last executing test programs: 7.444140044s ago: executing program 0 (id=51): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0') 6.355088032s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000100)="f2a70f01dbc4e14573f4a20f01c3b923000040b8f1000000ba000000000f300f12dfc4e10e10c9670fc72b65673e363e360f381dfc0f2097", 0x19}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.900132355s ago: executing program 1 (id=70): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050305400080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 4.811662714s ago: executing program 1 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x88}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 4.614064422s ago: executing program 0 (id=65): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0xd4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.520462032s ago: executing program 1 (id=66): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000"], 0x15) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8) 4.213202566s ago: executing program 1 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) shutdown(r0, 0x1) 4.197124733s ago: executing program 0 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x1404, &(0x7f0000002300)=ANY=[], 0x0) 3.94507117s ago: executing program 0 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000400)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.006873277s ago: executing program 2 (id=74): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0) fdatasync(r0) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2.006704607s ago: executing program 3 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 2.005767927s ago: executing program 0 (id=82): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0x0, r1}, 0x10) 2.004929447s ago: executing program 1 (id=76): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x0, 0x8001, 0x2, 0xfffffffb}, 0xf3, [0x2, 0x3, 0xb55, 0x8, 0x7, 0x2, 0x6, 0x0, 0x1, 0x1326, 0x6, 0x7, 0x5, 0x1, 0x2, 0x0, 0x0, 0x9, 0xc, 0x8001, 0x10001, 0x101, 0x4, 0x80, 0x7, 0x0, 0xa2d, 0x0, 0x6, 0x0, 0x7, 0x9a3a6c3, 0x5, 0xfffffffb, 0x2, 0x800, 0x8, 0x3, 0x9, 0xc0, 0xd, 0xffff0001, 0x8001, 0x2, 0x1, 0xffffffff, 0x4, 0xffffff81, 0xa, 0x8, 0xffffffff, 0x5e9, 0x673b, 0xffff, 0x8a, 0x7, 0x78, 0xb, 0x5, 0xd, 0x7, 0x2, 0x7, 0xfffff8a8, 0x2, 0xfff, 0x5, 0x1, 0x51f, 0x18000000, 0x400, 0xf227, 0x0, 0x220, 0x80000001, 0x6, 0x9, 0x2, 0x4, 0x4, 0x6, 0xfffffff7, 0xa, 0x6, 0x5, 0xfffffff7, 0x0, 0x1000, 0x7, 0x7fff, 0x5, 0x5, 0xad6, 0x7, 0x8, 0xffffff3a, 0x43, 0xffff7f26, 0x3, 0x401, 0x10000, 0xfffffde3, 0x4, 0x6, 0x8, 0x6, 0x0, 0xfffffff1, 0x0, 0x10001, 0x5, 0x10, 0x800, 0x0, 0x10000, 0x2, 0x1, 0x7, 0x5, 0x8001, 0x5, 0x3, 0x3ff, 0xfffffe00, 0x97c, 0x9, 0x4, 0x0, 0x8, 0x0, 0xe, 0x1, 0x6, 0x4, 0x7, 0x2, 0xe, 0x9, 0x9, 0xffffffff, 0x0, 0x3, 0x8000, 0x80, 0x0, 0x7, 0x8, 0x0, 0x2, 0x6, 0x81, 0x3ff, 0x3ff, 0x4, 0x6, 0xc, 0x4, 0x2, 0x0, 0x74, 0x738, 0x6, 0x3, 0x0, 0x7, 0x81, 0x84, 0x5, 0x1, 0x8, 0x2, 0x1, 0x5, 0x3, 0x3, 0x6, 0x5, 0x7, 0x300, 0xffff, 0x2, 0x7fff, 0x0, 0xb, 0x2, 0x0, 0xa, 0x1, 0x3, 0x3, 0x6, 0x5, 0x58d0, 0x8144, 0x1, 0x0, 0x8000, 0xfffffff8, 0x5, 0x8, 0xa, 0x3, 0x7fff, 0x10000, 0x4, 0x5, 0x400, 0x2, 0x1, 0x7, 0xff, 0x5, 0x5, 0xfffffc01, 0x2, 0xd191, 0xa3e, 0x2, 0x6, 0x436, 0x400, 0x8, 0x0, 0x2, 0x4, 0xffff, 0xfffffff0, 0x10001, 0x80000001, 0x1e, 0x2, 0x8, 0x90d, 0x248, 0xa7, 0xeb4, 0x9, 0xffffff3c, 0x9, 0x4, 0x6, 0x9, 0x40, 0x0, 0x2, 0x0, 0x8001, 0x86, 0x6e, 0x96c5, 0x2, 0xffffffff, 0x9, 0x7, 0x8, 0x0, 0x1, 0x7, 0xc8, 0x3, 0x8b1, 0x776, 0xd7d80000, 0x584e, 0x9, 0x200, 0x1, 0x9, 0xffffffff, 0x77f, 0x5, 0x4, 0x9f, 0xe, 0x1, 0x80, 0x8000, 0x1, 0x3ff, 0x5917, 0x0, 0x4, 0x3120, 0x6, 0x0, 0x24d6, 0x0, 0x1000, 0x5, 0x5e, 0x3e7a16cf, 0x0, 0x7, 0xfe, 0xf9, 0xd, 0x10001, 0x0, 0x10, 0x6, 0x5, 0x7, 0x9179, 0x1, 0xd31, 0x2, 0x2, 0x7, 0xfffffff8, 0x84d, 0x8, 0x0, 0x1212, 0x7, 0xffffffb0, 0x4, 0x9, 0x88, 0x5, 0x8, 0xfffffffb, 0x4, 0x2, 0x5, 0xaa25, 0x2, 0xffffffff, 0x200, 0xe4e, 0x3, 0x2, 0x9, 0x6, 0x7, 0x5, 0x3, 0x7, 0x9, 0x9, 0x152e2303, 0x5, 0x8, 0x6, 0x1, 0x3, 0x3ff, 0x4, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x9, 0x7, 0xa, 0x80000000, 0x111, 0x8, 0x5, 0x1, 0x0, 0x7, 0x505, 0x1, 0x10, 0x7, 0xfffffff8, 0x7, 0x200, 0x7ff, 0x400, 0x6, 0x0, 0x81, 0x7fffffff, 0xea, 0xae46, 0x900000, 0x10, 0x5f, 0x1000, 0x4, 0x1ff, 0x9, 0x10, 0x800005, 0x9, 0x9, 0x54f, 0x5, 0x2, 0x6e4e, 0x4, 0x0, 0x9, 0x800, 0x10, 0x0, 0x8, 0x38c, 0x9e, 0x8000, 0x8, 0x9, 0x8, 0xff, 0x5, 0x10001, 0x401, 0x3, 0xa, 0x0, 0x6, 0x1000, 0x7fffffff, 0x0, 0x1, 0x80000001, 0x9, 0x5, 0xfffff800, 0x87, 0x9, 0x0, 0x64c1, 0x6, 0x1, 0x1, 0x93, 0x400000, 0xfff, 0x8000, 0x1, 0x10, 0x2, 0x5c, 0x7, 0x40, 0xa2c9, 0x0, 0x6, 0x3fffc000, 0x8, 0x7, 0xfff, 0x8, 0x1, 0x4, 0x0, 0xd, 0x2, 0x3, 0x200, 0x1, 0x5, 0x5, 0x86af, 0x2d, 0x4, 0x9, 0x7, 0x6, 0xb18, 0xa, 0x7f, 0x3, 0x1198, 0xf, 0x5, 0x101, 0x9, 0x6c5a, 0x0, 0x1550, 0x0, 0x2, 0xfff, 0x6, 0x55, 0x7, 0x3, 0xfffffffd, 0x8, 0x2, 0x1, 0x3de, 0x7, 0x7, 0x7, 0x7, 0x8, 0x0, 0x2, 0x7, 0x10000, 0x367, 0xa, 0x1000, 0x400, 0x3, 0x5, 0xfff, 0xce46, 0x2, 0x6, 0x9, 0x987, 0x5, 0x826, 0x7, 0x80000000, 0xfff, 0x800, 0xff, 0x6, 0x2, 0x82, 0x0, 0xdb, 0xe, 0xd7, 0x7e, 0x2a5e, 0x0, 0x5, 0x1, 0x96d, 0xa, 0x0, 0xb0, 0xff, 0x2, 0x9, 0x1, 0xdd2, 0x4, 0x1eb, 0x9, 0x40, 0x0, 0xfffffff8, 0x5, 0x563, 0x74, 0x329478b7, 0x7, 0x8, 0x9, 0x8, 0x401f, 0xffffff01, 0xe, 0x10000, 0x0, 0x2, 0x2b, 0x4, 0x9, 0x3, 0x7, 0x3, 0x3, 0x101, 0xd, 0xa8e, 0x9, 0x3, 0x2, 0xfffffff7, 0x4, 0x2, 0xd899, 0x8, 0x7, 0xbea3, 0x8e, 0x4, 0x8, 0x0, 0x1ff, 0xff, 0x3, 0xfffffff8, 0x30, 0xd9, 0x1ff, 0x10001, 0xd, 0x3, 0x9, 0x2, 0x3ff, 0x0, 0x80000000, 0x1, 0x0, 0xffffffff, 0x8, 0x40, 0x1, 0x0, 0xa, 0x3ff, 0x33000, 0x7, 0x4, 0x6, 0x5, 0x3, 0x81, 0x800, 0xfd2, 0x80000000, 0x6, 0x0, 0x400, 0x10000, 0x3, 0x5, 0x101, 0x8, 0x7fffffff, 0x3, 0x37, 0x5, 0x716, 0x2, 0x5, 0x6, 0x9, 0x81, 0x4, 0x0, 0x2, 0xfffffffc, 0x1ff, 0x8, 0x7fffffff, 0x37d, 0x8000, 0x80, 0xd4e, 0x80000001, 0xd7, 0xfffffff2, 0x1, 0x7, 0x4dca, 0x4, 0x1, 0x8000, 0x6, 0xfff, 0x1ff, 0x0, 0x8, 0x3, 0x9, 0x8, 0x0, 0x18bd, 0x8, 0x7, 0xffffffff, 0xfffffffb, 0x0, 0x100, 0x9, 0x3, 0xd, 0x4, 0x0, 0x6, 0x3, 0x1, 0xae52, 0xfffffff7, 0xfffffffc, 0x7, 0x80000000, 0x6, 0x401, 0x2008000, 0x4, 0x5, 0x9, 0x0, 0xffffab21, 0x5, 0xe220, 0x0, 0x2, 0xf, 0xfffffffb, 0x1, 0xfff, 0x2, 0x4, 0xf5e, 0x1ff, 0x6, 0x5, 0x7fffffff, 0xc, 0xfffffff8, 0x6, 0x1000, 0x400, 0x1ff, 0x8, 0x900, 0x8, 0x6, 0x1, 0x2, 0x5, 0x4, 0x2, 0x1, 0x7, 0x5, 0x8000, 0x9, 0xa7e, 0x9, 0x6, 0xf, 0xde9, 0x2, 0x8, 0x5, 0x3, 0xb7, 0x3, 0xfff, 0x7, 0xd, 0x401, 0x5, 0xe, 0x10001, 0x3, 0xfe000000, 0x6, 0x7, 0x1c, 0x1d32, 0x7, 0x1, 0x8a8, 0x9, 0x2, 0xffffff65, 0x0, 0x365, 0xed, 0x3ff, 0xde, 0xfff, 0x6, 0xfffff801, 0x400, 0x7fff, 0xe3, 0x4, 0x3, 0x4, 0xa1a, 0x9, 0x81, 0x7, 0x5c9, 0xf, 0xa, 0x800, 0xa0, 0x9c, 0x5, 0x6, 0x5, 0x7, 0x7, 0x2, 0x7, 0x5, 0xfffffff9, 0x0, 0x10, 0x4, 0xfffffffa, 0xfffffff9, 0x1, 0xe8cc, 0x7, 0x8000, 0x7, 0x0, 0x638, 0xc, 0xf, 0x2, 0x80000000, 0x9725, 0x10, 0x4, 0x0, 0xffff8000, 0x2, 0x3, 0xd, 0x1, 0x6, 0x7971b501, 0x1, 0x2, 0xe, 0x1, 0x6, 0x3, 0x100, 0x4, 0x6, 0x5, 0xf5, 0x212c7387, 0x7f, 0x2, 0x3, 0x7f, 0x80, 0x7, 0x9, 0x1, 0x3, 0xdebc, 0x7ff, 0x6, 0x5, 0x0, 0x5, 0xd1, 0x6, 0x90b, 0xfffff801, 0x4, 0x5, 0x4, 0x400, 0x200, 0x9, 0x37d, 0x400000, 0x400, 0x200, 0xdd4a, 0x59, 0x8, 0xff, 0x4, 0xe, 0xf, 0x4, 0x8, 0x38, 0x5, 0x5, 0xfffffffc, 0x200, 0xf48, 0x6, 0x5, 0xfffffffd, 0x3, 0x0, 0x2, 0x4e, 0x0, 0x0, 0xab5a, 0x7, 0x200000, 0x7fffffff, 0x8, 0x9, 0x7, 0xfffffeff, 0xffffffff, 0x56, 0x2, 0x7, 0xa7cd, 0x3ff, 0x73, 0x6, 0x4, 0xf23124ea, 0x3, 0x1, 0xb, 0x4, 0x3, 0x3, 0x3, 0x1, 0xcc9, 0xfffffff8, 0xb6, 0x1, 0x6, 0x5ef, 0x40, 0x0, 0x3, 0x7, 0x1, 0x4, 0x0, 0x9, 0x3, 0x8, 0x6, 0xfffffff9, 0x7, 0x1f73, 0x7, 0x217, 0x9, 0x70, 0x1, 0x1000, 0xd, 0x9, 0x2e, 0x4, 0x2, 0x8, 0xe3, 0xfffffffd, 0x8, 0x66e, 0x3, 0x41, 0x8, 0x4b3, 0x3, 0x7, 0x101, 0x8, 0x7, 0x3ff, 0x4, 0x9, 0x6, 0x81, 0x8, 0xc3f, 0x5, 0xffffffff, 0x8, 0x3, 0x0, 0x70, 0x78, 0x3, 0x7, 0x26d, 0x0, 0x2, 0x2, 0x495bb62b, 0x3, 0x6b21, 0xc0d, 0x3, 0x6fa, 0x876, 0x1, 0x4, 0x100, 0x7fffffff, 0x3, 0x401, 0xd6a, 0xff, 0x8, 0xffff, 0x3, 0xffff, 0x2cb, 0x9, 0xd5d6, 0x4, 0x7, 0x6, 0x40, 0x101, 0x1ff, 0x9, 0x8, 0xd, 0x2, 0x1c00, 0x9, 0x10000, 0x4, 0x9, 0x7, 0x9, 0xffffff80, 0x6, 0x66cc, 0x6, 0xfffffe01, 0x1000, 0x6, 0x4, 0xfff, 0x1, 0x3, 0x6, 0x0, 0x9, 0x200, 0x8, 0x7309336d]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x448, 0xffffffff, 0xffffffff, 0x448, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@srh1={{0x90}, {0x2, 0x40, 0x40, 0x7, 0x3, @local, @remote, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 0x20, 0x404}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x28, "ab467812cf7ea359296bef446f7f86f4d700ff628412a92632625072e53b"}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff000000], 'wg1\x00', 'wg2\x00', {0xff}, {}, 0x2f, 0x2, 0x7, 0x41}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x6, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x78}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) 1.712029304s ago: executing program 3 (id=77): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0x50, 0x4c, 0x8000000000000002, 0x69, 0xfd54}}]}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 1.6899938s ago: executing program 0 (id=78): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1.357381239s ago: executing program 3 (id=79): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x10201}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x3, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x20000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000300)="ea", 0x1, 0x7a}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9}) 1.301928367s ago: executing program 2 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f00000003c0)="d536beb24cd633b3a672a2a25dad32b11ca63309599f5b398ca3204ed2", 0x0}, 0x20) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 1.228562481s ago: executing program 3 (id=81): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x2a00, 0x4c8, 0x0, 0x95ef, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x800, 0x100102, 0x36, "b0bf00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 979.562739ms ago: executing program 2 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1, 0x8, 0x8, 0x7, 0xe6, 0x40, 0x0, 0x0, 0x1, 0x5}, {0x5000, 0x3000, 0x3, 0x80, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0xdddd0000, 0xb, 0x5, 0x3, 0xf, 0x0, 0x4, 0x4, 0xa4, 0x0, 0x5}, {0x1, 0xffff1000, 0x9, 0x7, 0x5, 0x42, 0x2, 0xff, 0x8, 0x7, 0xe}, {0xffffffff, 0x3000, 0xf, 0xd, 0x8, 0x7, 0xab, 0x8, 0x19, 0x9, 0xf7, 0x3}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xe000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x7, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x3000, 0x442126, 0x2, 0xc001, 0x100c00, [0x6800040000000000, 0x4, 0x3, 0x8]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x3, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x7, 0x60, 0x6, 0x0, 0x6e8, 0x2b4, 0xf0, 0x4, 0x0, 0x3, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x5, 0x3, 0x10220f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {0x0, 0x0, 0xfc, '\x00', 0x3}, {0x17, 0x0, 0x0, '\x00', 0x5}, {0x0, 0x35, 0x8}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2, '\x00', 0x40}, {0x0, 0x0, 0xfe}, {0x4, 0x0, 0xfc}, {0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, '\x00', 0xfe}, {0x7, 0x2, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0xfa, '\x00', 0x6}, {0x0, 0xfc, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x7, 0x8, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10, '\x00', 0x10}]}}) 636.488396ms ago: executing program 2 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 415.572269ms ago: executing program 2 (id=85): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r2, 0x9}, 0x8) 287.627531ms ago: executing program 2 (id=86): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 273.258168ms ago: executing program 3 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=88): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000000)=ANY=[], 0x1, 0xf3c, &(0x7f0000001e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x573, &(0x7f0000000d00)="$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") ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00\b']) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 77.371720][ T5757] cgroup: Unknown subsys name 'net' [ 77.504368][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.230596][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.803978][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.805111][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.820876][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.827441][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.828803][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.837289][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.855223][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.865704][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.865712][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.881671][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.890020][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.894971][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.897532][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.912857][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.922945][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.931322][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.938627][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.950497][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.957813][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.958561][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.967463][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.974031][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.987297][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.987444][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.457428][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 81.531986][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 81.583929][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 81.662552][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 81.711859][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.721792][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.730462][ T5769] bridge_slave_0: entered allmulticast mode [ 81.739306][ T5769] bridge_slave_0: entered promiscuous mode [ 81.787650][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.795738][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.804506][ T5769] bridge_slave_1: entered allmulticast mode [ 81.811779][ T5769] bridge_slave_1: entered promiscuous mode [ 81.851079][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.858422][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.866323][ T5771] bridge_slave_0: entered allmulticast mode [ 81.874154][ T5771] bridge_slave_0: entered promiscuous mode [ 81.904431][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.921943][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.929341][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.936819][ T5771] bridge_slave_1: entered allmulticast mode [ 81.943968][ T5771] bridge_slave_1: entered promiscuous mode [ 81.975260][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.009323][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.017577][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.024877][ T5770] bridge_slave_0: entered allmulticast mode [ 82.032634][ T5770] bridge_slave_0: entered promiscuous mode [ 82.041617][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.049116][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.057113][ T5770] bridge_slave_1: entered allmulticast mode [ 82.066282][ T5770] bridge_slave_1: entered promiscuous mode [ 82.095504][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.120498][ T5769] team0: Port device team_slave_0 added [ 82.129667][ T5769] team0: Port device team_slave_1 added [ 82.166509][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.213935][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.237103][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.244556][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.254706][ T5768] bridge_slave_0: entered allmulticast mode [ 82.262669][ T5768] bridge_slave_0: entered promiscuous mode [ 82.271918][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.279962][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.287742][ T5768] bridge_slave_1: entered allmulticast mode [ 82.295256][ T5768] bridge_slave_1: entered promiscuous mode [ 82.317123][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.324400][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.352589][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.367802][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.395524][ T5771] team0: Port device team_slave_0 added [ 82.415657][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.422874][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.449953][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.463735][ T5771] team0: Port device team_slave_1 added [ 82.520377][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.577971][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.588530][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.595612][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.624441][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.640167][ T5770] team0: Port device team_slave_0 added [ 82.675977][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.685024][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.713323][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.729149][ T5770] team0: Port device team_slave_1 added [ 82.770931][ T5769] hsr_slave_0: entered promiscuous mode [ 82.778355][ T5769] hsr_slave_1: entered promiscuous mode [ 82.797664][ T5768] team0: Port device team_slave_0 added [ 82.818475][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.826000][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.852520][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.886064][ T5768] team0: Port device team_slave_1 added [ 82.895555][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.904751][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.931969][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.947713][ T5771] hsr_slave_0: entered promiscuous mode [ 82.954059][ T5771] hsr_slave_1: entered promiscuous mode [ 82.960430][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.969300][ T5771] Cannot create hsr debugfs directory [ 83.012962][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.020177][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.047632][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.077522][ T5774] Bluetooth: hci3: command tx timeout [ 83.086674][ T5775] Bluetooth: hci1: command tx timeout [ 83.086821][ T51] Bluetooth: hci0: command tx timeout [ 83.099100][ T5783] Bluetooth: hci2: command tx timeout [ 83.118821][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.126162][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.153650][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.228073][ T5770] hsr_slave_0: entered promiscuous mode [ 83.235437][ T5770] hsr_slave_1: entered promiscuous mode [ 83.242167][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.250677][ T5770] Cannot create hsr debugfs directory [ 83.382492][ T5768] hsr_slave_0: entered promiscuous mode [ 83.389651][ T5768] hsr_slave_1: entered promiscuous mode [ 83.398415][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.406133][ T5768] Cannot create hsr debugfs directory [ 83.672008][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.687573][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.711024][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.722467][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.814350][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.831349][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.844195][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.855777][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.941169][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.951455][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.963191][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.974288][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.070114][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.093220][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.103411][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.115896][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.146487][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.171188][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.220108][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.227675][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.253021][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.260465][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.312941][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.371379][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.413074][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.420845][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.453633][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.461161][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.487214][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.572027][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.625648][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.653872][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.661125][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.704104][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.711489][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.769940][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.879551][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.930463][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.938097][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.982967][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.018418][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.042344][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.049833][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.157739][ T51] Bluetooth: hci3: command tx timeout [ 85.163579][ T51] Bluetooth: hci0: command tx timeout [ 85.169483][ T5783] Bluetooth: hci1: command tx timeout [ 85.169543][ T5774] Bluetooth: hci2: command tx timeout [ 85.242036][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.312661][ T5771] veth0_vlan: entered promiscuous mode [ 85.355964][ T5771] veth1_vlan: entered promiscuous mode [ 85.460184][ T5769] veth0_vlan: entered promiscuous mode [ 85.486139][ T5769] veth1_vlan: entered promiscuous mode [ 85.555697][ T5771] veth0_macvtap: entered promiscuous mode [ 85.598688][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.608109][ T5771] veth1_macvtap: entered promiscuous mode [ 85.626510][ T5769] veth0_macvtap: entered promiscuous mode [ 85.646118][ T5769] veth1_macvtap: entered promiscuous mode [ 85.684548][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.696264][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.762792][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.774346][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.786298][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.800440][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.814940][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.826409][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.838961][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.869317][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.878455][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.891595][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.901202][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.920586][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.930099][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.939412][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.949078][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.983421][ T5768] veth0_vlan: entered promiscuous mode [ 86.024321][ T5770] veth0_vlan: entered promiscuous mode [ 86.034329][ T5768] veth1_vlan: entered promiscuous mode [ 86.120339][ T5770] veth1_vlan: entered promiscuous mode [ 86.191916][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.206183][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.209861][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.223664][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.290228][ T5768] veth0_macvtap: entered promiscuous mode [ 86.307640][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.312046][ T5768] veth1_macvtap: entered promiscuous mode [ 86.315931][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.345958][ T5770] veth0_macvtap: entered promiscuous mode [ 86.412800][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.425933][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.436106][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.448708][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.463816][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.489730][ T5770] veth1_macvtap: entered promiscuous mode [ 86.506141][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.517567][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.531160][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.539291][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.551339][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.571025][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.606498][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.651411][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.664613][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.685903][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.705570][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.804095][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.824189][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.834457][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.854036][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.865426][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.882473][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.895535][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.926390][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.944328][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.962468][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.973384][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.984771][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.996017][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.020186][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.045318][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.062645][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.094423][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.103395][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.237454][ T5774] Bluetooth: hci0: command tx timeout [ 87.238095][ T5775] Bluetooth: hci1: command tx timeout [ 87.242941][ T5774] Bluetooth: hci3: command tx timeout [ 87.242984][ T5774] Bluetooth: hci2: command tx timeout [ 87.266188][ T1195] cfg80211: failed to load regulatory.db [ 87.270168][ T5847] syz.2.7[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.336978][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.365050][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.384794][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.429790][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.443845][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.493510][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.506457][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.527047][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 87.546203][ T5810] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 87.555882][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.570902][ T5810] usb 2-1: Product: syz [ 87.583727][ T5810] usb 2-1: Manufacturer: syz [ 87.602792][ T5810] usb 2-1: SerialNumber: syz [ 87.604415][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.633702][ T5810] usb 2-1: config 0 descriptor?? [ 87.639226][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.803834][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.977567][ T5852] input: syz0 as /devices/virtual/input/input5 [ 88.094514][ T5847] loop2: detected capacity change from 0 to 32768 [ 88.132384][ T5847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7 (5847) [ 88.149051][ T5810] airspy 2-1:0.0: Board ID: 00 [ 88.155585][ T5810] airspy 2-1:0.0: Firmware version: [ 88.243189][ T5847] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.254325][ T5847] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 88.279279][ T5847] BTRFS info (device loop2): setting nodatasum [ 88.285664][ T5847] BTRFS info (device loop2): force zlib compression, level 3 [ 88.346952][ T5847] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 88.368190][ T5847] BTRFS info (device loop2): use lzo compression, level 0 [ 88.375924][ T5847] BTRFS info (device loop2): turning on flush-on-commit [ 88.394800][ T5847] BTRFS info (device loop2): enabling auto defrag [ 88.402257][ T5847] BTRFS info (device loop2): max_inline at 4096 [ 88.419966][ T5847] BTRFS info (device loop2): using free space tree [ 88.591987][ T5847] BTRFS info (device loop2): enabling ssd optimizations [ 89.187396][ T5810] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 89.206318][ T5810] airspy 2-1:0.0: Registered as swradio24 [ 89.213140][ T5810] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 89.233320][ T5810] usb 2-1: USB disconnect, device number 2 [ 89.260810][ T5879] Zero length message leads to an empty skb [ 89.261285][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.317193][ T5774] Bluetooth: hci1: command tx timeout [ 89.319121][ T51] Bluetooth: hci2: command tx timeout [ 89.323295][ T5774] Bluetooth: hci3: command tx timeout [ 89.328625][ T5775] Bluetooth: hci0: command tx timeout [ 89.900899][ T5885] ======================================================= [ 89.900899][ T5885] WARNING: The mand mount option has been deprecated and [ 89.900899][ T5885] and is ignored by this kernel. Remove the mand [ 89.900899][ T5885] option from the mount to silence this warning. [ 89.900899][ T5885] ======================================================= [ 90.061688][ T5888] Bluetooth: MGMT ver 1.22 [ 90.285227][ T5892] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 90.635663][ T5898] loop3: detected capacity change from 0 to 1024 [ 90.774299][ T5898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.972197][ T5898] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4047: comm syz.3.17: Allocating blocks 449-513 which overlap fs metadata [ 91.055030][ T5898] EXT4-fs error (device loop3): mb_free_blocks:1954: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 91.162923][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.765352][ T5920] loop2: detected capacity change from 0 to 136 [ 91.846639][ T5920] rock: directory entry would overflow storage [ 91.853232][ T5920] rock: sig=0x4f50, size=4, remaining=3 [ 91.864358][ T5920] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 92.059232][ T5922] only policy match revision 0 supported [ 92.059256][ T5922] unable to load match [ 93.189753][ T5926] loop3: detected capacity change from 0 to 32768 [ 93.217052][ T5926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.26 (5926) [ 93.296500][ T5926] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.328582][ T5926] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.341847][ T5930] loop2: detected capacity change from 0 to 32768 [ 93.353476][ T5926] BTRFS info (device loop3): force clearing of disk cache [ 93.365682][ T5926] BTRFS info (device loop3): metadata ratio 0 [ 93.383942][ T5926] BTRFS info (device loop3): enabling ssd optimizations [ 93.386277][ T5930] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.28 (5930) [ 93.432543][ T5926] BTRFS info (device loop3): using spread ssd allocation scheme [ 93.443849][ T5926] BTRFS info (device loop3): using free space tree [ 93.450925][ T5930] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 93.469095][ T5930] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 93.489080][ T5930] BTRFS info (device loop2): enabling ssd optimizations [ 93.496123][ T5930] BTRFS info (device loop2): not using ssd optimizations [ 93.504936][ T5930] BTRFS info (device loop2): turning off barriers [ 93.519927][ T5930] BTRFS info (device loop2): using free space tree [ 93.671144][ T5926] BTRFS info (device loop3): auto enabling async discard [ 93.696525][ T5926] BTRFS info (device loop3): rebuilding free space tree [ 94.024282][ T28] audit: type=1800 audit(1772519464.100:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 94.111463][ T5769] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 94.117056][ T28] audit: type=1800 audit(1772519464.200:3): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 94.355004][ T5926] syz.3.26 (5926) used greatest stack depth: 20720 bytes left [ 94.466015][ T5784] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (5784) [ 94.517784][ T5768] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.124972][ T5987] overlayfs: failed to get inode (-116) [ 95.168697][ T5987] overlayfs: failed to get inode (-116) [ 95.542054][ T5985] loop2: detected capacity change from 0 to 32768 [ 95.618889][ T5985] (syz.2.37,5985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.657055][ T5985] (syz.2.37,5985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.887088][ T5985] JBD2: Ignoring recovery information on journal [ 95.918274][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 95.927796][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 95.935856][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 95.950657][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 95.963959][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 95.981158][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.000703][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.011815][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.020085][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.032070][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.041361][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.063310][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.075729][ T5985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.099219][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.120787][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.142420][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.164300][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.175558][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 96.244777][ T9] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 96.456714][ T28] audit: type=1800 audit(1772519466.540:4): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=16980 res=0 errno=0 [ 96.553814][ T6000] fido_id[6000]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.656143][ T5985] syz.2.37 (5985) used greatest stack depth: 18768 bytes left [ 96.884361][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 97.417517][ T6003] loop3: detected capacity change from 0 to 32768 [ 97.534953][ T6003] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.595353][ T6020] loop2: detected capacity change from 0 to 4096 [ 97.658435][ T6020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.694203][ T6003] XFS (loop3): Ending clean mount [ 97.734680][ T6003] XFS (loop3): Quotacheck needed: Please wait. [ 97.911679][ T6003] XFS (loop3): Quotacheck: Done. [ 98.166839][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.456794][ T5768] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.174594][ T6029] loop2: detected capacity change from 0 to 32768 [ 99.284237][ T6029] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.346702][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.466001][ T6044] loop0: detected capacity change from 0 to 8192 [ 99.503394][ T6044] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.531138][ T6044] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 99.542354][ T6044] REISERFS (device loop0): using ordered data mode [ 99.544097][ T6029] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 99.550195][ T6044] reiserfs: using flush barriers [ 99.566062][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 99.577690][ T6044] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.610861][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 99.623501][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.624587][ T6029] XFS (loop2): Starting recovery (logdev: internal) [ 99.633402][ T6044] REISERFS (device loop0): checking transaction log (loop0) [ 99.649406][ T9] usb 4-1: Product: syz [ 99.653909][ T9] usb 4-1: Manufacturer: syz [ 99.666655][ T9] usb 4-1: SerialNumber: syz [ 99.682648][ T9] usb 4-1: config 0 descriptor?? [ 99.711407][ T9] gspca_main: spca508-2.14.0 probing 041e:4018 [ 99.814079][ T6029] XFS (loop2): Ending recovery (logdev: internal) [ 99.868044][ T6044] REISERFS (device loop0): Using tea hash to sort names [ 99.894592][ T6044] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 99.948099][ T9] gspca_spca508: reg_read err -32 [ 99.984422][ T9] gspca_spca508: reg_read err -32 [ 100.004336][ T9] gspca_spca508: reg_read err -32 [ 100.027504][ T9] gspca_spca508: reg_read err -32 [ 100.060461][ T9] gspca_spca508: reg_read err -32 [ 100.173928][ T5769] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.278361][ T9] gspca_spca508: reg write: error -71 [ 100.284004][ T9] spca508: probe of 4-1:0.0 failed with error -71 [ 100.343666][ T9] usb 4-1: USB disconnect, device number 2 [ 100.997020][ T5809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.022221][ T6062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.097279][ T28] audit: type=1326 audit(1772519471.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.3.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ee59c799 code=0x0 [ 101.186723][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 101.217725][ T5809] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.248004][ T5809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.262952][ T5809] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 101.287037][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.314938][ T5809] usb 1-1: config 0 descriptor?? [ 101.845551][ T5809] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 102.088135][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 102.297212][ T6083] loop3: detected capacity change from 0 to 8192 [ 102.315552][ T6083] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.345381][ T6083] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 102.355487][ T6083] REISERFS (device loop3): using ordered data mode [ 102.407847][ T6083] reiserfs: using flush barriers [ 102.439805][ T6083] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.495084][ T6083] REISERFS (device loop3): checking transaction log (loop3) [ 102.497847][ T1195] usb 1-1: USB disconnect, device number 2 [ 102.704626][ T6083] REISERFS (device loop3): Using tea hash to sort names [ 102.720523][ T6083] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 103.357055][ T6097] loop1: detected capacity change from 0 to 128 [ 103.415628][ T6097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 103.454779][ T6097] System zones: 1-3, 19-19, 35-36 [ 103.474169][ T6097] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.501346][ T6097] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.528315][ T6097] EXT4-fs warning (device loop1): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new) [ 103.541012][ T6097] EXT4-fs warning (device loop1): ext4_group_extend:1897: can't read last block, resize aborted [ 103.557128][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.623481][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.718859][ T6104] Illegal XDP return value 65535 on prog (id 2) dev syz_tun, expect packet loss! [ 103.729334][ T6106] loop3: detected capacity change from 0 to 512 [ 103.749167][ T6106] EXT4-fs: Ignoring removed nobh option [ 103.770087][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 103.789376][ T9] usb 3-1: config 0 has no interface number 0 [ 103.801343][ T6106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.815586][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 103.840271][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 103.859507][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.879794][ T6106] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.67: iget: bad i_size value: 38620345925642 [ 103.892565][ T9] usb 3-1: Product: syz [ 103.902775][ T9] usb 3-1: Manufacturer: syz [ 103.915465][ T9] usb 3-1: SerialNumber: syz [ 103.921034][ T6106] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.67: couldn't read orphan inode 15 (err -117) [ 103.937538][ T6106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.954218][ T9] usb 3-1: config 0 descriptor?? [ 104.046880][ T6106] EXT4-fs (loop3): shut down requested (1) [ 104.054260][ T6106] EXT4-fs warning (device loop3): empty_inline_dir:1874: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 104.086853][ T967] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.117739][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.276721][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 104.288461][ T967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.299384][ T967] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.314703][ T967] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 104.324799][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.333242][ T967] usb 2-1: Product: syz [ 104.338097][ T967] usb 2-1: Manufacturer: syz [ 104.342902][ T967] usb 2-1: SerialNumber: syz [ 104.350670][ T967] usb 2-1: config 0 descriptor?? [ 104.581122][ T1195] usb 2-1: USB disconnect, device number 3 [ 104.819420][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 105.237848][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 105.253885][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 105.264122][ T9] CoreChips: probe of 3-1:0.41 failed with error -71 [ 105.274120][ T9] usb 3-1: USB disconnect, device number 2 [ 105.954375][ T6117] loop2: detected capacity change from 0 to 8192 [ 105.972095][ T6117] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.987415][ T6117] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 105.997496][ T6117] REISERFS (device loop2): using ordered data mode [ 106.004134][ T6117] reiserfs: using flush barriers [ 106.012818][ T6117] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.031024][ T6117] REISERFS (device loop2): checking transaction log (loop2) [ 106.126706][ T967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.212205][ T6117] REISERFS (device loop2): Using tea hash to sort names [ 106.221918][ T6117] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 106.343467][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.365335][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.376312][ T967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.390878][ T967] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.403202][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.415926][ T967] usb 2-1: config 0 descriptor?? [ 106.491889][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.701196][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 106.711003][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.731106][ T9] usb 1-1: Product: syz [ 106.735862][ T9] usb 1-1: Manufacturer: syz [ 106.750556][ T9] usb 1-1: SerialNumber: syz [ 106.772467][ T9] usb 1-1: config 0 descriptor?? [ 106.787328][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 106.895338][ T967] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 106.929189][ T967] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 107.951178][ T6154] loop3: detected capacity change from 0 to 4096 [ 108.034856][ T6155] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.176483][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 108.193771][ T967] usb 2-1: USB disconnect, device number 4 [ 108.236711][ T9] gspca_sunplus: reg_w_riv err -71 [ 108.265812][ T9] sunplus: probe of 1-1:0.0 failed with error -71 [ 108.313888][ T9] usb 1-1: USB disconnect, device number 3 [ 108.402256][ T6151] loop2: detected capacity change from 0 to 32768 [ 108.429178][ T6151] JBD2: Ignoring recovery information on journal [ 108.512634][ T6151] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 108.711544][ T6151] [ 108.714087][ T6151] ====================================================== [ 108.721418][ T6151] WARNING: possible circular locking dependency detected [ 108.728977][ T6151] syzkaller #0 Not tainted [ 108.733468][ T6151] ------------------------------------------------------ [ 108.740854][ T6151] syz.2.86/6151 is trying to acquire lock: [ 108.746749][ T6151] ffff88805c9c94a0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 108.757510][ T6151] [ 108.757510][ T6151] but task is already holding lock: [ 108.765335][ T6151] ffff88805c9c9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 108.776537][ T6151] [ 108.776537][ T6151] which lock already depends on the new lock. [ 108.776537][ T6151] [ 108.787146][ T6151] [ 108.787146][ T6151] the existing dependency chain (in reverse order) is: [ 108.796706][ T6151] [ 108.796706][ T6151] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 108.804674][ T6151] down_read+0x46/0x2e0 [ 108.809513][ T6151] ocfs2_init_acl+0x30a/0x770 [ 108.814726][ T6151] ocfs2_mknod+0x140f/0x2300 [ 108.819931][ T6151] ocfs2_mkdir+0x196/0x430 [ 108.825073][ T6151] vfs_mkdir+0x296/0x440 [ 108.829860][ T6151] do_mkdirat+0x1dc/0x450 [ 108.834708][ T6151] __x64_sys_mkdirat+0x89/0xa0 [ 108.839989][ T6151] do_syscall_64+0x55/0xa0 [ 108.844925][ T6151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.851875][ T6151] [ 108.851875][ T6151] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 108.860756][ T6151] down_read+0x46/0x2e0 [ 108.866209][ T6151] ocfs2_start_trans+0x3a8/0x6f0 [ 108.872029][ T6151] ocfs2_modify_bh+0xe4/0x4c0 [ 108.877488][ T6151] ocfs2_local_read_info+0x1445/0x1800 [ 108.883655][ T6151] dquot_load_quota_sb+0x757/0xb80 [ 108.889603][ T6151] dquot_load_quota_inode+0x2dc/0x5d0 [ 108.895679][ T6151] ocfs2_enable_quotas+0x1c9/0x490 [ 108.901529][ T6151] ocfs2_fill_super+0x417d/0x5010 [ 108.907101][ T6151] mount_bdev+0x221/0x2d0 [ 108.912067][ T6151] legacy_get_tree+0xea/0x180 [ 108.917378][ T6151] vfs_get_tree+0x8c/0x280 [ 108.922343][ T6151] do_new_mount+0x24b/0xa40 [ 108.927657][ T6151] __se_sys_mount+0x2e7/0x3d0 [ 108.932951][ T6151] do_syscall_64+0x55/0xa0 [ 108.937901][ T6151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.944925][ T6151] [ 108.944925][ T6151] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 108.952689][ T6151] lock_release+0x332/0x8c0 [ 108.957905][ T6151] up_write+0x2d/0x410 [ 108.962766][ T6151] ocfs2_free_alloc_context+0x97/0x1a0 [ 108.969124][ T6151] ocfs2_write_begin_nolock+0x4375/0x43f0 [ 108.975676][ T6151] ocfs2_write_begin+0x1c6/0x320 [ 108.981463][ T6151] generic_perform_write+0x2fe/0x5c0 [ 108.987740][ T6151] ocfs2_file_write_iter+0x167a/0x1e80 [ 108.993960][ T6151] vfs_write+0x46c/0x990 [ 108.998829][ T6151] ksys_write+0x150/0x260 [ 109.003942][ T6151] do_syscall_64+0x55/0xa0 [ 109.009055][ T6151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.015594][ T6151] [ 109.015594][ T6151] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 109.023663][ T6151] __lock_acquire+0x2df1/0x7d40 [ 109.029046][ T6151] lock_acquire+0x19e/0x420 [ 109.034326][ T6151] down_write+0x97/0x200 [ 109.039137][ T6151] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 109.045726][ T6151] ocfs2_truncate_file+0xde5/0x1440 [ 109.051655][ T6151] ocfs2_setattr+0x158d/0x1bc0 [ 109.057058][ T6151] notify_change+0xb0d/0xe10 [ 109.062192][ T6151] do_truncate+0x1b0/0x240 [ 109.067239][ T6151] path_openat+0x2a32/0x3230 [ 109.072519][ T6151] do_filp_open+0x1f5/0x430 [ 109.077668][ T6151] do_sys_openat2+0x134/0x1d0 [ 109.082870][ T6151] __x64_sys_openat+0x139/0x160 [ 109.088548][ T6151] do_syscall_64+0x55/0xa0 [ 109.093693][ T6151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.100312][ T6151] [ 109.100312][ T6151] other info that might help us debug this: [ 109.100312][ T6151] [ 109.110541][ T6151] Chain exists of: [ 109.110541][ T6151] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 109.110541][ T6151] [ 109.125035][ T6151] Possible unsafe locking scenario: [ 109.125035][ T6151] [ 109.132668][ T6151] CPU0 CPU1 [ 109.138068][ T6151] ---- ---- [ 109.144059][ T6151] lock(&oi->ip_xattr_sem); [ 109.148766][ T6151] lock(&journal->j_trans_barrier); [ 109.156799][ T6151] lock(&oi->ip_xattr_sem); [ 109.164824][ T6151] lock(&oi->ip_alloc_sem); [ 109.170071][ T6151] [ 109.170071][ T6151] *** DEADLOCK *** [ 109.170071][ T6151] [ 109.179243][ T6151] 3 locks held by syz.2.86/6151: [ 109.184657][ T6151] #0: ffff88805878a418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 109.195493][ T6151] #1: ffff88805c9c9818 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 109.207565][ T6151] #2: ffff88805c9c9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 109.218980][ T6151] [ 109.218980][ T6151] stack backtrace: [ 109.225511][ T6151] CPU: 1 PID: 6151 Comm: syz.2.86 Not tainted syzkaller #0 [ 109.233057][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.243315][ T6151] Call Trace: [ 109.246627][ T6151] [ 109.249630][ T6151] dump_stack_lvl+0x18c/0x250 [ 109.254333][ T6151] ? load_image+0x400/0x400 [ 109.258923][ T6151] ? show_regs_print_info+0x20/0x20 [ 109.264138][ T6151] ? print_circular_bug+0x12b/0x1a0 [ 109.269791][ T6151] check_noncircular+0x2fc/0x400 [ 109.274930][ T6151] ? print_deadlock_bug+0x5d0/0x5d0 [ 109.280149][ T6151] ? lockdep_lock+0xf5/0x230 [ 109.284923][ T6151] ? lockdep_unlock+0x146/0x2e0 [ 109.290043][ T6151] ? _find_first_zero_bit+0xd3/0x100 [ 109.295416][ T6151] __lock_acquire+0x2df1/0x7d40 [ 109.300281][ T6151] ? verify_lock_unused+0x140/0x140 [ 109.305578][ T6151] lock_acquire+0x19e/0x420 [ 109.310192][ T6151] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 109.316638][ T6151] ? __might_sleep+0xe0/0xe0 [ 109.321310][ T6151] ? read_lock_is_recursive+0x20/0x20 [ 109.327008][ T6151] down_write+0x97/0x200 [ 109.331531][ T6151] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 109.337771][ T6151] ? down_read_killable+0x340/0x340 [ 109.342975][ T6151] ? ocfs2_truncate_file+0xd0b/0x1440 [ 109.348520][ T6151] ? __lock_acquire+0x7d40/0x7d40 [ 109.353640][ T6151] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 109.359817][ T6151] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 109.365828][ T6151] ? up_write+0x1c3/0x410 [ 109.370194][ T6151] ocfs2_truncate_file+0xde5/0x1440 [ 109.375562][ T6151] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 109.381307][ T6151] ? do_raw_spin_unlock+0x121/0x230 [ 109.386799][ T6151] ? _raw_spin_unlock+0x28/0x40 [ 109.391849][ T6151] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 109.397921][ T6151] ? ocfs2_inode_lock_atime+0x530/0x530 [ 109.403577][ T6151] ? ocfs2_rw_lock+0x138/0x250 [ 109.408526][ T6151] ? dquot_initialize+0x20/0x20 [ 109.413469][ T6151] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 109.419634][ T6151] ? setattr_prepare+0x1e6/0xac0 [ 109.425020][ T6151] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 109.432242][ T6151] ocfs2_setattr+0x158d/0x1bc0 [ 109.437464][ T6151] ? ocfs2_extend_allocation+0x1840/0x1840 [ 109.443827][ T6151] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 109.449838][ T6151] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 109.456094][ T6151] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 109.462189][ T6151] ? current_time+0x195/0x280 [ 109.467172][ T6151] ? inode_set_ctime_current+0x2e0/0x2e0 [ 109.472903][ T6151] ? evm_inode_setattr+0x94/0x6a0 [ 109.478109][ T6151] ? bpf_lsm_inode_setattr+0x9/0x10 [ 109.483393][ T6151] ? try_break_deleg+0x79/0x120 [ 109.488261][ T6151] ? ocfs2_extend_allocation+0x1840/0x1840 [ 109.494090][ T6151] notify_change+0xb0d/0xe10 [ 109.498696][ T6151] do_truncate+0x1b0/0x240 [ 109.503302][ T6151] ? put_page_bootmem+0x2c0/0x2c0 [ 109.508436][ T6151] ? apparmor_file_truncate+0x24a/0x2e0 [ 109.514200][ T6151] ? ima_bprm_check+0x200/0x200 [ 109.519077][ T6151] path_openat+0x2a32/0x3230 [ 109.524141][ T6151] ? verify_lock_unused+0x140/0x140 [ 109.529722][ T6151] ? do_filp_open+0x430/0x430 [ 109.534918][ T6151] ? __virt_addr_valid+0x18c/0x540 [ 109.540145][ T6151] do_filp_open+0x1f5/0x430 [ 109.544682][ T6151] ? vfs_tmpfile+0x490/0x490 [ 109.549622][ T6151] ? _raw_spin_unlock+0x28/0x40 [ 109.554560][ T6151] ? alloc_fd+0x58f/0x630 [ 109.559079][ T6151] do_sys_openat2+0x134/0x1d0 [ 109.563960][ T6151] ? do_sys_open+0xe0/0xe0 [ 109.568822][ T6151] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 109.574975][ T6151] ? lock_chain_count+0x20/0x20 [ 109.580010][ T6151] __x64_sys_openat+0x139/0x160 [ 109.585031][ T6151] do_syscall_64+0x55/0xa0 [ 109.589593][ T6151] ? clear_bhb_loop+0x40/0x90 [ 109.594448][ T6151] ? clear_bhb_loop+0x40/0x90 [ 109.599144][ T6151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.605490][ T6151] RIP: 0033:0x7fb2a039c799 [ 109.609925][ T6151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.630605][ T6151] RSP: 002b:00007fb2a1181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.639076][ T6151] RAX: ffffffffffffffda RBX: 00007fb2a0615fa0 RCX: 00007fb2a039c799 [ 109.647538][ T6151] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c [ 109.655742][ T6151] RBP: 00007fb2a0432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 109.664021][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.672209][ T6151] R13: 00007fb2a0616038 R14: 00007fb2a0615fa0 R15: 00007ffc1c9b6a18 [ 109.680410][ T6151] [ 109.760913][ T5769] ocfs2: Unmounting device (7,2) on (node local)