x0000000000000a00,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c636f06006578743d7d7365bd699f4d208aeac522725f752c003a514ad5f35deab16b6be066f2464253a46959bd0939c03d2def705863d028f2930272bea1b1f48e47bdc6ed0c8845291b18a895e6e9ce96ceffd8826c6822ee311539444acae14b7d743acb13355063c0d6f67e43bbb57a9528e71a6f5474fca8"], 0x0, 0x6bd, &(0x7f0000000840)="$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") syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x180c81d, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490c685289317d2766b0e7d19905c175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d0000000000000000000000e78d77f2472c7296914fdce88889eabade1a29e35ca62a66b4cac977c375bb6ca018f045be8ad6910d940a2d8365ad530010980c12e6bdc936214be688c0fbc4af8c1619ce181efae5279e41e73a200911243dd6f649cae5668f08504831cb149d98f9be3cb364084dd3401bebb133e78283f25642ca0e070d7734d2229adac8d7092e7c41", @ANYRES8, @ANYRES64, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x60b8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109441, 0x14a) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 4.293487652s ago: executing program 6 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x33) 4.045108769s ago: executing program 7 (id=872): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = syz_io_uring_setup(0x3b50, &(0x7f0000000180)={0x0, 0x826d, 0x8, 0x1, 0x5d}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x3607, &(0x7f0000000100)={0x0, 0xbe9, 0x800, 0x0, 0x174, 0x0, r0}, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000003c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x80, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x2d4}}], 0x1, 0x0, 0x0) 3.666642968s ago: executing program 7 (id=873): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 3.614160869s ago: executing program 0 (id=874): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@errors_remount}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001080)=""/79, 0x4f) 3.409541794s ago: executing program 0 (id=875): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) socket(0x2, 0x3, 0xff) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c90001"], 0x18) 3.21899734s ago: executing program 2 (id=876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="846134d356a07d80ca09588bf53514ebe608e20c4596bd058f15a38d10bccdfb5ae3c32423f4e4dc0878d5e7ffdb7b9ef4dd8e", 0x33}, {&(0x7f00000005c0)="ddd5eaa05d56f9f7079ab2ddb27d53c4d450f97ae44820db854a717e6b9b224f9503c2663c552aba78bcc99bfd954c510e2fdd6029d6b31b172d2d25f9", 0x3d}], 0x2, 0x0, 0x0, 0x24000080}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) 2.79559857s ago: executing program 7 (id=877): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESOCT=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000003c0)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.449397459s ago: executing program 0 (id=878): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x0, 0x61, {0x61, 0x16, "285945b82e336a3dca7704a12bc41c828d0526f09e06a1d0868d9a947e06a1f764d322022aaa50eee20d97a1c56c3f513042e9dfdd46b82ca2cc5fc57de52365393680ccc1802756ce626f982c4f6a876e13cd4b02bc1c0f9bf58172e042df"}}, 0x0}, 0x0) 2.193887245s ago: executing program 2 (id=879): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$vfat(&(0x7f0000001180), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa08c56, &(0x7f00000015c0)={[{@utf8}, {@numtail}, {@utf8no}, {@numtail}, {@utf8no}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@numtail}]}, 0x7f, 0x2c0, &(0x7f0000001680)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8800, 0x0) 2.193460055s ago: executing program 7 (id=880): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x2, 0x3, 0x9, 0x800, 0x1, 0x0, 0x86c}}}}]}, 0x58}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.00221073s ago: executing program 6 (id=881): syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6}) 1.886613233s ago: executing program 2 (id=882): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f00000144c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESHEX, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc20776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1a0600a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda481c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695f6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2d4e6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826a35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c9731fedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8ab74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x120820, 0x0, 0xfd, 0x0, &(0x7f0000006380)) 1.533402932s ago: executing program 0 (id=883): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = syz_io_uring_setup(0x3b50, &(0x7f0000000180)={0x0, 0x826d, 0x8, 0x1, 0x5d}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x3607, &(0x7f0000000100)={0x0, 0xbe9, 0x800, 0x0, 0x174, 0x0, r0}, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000003c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x80, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x2d4}}], 0x1, 0x0, 0x0) 1.384637965s ago: executing program 2 (id=884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x3, 0x20, 0xffff, 0x1ff, "a814c6094240932b26345c3d98ba4e41670055858705cc737124f17cd21417f6"}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000f5000002"], 0xfce) 1.157302081s ago: executing program 0 (id=885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0x3) 1.081612693s ago: executing program 7 (id=886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x300000a, 0x13, r2, 0x3d000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000f4a000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) 941.463727ms ago: executing program 0 (id=887): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185d410, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 888.573908ms ago: executing program 2 (id=888): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) socket(0x2, 0x3, 0xff) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c90001"], 0x18) 608.133805ms ago: executing program 1 (id=889): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003c40)={{{@in6=@private2, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 457.528609ms ago: executing program 6 (id=890): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e6, &(0x7f0000000480)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c1c99, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1641f, 0x0, 0x1, 0x0, &(0x7f00000000c0)) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) 176.463426ms ago: executing program 7 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 1 (id=892): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r1, {0xffe0, 0xb}, {0x0, 0xfff1}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) kernel console output (not intermixed with test programs): im netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.231995][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.252327][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.263670][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.277580][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.288312][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.298220][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.308696][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.319801][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.330027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.341525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.349982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.368155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.392130][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.404961][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.414942][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.425436][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.435985][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.446501][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.456695][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.467483][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.479241][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.495006][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.511481][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.522626][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.533415][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.543314][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.554889][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.570762][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.581741][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.591136][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.601496][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.610477][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.635232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.645263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.655217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.667122][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.678707][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.689047][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.699962][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.710270][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.720754][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.730598][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.741245][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.752507][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.794272][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.808461][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.831960][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.864313][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.873067][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.902632][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.564705][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.579765][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.614525][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.677710][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.687785][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.707744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.873941][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 74.874017][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 74.879983][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 74.902146][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.910125][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.941644][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.956037][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 74.962109][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 75.543600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.563620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.573617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.583611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.593610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.603614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.613619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.623626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.633618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.643617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 76.433732][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.441652][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.510269][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.517815][ T4282] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.661318][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.670929][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.695933][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.703321][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.760698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.810135][ T4282] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 76.858318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.874380][ T4282] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 76.927379][ T4282] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.002062][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.683876][ T4386] vivid-000: disconnect [ 78.517358][ T4390] loop4: detected capacity change from 0 to 512 [ 78.548839][ T4390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.564235][ T4366] vivid-000: reconnect [ 78.590132][ T4263] usb 1-1: USB disconnect, device number 2 [ 78.593699][ T4390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.684897][ T4390] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.719964][ T4390] EXT4-fs (loop4): 1 truncate cleaned up [ 78.726181][ T4390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.766618][ T4408] loop1: detected capacity change from 0 to 512 [ 79.775770][ T4407] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 79.806482][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 79.822774][ T4408] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.11: iget: bad i_size value: 38620345925642 [ 79.859297][ T4408] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.11: couldn't read orphan inode 15 (err -117) [ 79.929813][ T4408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.981244][ T9] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 81.092829][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 81.114026][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.114026][ T9] [ 81.124094][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 81.130946][ T9] EXT4-fs (loop1): Free/Dirty block details [ 81.166373][ T9] EXT4-fs (loop1): free_blocks=0 [ 81.173191][ T9] EXT4-fs (loop1): dirty_blocks=6916 [ 81.179407][ T4412] Zero length message leads to an empty skb [ 81.190572][ T9] EXT4-fs (loop1): Block reservation details [ 81.215613][ T9] EXT4-fs (loop1): i_reserved_data_blocks=6916 [ 82.957776][ T4432] binder: 4426:4432 ioctl 4018620d 0 returned -22 [ 84.277900][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 84.936429][ T4441] loop0: detected capacity change from 0 to 128 [ 85.482187][ T4441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.554571][ T4441] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.652080][ T4275] EXT4-fs: 7 callbacks suppressed [ 85.652093][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 85.655006][ T4443] random: crng reseeded on system resumption [ 86.464522][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 86.637308][ T128] cfg80211: failed to load regulatory.db [ 87.230145][ T4454] tipc: Enabling of bearer rejected, failed to enable media [ 87.591142][ T4464] loop2: detected capacity change from 0 to 64 [ 87.732796][ T4470] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.444661][ T4549] device syzkaller0 entered promiscuous mode [ 94.499583][ T4543] device bond_slave_0 entered promiscuous mode [ 94.506126][ T4543] device bond_slave_1 entered promiscuous mode [ 94.582910][ T4543] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.621927][ T4543] bond1: (slave macvlan2): making interface the new active one [ 94.659909][ T4543] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 94.713946][ T4543] syz.0.39 (4543) used greatest stack depth: 20432 bytes left [ 94.787107][ T4556] futex_wake_op: syz.3.44 tries to shift op by 144; fix this program [ 95.626698][ T4558] device syzkaller0 entered promiscuous mode [ 95.820108][ T4567] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 97.458621][ T4598] loop3: detected capacity change from 0 to 64 [ 97.480668][ T4589] loop0: detected capacity change from 0 to 512 [ 98.380310][ T26] audit: type=1800 audit(1786117602.937:2): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.55" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 98.399564][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.870542][ T4589] FAT-fs (loop0): Directory bread(block 199916) failed [ 98.933817][ T4589] FAT-fs (loop0): Directory bread(block 199917) failed [ 98.940772][ T4589] FAT-fs (loop0): Directory bread(block 199918) failed [ 99.054079][ T4589] FAT-fs (loop0): Directory bread(block 199919) failed [ 99.061013][ T4589] FAT-fs (loop0): Directory bread(block 199920) failed [ 99.112765][ T4589] FAT-fs (loop0): Directory bread(block 199921) failed [ 99.120383][ T4589] FAT-fs (loop0): Directory bread(block 199922) failed [ 99.183753][ T4589] FAT-fs (loop0): Directory bread(block 199923) failed [ 100.482848][ T4665] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 100.491485][ T4665] netlink: 'syz.4.59': attribute type 7 has an invalid length. [ 100.517446][ T4665] netlink: 'syz.4.59': attribute type 8 has an invalid length. [ 100.578950][ T4665] device syzkaller0 entered promiscuous mode [ 100.717560][ T4671] device syzkaller0 entered promiscuous mode [ 100.821676][ T4673] tipc: Started in network mode [ 100.827939][ T4673] tipc: Node identity ca40b3326e87, cluster identity 4711 [ 100.861712][ T4673] tipc: Enabled bearer , priority 0 [ 101.042554][ T4683] tipc: Resetting bearer [ 101.083745][ T4670] tipc: Resetting bearer [ 101.118152][ T4670] tipc: Disabling bearer [ 101.152976][ T4681] device syzkaller0 entered promiscuous mode [ 104.813785][ T4712] loop0: detected capacity change from 0 to 128 [ 105.601756][ T4712] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.979371][ T4712] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.320228][ T4729] loop3: detected capacity change from 0 to 8 [ 106.366159][ T4729] SQUASHFS error: zlib decompression failed, data probably corrupt [ 106.374914][ T4729] SQUASHFS error: Failed to read block 0x9b: -5 [ 106.381203][ T4729] SQUASHFS error: Unable to read metadata cache entry [99] [ 106.388613][ T4729] SQUASHFS error: Unable to read inode 0x127 [ 106.815065][ T4712] syz.0.69 (pid 4712) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 106.880132][ T4728] device syzkaller0 entered promiscuous mode [ 107.296068][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 107.686015][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 107.709731][ T4744] loop4: detected capacity change from 0 to 1764 [ 110.606558][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 111.629596][ T4775] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 111.658296][ T4778] device vlan2 entered promiscuous mode [ 114.086080][ T4799] random: crng reseeded on system resumption [ 114.212651][ T4796] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 114.381558][ T4796] bond1: (slave veth3): Enslaving as an active interface with a down link [ 114.409335][ T4796] bond1: (slave veth0_to_bond): making interface the new active one [ 114.494682][ T4796] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 115.650572][ T4824] loop4: detected capacity change from 0 to 512 [ 115.658098][ T4824] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.863560][ C0] sched: RT throttling activated [ 117.126238][ T4287] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 117.184205][ T4287] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 118.735658][ T4838] loop0: detected capacity change from 0 to 2048 [ 118.834958][ T4838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.883918][ T4322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.625537][ T4322] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.636083][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.751493][ T4322] usb 4-1: Product: syz [ 119.764978][ T4322] usb 4-1: Manufacturer: syz [ 119.777812][ T4322] usb 4-1: SerialNumber: syz [ 119.840490][ T4322] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.063240][ T4653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.087514][ T4263] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.256355][ T4653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.631910][ T4653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.449425][ T4653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.519569][ T4263] usb 4-1: Service connection timeout for: 256 [ 121.541769][ T4263] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 121.618478][ T4263] ath9k_htc: Failed to initialize the device [ 121.660585][ T4263] usb 4-1: ath9k_htc: USB layer deinitialized [ 123.073306][ T4869] kvm [4867]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf7ff [ 123.300556][ T4884] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 123.403202][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.413059][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.422703][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.431170][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.443831][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.451620][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.471052][ T4884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.558126][ T4886] device vlan2 entered promiscuous mode [ 123.580555][ T4320] usb 4-1: USB disconnect, device number 2 [ 123.693641][ T4886] device bond2 entered promiscuous mode [ 124.867267][ T4889] bond2: (slave bridge1): making interface the new active one [ 124.899663][ T4889] device bridge1 entered promiscuous mode [ 124.920498][ T4889] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 124.964096][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 125.514780][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 125.928716][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 127.600216][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 129.519868][ T4885] chnl_net:caif_netlink_parms(): no params data found [ 129.614290][ T4653] device hsr_slave_0 left promiscuous mode [ 129.665169][ T4653] device hsr_slave_1 left promiscuous mode [ 129.673812][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 129.680899][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.723615][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.821642][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.839554][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.870430][ T4653] device bridge_slave_1 left promiscuous mode [ 129.896121][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.980375][ T4653] device bridge_slave_0 left promiscuous mode [ 130.001817][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.191342][ T4653] device veth1_macvtap left promiscuous mode [ 130.253826][ T4653] device veth0_macvtap left promiscuous mode [ 130.295526][ T4653] device veth1_vlan left promiscuous mode [ 130.334721][ T4653] device veth0_vlan left promiscuous mode [ 131.766253][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 132.717609][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724032][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.432414][ T5011] Bluetooth: MGMT ver 1.22 [ 133.829808][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 134.202131][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 134.473485][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.512745][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.008046][ T4653] bond0 (unregistering): Released all slaves [ 135.489467][ T4981] tipc: Enabling of bearer rejected, failed to enable media [ 135.926737][ T5019] x_tables: duplicate underflow at hook 1 [ 136.001209][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.023742][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.126770][ T4885] device bridge_slave_0 entered promiscuous mode [ 136.224178][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.321299][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.252498][ T4885] device bridge_slave_1 entered promiscuous mode [ 138.371297][ T4885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.476896][ T4885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.589854][ T4885] team0: Port device team_slave_0 added [ 138.650105][ T4885] team0: Port device team_slave_1 added [ 138.733849][ T2192] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.013766][ T2192] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.087479][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.239626][ T2192] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 139.297405][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.367483][ T4885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.380155][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.397221][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.483348][ T4885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.543694][ T2192] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.558592][ T2192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.048545][ T4885] device hsr_slave_0 entered promiscuous mode [ 140.433756][ T4885] device hsr_slave_1 entered promiscuous mode [ 140.714876][ T4885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.727168][ T4885] Cannot create hsr debugfs directory [ 140.773961][ T5048] vivid-002: disconnect [ 140.789384][ T5047] vivid-002: reconnect [ 140.805536][ T4322] usb 2-1: USB disconnect, device number 2 [ 141.110897][ T4885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.147059][ T4885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.186760][ T4885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.216071][ T4885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.488910][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.642804][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.671307][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.690371][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.378447][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.449709][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.521507][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.528718][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.545440][ T5096] loop1: detected capacity change from 0 to 128 [ 143.562362][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.745158][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.763945][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.771107][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.781942][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.817410][ T5096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.824507][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.115605][ T5096] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.291148][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.410967][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.505885][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.514154][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.571058][ T4885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.599682][ T4885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.294678][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.307406][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 145.406375][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.504551][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.690896][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.699746][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.708725][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.718517][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.750280][ T5128] device syzkaller0 entered promiscuous mode [ 146.343259][ T5128] tipc: Started in network mode [ 146.380708][ T5128] tipc: Node identity 0ec2eda41709, cluster identity 4711 [ 146.400643][ T5128] tipc: Enabled bearer , priority 0 [ 146.434271][ T5117] kvm [5111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 146.496460][ T5128] tipc: Resetting bearer [ 146.583863][ T5127] tipc: Resetting bearer [ 146.596224][ T5117] kvm [5111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 146.758879][ T5127] tipc: Disabling bearer [ 149.494646][ T5151] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 150.854596][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.213236][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.472548][ T4885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.503825][ T4318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 152.709680][ T4318] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 152.743094][ T4318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 152.799824][ T4318] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 152.831357][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.855565][ T4318] usb 4-1: Product: syz [ 152.859788][ T4318] usb 4-1: Manufacturer: syz [ 152.890119][ T4318] usb 4-1: SerialNumber: syz [ 152.919868][ T4318] usb 4-1: config 0 descriptor?? [ 153.063439][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.082484][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.132979][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.147045][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.179185][ T4885] device veth0_vlan entered promiscuous mode [ 153.199142][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.217303][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.236512][ T5182] device bond_slave_0 entered promiscuous mode [ 153.242826][ T5182] device bond_slave_1 entered promiscuous mode [ 153.251859][ T5182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.268577][ T5182] bond1: (slave macvlan2): making interface the new active one [ 153.281169][ T5182] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 153.300545][ T4885] device veth1_vlan entered promiscuous mode [ 153.340435][ T4885] device veth0_macvtap entered promiscuous mode [ 153.348200][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.359908][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.370981][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.386076][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.398284][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.413385][ T4885] device veth1_macvtap entered promiscuous mode [ 153.451919][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.476680][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.502515][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.549259][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.568107][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.582052][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.771743][ T5200] loop0: detected capacity change from 0 to 32768 [ 153.779257][ T5200] ======================================================= [ 153.779257][ T5200] WARNING: The mand mount option has been deprecated and [ 153.779257][ T5200] and is ignored by this kernel. Remove the mand [ 153.779257][ T5200] option from the mount to silence this warning. [ 153.779257][ T5200] ======================================================= [ 153.820450][ T5200] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.174 (5200) [ 153.875237][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.514156][ T5200] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 154.525909][ T5200] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.535039][ T5200] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.544798][ T5200] BTRFS info (device loop0): use zstd compression, level 3 [ 154.552485][ T5200] BTRFS info (device loop0): force clearing of disk cache [ 154.559680][ T5200] BTRFS info (device loop0): enabling disk space caching [ 154.566772][ T5200] BTRFS info (device loop0): disk space caching is enabled [ 154.643859][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.742181][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.831897][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.853344][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.916165][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.976846][ T4263] usb 4-1: USB disconnect, device number 3 [ 155.104403][ T5200] BTRFS info (device loop0): enabling ssd optimizations [ 155.115959][ T5200] BTRFS info (device loop0): rebuilding free space tree [ 155.155596][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.166541][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.177629][ T5200] BTRFS info (device loop0): disabling free space tree [ 155.184651][ T5200] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.194921][ T5200] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.238100][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.299648][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.580024][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.721332][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.786258][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.863616][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.922232][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.976428][ T4885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.015470][ T4885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.075120][ T4885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.132061][ T4885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.746460][ T4274] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 157.869045][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.901319][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.289009][ T4631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.334624][ T4631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.371695][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.454259][ T4638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.462112][ T4638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.488904][ T5260] kvm [5259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 158.499337][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.535473][ T5260] kvm [5259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 158.568637][ T5260] kvm [5259]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 158.739528][ T5278] loop5: detected capacity change from 0 to 2048 [ 159.449854][ T5278] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 161.340181][ T5285] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 161.355760][ T5285] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 161.369248][ T5285] EXT4-fs (loop5): This should not happen!! Data will be lost [ 161.369248][ T5285] [ 161.378984][ T5285] EXT4-fs (loop5): Total free blocks count 0 [ 161.385024][ T5285] EXT4-fs (loop5): Free/Dirty block details [ 161.390967][ T5285] EXT4-fs (loop5): free_blocks=2415919504 [ 161.396738][ T5285] EXT4-fs (loop5): dirty_blocks=45312 [ 161.402130][ T5285] EXT4-fs (loop5): Block reservation details [ 161.408245][ T5285] EXT4-fs (loop5): i_reserved_data_blocks=2481 [ 161.485129][ T4540] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 161.681276][ T5292] device pim6reg1 entered promiscuous mode [ 163.660035][ T5322] loop1: detected capacity change from 0 to 32768 [ 163.906077][ T5322] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.183 (5322) [ 163.929207][ T5322] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 163.939799][ T5322] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 163.948623][ T5322] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.958090][ T5322] BTRFS info (device loop1): use zstd compression, level 3 [ 163.965399][ T5322] BTRFS info (device loop1): force clearing of disk cache [ 163.973398][ T5322] BTRFS info (device loop1): enabling disk space caching [ 163.980544][ T5322] BTRFS info (device loop1): disk space caching is enabled [ 164.738571][ T5322] BTRFS info (device loop1): enabling ssd optimizations [ 164.748088][ T5322] BTRFS info (device loop1): rebuilding free space tree [ 164.767015][ T5322] BTRFS info (device loop1): disabling free space tree [ 164.774191][ T5322] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.783954][ T5322] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.384048][ T5353] fuse: Bad value for 'fd' [ 166.435657][ T4289] Bluetooth: Wrong link type (-57) [ 167.018521][ T4275] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 171.508182][ T5402] 9pnet_virtio: no channels available for device syz [ 172.451420][ T5402] CacheFiles: Failed to register: -95 [ 173.574888][ T5419] device syzkaller0 entered promiscuous mode [ 176.111766][ T4885] EXT4-fs: 31 callbacks suppressed [ 176.111780][ T4885] EXT4-fs (loop5): unmounting filesystem. [ 176.810649][ T5450] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 177.884079][ T4289] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 179.041779][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 179.308628][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 180.992293][ T5476] input: syz1 as /devices/virtual/input/input5 [ 181.060657][ T5487] device syzkaller0 entered promiscuous mode [ 181.170716][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.182687][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.193017][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.201807][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.211049][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 181.218869][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.493593][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 183.505841][ T5500] process 'syz.2.217' launched '/dev/fd/6' with NULL argv: empty string added [ 184.778783][ T4631] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.603816][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 185.623796][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 185.627138][ T5490] chnl_net:caif_netlink_parms(): no params data found [ 185.687626][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 185.696952][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 185.708337][ T5520] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.721749][ T5520] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 185.733217][ T5522] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 185.750452][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 185.759203][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 185.766254][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 185.774319][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 185.845557][ T4631] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.883209][ T5527] loop3: detected capacity change from 0 to 1024 [ 186.065656][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 186.078335][ T5520] wlan0 speed is unknown, defaulting to 1000 [ 186.424524][ T4631] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.647744][ T5535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.673776][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 187.690677][ T4631] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.014861][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.060945][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.076022][ T26] audit: type=1326 audit(1786117693.657:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72f859e0d9 code=0x0 [ 189.079682][ T5490] device bridge_slave_0 entered promiscuous mode [ 189.120829][ T5490] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.129089][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.149916][ T5490] device bridge_slave_1 entered promiscuous mode [ 189.598769][ T5490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.753940][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 189.956655][ T5490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.985976][ T5490] team0: Port device team_slave_0 added [ 189.994595][ T5490] team0: Port device team_slave_1 added [ 190.025811][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.032932][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.059387][ T5490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.112330][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.143135][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.315312][ T5490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.454720][ T5569] loop0: detected capacity change from 0 to 512 [ 190.468761][ T5569] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.550834][ T5569] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 191.113767][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 191.121104][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 191.127232][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 191.128080][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 191.375880][ T5490] device hsr_slave_0 entered promiscuous mode [ 191.390514][ T5490] device hsr_slave_1 entered promiscuous mode [ 191.429571][ T5490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.603458][ T5490] Cannot create hsr debugfs directory [ 194.191377][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.197917][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.151009][ T5620] loop0: detected capacity change from 0 to 32768 [ 200.411490][ T5490] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.448310][ T5620] XFS (loop0): Mounting V5 Filesystem [ 200.486784][ T5620] XFS (loop0): Ending clean mount [ 200.503623][ T5620] XFS (loop0): Quotacheck needed: Please wait. [ 200.577578][ T5490] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.585157][ T5620] XFS (loop0): Quotacheck: Done. [ 201.009218][ T26] audit: type=1800 audit(1786117705.547:4): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.242" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 201.425744][ T4274] XFS (loop0): Unmounting Filesystem [ 201.443407][ T5490] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.666311][ T5646] loop3: detected capacity change from 0 to 64 [ 202.116507][ T5654] No such timeout policy "syz1" [ 202.514344][ T26] audit: type=1800 audit(1786117707.067:5): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 202.589696][ T4631] device hsr_slave_0 left promiscuous mode [ 202.599564][ T4631] device hsr_slave_1 left promiscuous mode [ 202.606467][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.614156][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.838557][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.846112][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.914747][ T4631] device bridge_slave_1 left promiscuous mode [ 203.803866][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.852372][ T4631] device bridge_slave_0 left promiscuous mode [ 203.878526][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.274066][ T4631] device veth1_macvtap left promiscuous mode [ 205.280155][ T4631] device veth0_macvtap left promiscuous mode [ 205.305920][ T4631] device veth1_vlan left promiscuous mode [ 205.312019][ T4631] device veth0_vlan left promiscuous mode [ 207.145292][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 207.277388][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 209.038414][ T5704] loop3: detected capacity change from 0 to 1024 [ 209.137017][ T5704] EXT4-fs: Ignoring removed bh option [ 209.225260][ T5704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.932221][ T4631] team0 (unregistering): Port device team_slave_1 removed [ 209.976220][ T4631] team0 (unregistering): Port device team_slave_0 removed [ 210.016374][ T4631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.057600][ T4631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.341225][ T4631] bond0 (unregistering): Released all slaves [ 210.425472][ T5490] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.643079][ T4276] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /59/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 210.696342][ T4276] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /59/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 210.991236][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.101136][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.118630][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.157131][ T5490] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.246291][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.905520][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.135366][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.142526][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.153129][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.168902][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.182674][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.634473][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.641629][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.959295][ T5742] NILFS (nullb0): couldn't find nilfs on the device [ 214.652555][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.698208][ T5707] EXT4-fs (loop3): unmounting filesystem. [ 214.763883][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.887698][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.909253][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.060866][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.141370][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.229764][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.291387][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.324398][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.359786][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.387250][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.441923][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.459072][ T4631] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.760196][ T4631] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.484454][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.508270][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.517414][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.529793][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.540382][ T4631] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.556568][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.566175][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.566664][ T5784] fuse: Bad value for 'fd' [ 217.676363][ T4631] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.712222][ T5781] wlan0 speed is unknown, defaulting to 1000 [ 217.758657][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.781756][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.798192][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.999853][ T5774] loop0: detected capacity change from 0 to 32768 [ 218.098113][ T5774] XFS (loop0): Mounting V5 Filesystem [ 218.179560][ T5774] XFS (loop0): Ending clean mount [ 218.331224][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 218.556983][ T5774] syz.0.271 (5774) used greatest stack depth: 20208 bytes left [ 218.614506][ T4274] XFS (loop0): Unmounting Filesystem [ 218.809287][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.851895][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.873000][ T5781] device bridge_slave_0 entered promiscuous mode [ 219.506652][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.540534][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.594931][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 219.651238][ T5781] device bridge_slave_1 entered promiscuous mode [ 220.047802][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.059239][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.070104][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.265322][ T5841] loop1: detected capacity change from 0 to 32768 [ 220.309337][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.589535][ T5841] XFS (loop1): Mounting V5 Filesystem [ 220.606916][ T5781] team0: Port device team_slave_0 added [ 220.618719][ T5490] device veth0_vlan entered promiscuous mode [ 220.701340][ T5490] device veth1_vlan entered promiscuous mode [ 220.742839][ T5841] XFS (loop1): Ending clean mount [ 220.756770][ T5841] XFS (loop1): Quotacheck needed: Please wait. [ 220.782648][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.825786][ T5841] XFS (loop1): Quotacheck: Done. [ 220.856242][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.914404][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.448826][ T26] audit: type=1800 audit(1786117725.727:6): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.277" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 221.537876][ T4275] XFS (loop1): Unmounting Filesystem [ 221.559962][ T5781] team0: Port device team_slave_1 added [ 221.673766][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 221.789568][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.823994][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.953134][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.029857][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.196377][ T5874] hpfs: Bad magic ... probably not HPFS [ 222.258303][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.784585][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.792569][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.191870][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.477164][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 224.509698][ T5490] device veth0_macvtap entered promiscuous mode [ 224.594675][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.604496][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.776383][ T5890] loop0: detected capacity change from 0 to 512 [ 224.967942][ T5890] EXT4-fs (loop0): 1 truncate cleaned up [ 224.973811][ T5890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 225.461865][ T5896] capability: warning: `syz.2.288' uses 32-bit capabilities (legacy support in use) [ 225.928984][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 226.261358][ T5490] device veth1_macvtap entered promiscuous mode [ 226.287853][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.300229][ T5902] loop0: detected capacity change from 0 to 512 [ 226.308132][ T5902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 226.553666][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 226.642184][ T5902] EXT4-fs (loop0): 1 truncate cleaned up [ 226.807381][ T5902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.247229][ T5781] device hsr_slave_0 entered promiscuous mode [ 228.332140][ T5781] device hsr_slave_1 entered promiscuous mode [ 228.366437][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 228.372406][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.460961][ T5781] Cannot create hsr debugfs directory [ 228.680088][ T5923] loop0: detected capacity change from 0 to 1024 [ 228.989787][ T4631] device hsr_slave_0 left promiscuous mode [ 229.106139][ T4631] device hsr_slave_1 left promiscuous mode [ 229.265990][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.389280][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.457874][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.470238][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.497890][ T4631] device bridge_slave_1 left promiscuous mode [ 229.516281][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.582824][ T4631] device bridge_slave_0 left promiscuous mode [ 229.614778][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.660644][ T4631] device veth1_macvtap left promiscuous mode [ 229.667546][ T4631] device veth0_macvtap left promiscuous mode [ 229.881032][ T4631] device veth1_vlan left promiscuous mode [ 230.499087][ T4631] device veth0_vlan left promiscuous mode [ 230.739540][ T4631] bond1 (unregistering): (slave veth3): Releasing active interface [ 230.798296][ T4631] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 230.808370][ T4631] bond1 (unregistering): Released all slaves [ 233.358164][ T4631] team0 (unregistering): Port device team_slave_1 removed [ 233.407375][ T4631] team0 (unregistering): Port device team_slave_0 removed [ 233.458103][ T4631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.512253][ T4631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.760508][ T5952] Need at least one configuration in g1. [ 233.779046][ T5952] udc usbip-vudc.0: failed to start g1: -22 [ 233.785401][ T5952] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 233.810912][ T5952] UDC core: g1: couldn't find an available UDC or it's busy [ 233.929741][ T4631] bond0 (unregistering): Released all slaves [ 234.001733][ T5956] befs: (nullb0): invalid magic header [ 234.029866][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.040757][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.051015][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.061752][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.071942][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.082518][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.112951][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.120967][ T5924] tipc: Enabling of bearer rejected, failed to enable media [ 234.241808][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.250735][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.264188][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.283868][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.301021][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.333565][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.363553][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.400693][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.437415][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.448697][ T5963] fuse: Unknown parameter 'GPL' [ 235.656763][ T5490] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.693657][ T5490] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.712690][ T5490] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.723654][ T5490] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.928101][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.067409][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.145522][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.153372][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.354628][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.540015][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.570001][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.603416][ T5990] NILFS (nullb0): couldn't find nilfs on the device [ 237.672316][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.298903][ T5781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 239.496584][ T5781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 240.117092][ T5781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.945591][ T6003] wlan0 speed is unknown, defaulting to 1000 [ 241.252971][ T5781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 241.378031][ T6011] tipc: Enabled bearer , priority 0 [ 241.450691][ T6010] device syzkaller0 entered promiscuous mode [ 241.522889][ T6010] tipc: Resetting bearer [ 241.670865][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.715810][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.737806][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.764684][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.774818][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.786185][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.786211][ T6009] tipc: Resetting bearer [ 241.799910][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.807677][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.817585][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.861613][ T6009] tipc: Disabling bearer [ 241.878884][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.918000][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.937334][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.966134][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.973274][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.027697][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.059777][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.081934][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.089129][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.107786][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.119552][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.128951][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.347601][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.365247][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.378558][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.395956][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.482495][ T6026] wlan0 speed is unknown, defaulting to 1000 [ 242.491120][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.165641][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.174289][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.651723][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.694719][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.786123][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.923722][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 244.197459][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 244.339858][ T6060] syz.2.317 (6060) used greatest stack depth: 18128 bytes left [ 245.070074][ T6077] tipc: Enabling of bearer rejected, failed to enable media [ 245.087320][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.142588][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.245022][ T6026] device bridge_slave_0 entered promiscuous mode [ 245.255777][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.262983][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.284578][ T6026] device bridge_slave_1 entered promiscuous mode [ 245.477764][ T4631] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.525808][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.580127][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.647557][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 245.757165][ T4631] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.964971][ T6026] team0: Port device team_slave_0 added [ 245.974267][ T6026] team0: Port device team_slave_1 added [ 246.085082][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 247.405680][ T4631] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.490440][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.511479][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.618568][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.634145][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.641230][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.669159][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.158317][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 248.263297][ T6123] No such timeout policy "syz1" [ 248.873507][ T4631] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.361777][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.386798][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.490157][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 250.585051][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.633465][ T6026] device hsr_slave_0 entered promiscuous mode [ 250.756691][ T6026] device hsr_slave_1 entered promiscuous mode [ 250.774315][ T6026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.781937][ T6026] Cannot create hsr debugfs directory [ 250.841359][ T6140] device syzkaller0 entered promiscuous mode [ 250.937543][ T6138] tipc: Enabled bearer , priority 0 [ 250.964886][ T6140] tipc: Resetting bearer [ 251.111216][ T6137] tipc: Resetting bearer [ 251.150498][ T6137] tipc: Disabling bearer [ 251.400157][ T6155] fuse: Bad value for 'fd' [ 252.034827][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.065256][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.142955][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.165405][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.198420][ T6175] device syzkaller0 entered promiscuous mode [ 252.209657][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.261018][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.271309][ T5781] device veth0_vlan entered promiscuous mode [ 252.311298][ T5781] device veth1_vlan entered promiscuous mode [ 252.357076][ T6175] tipc: Enabled bearer , priority 0 [ 252.438739][ T6174] tipc: Resetting bearer [ 252.770788][ T6174] tipc: Disabling bearer [ 253.098074][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.107687][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.456351][ T6193] sctp: [Deprecated]: syz.1.337 (pid 6193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.456351][ T6193] Use struct sctp_sack_info instead [ 254.056799][ T5781] device veth0_macvtap entered promiscuous mode [ 254.093180][ T5781] device veth1_macvtap entered promiscuous mode [ 254.125071][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.164104][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.174570][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.185648][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.202901][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.214650][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.224988][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.247571][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.269415][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.599788][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.606528][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.773930][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.792948][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.822117][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.836660][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.845580][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.855783][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.896447][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.951551][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.982064][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.019837][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.050137][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.076131][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.104002][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.123598][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.144998][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.181160][ T6209] device syzkaller0 entered promiscuous mode [ 256.255189][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.270386][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.282594][ T5781] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.303662][ T5781] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.312485][ T5781] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.322170][ T5781] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.463382][ T6026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.519600][ T6026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.600529][ T6026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.712605][ T6026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.720515][ T6235] fuse: Bad value for 'fd' [ 257.307292][ T4631] device hsr_slave_0 left promiscuous mode [ 257.314361][ T4631] device hsr_slave_1 left promiscuous mode [ 257.360386][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.382638][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.436028][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.444466][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.452880][ T4631] device bridge_slave_1 left promiscuous mode [ 257.459238][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.469049][ T4631] device bridge_slave_0 left promiscuous mode [ 257.475648][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.543931][ T4631] device veth1_macvtap left promiscuous mode [ 257.566264][ T4631] device veth0_macvtap left promiscuous mode [ 257.592774][ T4631] device veth1_vlan left promiscuous mode [ 257.598816][ T4631] device veth0_vlan left promiscuous mode [ 259.731686][ T4631] team0 (unregistering): Port device team_slave_1 removed [ 259.780310][ T4631] team0 (unregistering): Port device team_slave_0 removed [ 259.847655][ T4631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.324603][ T4631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.660195][ T4631] bond0 (unregistering): Released all slaves [ 260.757169][ T6273] device syzkaller0 entered promiscuous mode [ 260.825745][ T4628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.878191][ T4628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.970169][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.995795][ T4628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.017552][ T4628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.047070][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.437716][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.474620][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.510694][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.641784][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.675926][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.685834][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.695479][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.702673][ T4491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.779392][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.827625][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.910580][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.922011][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.929177][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.968598][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.997982][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.189915][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.253048][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.323692][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.435778][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.477886][ T6316] raw_sendmsg: syz.2.355 forgot to set AF_INET. Fix it! [ 263.489670][ T6321] fuse: Bad value for 'fd' [ 263.496194][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.525139][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.551140][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.369966][ T6026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.463744][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.529128][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.805710][ T6341] fuse: Bad value for 'fd' [ 266.634576][ T6352] tipc: Enabling of bearer rejected, failed to enable media [ 267.353438][ T6354] 9pnet_fd: Insufficient options for proto=fd [ 268.014329][ T6371] zonefs (nullb0) ERROR: Not a zoned block device [ 268.471420][ T4281] Bluetooth: hci1: hcon ffff888023a84000 sent 0 < count 1 [ 268.850170][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.868040][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.928817][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.558496][ T6412] loop7: detected capacity change from 0 to 256 [ 271.638294][ T6412] exfat: Deprecated parameter 'utf8' [ 271.730870][ T6412] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 272.017354][ T6420] netlink: 64 bytes leftover after parsing attributes in process `syz.1.373'. [ 272.124259][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.242339][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.125931][ T6026] device veth0_vlan entered promiscuous mode [ 273.186610][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.759442][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.448506][ T6439] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 274.537516][ T6026] device veth1_vlan entered promiscuous mode [ 274.620377][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.367568][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.372882][ T6452] syz.7.378 uses obsolete (PF_INET,SOCK_PACKET) [ 275.396921][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.448618][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.532063][ T6026] device veth0_macvtap entered promiscuous mode [ 275.699277][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.736179][ T6026] device veth1_macvtap entered promiscuous mode [ 276.082755][ T6462] netlink: 68 bytes leftover after parsing attributes in process `syz.2.382'. [ 276.156739][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.679201][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.702693][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.744030][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.804847][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.830634][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.845150][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.863029][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.024823][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.040655][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.050376][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.086740][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.126405][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.168246][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.243532][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.253428][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.303261][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.315517][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.358414][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.480178][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.023845][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.073416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.178290][ T6026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.200132][ T6026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.248764][ T6026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.273568][ T6026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.348777][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.373688][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.423700][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.476186][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.512001][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.540682][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.158208][ T6544] loop6: detected capacity change from 0 to 2048 [ 287.514884][ T26] audit: type=1326 audit(1786117792.087:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.6.397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafe139e0d9 code=0x0 [ 287.631924][ T6546] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.942686][ T6560] UDC core: g1: couldn't find an available UDC or it's busy [ 288.010356][ T26] audit: type=1800 audit(1786117792.587:8): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.401" name="id" dev="configfs" ino=43960 res=0 errno=0 [ 290.295423][ T6590] loop6: detected capacity change from 0 to 512 [ 290.431132][ T6590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 290.463958][ T6590] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.490451][ T6593] tmpfs: Unknown parameter 'quota' [ 291.724938][ T6613] loop7: detected capacity change from 0 to 4096 [ 291.741862][ T6613] ntfs3: Unknown parameter 'windows_names' [ 295.131131][ T6026] EXT4-fs (loop6): unmounting filesystem. [ 295.870400][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'. [ 297.234694][ T6666] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.869922][ T6670] loop6: detected capacity change from 0 to 1024 [ 298.625376][ T6674] atomic_op ffff888073e30998 conn xmit_atomic 0000000000000000 [ 298.684422][ T6670] EXT4-fs: Ignoring removed bh option [ 298.795717][ T6670] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 299.034664][ T6678] fuse: Bad value for 'fd' [ 299.052549][ T6678] block device autoloading is deprecated and will be removed. [ 299.751662][ T6026] EXT4-fs (loop6): unmounting filesystem. [ 299.752556][ T6691] loop7: detected capacity change from 0 to 64 [ 300.568722][ T6696] No such timeout policy "syz1" [ 300.913753][ T26] audit: type=1800 audit(1786117805.377:9): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.425" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 303.782321][ T6738] netlink: 72 bytes leftover after parsing attributes in process `syz.0.433'. [ 305.262994][ T6746] loop6: detected capacity change from 0 to 1024 [ 305.289477][ T6746] hfsplus: unable to parse mount options [ 305.929671][ T6757] loop6: detected capacity change from 0 to 16 [ 305.939675][ T6757] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 306.010569][ T6757] cramfs: root is not a directory [ 306.655978][ T6764] Bluetooth: MGMT ver 1.22 [ 306.687136][ T6764] futex_wake_op: syz.1.440 tries to shift op by 144; fix this program [ 308.069408][ T6780] device syzkaller0 entered promiscuous mode [ 308.081420][ T6780] tipc: Enabled bearer , priority 0 [ 308.256580][ T6778] tipc: Resetting bearer [ 308.400051][ T6778] tipc: Disabling bearer [ 309.661786][ T6797] bridge0: port 3(erspan0) entered blocking state [ 309.668643][ T6797] bridge0: port 3(erspan0) entered disabled state [ 309.677475][ T6797] device erspan0 entered promiscuous mode [ 309.684518][ T6797] bridge0: port 3(erspan0) entered blocking state [ 309.691347][ T6797] bridge0: port 3(erspan0) entered forwarding state [ 309.709437][ T6797] device erspan0 left promiscuous mode [ 309.715193][ T6797] bridge0: port 3(erspan0) entered disabled state [ 310.277576][ T6798] loop1: detected capacity change from 0 to 1024 [ 310.431447][ T4279] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 311.222625][ T26] audit: type=1800 audit(1786117815.757:10): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.449" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 311.272729][ T6811] hfsplus: can't free extent [ 311.774345][ T6826] sctp: [Deprecated]: syz.0.459 (pid 6826) Use of int in max_burst socket option deprecated. [ 311.774345][ T6826] Use struct sctp_assoc_value instead [ 311.840928][ T6827] loop7: detected capacity change from 0 to 4096 [ 312.606805][ T6831] netlink: 204 bytes leftover after parsing attributes in process `syz.0.459'. [ 313.114595][ T4279] Bluetooth: hci4: command 0x0405 tx timeout [ 313.950466][ T6818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.455'. [ 314.292953][ T4279] Bluetooth: hci2: ACL packet too small [ 315.033625][ T6870] No such timeout policy "syz1" [ 315.649774][ T6869] loop7: detected capacity change from 0 to 4096 [ 315.698987][ T6869] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 317.039284][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045767][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.703553][ T4279] Bluetooth: hci1: hcon ffff888023a84000 sent 0 < count 1 [ 319.717241][ T6925] loop1: detected capacity change from 0 to 64 [ 320.035531][ T6939] fuse: Bad value for 'user_id' [ 320.134471][ T6943] No such timeout policy "syz1" [ 320.508142][ T26] audit: type=1800 audit(1786117824.977:11): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.486" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 320.673549][ T4321] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 320.692664][ T4279] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1 [ 320.866201][ T4321] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 320.922169][ T4321] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 320.949516][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 321.009612][ T4321] usb 8-1: Product: syz [ 321.023412][ T4321] usb 8-1: Manufacturer: syz [ 321.038864][ T4321] usb 8-1: SerialNumber: syz [ 321.116607][ T6969] tmpfs: Unknown parameter 'quota' [ 322.284270][ T4321] usb 8-1: config 0 descriptor?? [ 322.588349][ T4279] Bluetooth: hci1: hcon ffff888023a84000 sent 0 < count 1 [ 322.595094][ T128] usb 8-1: USB disconnect, device number 2 [ 326.047070][ T7029] loop6: detected capacity change from 0 to 64 [ 326.744520][ T7039] No such timeout policy "syz1" [ 327.601391][ T7037] netlink: 112 bytes leftover after parsing attributes in process `syz.0.510'. [ 327.908181][ T7036] netlink: 52 bytes leftover after parsing attributes in process `syz.7.509'. [ 327.971572][ T4281] Bluetooth: hci4: unexpected cc 0x2029 length: 100 > 1 [ 328.000333][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.008328][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.824615][ T7061] loop6: detected capacity change from 0 to 4096 [ 328.965501][ T7070] netlink: 72 bytes leftover after parsing attributes in process `syz.1.522'. [ 329.582006][ T7061] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 330.036113][ T7082] loop1: detected capacity change from 0 to 128 [ 330.392352][ T7088] loop7: detected capacity change from 0 to 1024 [ 331.904709][ T26] audit: type=1800 audit(1786117836.467:12): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.526" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 331.946851][ T7103] hfsplus: can't free extent [ 333.572544][ T7118] loop1: detected capacity change from 0 to 4096 [ 333.595769][ T7098] loop6: detected capacity change from 0 to 32768 [ 333.655859][ T7118] ntfs: volume version 3.1. [ 333.686435][ T7118] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 333.761840][ T7118] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 333.781028][ T7098] ERROR: (device loop6): dbAllocAG: Corrupt dmapctl page [ 333.781028][ T7098] [ 333.805296][ T7133] loop7: detected capacity change from 0 to 64 [ 333.812787][ T7118] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 333.830261][ T7133] hfs: unable to change codepage [ 333.836097][ T7098] ERROR: (device loop6): remounting filesystem as read-only [ 333.859878][ T7133] hfs: unable to parse mount options [ 333.883580][ T7118] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota. [ 333.883690][ T7098] jfs_mkdir: dtInsert returned -EIO [ 333.919916][ T7118] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 333.972262][ T7098] ERROR: (device loop6): jfs_mkdir: [ 333.972262][ T7098] [ 334.625415][ T7153] loop6: detected capacity change from 0 to 64 [ 334.625441][ T4279] Bluetooth: hci3: unknown advertising packet type: 0xff [ 334.752413][ T7153] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 335.179369][ T7165] loop6: detected capacity change from 0 to 128 [ 335.211149][ T7165] FAT-fs (loop6): Directory bread(block 524322) failed [ 335.292922][ T7165] FAT-fs (loop6): Directory bread(block 524323) failed [ 335.355194][ T7165] FAT-fs (loop6): Directory bread(block 524324) failed [ 335.433935][ T7165] FAT-fs (loop6): Directory bread(block 524325) failed [ 335.465562][ T7165] FAT-fs (loop6): Directory bread(block 524326) failed [ 335.472503][ T7165] FAT-fs (loop6): Directory bread(block 524327) failed [ 335.525532][ T7165] FAT-fs (loop6): Directory bread(block 524328) failed [ 335.567314][ T7165] FAT-fs (loop6): Directory bread(block 524329) failed [ 335.631977][ T7157] loop7: detected capacity change from 0 to 32768 [ 335.639450][ T7165] FAT-fs (loop6): Directory bread(block 524322) failed [ 335.668606][ T7165] FAT-fs (loop6): Directory bread(block 524323) failed [ 335.739207][ T7157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.549 (7157) [ 336.015740][ T7157] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.105237][ T7157] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 336.161663][ T7157] BTRFS info (device loop7): using free space tree [ 336.243758][ T5265] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 336.453866][ T5265] usb 7-1: Using ep0 maxpacket: 16 [ 336.466729][ T5265] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.510966][ T7157] BTRFS info (device loop7): enabling ssd optimizations [ 336.553277][ T5265] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.618726][ T5265] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.642864][ T5265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.662323][ T5265] usb 7-1: Product: syz [ 336.666608][ T5265] usb 7-1: Manufacturer: syz [ 336.693909][ T5265] usb 7-1: SerialNumber: syz [ 336.782322][ T5781] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.947389][ T5265] usb 7-1: skipping empty audio interface (v1) [ 336.974837][ T6854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop7 scanned by udevd (6854) [ 337.150564][ T5265] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 337.206674][ T5265] usb 7-1: USB disconnect, device number 2 [ 337.497604][ T6487] udevd[6487]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.931720][ T7227] device syzkaller0 entered promiscuous mode [ 337.945684][ T7229] loop7: detected capacity change from 0 to 24 [ 337.967008][ T7227] tipc: Started in network mode [ 337.971941][ T7227] tipc: Node identity 5ae923682e43, cluster identity 4711 [ 337.990605][ T7231] loop1: detected capacity change from 0 to 128 [ 338.084954][ T7227] tipc: Enabled bearer , priority 0 [ 338.086381][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.153115][ T7231] FAT-fs (loop1): Filesystem has been set read-only [ 338.156217][ T7227] tipc: Resetting bearer [ 338.179992][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.208419][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.226514][ T4279] Bluetooth: hci1: hcon ffff888023a84000 sent 0 < count 1 [ 338.241184][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.257698][ T7226] tipc: Resetting bearer [ 338.313915][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.343006][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.385258][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.395974][ T7226] tipc: Disabling bearer [ 338.418415][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.453719][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.512217][ T7231] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 338.620180][ T26] audit: type=1800 audit(1786117843.197:13): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.566" name="file2" dev="loop1" ino=1048613 res=0 errno=0 [ 338.650257][ T7231] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 338.728638][ T7241] bridge0: port 3(erspan0) entered blocking state [ 338.735463][ T7241] bridge0: port 3(erspan0) entered disabled state [ 338.753166][ T7241] device erspan0 entered promiscuous mode [ 338.793626][ T7241] device erspan0 left promiscuous mode [ 338.799839][ T7241] bridge0: port 3(erspan0) entered disabled state [ 340.553517][ T7284] device bridge0 entered promiscuous mode [ 340.831526][ T4279] Bluetooth: hci0: hcon ffff888059ea4000 sent 0 < count 1 [ 341.162825][ T7275] loop7: detected capacity change from 0 to 32768 [ 341.198999][ T4279] Bluetooth: hci4: hcon ffff88807cfc4000 sent 0 < count 1 [ 341.204194][ T7275] XFS: ikeep mount option is deprecated. [ 341.310927][ T7275] XFS (loop7): Mounting V5 Filesystem [ 341.454287][ T7275] XFS (loop7): Ending clean mount [ 341.467529][ T7315] device veth1_macvtap left promiscuous mode [ 341.480092][ T7315] device macsec0 entered promiscuous mode [ 341.489368][ T7275] XFS (loop7): Quotacheck needed: Please wait. [ 341.521878][ T7317] device veth1_macvtap entered promiscuous mode [ 341.568501][ T7317] device macsec0 left promiscuous mode [ 341.581642][ T7275] XFS (loop7): Quotacheck: Done. [ 341.613193][ T4281] Bluetooth: hci3: unexpected event 0x04 length: 49 > 10 [ 341.613228][ T4281] Bluetooth: unknown link type 152 [ 341.730116][ T5781] XFS (loop7): Unmounting Filesystem [ 341.788754][ T7326] loop1: detected capacity change from 0 to 512 [ 342.085650][ T7326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 342.131908][ T7326] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.218094][ T7326] Quota error (device loop1): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 342.283764][ T7326] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 342.324385][ T7326] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.589: Failed to acquire dquot type 0 [ 342.564979][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 342.611664][ T26] audit: type=1800 audit(1786117847.177:14): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.598" name="idProduct" dev="configfs" ino=46024 res=0 errno=0 [ 343.039401][ T4281] Bluetooth: hci2: hcon ffff8880289e8000 sent 0 < count 1 [ 343.066375][ T4281] Bluetooth: hci4: hcon ffff88807cfc4000 sent 0 < count 1 [ 343.407872][ T7381] netlink: 56 bytes leftover after parsing attributes in process `syz.2.608'. [ 343.523700][ T7357] loop1: detected capacity change from 0 to 32768 [ 343.550556][ T7357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.600 (7357) [ 343.620762][ T7357] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.651508][ T7357] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 343.670996][ T7357] BTRFS info (device loop1): allowing degraded mounts [ 343.680976][ T7357] BTRFS info (device loop1): turning on flush-on-commit [ 343.689338][ T7357] BTRFS info (device loop1): max_inline at 0 [ 343.695893][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 343.797228][ T7357] BTRFS info (device loop1): setting nodatasum [ 343.813714][ T7357] BTRFS info (device loop1): turning on sync discard [ 343.821211][ T7357] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 343.855521][ T7357] BTRFS info (device loop1): trying to use backup root at mount time [ 343.884735][ T7357] BTRFS info (device loop1): using free space tree [ 343.937252][ T4279] Bluetooth: hci4: hcon ffff88807cfc4000 sent 0 < count 1 [ 344.163722][ T7357] BTRFS info (device loop1): enabling ssd optimizations [ 344.203600][ T5258] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 344.403734][ T5258] usb 8-1: Using ep0 maxpacket: 32 [ 344.410962][ T5258] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 344.443637][ T5258] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 344.452298][ T5258] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.574094][ T5258] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 344.583110][ T5258] usb 8-1: config 1 has no interface number 0 [ 344.595368][ T4275] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.623840][ T5258] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 344.635863][ T5258] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.690433][ T5258] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 344.710704][ T7433] loop6: detected capacity change from 0 to 1024 [ 344.713676][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 344.890306][ T5258] snd_usb_pod 8-1:1.1: set_interface failed [ 344.907916][ T5258] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 344.919910][ T5258] snd_usb_pod: probe of 8-1:1.1 failed with error -71 [ 344.929653][ T5258] usb 8-1: USB disconnect, device number 3 [ 345.391556][ T7462] loop1: detected capacity change from 0 to 1024 [ 345.424741][ T7462] hfsplus: unable to parse mount options [ 345.512488][ T7466] loop6: detected capacity change from 0 to 64 [ 345.946291][ T7473] loop1: detected capacity change from 0 to 16 [ 345.956415][ T7473] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 346.125260][ T7473] cramfs: root is not a directory [ 346.611720][ T7481] loop1: detected capacity change from 0 to 256 [ 346.618817][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.630'. [ 346.718393][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.630'. [ 346.949844][ T4281] Bluetooth: hci4: hcon ffff88807cfc4000 sent 0 < count 1 [ 347.051647][ T7497] netlink: 520 bytes leftover after parsing attributes in process `syz.1.636'. [ 347.183683][ T7453] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 347.383677][ T7453] usb 8-1: Using ep0 maxpacket: 8 [ 347.402476][ T7453] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 347.437953][ T7453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.461655][ T7453] usb 8-1: Product: syz [ 347.472990][ T7453] usb 8-1: Manufacturer: syz [ 347.483300][ T7512] tipc: Enabled bearer , priority 0 [ 347.490333][ T7453] usb 8-1: SerialNumber: syz [ 347.500619][ T7453] usb 8-1: config 0 descriptor?? [ 347.509738][ T7512] tipc: Resetting bearer [ 347.525641][ T7453] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 347.544337][ T7453] pctv452e: pctv452e_power_ctrl: 1 [ 347.544337][ T7453] [ 347.553034][ T7453] usb 8-1: selecting invalid altsetting 3 [ 347.568293][ T7453] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 347.568293][ T7453] [ 347.589354][ T7453] dvb-usb: bulk message failed: -22 (5/0) [ 347.618635][ T7453] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.636856][ T7453] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 347.652883][ T7453] usb 8-1: media controller created [ 347.661226][ T7453] dvb-usb: bulk message failed: -22 (8/0) [ 347.678106][ T7453] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 347.696127][ T7453] dvb-usb: MAC address reading failed. [ 347.725761][ T7493] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 347.776011][ T7453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.845269][ T7511] tipc: Disabling bearer [ 347.982944][ T7453] DVB: Unable to find symbol stb0899_attach() [ 348.003226][ T7453] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 348.040827][ T7523] loop6: detected capacity change from 0 to 64 [ 348.118444][ T7527] loop1: detected capacity change from 0 to 512 [ 348.225503][ T7527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 348.249500][ T7527] ext4 filesystem being mounted at /135/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.293645][ T7453] rc_core: IR keymap rc-tt-1500 not found [ 348.299460][ T7453] Registered IR keymap rc-empty [ 348.338143][ T7453] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 348.426807][ T7453] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input6 [ 348.472343][ T7453] dvb-usb: schedule remote query interval to 100 msecs. [ 348.521486][ T7453] pctv452e: pctv452e_power_ctrl: 0 [ 348.521486][ T7453] [ 348.560699][ T7542] loop6: detected capacity change from 0 to 256 [ 348.583538][ T7453] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 348.612501][ T7543] loop7: detected capacity change from 0 to 256 [ 348.626854][ T7453] usb 8-1: USB disconnect, device number 4 [ 348.637439][ T7455] dvb-usb: bulk message failed: -22 (4/0) [ 348.653756][ T7455] dvb-usb: error -22 while querying for an remote control event. [ 348.676633][ T7542] FAT-fs (loop6): error, clusters badly computed (0 != 128) [ 348.718538][ T7542] FAT-fs (loop6): error, clusters badly computed (1 != 129) [ 348.759935][ T7542] FAT-fs (loop6): error, clusters badly computed (2 != 130) [ 348.787245][ T7542] FAT-fs (loop6): error, clusters badly computed (3 != 131) [ 348.818786][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 348.839091][ T7542] FAT-fs (loop6): error, clusters badly computed (4 != 132) [ 348.892263][ T7453] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 348.897411][ T7542] FAT-fs (loop6): error, clusters badly computed (5 != 133) [ 349.779912][ T7556] loop7: detected capacity change from 0 to 32768 [ 350.008124][ T7556] JBD2: Ignoring recovery information on journal [ 350.027104][ T7554] loop6: detected capacity change from 0 to 40427 [ 350.047995][ T7554] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 350.056904][ T7554] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 350.128005][ T7554] F2FS-fs (loop6): Found nat_bits in checkpoint [ 350.316336][ T7556] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 350.356899][ T7554] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 350.383024][ T7554] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 351.098021][ T7596] loop1: detected capacity change from 0 to 8 [ 351.188474][ T5781] ocfs2: Unmounting device (7,7) on (node local) [ 351.412085][ T7603] loop1: detected capacity change from 0 to 256 [ 351.612528][ T7603] FAT-fs (loop1): Directory bread(block 64) failed [ 351.643641][ T7603] FAT-fs (loop1): Directory bread(block 65) failed [ 351.659717][ T7603] FAT-fs (loop1): Directory bread(block 66) failed [ 351.691166][ T7603] FAT-fs (loop1): Directory bread(block 67) failed [ 351.719422][ T7603] FAT-fs (loop1): Directory bread(block 68) failed [ 351.744975][ T7603] FAT-fs (loop1): Directory bread(block 69) failed [ 351.766072][ T7603] FAT-fs (loop1): Directory bread(block 70) failed [ 351.785027][ T7603] FAT-fs (loop1): Directory bread(block 71) failed [ 351.807041][ T7601] loop6: detected capacity change from 0 to 32768 [ 351.817318][ T7603] FAT-fs (loop1): Directory bread(block 72) failed [ 351.857565][ T7603] FAT-fs (loop1): Directory bread(block 73) failed [ 351.921031][ T7601] XFS (loop6): Mounting V5 Filesystem [ 351.944828][ T7598] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 352.151966][ T7601] XFS (loop6): Ending clean mount [ 352.197091][ T7625] tipc: Enabling of bearer rejected, failed to enable media [ 352.304691][ T7601] XFS (loop6): Quotacheck needed: Please wait. [ 352.347708][ T7628] loop7: detected capacity change from 0 to 512 [ 353.480929][ T7628] EXT4-fs (loop7): 1 truncate cleaned up [ 353.486749][ T7628] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 353.576328][ T7601] XFS (loop6): Quotacheck: Done. [ 353.785786][ T5781] EXT4-fs (loop7): unmounting filesystem. [ 353.863371][ T6026] XFS (loop6): Unmounting Filesystem [ 354.050779][ T7652] loop7: detected capacity change from 0 to 2048 [ 354.366880][ T7658] batman_adv: batadv0: Adding interface: gretap1 [ 354.373262][ T7658] batman_adv: batadv0: The MTU of interface gretap1 is too small (1454) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.408484][ T7658] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 354.785716][ T7669] loop1: detected capacity change from 0 to 2048 [ 354.833797][ T7669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.917783][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.7.682'. [ 355.715594][ T7680] loop6: detected capacity change from 0 to 256 [ 356.173543][ T7454] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 356.383548][ T7454] usb 8-1: Using ep0 maxpacket: 32 [ 356.390841][ T7454] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 356.419955][ T7454] usb 8-1: config 0 has no interface number 0 [ 356.447799][ T7454] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 356.495750][ T7454] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.524008][ T7454] usb 8-1: Product: syz [ 356.538275][ T7454] usb 8-1: Manufacturer: syz [ 356.552970][ T7454] usb 8-1: SerialNumber: syz [ 356.578625][ T7454] usb 8-1: config 0 descriptor?? [ 356.599830][ T7454] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 356.822431][ T7454] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 356.879687][ T7454] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 357.018138][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.080106][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.343265][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 357.354451][ T7454] usb 8-1: USB disconnect, device number 5 [ 357.408915][ T7454] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 357.451812][ T7454] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 357.505484][ T7454] quatech2 8-1:0.51: device disconnected [ 358.113618][ T5258] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 358.132494][ T7751] loop7: detected capacity change from 0 to 4096 [ 358.206829][ T7751] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 358.330405][ T5258] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.351260][ T5258] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 358.368269][ T5258] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.415081][ T5258] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 358.440864][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 358.453882][ T5258] usb 2-1: Product: syz [ 358.458097][ T5258] usb 2-1: Manufacturer: syz [ 358.485533][ T7745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.493842][ T5781] EXT4-fs (loop7): unmounting filesystem. [ 358.504196][ T5258] usb_debug 2-1:1.0: debug converter detected [ 358.539567][ T5258] usb 2-1: debug converter now attached to ttyUSB0 [ 358.729495][ T7760] loop7: detected capacity change from 0 to 4096 [ 358.743964][ T7764] device hsr0 entered promiscuous mode [ 358.754284][ T5258] usb 2-1: USB disconnect, device number 3 [ 358.768053][ T7760] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 358.790710][ T5258] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 358.807947][ T5258] usb_debug 2-1:1.0: device disconnected [ 358.928359][ T7760] ntfs3: loop7: Inode r=19 is not in use! [ 358.955142][ T7760] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 359.487488][ T7780] device syzkaller0 entered promiscuous mode [ 359.530631][ T7780] tipc: Started in network mode [ 359.565972][ T7780] tipc: Node identity 02dd780e769f, cluster identity 4711 [ 359.615358][ T7780] tipc: Enabled bearer , priority 0 [ 359.671393][ T7788] tipc: Resetting bearer [ 359.696428][ T4281] Bluetooth: hci1: hcon ffff888023a84000 sent 0 < count 1 [ 359.727604][ T7779] tipc: Resetting bearer [ 359.819888][ T7779] tipc: Disabling bearer [ 360.164745][ T4318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 360.179175][ T7773] loop6: detected capacity change from 0 to 32768 [ 360.280953][ T7773] XFS (loop6): Mounting V5 Filesystem [ 360.356972][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.372577][ T4318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.401960][ T4318] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.415473][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.455166][ T4318] usb 2-1: SerialNumber: syz [ 360.473201][ T7773] XFS (loop6): Ending clean mount [ 360.495728][ T7773] XFS (loop6): Quotacheck needed: Please wait. [ 360.653720][ T7773] XFS (loop6): Quotacheck: Done. [ 360.679196][ T4318] usb 2-1: 0:2 : does not exist [ 360.739826][ T4318] usb 2-1: USB disconnect, device number 4 [ 360.807701][ T6487] udevd[6487]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.910883][ T6026] XFS (loop6): Unmounting Filesystem [ 361.435709][ T7843] device syzkaller0 entered promiscuous mode [ 361.480425][ T7843] tipc: Enabled bearer , priority 0 [ 361.523057][ T7843] tipc: Resetting bearer [ 361.541303][ T7842] tipc: Resetting bearer [ 361.600198][ T7842] tipc: Disabling bearer [ 362.003015][ T7851] loop1: detected capacity change from 0 to 4096 [ 362.109341][ T4281] Bluetooth: hci1: hcon ffff888023a84000 sent 0 < count 1 [ 362.300246][ T7851] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 362.328152][ T7865] loop7: detected capacity change from 0 to 2048 [ 362.395444][ T7865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.411065][ T7866] ntfs3: loop1: ino=9, attr_set_size [ 364.412558][ T4281] Bluetooth: hci2: hcon ffff8880289e8000 sent 0 < count 1 [ 364.783360][ T7919] loop6: detected capacity change from 0 to 1024 [ 364.889308][ T7919] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 366.420432][ T7961] tipc: Enabling of bearer rejected, failed to enable media [ 366.742211][ T7974] Cannot find set identified by id 0 to match [ 367.042552][ T4279] Bluetooth: hci2: hcon ffff8880289e8000 sent 0 < count 1 [ 367.111951][ T7945] loop6: detected capacity change from 0 to 32768 [ 367.175435][ T7945] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.756 (7945) [ 367.237424][ T7945] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 367.278793][ T7989] tipc: Enabling of bearer rejected, failed to enable media [ 367.288459][ T7945] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 367.324196][ T7945] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 367.373518][ T7945] BTRFS info (device loop6): use zstd compression, level 3 [ 367.380800][ T7945] BTRFS info (device loop6): use no compression [ 367.433725][ T7945] BTRFS info (device loop6): using free space tree [ 367.642662][ T7945] BTRFS info (device loop6): enabling ssd optimizations [ 367.884684][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.7.771'. [ 367.941080][ T7985] loop1: detected capacity change from 0 to 32768 [ 368.152475][ T7985] XFS (loop1): Mounting V5 Filesystem [ 368.192999][ T6026] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 368.304352][ T8039] loop7: detected capacity change from 0 to 512 [ 368.651341][ T8039] EXT4-fs (loop7): 1 truncate cleaned up [ 368.657218][ T8039] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 369.198275][ T6854] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop6 scanned by udevd (6854) [ 369.313359][ T7985] XFS (loop1): Ending clean mount [ 369.337277][ T5781] EXT4-fs (loop7): unmounting filesystem. [ 369.584352][ T8064] loop7: detected capacity change from 0 to 512 [ 369.617966][ T4275] XFS (loop1): Unmounting Filesystem [ 369.630168][ T8064] EXT4-fs: Ignoring removed bh option [ 369.699427][ T8064] EXT4-fs (loop7): 1 truncate cleaned up [ 369.763550][ T8064] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 369.857404][ T8074] tipc: Enabling of bearer rejected, failed to enable media [ 369.895505][ T8064] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.776: invalid indirect mapped block 4294901760 (level 0) [ 370.011494][ T8064] EXT4-fs (loop7): Remounting filesystem read-only [ 370.166015][ T5781] EXT4-fs (loop7): unmounting filesystem. [ 370.929263][ T8105] netlink: 'syz.7.789': attribute type 11 has an invalid length. [ 370.962167][ T8108] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 371.148590][ T8114] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 371.253568][ T5366] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 371.435503][ T8125] loop7: detected capacity change from 0 to 512 [ 371.452843][ T5366] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 371.492454][ T5366] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 371.511877][ T8125] FAT-fs (loop7): error, corrupted file size (i_pos 53, 9216) [ 371.545264][ T8125] FAT-fs (loop7): error, corrupted file size (i_pos 53, 8960) [ 371.583552][ T8125] FAT-fs (loop7): error, corrupted file size (i_pos 53, 8960) [ 371.638464][ T5366] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 371.648944][ T5366] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 371.676465][ T5366] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 371.721135][ T5366] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 371.747639][ T8130] tipc: Enabled bearer , priority 0 [ 371.765698][ T5366] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 371.792514][ T8130] tipc: Resetting bearer [ 371.805591][ T5366] usb 7-1: Product: syz [ 371.809893][ T5366] usb 7-1: Manufacturer: syz [ 371.864764][ T5366] cdc_wdm 7-1:1.0: skipping garbage [ 371.870201][ T5366] cdc_wdm 7-1:1.0: skipping garbage [ 371.908007][ T5366] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 371.923629][ T5366] cdc_wdm 7-1:1.0: Unknown control protocol [ 372.035412][ T8129] tipc: Disabling bearer [ 372.132933][ T8135] loop7: detected capacity change from 0 to 1024 [ 372.411243][ T4653] Bluetooth: hci5: Frame reassembly failed (-84) [ 372.467633][ T5366] usb 7-1: USB disconnect, device number 3 [ 372.479782][ T4653] Bluetooth: hci5: Frame reassembly failed (-84) [ 372.928754][ T4281] Bluetooth: hci2: hcon ffff8880289e8000 sent 0 < count 1 [ 373.269790][ T5365] wlan0 speed is unknown, defaulting to 1000 [ 373.746022][ T8162] netlink: 'syz.0.804': attribute type 10 has an invalid length. [ 373.785381][ T8162] device netdevsim0 entered promiscuous mode [ 374.393772][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 374.394801][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 374.678016][ T8201] tipc: Enabling of bearer rejected, failed to enable media [ 375.304586][ T8221] mkiss: ax0: crc mode is auto. [ 375.621877][ T8241] device syzkaller1 entered promiscuous mode [ 376.535520][ T8268] loop6: detected capacity change from 0 to 512 [ 376.562454][ T8268] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.833: iget: bad i_size value: 38620345925642 [ 376.606269][ T8268] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.833: couldn't read orphan inode 15 (err -117) [ 376.910604][ T8268] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 377.123549][ T8270] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 377.326046][ T8280] tipc: Enabling of bearer rejected, failed to enable media [ 377.340235][ T8282] loop7: detected capacity change from 0 to 128 [ 377.373051][ T6026] EXT4-fs (loop6): unmounting filesystem. [ 377.431274][ T8282] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 377.492494][ T8282] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 377.507004][ T8284] overlayfs: failed to verify origin (newroot/168, ino=915, err=-116) [ 377.544532][ T8282] EXT4-fs (loop7): shut down requested (2) [ 377.565232][ T8284] overlayfs: failed to verify upper root origin [ 377.635880][ T8292] loop6: detected capacity change from 0 to 1024 [ 377.688799][ T8292] EXT4-fs: Ignoring removed orlov option [ 377.720310][ T5781] EXT4-fs (loop7): unmounting filesystem. [ 377.942983][ T8292] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 378.228293][ T6026] EXT4-fs (loop6): unmounting filesystem. [ 378.351718][ T8300] loop7: detected capacity change from 0 to 8192 [ 378.392878][ T8313] loop6: detected capacity change from 0 to 64 [ 378.445506][ T8300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 378.482026][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488436][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.558492][ T8300] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 378.640586][ T8300] REISERFS (device loop7): using ordered data mode [ 378.650811][ T8300] reiserfs: using flush barriers [ 378.686474][ T8300] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 378.769471][ T8300] REISERFS (device loop7): checking transaction log (loop7) [ 379.152187][ T8300] REISERFS (device loop7): Using tea hash to sort names [ 379.193278][ T8300] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 379.873149][ T8322] loop6: detected capacity change from 0 to 32768 [ 379.950030][ T8322] JBD2: Ignoring recovery information on journal [ 380.175460][ T8344] loop1: detected capacity change from 0 to 4096 [ 380.201429][ T8322] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 380.466278][ T8355] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.811533][ T6026] ocfs2: Unmounting device (7,6) on (node local) [ 381.293621][ T8348] loop7: detected capacity change from 0 to 32768 [ 381.332530][ T8348] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop7 scanned by syz.7.851 (8348) [ 381.333705][ T7454] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 381.402566][ T8348] BTRFS info (device loop7): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 381.444632][ T8348] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 381.483871][ T8348] BTRFS info (device loop7): using free space tree [ 381.565842][ T7454] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.602292][ T7454] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.642048][ T7454] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.655893][ T7454] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.665162][ T8348] BTRFS info (device loop7): enabling ssd optimizations [ 381.672581][ T7454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.689357][ T7454] usb 7-1: config 0 descriptor?? [ 382.031390][ T8416] Invalid option length (1047276) for dns_resolver key [ 382.121325][ T7454] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 382.252035][ T7454] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 382.304756][ T8426] netlink: 52 bytes leftover after parsing attributes in process `syz.1.865'. [ 382.351084][ T5781] BTRFS info (device loop7): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 382.899968][ T7446] usb 7-1: USB disconnect, device number 4 [ 382.971924][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.979236][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.099494][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580f7c00: rx timeout, send abort [ 383.158621][ T8438] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 383.170668][ T4364] Bluetooth: hci5: Frame reassembly failed (-84) [ 383.599538][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580f6000: rx timeout, send abort [ 383.610007][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580f7c00: abort rx timeout. Force session deactivation [ 383.751671][ T8439] mmap: syz.1.865 (8439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 383.842042][ T8450] loop7: detected capacity change from 0 to 128 [ 383.924694][ T8450] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 384.107927][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580f6000: abort rx timeout. Force session deactivation [ 384.235976][ T8450] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 384.879861][ T8468] loop7: detected capacity change from 0 to 128 [ 385.194017][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 385.202711][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 385.382965][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 386.872246][ T8523] loop1: detected capacity change from 0 to 256 [ 386.970743][ T8527] loop6: detected capacity change from 0 to 64 [ 387.001174][ T8523] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 387.173983][ T8527] hfs: hfs: Invalid key length: 94 [ 387.338517][ T4491] ------------[ cut here ]------------ [ 387.345108][ T4491] kernel BUG at fs/hfs/inode.c:450! [ 387.356815][ T4491] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 387.363115][ T4491] CPU: 0 PID: 4491 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 387.370757][ T4491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.380832][ T4491] Workqueue: writeback wb_workfn (flush-7:6) [ 387.387000][ T4491] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 387.392635][ T4491] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 81 29 87 ff e9 43 fe ff ff e8 c7 fc 35 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 387.412314][ T4491] RSP: 0018:ffffc9000491f3a0 EFLAGS: 00010293 [ 387.418474][ T4491] RAX: ffffffff824c3159 RBX: ffff88807c1fc298 RCX: ffff88801db8bc00 [ 387.426461][ T4491] RDX: 0000000000000000 RSI: ffffffff8cd25cc0 RDI: 0000000000000000 [ 387.434449][ T4491] RBP: ffffc9000491f530 R08: ffff88801db8bc00 R09: 0000000000000003 [ 387.442434][ T4491] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 387.450420][ T4491] R13: 1ffff92000923e78 R14: 0000000000000000 R15: ffff88807c1fc258 [ 387.458406][ T4491] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 387.467347][ T4491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.473948][ T4491] CR2: 000055558416ea38 CR3: 000000005f1e2000 CR4: 00000000003506f0 [ 387.482054][ T4491] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 387.490049][ T4491] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 387.498035][ T4491] Call Trace: [ 387.501394][ T4491] [ 387.504410][ T4491] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 387.509848][ T4491] ? __writeback_single_inode+0x4bc/0x1170 [ 387.515679][ T4491] ? __rwlock_init+0x140/0x140 [ 387.520484][ T4491] __writeback_single_inode+0x76c/0x1170 [ 387.526140][ T4491] writeback_sb_inodes+0xad5/0x17f0 [ 387.531369][ T4491] ? queue_io+0x570/0x570 [ 387.535717][ T4491] ? move_expired_inodes+0x722/0x770 [ 387.541023][ T4491] ? rcu_is_watching+0x11/0xa0 [ 387.545912][ T4491] ? queue_io+0x37a/0x570 [ 387.550259][ T4491] wb_writeback+0x470/0xd40 [ 387.554780][ T4491] ? percpu_ref_tryget+0x250/0x250 [ 387.559903][ T4491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.565897][ T4491] ? __lock_acquire+0x7c40/0x7c40 [ 387.570938][ T4491] ? _raw_spin_unlock_irq+0x1f/0x40 [ 387.576224][ T4491] wb_workfn+0x423/0xee0 [ 387.580487][ T4491] ? inode_wait_for_writeback+0x220/0x220 [ 387.586227][ T4491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.592224][ T4491] ? __lock_acquire+0x7c40/0x7c40 [ 387.597272][ T4491] ? read_lock_is_recursive+0x10/0x10 [ 387.602663][ T4491] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.608568][ T4491] ? _raw_spin_unlock+0x40/0x40 [ 387.613435][ T4491] ? _raw_spin_unlock_irq+0x1f/0x40 [ 387.618639][ T4491] ? process_one_work+0x7b4/0x1160 [ 387.623865][ T4491] process_one_work+0x8ab/0x1160 [ 387.628826][ T4491] ? worker_detach_from_pool+0x240/0x240 [ 387.634533][ T4491] ? _raw_spin_lock_irq+0xb7/0xf0 [ 387.639588][ T4491] ? _raw_spin_lock_irqsave+0x100/0x100 [ 387.645233][ T4491] ? wq_worker_running+0x97/0x190 [ 387.650348][ T4491] worker_thread+0xaf5/0x12a0 [ 387.655047][ T4491] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.661055][ T4491] kthread+0x29d/0x330 [ 387.665134][ T4491] ? worker_clr_flags+0x1a0/0x1a0 [ 387.670172][ T4491] ? kthread_blkcg+0xd0/0xd0 [ 387.674785][ T4491] ret_from_fork+0x1f/0x30 [ 387.679337][ T4491] [ 387.682371][ T4491] Modules linked in: [ 387.743353][ T4491] ---[ end trace 0000000000000000 ]--- [ 387.778034][ T4491] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 387.799942][ T4491] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 81 29 87 ff e9 43 fe ff ff e8 c7 fc 35 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 387.849273][ T4491] RSP: 0018:ffffc9000491f3a0 EFLAGS: 00010293 [ 387.857318][ T4491] RAX: ffffffff824c3159 RBX: ffff88807c1fc298 RCX: ffff88801db8bc00 [ 387.867512][ T4491] RDX: 0000000000000000 RSI: ffffffff8cd25cc0 RDI: 0000000000000000 [ 387.875888][ T4491] RBP: ffffc9000491f530 R08: ffff88801db8bc00 R09: 0000000000000003 [ 387.885709][ T4491] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 387.893980][ T4491] R13: 1ffff92000923e78 R14: 0000000000000000 R15: ffff88807c1fc258 [ 387.916481][ T4491] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 387.937016][ T4491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.951789][ T4491] CR2: 00007f2e2c6ad440 CR3: 00000000766c0000 CR4: 00000000003506f0 [ 387.965978][ T4491] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 387.975546][ T4491] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 387.984373][ T4491] Kernel panic - not syncing: Fatal exception [ 387.990597][ T4491] Kernel Offset: disabled [ 387.994913][ T4491] Rebooting in 86400 seconds..