last executing test programs: 16.803628937s ago: executing program 1 (id=280): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c92076bd0c0005f89b9dab448898021200000000"], 0x15) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="a297a6449ff43c9df88844359639fbb7efeaeb5340c414abff9f701622a764289ebaf62f00694e3b24113afcc2cccb5370b4cd00000000000000000000000000000000d28a03f19f82974e9c645b205d0c6e9a9587b10e54e8272882c364244a7c76cc22ed38f22fe4b06a9c667542e27cfbc18ae4dbc5fb97075c5df4c4a81c1cc2af68539d6353742d6cd40ac0d672f3baa228fd050dc2d4fb3f9802846dc516bbbe4998c27987a494102cf7c85858b5"], 0x7) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x60, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a87080002aaaaaaaa1007700a00691e0300ffffffffffff05cf05e77791ff07000000000000fc05f25e1308ff07ffffff7c49e4ffffff00fc00699c"], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043406aaaaaaaaa8"], 0x9) r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x404d80, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r7, @ANYRESDEC=r5], 0xf) 16.038884353s ago: executing program 1 (id=283): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0xfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000041c0)={@val={0x6}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x49aef}, {0x81}], @ipv6=@gre_packet={0x2, 0x6, "358c64", 0x152e, 0x2f, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x33, 0x4, 0x4, 0x2, 0x4, 0x10, 0x401, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, @srh={0x4, 0x8, 0x4, 0x4, 0x6, 0x10, 0x2, [@private2, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @hopopts={0x3a, 0x7, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @calipso={0x7, 0x10, {0x3, 0x2, 0xf, 0xf280, [0x6]}}]}, @routing={0x33, 0xa, 0x2, 0xc8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, @loopback]}, @srh={0x1, 0x8, 0x4, 0x4, 0x2a, 0x20, 0x6dac, [@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}, @dstopts={0x32, 0x203, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x4}, @generic={0xb7, 0x1000, "3edb17d72f28de94ac66718d804bd4afdecd62854b5e3b430bba0d7c62af0a0fcf37a601c0c54f8b42c75030e97a10592b23553e0260b2290a0166e776b4df4c7d67eccc2354c881054a0461bf328803699782edfc871a53516bc1074ecfaf9f022e58ac1e500c78d3a4e81d7a9a3c8a32ec60cae1a9e01ac4baaeccf6158ebab4fccbf1abdb728f8cbb03bd19069080787ab09b9ba02b3bcc30071d83a49d124591a2fa66b4e1b9e7b66f7d955aba64d30b188c06ac55116fecfee5f4c3aa7a8455c80e7c8e28c51bbac3052f893a6dd57f246f7cfc51957759babba45caa37e7c03a0aeff87e3133ee1d1b060a7a86aa2b0bd49e010dcec4bb5698fe373c345622afa86aba5d5c663febca5ea3589ccc0d71887da175ea63cc30e402639886aba5fd9b7d8e614b1b1018c99dc82b259dbab3609011b842eca2c313e9008c667af7e3127b6ea6ae28d48573061f4fb55e49020d1359e02d918fd275778459a93be02ac635988505cd439ba959cf4199c6ce30237dfa250af50e8ba89af0bec2410969de67ab89934e39e438c8432880771a95635b4f6fc5d59de0487f3c06260d12a51c5c9124cae2dfdfe3cb76e79f62a5241b34d5b2771455fd1e08dcf92b9ca3c3e60f2c054049b842b17ea0ac321a298aaf4bcf02f9006396be4a0d7451d811071c6ca74f77b37c9971152ff941da9ceb5a10d667a5af3fc4000192fe530b7c246f41c9cf816028f8ccd215ba7f43c61645b3be509468c96620a9474c5054af601b5fde9608579128d34705a13c8222b095678eb3858732252aabcea76a1bf659c2369e948893e2439b9f0c18daae5e1d7ac7bb47fff833df6cb908fb8e9075213136f1ed8d93021c52c14c3337779e65762570dc91bfdabffe5964df10d16dcff1e8cd8668d1463e7522aa49e9e697486c3f19d49395b5205beda790a6e764e6b9b724d07510dafea07a083f70be9000a2a477e47536a3e62eb37b16e9cdbb52436b404d851cfd7378b945672c18fc6ea490f046c9faf78538c70c5b602fe61a358abe5e8eb40420afc4db8eeccc88ada3bc97e21ca8bb991c15b2413fd27c97520ff1904f5b1ebd595abbf6d25f23082a1b96db3e6d5e0dec8f7d8f3fd40bd493d3db836b4e2bcf96a9e4b421cf781edc18b0730e61114dcd30f23c88fcbc2c9f8de6c0e674a44d2b342654519626cbf7c3446d5944ea7a42d2dc416ffc5e0688352518ad3ee4fd3e0f12a5c89c02fe9ed2acdb5159c4e71fb559d2dedd7439e20586bcf7a2d8a45dc6848a7dcb84cd6003a00f720b95592775ae11c4e1c9aac4dae5c7fd681a29277b3c5ceef0ea72f91298516104e2507524d3b17b50e857353b297db2b9d14d3ffef514dcb8fedecf3d914b4393a7a60d687808a93581dbd54f19849503df304e7cf08dd37ac4497685f983342b954ca0ebca029cff72a50934e061c5fb889f6592fd52a4e5f798cb27c168a5a4593dc63554e69276220a185721d724f7b0108c8d3bb0a9685fba2062d6d584cee4e919a41d358d32d7958a846828278bfb8362fc2a331625e7163c76f58b6f2638a44fbd337960ceba950cc193c6ce813db64d578d5b843513a3b94685ba8177a505a7855b62f977fc1e5d7d69b432e281972f25569554008d0aa171b80c432ac702502c6defa573244704ff9729a2544e30f9348e89c022ff44717f22e5c0304786e22f77cbed64111ba8ea0025e564213411c1570b2919b65f7ca617bb3d8d78cfa6a3dd06e64987f0c69cc3fa1c89d11dc8b8b261ee407dee1aef24ad194b243b1df60d967537617e019a556f930f2a35c6a82b3bc02dff15498119569869e1b653e0a9e71f5f373a040c754685a318d2f70b9d81fe8ee4c79a099debd11c7ce9d799e89cdf8f829545dec1648988ef94adf4330a0215e07a51216684d0e3251799153e690693bc39252e0644e78ee491fe0bb306d884d6e5b1a39cd1332c8e2945cae6cc2f8f09a67795caf008ac463bae8b397d327295d9360ef17816442f4fc72161de92112d2d9787319f80e778f2377681bf85cb3e1c0b496df06e8ccf9003d575fd861e29877a9698d023a52e8596f5d43f67ef63b0ee54c6527ea94c40e96b9436e99d52996402620f5d1532d6962b2d5ad16b17e8f367ac3605b2e3f99377ca7643b8ea41c900b6211534744bb65a52fc875faa5a9099ecb773765fa05a9a5aa68ba984355173fecc0f69b621b448f5859f1e3e06789557b9d92d49263b6f1446b6806aba17b48d33eeb14cca65c826bc17a4d9f81a3f61f6901fd4907f78f7cf0975bbeaaf32832b7f58828aaa9667e34efd2b8761e797abe940cbaac753f1467cfb8fef3cd37ac0c8e33d1bb7807b90348f4a29094d6a4ebfed9660dfccc1c7b00907205e9e36180311c7924cf255780479276aa38d12a1c6b88bc7af6befe18d40614bdd9e0f3b71ab431ce79030f93399c2e2ceff501947c9aad50af257cdb7640dc12d5809f83400417b654000e93677a7f30a1d0ea63924188202041bd3cef6b21be88b914f8b54e2dc2d22018a9942fd5cc1ebe577515cbb577a2d254061987b524591bed11c94aa7062b1a683bf410800db682e3c5988395dc5914edbcf270e05a33c907442ab4a11deedd10386346e84a93b61a67e13ec69c0735f9bf37822da9270aef505bb559b38abb3b7fc088a056bc8881b94610ed66b547d864386382f94d62d1c4e0113c3b664d4f0d561c329f8dabf4cdc45cd14b4a01d5a1fb7249007cab2f4d6ae81445512d7c4dd90845841c42307fb282960a78b5c5b0bc0b24d98aad2f92faa4a8ad36371c866642513ee7970426800d588e7ce5d5f893c3f397898ef59c68e0459614470893f4d3d44cf1ed0203d644f099dc71f92fb64a43f7a3cbd8e8db2164ff883c3a09f0d13bd64557c00db5be4e6b1a32087a8c2c977f359bb091c7fe2514c4f6d8c2fc44869a70ce33d7b69d594dbf7e88f2112da6c023e788c518c5fd089f3ec2047e60f026d4f73962625a5de89a96414bc71763784605c77dbf35ea2c4136fe6fa9ed3b3747f28216b655caf3693523f60813edb786a9498854b82c31e61da1ca5818cb1c5eb8f074997274e32caaa8b713f1bdade860dadfd291032ddda5c34fff8af3fcf69c14213aa3e01bd4ce2e039987b338ac5f0a2607eb3d4f60e6eab58364814343055bb3afb5411ddc4aaedc4f55362e6693a3926a51c8d09635e92eed4664886e2e7af475cefe425230b2093476d9ce30637d43204f69cfbf23f230c22ce48cc8ddd83471879c6bae86550e10058f05c7490eeab1f78cc77e19d53206aa59877447303d2c655ed44a41c25f03d8576c2b105183dbde43bd4dce11f06c806e58a11e4b2b0690e61d4a4c6bb17f902f78dfe9effea0901d2008a33fe56b9cd37226ad7aed3964ad9d0e954d07f75f11944325144b616d6be61dc17118168811a44a7a6ee21bea947556d3ca943b38630ed5560d2b293a9063c04ce31bfdfc4c416402d8cc1ea93d1a63c7550ac21d342af7e5ec7fe684677ad7104dfe9c39ee6fc13e185036f541e297395b1319165ddeb624ca4bd4dbe0a75b2b57f4e871f4c3ca5b5177ef3bad02d26bd7e4913656e1338d6bd5ec8a144f7fde7e8b1189faf60060d33fc5c649d27574d4be4bf7067f29f860c2e91a24c292bb1cbb40714476accb6f8ee81a7609bd441279060a41d30669e3991d71fb731b42e5c732e81559593d1427c8dc68202f36fdc83ab08802247a07164c7b907e5974465c82ab7674d0aff7a5acff0b3762011dcc02031c191de73f32eb6e797283e758494c8df98252870ccad8babb2b6496b38245cd58458bc33f87a808e323a428e848f53b6f38061ec87f8587132afa0188aa23617492573b7087f1f8d57e415226fee7fd447c1d8a0ca2c5a177c0bffb16460289f175190ab66d08632737f03903a32be422ac87b69953ce59cf1d5203d27bf6962fdd34a53b3418e2697aa8a5abd76f95235d7d57be9689cca5f91dade20812c4c2a7451a96db2b0305bab9502a6812dd3a597485bc00783a28011d31975c00869fab0a505dd9e0a0eb1c3f96630fcf6a92bff1816e59680bb45da3dd5c2a4e0ca655bcd6703467229c27442177cff52f3d50d00cbe78ade8d74f04be72666211a13dbdef8aa9ad39c67941374324766b8a80504e145ba84a32c3b456466c11a3ea14a2a40ad8a92c77f8e976872012a4260953d6fe46289e262d601fda67d924b44f21f61d690fa2b72bce39e6f44706e3ab3fc218a9ecaf85d4039e6a1e4df98197a121c56e102187858221132cde242e3bef87ecc2479ce87e1bcacd4eeb9ee3080294d1c29e5ebd8f5a351fd07842e783d00d6149dd460ccd320da07de4a3b02b3369c7a52ae1477d095b9c7e41f13483e55d6addc06ce5acf40473438e70abe07e4ec180ec68e1832c75367fde055a5a066bc83d158db3cd78177b0436165bc63d6d574ae37c5b342c12686da43902b6b6900645fab0f501ac28dfc3b70bae674940df9792d2bb6a0a1169c2d7a6985df92d7e62c4133373bd53b0493eb83e90fa33d721cd93bd4e06aa2d794436fd3341b6cbd3a5014c973fe73ec1d09ab64a735afd3ab1c91c7fa1b66c6d034f9984ef19abca680ada192cec05f8f7532ff1826f050418662219cb6bd7b69c378bd42eadfcae28cb4cec2c45b358fa3669ba0f2f1f94db3ab08ca70403c27a4ac6f916cb045749b189b780e2df4331ecd53ecf40856342a2b45e2f68fc986b391fdda5301c9d4692b207681fa1aef833664d9eabca6330f7a4e5d5f7a7af27a12d339717929fdaab763396fee12d15fdd28eff419fd12f8ef86c6323eeea996963c92dfc03e117897578d20e2a7b2276e057c14d7b3149006bbe61d690f290e15522ecf55157c1cad3d8ab917d7a59675192ae47075f13af2f630a20637fb3c1683012588d4f3d81f1512b62c46b75fa8caa19c1fb22f6313890c8b7a733f11deb965731d3ab238908113e241cde8eb47d477469c348f42e841b5070107c5481e3704f96caad4e4b29e66001c7e95a865c2e88398695da90c43662a375c5fd103fbd80fd653832f16820ac716bece73e89f8ff243413f9f0dd57f177d7265a15881500e7fa6212d886b7ec89874a81fcc0c10f7a9e2ccede2844288b4c7fc3267f55d57b6e12001975b0b09346933e1ab93fc878da30fe982ac078b6cf69600d81b28c608b7d173c5c3a6a1391c38e49849732e5912ed25f067ec47e8c6c6c56fac5a52c1b3bae3ead5fb2d51a1f633cd1d361be863db0a35e005dd2114b8fb3c1580e76841cdcd77ca77a852499860f97a59d79a360cb88b62d6383c078a488a1434a2017e5d3fb42d4b9a87b5e3f9f8534d726d9667ddef3022297e6e47517027674e2dc876c2792417f00b94f348312edb426b88840fb9930808d8b1c2057c9ade5440d2ba72738042da1755660b36ab3187e3826f14f7109d708ee6f3c70b369129afe9c2ec41a0a33f770de797a171a7405ec02c844e25223b43013821dd0ff6f0c28c6e81bca4489ebd436a62cd08e74e510494cc0a61cb4c455b0de0513cffadcc023e2785fbbb357fa0146454c410311c3de1fdb8a7b9366abfd0cae2739d74f82e7c184667e9e762d84afd2a489617f9f5c33432473576a7431c0907078eb045e60e926e6e4ff4f0f27496232b0999e47b3abc533dfcb696fbe02f9c8b5a1915abafa3101983b9dfee2ef84d06280b55150f64fa9a4ab4a9b0c4f84b2723a387eab3151b7aea39012405"}, @jumbo={0xc2, 0x4, 0x9}, @jumbo, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x3a, 0xa, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0xb}, @pad1, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x4a}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @hao={0xc9, 0x10, @loopback}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe5, 0x2, [], "426de5a4d28fd73e6a6969367051aa13df9cd6f26a4756c41b5e9c88ef9eae5e0bb2f287a04df81af65a903e5169dfdb25c79c048e1c5354d0913f75f9bcea87f24cb14cf21250b6eeff7ff9df35d2cfe079790fbab42c03d1a00bfd616c7fa6b49da5a859eabf0ff9fa3af6c79c56a0e4921682430b0763f5e8f520580b4eb91f41d2eb82741891ec7a3331521967c066ca85250aee9a2318ed06fb03853cd9d89b7e04bf377c64afeafa47199372304f5f98120e8ce52973ab31b934714d85c8426203d1aaf6d501a5ce45e6b3393a858735aae9d69c70425d722bbefef07cde2638c219"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3], "c8fedcda2d110ade2db0f9e3eda1438a468e7de4df8ce5315004c2b98e8b71b453e335bdaccde22dd3c545d703e526ace219c1d8badad5f2518ce601bb5c8a97c5edbb76049cb15b1f927b558dfaaa795cffeb4611c17d0f5032b4a6a7392f4af5a29ac2ec1683b2e2a81b1707f4e4c345caa3dee63cbf52df82442c41706c6fe072a9ec99a53288f215f56356451448fec250436ddc8567ef534e3fb82fe7e91547f00355df3e20994ac628068ab5e2746ad125a2a70f14"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "3595524134dd6edb95c9fa3eba4f95630eb90a4451ba890e0036fd146729bc600d8e01e7ae446ebf204297e18d2907c3493c3ca5ede738deef90fc118034aecbc32f9a39795daa3e691d595b27da94468ac79b954c8a49a0d063f5e3e56eb5ca2b8dfd8119833e5b3c4d09400afad26521caf7881f7dd29977c785373516e53e96ab94e33b5634e0a067c1de7959a033525e9f6cd0ebe451554dba9c1ddc188ada5ed43f70b5575dda77fe07b8a0f7939321507c9665868ab76dd6dcd46a93da4c4a053946f027c185dcc2a735d95001fecff00f018f5feed51ddd52ce389864bab9f6c0691310936b236aead12567f6358928"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x78, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x3, 0x0, 0x1, 0x1, 0x4, 0x40}, 0x2, {0x3, 0xb4cf, 0x1, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "b1aff3229b9d0694886f104c61130d5060a5cb1a9c2b79e1dc834c5dd015a2590f742ba94eccdebd9392ec3e9884309fbdd50a9ec7a475ace22837713b78dc4453d79830f52a9f39057b3de2a182e1175817343084c95efeba3720c30d6e3e08d283fa0767e2595d53b9ac8097c276133f82f2c6092b3bff2d07edb48d4f71506873c7740cbbc1c4"}}}}}}}}}, 0x1578) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) inotify_init1(0x0) creat(&(0x7f00000007c0)='./bus\x00', 0x2) close(0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x80, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0xa) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e0612"], 0x9) socket$netlink(0x10, 0x3, 0x0) 13.865900973s ago: executing program 1 (id=290): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000040)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r2 = creat(0x0, 0x0) lseek(r2, 0x7ffffb, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0f202a3a2220"], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x10000000000002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000ac40)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) syz_open_pts(0xffffffffffffffff, 0x48f00) socket$packet(0x11, 0x2, 0x300) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000000) sendfile(r0, r0, 0x0, 0x80000942) 11.313551552s ago: executing program 0 (id=294): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d6ff33e43cf94c04a6500e0251d78c79b6e089b7282af9d912"], 0x68}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) bpf$MAP_CREATE(0x24, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 7.743172457s ago: executing program 4 (id=300): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,use', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,obj_role='], 0x0, 0x0, 0x0) mknodat(r1, &(0x7f0000000700)='./file0\x00', 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000013c0)) r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESHEX], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$dsp(r3, &(0x7f0000000440)=""/171, 0xab) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000}) syz_open_dev$video4linux(&(0x7f0000000200), 0x74, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x9, 0x5, 0x4, 0x0, 0x6, [{0x7, 0xfffffffffffffffd, 0x6, '\x00', 0x2000}, {0x2, 0x3, 0x0, '\x00', 0x1300}, {0x8001, 0x1ff, 0x0, '\x00', 0x1402}, {0x2, 0x7fff, 0x100000001}, {0x8001, 0x8, 0x3, '\x00', 0x688}, {0xfffffffffffffff9, 0x0, 0x0, '\x00', 0x2}]}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300ef}) 7.637967722s ago: executing program 3 (id=301): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d808f2e2ff", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000022c0)={0x0, 0x14, 0x0}, 0x0) 7.55497591s ago: executing program 1 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_emit_ethernet(0xa2, 0x0, 0x0) syz_emit_vhci(0x0, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x6, 0x8b14c6a5df82cbe, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x411}}}, 0x7) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', '', [{0x20, '^sz\xd1=\xc1\xe4\xe6\xfcf\xbf\x00\xcf\x03\x84\xd7\xb6\x9d\xa0\x13\x1bc\x1e<\x89\xb665->\xdb\x8eh2%$>\xce#w= \xb0\x89\xfe\xb6\x1e%\xcf*\xfd\xff\x03w\x1d\x17\x83>WW\xeby\xee<\x9b\x1f\x1a\xfb>@h\xb7u\xcd\xae\xc9\x8c\x892\xffZ\xa2o\xf4\xc6\x97s4,\xd1\xab|5\xd1\xcb1\xc9\xf76,\xc1\xf8\xba\xbf\x8e;\xb5\x9e\x81\x94\xd7E\xf2\x00\xad<\xb0c\x8eL\x8b\x9e\xb7\xfbh?\xbf\x98\xc1\xb2(\xd8\xb4\xd8\xad\x03\xba\xe1\x9b\x8a1j\x87\xafL\xfb\xe3\xba=/\xc0\xa0 i\xf5\xa5\xce\x10+\xd6\x0e\x01\b\x9e8\x8cAH\xcf}\x19\xf8\xeeo2p\xa1\xb6]\x10\xd4\t.U\x9e\xf9\bO]\xc1\xbeF4\x0e6.\x88fQ\xf1\x80\x99P\xdd\t=\xe8MS\xcb\x1b\x90\x99l\xe9\x94\xa3<\xea\x92\xe3'}]}, 0xe2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f000048a000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) 7.506723575s ago: executing program 2 (id=303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r5, 0x36, 0x0, @void}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82041003d000100fb00030006001f0f07040000080700ee080400090009001001040007000c000602040001008eff071104007500ffb00e000300f600060e0003000700a3af61661bf6d95cf494ad05ad6d5439dbb383a5e576bf5bc7e84be7ca9039d13198e2dcb8b546195a097015ced975df6bae2d80c98a4e397d4a"], 0x46) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 7.416732187s ago: executing program 3 (id=304): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000000100)=""/79, 0x4f) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = inotify_init1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003f40)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a74000000060a0b0400000000000000000200000048000480200001800700010063740000140002800800024000000004080004400000000f24000180090001006d6173710000000014000280080002400000000808000344b1835d1f0900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) 7.415422338s ago: executing program 0 (id=305): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c92076bd0c0005f89b9dab448898021200000000"], 0x15) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="a297a6449ff43c9df88844359639fbb7efeaeb5340c414abff9f701622a764289ebaf62f00694e3b24113afcc2cccb5370b4cd00000000000000000000000000000000d28a03f19f82974e9c645b205d0c6e9a9587b10e54e8272882c364244a7c76cc22ed38f22fe4b06a9c667542e27cfbc18ae4dbc5fb97075c5df4c4a81c1cc2af68539d6353742d6cd40ac0d672f3baa228fd050dc2d4fb3f9802846dc516bbbe4998c27987a494102cf7c85858b5"], 0x7) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x60, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a87080002aaaaaaaa1007700a00691e0300ffffffffffff05cf05e77791ff07000000000000fc05f25e1308ff07ffffff7c49e4ffffff00fc00699c"], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043406aaaaaaaaa811"], 0x9) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x404d80, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r7, @ANYRESDEC=r5], 0xf) 6.368097889s ago: executing program 2 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r5, 0x36, 0x0, @void}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82041003d000100fb00030006001f0f07040000080700ee080400090009001001040007000c000602040001008eff071104007500ffb00e000300f600060e0003000700a3af61661bf6d95cf494ad05ad6d5439dbb383a5e576bf5bc7e84be7ca9039d13198e2dcb8b546195a097015ced975df6bae2d80c98a4e397d4a"], 0x46) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 6.267025439s ago: executing program 0 (id=307): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="a297a6449ff43c9df88844359639fbb7efeaeb5340c414abff9f701622a764289ebaf62f00694e3b24113afcc2cccb5370b4cd00000000000000000000000000000000d28a03f19f82974e9c645b205d0c6e9a9587b10e54e8272882c364244a7c76cc22ed38f22fe4b06a9c667542e27cfbc18ae4dbc5fb97075c5df4c4a81c1cc2af68539d6353742d6cd40ac0d672f3baa228fd050dc2d4fb3f9802846dc516bbbe4998c27987a494102cf7c85858b5"], 0x7) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a87080002aaaaaaaa1007700a00691e0300ffffffffffff05cf05e77791ff07000000000000fc05f25e1308ff07ffffff7c49e4ffffff00fc00699c"], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043406aaaaaaaaa811"], 0x9) r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x404d80, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r7, @ANYRESDEC=r5], 0xf) 6.239460014s ago: executing program 4 (id=308): r0 = socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x0, 0x5, 0x0, @dev, 0x0, "20f0ddf9a66a"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/219, 0xdb}], 0x1, 0x59, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0xea60}}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r4 = syz_io_uring_setup(0x16d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x200}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @private1, 0x1}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x78) 5.311396114s ago: executing program 2 (id=309): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4a55c1"], 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002004c4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.181790589s ago: executing program 4 (id=310): syz_usb_connect(0x0, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/94, &(0x7f0000000180)=0x5e) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000480)=""/69, 0x45, &(0x7f0000000240)={&(0x7f00000000c0)={'sha3-384-generic\x00'}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x2, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x40000) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000003600)=""/120) 4.948070324s ago: executing program 2 (id=311): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x101}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2) 4.895567971s ago: executing program 2 (id=312): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000040)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r2 = creat(0x0, 0x0) lseek(r2, 0x7ffffb, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0f202a3a2220"], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x10000000000002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000ac40)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) syz_open_pts(0xffffffffffffffff, 0x48f00) socket$packet(0x11, 0x2, 0x300) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000000) sendfile(r0, r0, 0x0, 0x80000942) 4.73441912s ago: executing program 1 (id=313): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x0, 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 4.239933919s ago: executing program 3 (id=314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="a297a6449ff43c9df88844359639fbb7efeaeb5340c414abff9f701622a764289ebaf62f00694e3b24113afcc2cccb5370b4cd00000000000000000000000000000000d28a03f19f82974e9c645b205d0c6e9a9587b10e54e8272882c364244a7c76cc22ed38f22fe4b06a9c667542e27cfbc18ae4dbc5fb97075c5df4c4a81c1cc2af68539d6353742d6cd40ac0d672f3baa228fd050dc2d4fb3f9802846dc516bbbe4998c27987a494102cf7c85858b5"], 0x7) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a87080002aaaaaaaa1007700a00691e0300ffffffffffff05cf05e77791ff07000000000000fc05f25e1308ff07ffffff7c49e4ffffff00fc00699c"], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043406aaaaaaaaa811"], 0x9) r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x404d80, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r7, @ANYRESDEC=r5], 0xf) 3.976199306s ago: executing program 0 (id=315): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000015c0)={0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x0, 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 3.199975301s ago: executing program 3 (id=316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r5, 0x36, 0x0, @void}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82041003d000100fb00030006001f0f07040000080700ee080400090009001001040007000c000602040001008eff071104007500ffb00e000300f600060e0003000700a3af61661bf6d95cf494ad05ad6d5439dbb383a5e576bf5bc7e84be7ca9039d13198e2dcb8b546195a097015ced975df6bae2d80c98a4e397d4a"], 0x46) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 2.971506795s ago: executing program 4 (id=317): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c92076bd0c0005f89b9dab448898021200000000"], 0x15) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="a297a6449ff43c9df88844359639fbb7efeaeb5340c414abff9f701622a764289ebaf62f00694e3b24113afcc2cccb5370b4cd00000000000000000000000000000000d28a03f19f82974e9c645b205d0c6e9a9587b10e54e8272882c364244a7c76cc22ed38f22fe4b06a9c667542e27cfbc18ae4dbc5fb97075c5df4c4a81c1cc2af68539d6353742d6cd40ac0d672f3baa228fd050dc2d4fb3f9802846dc516bbbe4998c27987a494102cf7c85858b5"], 0x7) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x60, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a87080002aaaaaaaa1007700a00691e0300ffffffffffff05cf05e77791ff07000000000000fc05f25e1308ff07ffffff7c49e4ffffff00fc00699c"], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043406aaaaaaaaa811"], 0x9) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x404d80, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r7, @ANYRESDEC=r5], 0xf) 2.180579883s ago: executing program 3 (id=318): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,use', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,obj_role='], 0x0, 0x0, 0x0) mknodat(r1, &(0x7f0000000700)='./file0\x00', 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000013c0)) r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESHEX], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$dsp(r3, &(0x7f0000000440)=""/171, 0xab) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000}) syz_open_dev$video4linux(&(0x7f0000000200), 0x74, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r8}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300ef}) 1.484511474s ago: executing program 4 (id=319): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="a297a6449ff43c9df88844359639fbb7efeaeb5340c414abff9f701622a764289ebaf62f00694e3b24113afcc2cccb5370b4cd00000000000000000000000000000000d28a03f19f82974e9c645b205d0c6e9a9587b10e54e8272882c364244a7c76cc22ed38f22fe4b06a9c667542e27cfbc18ae4dbc5fb97075c5df4c4a81c1cc2af68539d6353742d6cd40ac0d672f3baa228fd050dc2d4fb3f9802846dc516bbbe4998c27987a494102cf7c85858b5"], 0x7) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x60, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a87080002aaaaaaaa1007700a00691e0300ffffffffffff05cf05e77791ff07000000000000fc05f25e1308ff07ffffff7c49e4ffffff00fc00699c"], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043406aaaaaaaaa811"], 0x9) r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x404d80, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r6, @ANYRESDEC=r5], 0xf) 623.937832ms ago: executing program 2 (id=320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r5, 0x36, 0x0, @void}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82041003d000100fb00030006001f0f07040000080700ee080400090009001001040007000c000602040001008eff071104007500ffb00e000300f600060e0003000700a3af61661bf6d95cf494ad05ad6d5439dbb383a5e576bf5bc7e84be7ca9039d13198e2dcb8b546195a097015ced975df6bae2d80c98a4e397d4a"], 0x46) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 623.18431ms ago: executing program 3 (id=321): syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0xaa, &(0x7f00000057c0)="$eJzs170JwlAQAOAz+NvEASzcIDs4ilhqZ6VYuJC9UziC4AAWdmITifkhvWBAvg/ePe7dO7j2Lq/TLNKIfBofect2t18vN0U8R2MY/JGkusdFSMv8vijfelX9+jis6tNq7XcwLgAA8IUksoiY1JvAMYksKyu35s+82AWeVTJoNY9+OioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJ94BAAD//60sIUU=") mknodat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="79e40e649673cc533e0049c4a20fdddbf98cb2316d966e06a95c083f99e9f62e08d74b6f95e573f5b0363f43ab06"], 0x48}, 0x20000000) 552.036012ms ago: executing program 0 (id=322): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00a85705f18671c773b10000020000000000000000"], 0x0, 0x26}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180002000000000000000000000000274100000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x90) r3 = accept(0xffffffffffffffff, &(0x7f0000000240)=@sco, &(0x7f0000000380)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xa5, &(0x7f00000003c0)=""/165}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000380)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000540)={r6, 0xa3f0}, 0x8) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40044103, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r9, &(0x7f0000000380)=@qipcrtr={0x2a, 0x3}, 0x80) ppoll(&(0x7f0000000400)=[{r0, 0x4080}, {r2, 0x4202}, {r0, 0x440}, {r3, 0xc040}, {r0, 0x1}, {r2, 0x20}], 0x6, &(0x7f0000000440)={r7, r8+10000000}, &(0x7f0000000480)={[0x1]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00a85705f18671c773b10000020000000000000000"], 0x0, 0x26}, 0x20) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @multicast2}, &(0x7f00000001c0)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180002000000000000000000000000274100000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x90) (async) accept(0xffffffffffffffff, &(0x7f0000000240)=@sco, &(0x7f0000000380)=0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xa5, &(0x7f00000003c0)=""/165}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f0000000380)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000540)={r6, 0xa3f0}, 0x8) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40044103, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000580)) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bind(r9, &(0x7f0000000380)=@qipcrtr={0x2a, 0x3}, 0x80) (async) ppoll(&(0x7f0000000400)=[{r0, 0x4080}, {r2, 0x4202}, {r0, 0x440}, {r3, 0xc040}, {r0, 0x1}, {r2, 0x20}], 0x6, &(0x7f0000000440)={r7, r8+10000000}, &(0x7f0000000480)={[0x1]}, 0x8) (async) 550.082423ms ago: executing program 1 (id=323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0xfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getaffinity(0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000041c0)={@val={0x6}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x49aef}, {0x81}], @ipv6=@gre_packet={0x2, 0x6, "358c64", 0x1556, 0x2f, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x33, 0x2, 0x4, 0x1, 0x4, 0x10, 0x401, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x4, 0x8, 0x4, 0x4, 0x6, 0x10, 0x2, [@private2, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @hopopts={0x3a, 0x7, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @calipso={0x7, 0x10, {0x3, 0x2, 0xf, 0xf280, [0x6]}}]}, @routing={0x33, 0xa, 0x2, 0xc8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, @loopback]}, @srh={0x1, 0x8, 0x4, 0x4, 0x2a, 0x20, 0x6dac, [@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}, @dstopts={0x32, 0x20b, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x4}, @generic={0xb7, 0x1000, "3edb17d72f28de94ac66718d804bd4afdecd62854b5e3b430bba0d7c62af0a0fcf37a601c0c54f8b42c75030e97a10592b23553e0260b2290a0166e776b4df4c7d67eccc2354c881054a0461bf328803699782edfc871a53516bc1074ecfaf9f022e58ac1e500c78d3a4e81d7a9a3c8a32ec60cae1a9e01ac4baaeccf6158ebab4fccbf1abdb728f8cbb03bd19069080787ab09b9ba02b3bcc30071d83a49d124591a2fa66b4e1b9e7b66f7d955aba64d30b188c06ac55116fecfee5f4c3aa7a8455c80e7c8e28c51bbac3052f893a6dd57f246f7cfc51957759babba45caa37e7c03a0aeff87e3133ee1d1b060a7a86aa2b0bd49e010dcec4bb5698fe373c345622afa86aba5d5c663febca5ea3589ccc0d71887da175ea63cc30e402639886aba5fd9b7d8e614b1b1018c99dc82b259dbab3609011b842eca2c313e9008c667af7e3127b6ea6ae28d48573061f4fb55e49020d1359e02d918fd275778459a93be02ac635988505cd439ba959cf4199c6ce30237dfa250af50e8ba89af0bec2410969de67ab89934e39e438c8432880771a95635b4f6fc5d59de0487f3c06260d12a51c5c9124cae2dfdfe3cb76e79f62a5241b34d5b2771455fd1e08dcf92b9ca3c3e60f2c054049b842b17ea0ac321a298aaf4bcf02f9006396be4a0d7451d811071c6ca74f77b37c9971152ff941da9ceb5a10d667a5af3fc4000192fe530b7c246f41c9cf816028f8ccd215ba7f43c61645b3be509468c96620a9474c5054af601b5fde9608579128d34705a13c8222b095678eb3858732252aabcea76a1bf659c2369e948893e2439b9f0c18daae5e1d7ac7bb47fff833df6cb908fb8e9075213136f1ed8d93021c52c14c3337779e65762570dc91bfdabffe5964df10d16dcff1e8cd8668d1463e7522aa49e9e697486c3f19d49395b5205beda790a6e764e6b9b724d07510dafea07a083f70be9000a2a477e47536a3e62eb37b16e9cdbb52436b404d851cfd7378b945672c18fc6ea490f046c9faf78538c70c5b602fe61a358abe5e8eb40420afc4db8eeccc88ada3bc97e21ca8bb991c15b2413fd27c97520ff1904f5b1ebd595abbf6d25f23082a1b96db3e6d5e0dec8f7d8f3fd40bd493d3db836b4e2bcf96a9e4b421cf781edc18b0730e61114dcd30f23c88fcbc2c9f8de6c0e674a44d2b342654519626cbf7c3446d5944ea7a42d2dc416ffc5e0688352518ad3ee4fd3e0f12a5c89c02fe9ed2acdb5159c4e71fb559d2dedd7439e20586bcf7a2d8a45dc6848a7dcb84cd6003a00f720b95592775ae11c4e1c9aac4dae5c7fd681a29277b3c5ceef0ea72f91298516104e2507524d3b17b50e857353b297db2b9d14d3ffef514dcb8fedecf3d914b4393a7a60d687808a93581dbd54f19849503df304e7cf08dd37ac4497685f983342b954ca0ebca029cff72a50934e061c5fb889f6592fd52a4e5f798cb27c168a5a4593dc63554e69276220a185721d724f7b0108c8d3bb0a9685fba2062d6d584cee4e919a41d358d32d7958a846828278bfb8362fc2a331625e7163c76f58b6f2638a44fbd337960ceba950cc193c6ce813db64d578d5b843513a3b94685ba8177a505a7855b62f977fc1e5d7d69b432e281972f25569554008d0aa171b80c432ac702502c6defa573244704ff9729a2544e30f9348e89c022ff44717f22e5c0304786e22f77cbed64111ba8ea0025e564213411c1570b2919b65f7ca617bb3d8d78cfa6a3dd06e64987f0c69cc3fa1c89d11dc8b8b261ee407dee1aef24ad194b243b1df60d967537617e019a556f930f2a35c6a82b3bc02dff15498119569869e1b653e0a9e71f5f373a040c754685a318d2f70b9d81fe8ee4c79a099debd11c7ce9d799e89cdf8f829545dec1648988ef94adf4330a0215e07a51216684d0e3251799153e690693bc39252e0644e78ee491fe0bb306d884d6e5b1a39cd1332c8e2945cae6cc2f8f09a67795caf008ac463bae8b397d327295d9360ef17816442f4fc72161de92112d2d9787319f80e778f2377681bf85cb3e1c0b496df06e8ccf9003d575fd861e29877a9698d023a52e8596f5d43f67ef63b0ee54c6527ea94c40e96b9436e99d52996402620f5d1532d6962b2d5ad16b17e8f367ac3605b2e3f99377ca7643b8ea41c900b6211534744bb65a52fc875faa5a9099ecb773765fa05a9a5aa68ba984355173fecc0f69b621b448f5859f1e3e06789557b9d92d49263b6f1446b6806aba17b48d33eeb14cca65c826bc17a4d9f81a3f61f6901fd4907f78f7cf0975bbeaaf32832b7f58828aaa9667e34efd2b8761e797abe940cbaac753f1467cfb8fef3cd37ac0c8e33d1bb7807b90348f4a29094d6a4ebfed9660dfccc1c7b00907205e9e36180311c7924cf255780479276aa38d12a1c6b88bc7af6befe18d40614bdd9e0f3b71ab431ce79030f93399c2e2ceff501947c9aad50af257cdb7640dc12d5809f83400417b654000e93677a7f30a1d0ea63924188202041bd3cef6b21be88b914f8b54e2dc2d22018a9942fd5cc1ebe577515cbb577a2d254061987b524591bed11c94aa7062b1a683bf410800db682e3c5988395dc5914edbcf270e05a33c907442ab4a11deedd10386346e84a93b61a67e13ec69c0735f9bf37822da9270aef505bb559b38abb3b7fc088a056bc8881b94610ed66b547d864386382f94d62d1c4e0113c3b664d4f0d561c329f8dabf4cdc45cd14b4a01d5a1fb7249007cab2f4d6ae81445512d7c4dd90845841c42307fb282960a78b5c5b0bc0b24d98aad2f92faa4a8ad36371c866642513ee7970426800d588e7ce5d5f893c3f397898ef59c68e0459614470893f4d3d44cf1ed0203d644f099dc71f92fb64a43f7a3cbd8e8db2164ff883c3a09f0d13bd64557c00db5be4e6b1a32087a8c2c977f359bb091c7fe2514c4f6d8c2fc44869a70ce33d7b69d594dbf7e88f2112da6c023e788c518c5fd089f3ec2047e60f026d4f73962625a5de89a96414bc71763784605c77dbf35ea2c4136fe6fa9ed3b3747f28216b655caf3693523f60813edb786a9498854b82c31e61da1ca5818cb1c5eb8f074997274e32caaa8b713f1bdade860dadfd291032ddda5c34fff8af3fcf69c14213aa3e01bd4ce2e039987b338ac5f0a2607eb3d4f60e6eab58364814343055bb3afb5411ddc4aaedc4f55362e6693a3926a51c8d09635e92eed4664886e2e7af475cefe425230b2093476d9ce30637d43204f69cfbf23f230c22ce48cc8ddd83471879c6bae86550e10058f05c7490eeab1f78cc77e19d53206aa59877447303d2c655ed44a41c25f03d8576c2b105183dbde43bd4dce11f06c806e58a11e4b2b0690e61d4a4c6bb17f902f78dfe9effea0901d2008a33fe56b9cd37226ad7aed3964ad9d0e954d07f75f11944325144b616d6be61dc17118168811a44a7a6ee21bea947556d3ca943b38630ed5560d2b293a9063c04ce31bfdfc4c416402d8cc1ea93d1a63c7550ac21d342af7e5ec7fe684677ad7104dfe9c39ee6fc13e185036f541e297395b1319165ddeb624ca4bd4dbe0a75b2b57f4e871f4c3ca5b5177ef3bad02d26bd7e4913656e1338d6bd5ec8a144f7fde7e8b1189faf60060d33fc5c649d27574d4be4bf7067f29f860c2e91a24c292bb1cbb40714476accb6f8ee81a7609bd441279060a41d30669e3991d71fb731b42e5c732e81559593d1427c8dc68202f36fdc83ab08802247a07164c7b907e5974465c82ab7674d0aff7a5acff0b3762011dcc02031c191de73f32eb6e797283e758494c8df98252870ccad8babb2b6496b38245cd58458bc33f87a808e323a428e848f53b6f38061ec87f8587132afa0188aa23617492573b7087f1f8d57e415226fee7fd447c1d8a0ca2c5a177c0bffb16460289f175190ab66d08632737f03903a32be422ac87b69953ce59cf1d5203d27bf6962fdd34a53b3418e2697aa8a5abd76f95235d7d57be9689cca5f91dade20812c4c2a7451a96db2b0305bab9502a6812dd3a597485bc00783a28011d31975c00869fab0a505dd9e0a0eb1c3f96630fcf6a92bff1816e59680bb45da3dd5c2a4e0ca655bcd6703467229c27442177cff52f3d50d00cbe78ade8d74f04be72666211a13dbdef8aa9ad39c67941374324766b8a80504e145ba84a32c3b456466c11a3ea14a2a40ad8a92c77f8e976872012a4260953d6fe46289e262d601fda67d924b44f21f61d690fa2b72bce39e6f44706e3ab3fc218a9ecaf85d4039e6a1e4df98197a121c56e102187858221132cde242e3bef87ecc2479ce87e1bcacd4eeb9ee3080294d1c29e5ebd8f5a351fd07842e783d00d6149dd460ccd320da07de4a3b02b3369c7a52ae1477d095b9c7e41f13483e55d6addc06ce5acf40473438e70abe07e4ec180ec68e1832c75367fde055a5a066bc83d158db3cd78177b0436165bc63d6d574ae37c5b342c12686da43902b6b6900645fab0f501ac28dfc3b70bae674940df9792d2bb6a0a1169c2d7a6985df92d7e62c4133373bd53b0493eb83e90fa33d721cd93bd4e06aa2d794436fd3341b6cbd3a5014c973fe73ec1d09ab64a735afd3ab1c91c7fa1b66c6d034f9984ef19abca680ada192cec05f8f7532ff1826f050418662219cb6bd7b69c378bd42eadfcae28cb4cec2c45b358fa3669ba0f2f1f94db3ab08ca70403c27a4ac6f916cb045749b189b780e2df4331ecd53ecf40856342a2b45e2f68fc986b391fdda5301c9d4692b207681fa1aef833664d9eabca6330f7a4e5d5f7a7af27a12d339717929fdaab763396fee12d15fdd28eff419fd12f8ef86c6323eeea996963c92dfc03e117897578d20e2a7b2276e057c14d7b3149006bbe61d690f290e15522ecf55157c1cad3d8ab917d7a59675192ae47075f13af2f630a20637fb3c1683012588d4f3d81f1512b62c46b75fa8caa19c1fb22f6313890c8b7a733f11deb965731d3ab238908113e241cde8eb47d477469c348f42e841b5070107c5481e3704f96caad4e4b29e66001c7e95a865c2e88398695da90c43662a375c5fd103fbd80fd653832f16820ac716bece73e89f8ff243413f9f0dd57f177d7265a15881500e7fa6212d886b7ec89874a81fcc0c10f7a9e2ccede2844288b4c7fc3267f55d57b6e12001975b0b09346933e1ab93fc878da30fe982ac078b6cf69600d81b28c608b7d173c5c3a6a1391c38e49849732e5912ed25f067ec47e8c6c6c56fac5a52c1b3bae3ead5fb2d51a1f633cd1d361be863db0a35e005dd2114b8fb3c1580e76841cdcd77ca77a852499860f97a59d79a360cb88b62d6383c078a488a1434a2017e5d3fb42d4b9a87b5e3f9f8534d726d9667ddef3022297e6e47517027674e2dc876c2792417f00b94f348312edb426b88840fb9930808d8b1c2057c9ade5440d2ba72738042da1755660b36ab3187e3826f14f7109d708ee6f3c70b369129afe9c2ec41a0a33f770de797a171a7405ec02c844e25223b43013821dd0ff6f0c28c6e81bca4489ebd436a62cd08e74e510494cc0a61cb4c455b0de0513cffadcc023e2785fbbb357fa0146454c410311c3de1fdb8a7b9366abfd0cae2739d74f82e7c184667e9e762d84afd2a489617f9f5c33432473576a7431c0907078eb045e60e926e6e4ff4f0f27496232b0999e47b3abc533dfcb696fbe02f9c8b5a1915abafa3101983b9dfee2ef84d06280b55150f64fa9a4ab4a9b0c4f84b2723a387eab3151b7aea39012405"}, @jumbo={0xc2, 0x4, 0x9}, @jumbo, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x2, 0xc, 0x0, 0x7, [0x0, 0x6, 0x0, 0x5, 0x10000, 0xa207]}}]}, @hopopts={0x3a, 0xa, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0xb}, @pad1, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x4a}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @hao={0xc9, 0x10, @loopback}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe5, 0x2, [], "426de5a4d28fd73e6a6969367051aa13df9cd6f26a4756c41b5e9c88ef9eae5e0bb2f287a04df81af65a903e5169dfdb25c79c048e1c5354d0913f75f9bcea87f24cb14cf21250b6eeff7ff9df35d2cfe079790fbab42c03d1a00bfd616c7fa6b49da5a859eabf0ff9fa3af6c79c56a0e4921682430b0763f5e8f520580b4eb91f41d2eb82741891ec7a3331521967c066ca85250aee9a2318ed06fb03853cd9d89b7e04bf377c64afeafa47199372304f5f98120e8ce52973ab31b934714d85c8426203d1aaf6d501a5ce45e6b3393a858735aae9d69c70425d722bbefef07cde2638c219"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3], "c8fedcda2d110ade2db0f9e3eda1438a468e7de4df8ce5315004c2b98e8b71b453e335bdaccde22dd3c545d703e526ace219c1d8badad5f2518ce601bb5c8a97c5edbb76049cb15b1f927b558dfaaa795cffeb4611c17d0f5032b4a6a7392f4af5a29ac2ec1683b2e2a81b1707f4e4c345caa3dee63cbf52df82442c41706c6fe072a9ec99a53288f215f56356451448fec250436ddc8567ef534e3fb82fe7e91547f00355df3e20994ac628068ab5e2746ad125a2a70f14"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "3595524134dd6edb95c9fa3eba4f95630eb90a4451ba890e0036fd146729bc600d8e01e7ae446ebf204297e18d2907c3493c3ca5ede738deef90fc118034aecbc32f9a39795daa3e691d595b27da94468ac79b954c8a49a0d063f5e3e56eb5ca2b8dfd8119833e5b3c4d09400afad26521caf7881f7dd29977c785373516e53e96ab94e33b5634e0a067c1de7959a033525e9f6cd0ebe451554dba9c1ddc188ada5ed43f70b5575dda77fe07b8a0f7939321507c9665868ab76dd6dcd46a93da4c4a053946f027c185dcc2a735d95001fecff00f018f5feed51ddd52ce389864bab9f6c0691310936b236aead12567f6358928"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x78, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x3, 0x0, 0x1, 0x1, 0x4, 0x40}, 0x2, {0x3, 0xb4cf, 0x1, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "b1aff3229b9d0694886f104c61130d5060a5cb1a9c2b79e1dc834c5dd015a2590f742ba94eccdebd9392ec3e9884309fbdd50a9ec7a475ace22837713b78dc4453d79830f52a9f39057b3de2a182e1175817343084c95efeba3720c30d6e3e08d283fa0767e2595d53b9ac8097c276133f82f2c6092b3bff2d07edb48d4f71506873c7740cbbc1c4"}}}}}}}}}, 0x15a0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) inotify_init1(0x0) creat(&(0x7f00000007c0)='./bus\x00', 0x2) close(0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x80, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0xa) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e0612"], 0x9) socket$netlink(0x10, 0x3, 0x0) 449.149533ms ago: executing program 4 (id=324): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000000100)=""/79, 0x4f) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = inotify_init1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003f40)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a74000000060a0b0400000000000000000200000048000480200001800700010063740000140002800800024000000004080004400000000f24000180090001006d6173710000000014000280080002400000000808000344b1835d1f0900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) 0s ago: executing program 0 (id=325): mq_unlink(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000875b0d20d8130100220e010203010902120001000000000904000000efbd7f0064c0aeb2b2f21390e5e2d7707e369edfcc5d9618d9a48582a5e1e4b797091d5444701f344a0d034a6ac5bd892fd0f923ae8a3f62e30c62c263207212f56a675d2ba2639e9a"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) kernel console output (not intermixed with test programs): tadv0: Adding interface: batadv_slave_0 [ 70.871718][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.897678][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.910568][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.917527][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.943618][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.006619][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.014194][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.040173][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.055414][ T5099] team0: Port device team_slave_0 added [ 71.071614][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.078925][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.086148][ T5106] bridge_slave_0: entered allmulticast mode [ 71.093114][ T5106] bridge_slave_0: entered promiscuous mode [ 71.102700][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.113579][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.120791][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.147018][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.159861][ T5099] team0: Port device team_slave_1 added [ 71.185735][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.192966][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.200621][ T5106] bridge_slave_1: entered allmulticast mode [ 71.207460][ T5106] bridge_slave_1: entered promiscuous mode [ 71.216233][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.241443][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.248467][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.274930][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.329132][ T5110] team0: Port device team_slave_0 added [ 71.346132][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.353261][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.379277][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.397083][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.428799][ T5110] team0: Port device team_slave_1 added [ 71.438287][ T5098] Bluetooth: hci0: command tx timeout [ 71.439655][ T5095] hsr_slave_0: entered promiscuous mode [ 71.450634][ T5095] hsr_slave_1: entered promiscuous mode [ 71.460951][ T5100] hsr_slave_0: entered promiscuous mode [ 71.467236][ T5100] hsr_slave_1: entered promiscuous mode [ 71.473545][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.481154][ T5100] Cannot create hsr debugfs directory [ 71.501662][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.518303][ T55] Bluetooth: hci1: command tx timeout [ 71.522515][ T5098] Bluetooth: hci2: command tx timeout [ 71.582237][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.589588][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.615900][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.618253][ T5098] Bluetooth: hci3: command tx timeout [ 71.628597][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.638800][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.664836][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.688359][ T5098] Bluetooth: hci4: command tx timeout [ 71.689767][ T5099] hsr_slave_0: entered promiscuous mode [ 71.700313][ T5099] hsr_slave_1: entered promiscuous mode [ 71.706390][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.714000][ T5099] Cannot create hsr debugfs directory [ 71.732543][ T5106] team0: Port device team_slave_0 added [ 71.760566][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.768939][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.785580][ T5106] team0: Port device team_slave_1 added [ 71.874047][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.881916][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.908785][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.921296][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.928307][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.954554][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.987833][ T5110] hsr_slave_0: entered promiscuous mode [ 71.994182][ T5110] hsr_slave_1: entered promiscuous mode [ 72.001163][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.008789][ T5110] Cannot create hsr debugfs directory [ 72.161793][ T5106] hsr_slave_0: entered promiscuous mode [ 72.168290][ T5106] hsr_slave_1: entered promiscuous mode [ 72.174431][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.182638][ T5106] Cannot create hsr debugfs directory [ 72.323065][ T5100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.350134][ T5100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.366062][ T5100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.390764][ T5100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.463414][ T5095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.485538][ T5095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.496568][ T5095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.507514][ T5095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.564979][ T5099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.586898][ T5099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.597364][ T5099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.621448][ T5099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.663282][ T5110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.674122][ T5110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.684969][ T5110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.699161][ T5110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.776612][ T5106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.790614][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.802853][ T5106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.812528][ T5106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.822905][ T5106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.865605][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.925336][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.932475][ T5112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.942878][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.950057][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.002228][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.099803][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.127083][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.134383][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.161744][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.168969][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.182649][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.210797][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.224789][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.276846][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.310204][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.337091][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.344358][ T5112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.356270][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.363419][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.374483][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.381614][ T5112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.391754][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.417193][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.424368][ T5112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.435351][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.442504][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.453070][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.460257][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.517172][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.527692][ T5098] Bluetooth: hci0: command tx timeout [ 73.585986][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.599257][ T5098] Bluetooth: hci1: command tx timeout [ 73.599833][ T55] Bluetooth: hci2: command tx timeout [ 73.678624][ T55] Bluetooth: hci3: command tx timeout [ 73.759162][ T55] Bluetooth: hci4: command tx timeout [ 73.802936][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.873789][ T5100] veth0_vlan: entered promiscuous mode [ 73.941205][ T5100] veth1_vlan: entered promiscuous mode [ 73.972250][ T5095] veth0_vlan: entered promiscuous mode [ 74.019644][ T5095] veth1_vlan: entered promiscuous mode [ 74.059448][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.069675][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.088051][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.131336][ T5095] veth0_macvtap: entered promiscuous mode [ 74.160486][ T5095] veth1_macvtap: entered promiscuous mode [ 74.171428][ T5100] veth0_macvtap: entered promiscuous mode [ 74.185531][ T5100] veth1_macvtap: entered promiscuous mode [ 74.234041][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.246101][ T5106] veth0_vlan: entered promiscuous mode [ 74.269136][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.292738][ T5095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.303798][ T5095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.314919][ T5095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.325919][ T5095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.350376][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.361633][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.374315][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.387745][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.399052][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.412038][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.424506][ T5100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.433674][ T5100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.442869][ T5100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.452218][ T5100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487421][ T5099] veth0_vlan: entered promiscuous mode [ 74.501651][ T5099] veth1_vlan: entered promiscuous mode [ 74.511372][ T5106] veth1_vlan: entered promiscuous mode [ 74.613187][ T5099] veth0_macvtap: entered promiscuous mode [ 74.620615][ T5110] veth0_vlan: entered promiscuous mode [ 74.627183][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.640144][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.644381][ T5099] veth1_macvtap: entered promiscuous mode [ 74.689979][ T5110] veth1_vlan: entered promiscuous mode [ 74.705741][ T5106] veth0_macvtap: entered promiscuous mode [ 74.716888][ T5106] veth1_macvtap: entered promiscuous mode [ 74.731187][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.739624][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.753520][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.764149][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.774376][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.785066][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.797608][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.831132][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.841710][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.852612][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.865103][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.876536][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.889154][ T5099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.897879][ T5099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.907283][ T5099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916427][ T5099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.943909][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.950227][ T5110] veth0_macvtap: entered promiscuous mode [ 74.963022][ T5110] veth1_macvtap: entered promiscuous mode [ 74.969554][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.975045][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.988306][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.998126][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.009456][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.021471][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.032512][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.044213][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.073642][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.084625][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.095997][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.106734][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.117105][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.129575][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.140976][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.171994][ T5106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.184190][ T5106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.193915][ T5106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.204572][ T5106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.218043][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.234898][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.253472][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.265803][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.289150][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.304425][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.314685][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.328441][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.338746][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.349338][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.375080][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.394534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.403232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.411900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.420432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.429271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 75.558728][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.596858][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.607607][ T55] Bluetooth: hci0: command tx timeout [ 75.640366][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.661304][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.673305][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.684714][ T55] Bluetooth: hci2: command tx timeout [ 75.690251][ T55] Bluetooth: hci1: command tx timeout [ 75.696542][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.708271][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.719113][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.738015][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.745688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.758619][ T55] Bluetooth: hci3: command tx timeout [ 75.775714][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.790421][ T5110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.805797][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.808082][ T5110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.813714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.839247][ T55] Bluetooth: hci4: command tx timeout [ 75.861327][ T5110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.888538][ T5110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.973912][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.003622][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.112508][ C1] eth0: bad gso: type: 1, size: 1408 [ 76.127651][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.127911][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.137420][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.213030][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.325007][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.371314][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.435320][ T5197] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.541689][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.579485][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.778274][ T5152] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.899232][ T5205] loop4: detected capacity change from 0 to 1024 [ 77.030981][ T5152] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.050616][ T5152] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.069950][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.088190][ T5152] usb 3-1: SerialNumber: syz [ 77.207379][ T5194] loop1: detected capacity change from 0 to 32768 [ 77.228651][ T5194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6 (5194) [ 77.247392][ T5194] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.295442][ T5194] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 77.314728][ T5194] BTRFS info (device loop1): using free-space-tree [ 77.441113][ T5112] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.589710][ T5100] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.663853][ T5112] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 77.686315][ T55] Bluetooth: hci0: command tx timeout [ 77.692063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.722952][ T5112] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 77.744388][ T5112] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.755388][ T5112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.766427][ T55] Bluetooth: hci1: command tx timeout [ 77.769070][ T5098] Bluetooth: hci2: command tx timeout [ 77.919076][ T5098] Bluetooth: hci4: command tx timeout [ 78.019941][ T5152] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 78.709907][ T5112] usb 5-1: string descriptor 0 read error: -71 [ 78.748455][ T5152] usb 3-1: USB disconnect, device number 2 [ 78.760211][ T5112] usb 5-1: USB disconnect, device number 2 [ 78.977593][ T5244] process 'syz.0.9' launched './file2' with NULL argv: empty string added [ 79.583314][ T5258] loop4: detected capacity change from 0 to 64 [ 79.637938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 80.572964][ T5253] loop1: detected capacity change from 0 to 32768 [ 80.609013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.646012][ T5253] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10 (5253) [ 80.680994][ T5253] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.691731][ T5253] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 80.701152][ T5253] BTRFS info (device loop1): using free-space-tree [ 81.152753][ T5255] loop0: detected capacity change from 0 to 32768 [ 81.158945][ T5239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.173477][ T5255] BTRFS: device /dev/loop0 (7:0) using temp-fsid d07f3ed7-2cba-423d-a53e-0bac7a4e07b6 [ 81.198835][ T5255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9 (5255) [ 81.254747][ T5255] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.277153][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.290317][ T5255] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 81.310463][ T5255] BTRFS info (device loop0): using free-space-tree [ 81.399734][ T5276] loop3: detected capacity change from 0 to 32768 [ 81.471618][ T5276] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 81.537182][ T5276] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 81.548229][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.621473][ T5276] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 81.644781][ T5112] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 81.660457][ T5112] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 81.681429][ T5303] loop4: detected capacity change from 0 to 32768 [ 81.708757][ T5303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13 (5303) [ 81.731347][ T5112] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 81.747129][ T5112] gfs2: fsid=syz:syz.0: jid=0: Done [ 81.751214][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.766130][ T5276] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.782086][ T5303] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.799167][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 81.830951][ T5303] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.848430][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.869264][ T5095] BTRFS info (device loop0): last unmount of filesystem d07f3ed7-2cba-423d-a53e-0bac7a4e07b6 [ 81.885896][ T5303] BTRFS info (device loop4): using free-space-tree [ 81.899393][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.919465][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.938238][ T9] usb 3-1: SerialNumber: syz [ 81.983927][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 82.415812][ T5110] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.805748][ T5345] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 82.877591][ T5339] loop1: detected capacity change from 0 to 32768 [ 82.891758][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 82.912154][ T5339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19 (5339) [ 83.017840][ T5339] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.054792][ T5339] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 83.072427][ T5339] BTRFS info (device loop1): using free-space-tree [ 83.301950][ T5100] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.458540][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.513233][ T5380] loop1: detected capacity change from 0 to 64 [ 83.670174][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.709594][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.718869][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 83.730516][ T9] usb 1-1: SerialNumber: syz [ 84.634476][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'. [ 84.694554][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 84.713870][ T5396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.767086][ T9] usb 1-1: USB disconnect, device number 2 [ 84.998220][ T5399] bond0: (slave erspan0): Opening slave failed [ 85.089814][ T5098] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 85.623382][ T25] usb 3-1: USB disconnect, device number 3 [ 86.556291][ T5411] loop1: detected capacity change from 0 to 32768 [ 86.576565][ T5411] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.31 (5411) [ 86.637389][ T5411] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 86.679571][ T5411] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 86.689170][ T5411] BTRFS info (device loop1): using free-space-tree [ 86.884528][ T5419] loop0: detected capacity change from 0 to 32768 [ 86.900041][ T5419] btrfs: Deprecated parameter 'usebackuproot' [ 86.907074][ T5419] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 86.944108][ T5419] btrfs: Unknown parameter 'smackfsroot' [ 86.962976][ T2483] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 87.138638][ T8] cfg80211: failed to load regulatory.db [ 87.448083][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 87.478229][ T29] audit: type=1804 audit(1721034171.962:2): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.31" name="/newroot/9/file0/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 87.627168][ T5446] loop3: detected capacity change from 0 to 32768 [ 87.652210][ T5446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.37 (5446) [ 87.785005][ T5446] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.798483][ T5446] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 87.885453][ T5466] bond0: (slave erspan0): Opening slave failed [ 87.934988][ T5100] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 87.966336][ T5098] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 88.136387][ T5446] BTRFS info (device loop3): using free-space-tree [ 88.314392][ T5473] loop0: detected capacity change from 0 to 1024 [ 88.612971][ T5106] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.635880][ T5492] fuse: Bad value for 'fd' [ 88.878215][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.949966][ T5494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.030879][ T5477] loop4: detected capacity change from 0 to 32768 [ 89.044067][ T5477] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.39 (5477) [ 89.069474][ T5477] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.081203][ T5477] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 89.084251][ T8] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 89.090717][ T5477] BTRFS info (device loop4): using free-space-tree [ 89.135015][ T8] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 89.176684][ T8] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.198722][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.407334][ T5519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.45'. [ 89.437983][ T5452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.563966][ T5110] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.644320][ T8] usb 1-1: string descriptor 0 read error: -71 [ 89.690183][ T8] usb 1-1: USB disconnect, device number 3 [ 90.477340][ T5523] loop1: detected capacity change from 0 to 32768 [ 90.507658][ T5523] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.46 (5523) [ 90.621494][ T5523] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.695222][ T5523] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 90.764734][ T5523] BTRFS info (device loop1): using free-space-tree [ 91.319658][ T5523] BTRFS info (device loop1): rebuilding free space tree [ 91.382204][ T5561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.51'. [ 91.427998][ T5541] loop2: detected capacity change from 0 to 32768 [ 91.436091][ T5541] BTRFS: device /dev/loop2 (7:2) using temp-fsid fd01d949-7dec-44c0-8894-8ca066639199 [ 91.451885][ T5541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.48 (5541) [ 91.942514][ T5541] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.162119][ T5541] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.177245][ T5541] BTRFS info (device loop2): using free-space-tree [ 92.190783][ T5572] loop0: detected capacity change from 0 to 1024 [ 92.454304][ T5525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.586146][ T5594] bond0: (slave erspan0): Opening slave failed [ 92.751961][ T5098] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 92.908252][ T5112] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.941003][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.953378][ T5099] BTRFS info (device loop2): last unmount of filesystem fd01d949-7dec-44c0-8894-8ca066639199 [ 93.121329][ T5112] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 93.232085][ T5112] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 93.241288][ T5112] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 93.251876][ T5112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.697930][ T5607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.55'. [ 93.812621][ T5112] usb 1-1: string descriptor 0 read error: -71 [ 93.852194][ T5112] usb 1-1: USB disconnect, device number 4 [ 94.488797][ T5598] loop4: detected capacity change from 0 to 32768 [ 94.509385][ T5598] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.54 (5598) [ 94.551995][ T5598] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.571007][ T5620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.59'. [ 94.601567][ T5598] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 94.620533][ T5598] BTRFS info (device loop4): using free-space-tree [ 94.630860][ C1] eth0: bad gso: type: 1, size: 1408 [ 94.987984][ T5110] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.244047][ T5651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'. [ 95.628359][ T5628] loop1: detected capacity change from 0 to 32768 [ 95.652038][ T5628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.58 (5628) [ 95.761151][ T5650] loop0: detected capacity change from 0 to 32768 [ 95.784375][ T5628] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.795372][ T5650] btrfs: Deprecated parameter 'usebackuproot' [ 95.802270][ T5650] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 95.814672][ T5628] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 95.824813][ T5650] btrfs: Unknown parameter 'smackfsroot' [ 95.831401][ T5628] BTRFS info (device loop1): using free-space-tree [ 95.888332][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 96.145316][ T5612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.303914][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.477954][ T5681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'. [ 97.069988][ T5702] bond0: (slave erspan0): Opening slave failed [ 97.135031][ T5098] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 97.938018][ T5697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'. [ 97.982412][ T5716] loop2: detected capacity change from 0 to 64 [ 98.343906][ T5718] loop4: detected capacity change from 0 to 32768 [ 98.378582][ T5718] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.66 (5718) [ 98.423098][ T5718] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.460670][ T5718] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.491116][ T5718] BTRFS info (device loop4): using free-space-tree [ 98.922147][ T5728] loop3: detected capacity change from 0 to 32768 [ 98.932320][ T5724] loop1: detected capacity change from 0 to 32768 [ 98.941155][ T5728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.72 (5728) [ 99.057884][ T5724] BTRFS: device /dev/loop1 (7:1) using temp-fsid b37b2a25-c30b-46e3-9a87-14d30fc32ca8 [ 99.057893][ T5728] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.057973][ T5728] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 99.078037][ T5724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.65 (5724) [ 99.113936][ T5728] BTRFS info (device loop3): using free-space-tree [ 99.214023][ T5751] loop0: detected capacity change from 0 to 32768 [ 99.229052][ T5724] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.239622][ T5724] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 99.253554][ T5751] BTRFS: device /dev/loop0 (7:0) using temp-fsid 84910b32-ac69-46dd-869d-c7ad0220e986 [ 99.253637][ T5724] BTRFS info (device loop1): using free-space-tree [ 99.270070][ T5751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.70 (5751) [ 99.373884][ T5751] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.407306][ T5751] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 99.428822][ T5751] BTRFS info (device loop0): using free-space-tree [ 99.478370][ T5106] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.788530][ T5110] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.817722][ T5100] BTRFS info (device loop1): last unmount of filesystem b37b2a25-c30b-46e3-9a87-14d30fc32ca8 [ 99.964748][ T5095] BTRFS info (device loop0): last unmount of filesystem 84910b32-ac69-46dd-869d-c7ad0220e986 [ 100.918694][ T5806] loop1: detected capacity change from 0 to 32768 [ 100.946759][ T5806] btrfs: Deprecated parameter 'usebackuproot' [ 100.977367][ T5806] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 101.012702][ T5806] btrfs: Unknown parameter 'smackfsroot' [ 101.070405][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 101.101309][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'. [ 101.186736][ T5825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.80'. [ 101.251799][ T5811] loop4: detected capacity change from 0 to 32768 [ 101.291919][ T5811] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.74 (5811) [ 101.367427][ T5811] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 101.398657][ T5811] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 101.506157][ T5811] BTRFS info (device loop4): using free-space-tree [ 102.129479][ T29] audit: type=1804 audit(1721034186.622:3): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.74" name="/newroot/14/file0/cgroup.controllers" dev="loop4" ino=263 res=1 errno=0 [ 102.297281][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 102.384786][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 102.502998][ T5110] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 102.909109][ T5846] loop1: detected capacity change from 0 to 32768 [ 102.929434][ T5846] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.81 (5846) [ 102.978636][ T5846] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.996006][ T5846] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 103.013030][ T5846] BTRFS info (device loop1): using free-space-tree [ 103.132524][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.173771][ T5846] BTRFS info (device loop1): rebuilding free space tree [ 103.194894][ T5855] loop2: detected capacity change from 0 to 32768 [ 103.211075][ T5855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.83 (5855) [ 103.257148][ T5855] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.368565][ T5855] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 103.398407][ T5855] BTRFS info (device loop2): using free-space-tree [ 103.622115][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 104.622153][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.634889][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.644746][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 104.645599][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.654390][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.698939][ T9] usb 5-1: config 0 descriptor?? [ 104.833165][ T5887] loop0: detected capacity change from 0 to 32768 [ 104.841575][ T5887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.85 (5887) [ 104.862058][ T5887] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.875435][ T5099] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.886572][ T5887] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 104.896072][ T5887] BTRFS info (device loop0): using free-space-tree [ 105.363530][ T5095] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.489358][ T5948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.92'. [ 105.793345][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'. [ 106.631160][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.842688][ T5958] loop0: detected capacity change from 0 to 32768 [ 106.848320][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 107.180049][ T5958] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.94 (5958) [ 107.218720][ T25] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 107.230303][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.251067][ T25] usb 4-1: config 0 descriptor?? [ 107.260654][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 107.290509][ T5958] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 107.311631][ T5958] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 107.324257][ T5958] BTRFS info (device loop0): using free-space-tree [ 107.344475][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'. [ 107.748421][ T5098] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 108.143306][ T25] gspca_nw80x: reg_r err -110 [ 108.152408][ T25] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 108.202369][ T5999] bond0: (slave erspan0): Opening slave failed [ 108.366875][ T8] usb 5-1: USB disconnect, device number 3 [ 108.906833][ T29] audit: type=1804 audit(1721034193.332:4): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.94" name="/newroot/18/file0/cgroup.controllers" dev="loop0" ino=263 res=1 errno=0 [ 109.154694][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.566256][ T5095] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 109.650304][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.683911][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.750280][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.771394][ T8] usb 5-1: SerialNumber: syz [ 110.003350][ T9] usb 4-1: USB disconnect, device number 2 [ 110.059800][ T6015] loop2: detected capacity change from 0 to 32768 [ 110.076118][ T6015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.101 (6015) [ 110.375578][ T6015] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.483932][ T6015] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 110.505568][ T6015] BTRFS info (device loop2): using free-space-tree [ 110.516182][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 110.531054][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'. [ 110.586286][ T8] usb 5-1: USB disconnect, device number 4 [ 110.890889][ T5099] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.449091][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 111.705041][ T6058] loop2: detected capacity change from 0 to 32768 [ 111.754468][ T6058] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.107 (6058) [ 111.799133][ T6058] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.841143][ T6058] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 112.038291][ T48] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.128670][ T6058] BTRFS info (device loop2): rebuilding free space tree [ 112.218583][ T6058] BTRFS info (device loop2): disabling free space tree [ 112.225815][ T6058] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.252669][ T6058] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.338936][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 112.384736][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.418258][ T48] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.557834][ T29] audit: type=1800 audit(1721034196.892:5): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.107" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 112.559053][ T48] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 112.654927][ T6089] bond0: (slave erspan0): Opening slave failed [ 112.788460][ T5098] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 113.033519][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.099078][ T48] usb 4-1: config 0 descriptor?? [ 113.983984][ T6108] kvm: emulating exchange as write [ 114.039677][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.278248][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 114.290420][ T48] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 114.308828][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.353573][ T48] usb 1-1: config 0 descriptor?? [ 114.396539][ T48] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 114.406415][ T6095] loop1: detected capacity change from 0 to 32768 [ 114.478646][ T5099] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.478655][ T6095] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.112 (6095) [ 114.496523][ T6095] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 114.543195][ T6095] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 114.573863][ T6095] BTRFS info (device loop1): using free-space-tree [ 115.109011][ T48] gspca_nw80x: reg_r err -110 [ 115.114207][ T48] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 115.250877][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.116'. [ 115.691946][ T29] audit: type=1804 audit(1721034200.182:6): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.112" name="/newroot/24/file0/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 115.957539][ T5100] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 116.695635][ T6142] loop4: detected capacity change from 0 to 32768 [ 116.737799][ T6142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.117 (6142) [ 116.754905][ T8] usb 1-1: USB disconnect, device number 5 [ 116.795496][ T48] usb 4-1: USB disconnect, device number 3 [ 116.836896][ T6142] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.859127][ T6142] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 116.878960][ T6142] BTRFS info (device loop4): using free-space-tree [ 117.101266][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.157897][ C1] eth0: bad gso: type: 1, size: 1408 [ 117.178894][ T5110] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.265721][ T6175] fuse: Bad value for 'fd' [ 117.330018][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.369364][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.386904][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.397126][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.417835][ T6150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.703783][ T6177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.811424][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.122'. [ 117.854809][ T8] usb 2-1: USB disconnect, device number 2 [ 118.247051][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'. [ 118.451509][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 119.762753][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.912502][ T6214] loop3: detected capacity change from 0 to 32768 [ 119.928898][ T6214] btrfs: Deprecated parameter 'usebackuproot' [ 119.935026][ T6214] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 119.968203][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 119.970266][ T6214] btrfs: Unknown parameter 'smackfsroot' [ 119.981279][ T25] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 120.001581][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.011020][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 120.022635][ T25] usb 1-1: config 0 descriptor?? [ 120.038558][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 120.777552][ T25] gspca_nw80x: reg_r err -110 [ 120.792320][ T25] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 121.017477][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 121.087029][ T6239] veth3: entered allmulticast mode [ 121.172204][ T6228] loop4: detected capacity change from 0 to 32768 [ 121.199057][ T6228] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.132 (6228) [ 121.282976][ T6228] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.330500][ T6228] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 121.386742][ T6228] BTRFS info (device loop4): using free-space-tree [ 121.638225][ T48] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.676098][ T6216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.753828][ C1] eth0: bad gso: type: 1, size: 1408 [ 121.805074][ T5110] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.873396][ T6263] fuse: Bad value for 'fd' [ 121.891594][ T48] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.956914][ T48] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.974863][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.992193][ T48] usb 2-1: SerialNumber: syz [ 122.058216][ T5146] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.280529][ T5146] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.307901][ T5146] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.336098][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.349637][ T5146] usb 3-1: SerialNumber: syz [ 122.486287][ T48] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 122.497426][ T9] usb 1-1: USB disconnect, device number 6 [ 122.544394][ T48] usb 2-1: USB disconnect, device number 3 [ 122.979256][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.046567][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.142'. [ 123.140341][ T5146] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 123.188453][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 123.202423][ T9] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 123.225807][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.141'. [ 123.237573][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.240731][ T48] usb 3-1: USB disconnect, device number 4 [ 123.250054][ T9] usb 1-1: Product: syz [ 123.266400][ T9] usb 1-1: Manufacturer: syz [ 123.294365][ T9] usb 1-1: SerialNumber: syz [ 123.313386][ T48] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 123.328650][ T9] usb 1-1: config 0 descriptor?? [ 123.412737][ T9] usb 1-1: selecting invalid altsetting 3 [ 123.425277][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 123.433809][ T9] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 123.451686][ T9] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 124.308452][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.500442][ T25] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 124.543803][ T25] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 124.565065][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.602758][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.037801][ T25] usb 3-1: string descriptor 0 read error: -71 [ 125.077978][ T25] usb 3-1: USB disconnect, device number 5 [ 125.172381][ T6296] loop3: detected capacity change from 0 to 32768 [ 125.188909][ T6296] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.146 (6296) [ 125.224625][ T6296] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.238323][ T6296] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 125.273462][ T6296] BTRFS info (device loop3): using free-space-tree [ 125.435622][ T5106] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.535241][ T6298] loop1: detected capacity change from 0 to 32768 [ 125.545458][ T6298] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.147 (6298) [ 125.570799][ T6298] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 125.590715][ T8] usb 1-1: USB disconnect, device number 7 [ 125.598476][ T6298] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 125.631367][ T6298] BTRFS info (device loop1): using free-space-tree [ 125.836851][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 125.908928][ T6346] veth3: entered allmulticast mode [ 125.968305][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.221542][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 126.242193][ T29] audit: type=1804 audit(1721034210.732:7): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.147" name="/newroot/32/file0/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 126.249825][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 126.310590][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.342534][ T9] usb 3-1: config 0 descriptor?? [ 126.384138][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 126.554327][ T6325] loop4: detected capacity change from 0 to 32768 [ 126.584129][ T6325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.148 (6325) [ 126.598270][ T5112] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.620267][ T5100] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 126.647895][ T6325] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.692811][ T6325] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 126.743271][ T6325] BTRFS info (device loop4): using free-space-tree [ 126.782324][ T5112] usb 4-1: Using ep0 maxpacket: 16 [ 126.814255][ T5112] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 126.861626][ T5112] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 126.888105][ T5112] usb 4-1: Product: syz [ 126.892556][ T5112] usb 4-1: Manufacturer: syz [ 126.897232][ T5112] usb 4-1: SerialNumber: syz [ 126.915923][ T5112] usb 4-1: config 0 descriptor?? [ 127.108445][ T9] gspca_nw80x: reg_r err -110 [ 127.113691][ T9] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 127.304308][ T6300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.355216][ T5110] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.367107][ C1] eth0: bad gso: type: 1, size: 1408 [ 127.697443][ T5112] usb 4-1: USB disconnect, device number 4 [ 128.394368][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'. [ 128.666849][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 128.856076][ T48] usb 3-1: USB disconnect, device number 6 [ 128.950938][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 129.535249][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 129.642155][ T6403] veth3: entered allmulticast mode [ 130.025828][ T6414] can: request_module (can-proto-0) failed. [ 130.194935][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.163'. [ 130.423894][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 131.393917][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'. [ 131.510922][ T6440] loop4: detected capacity change from 0 to 1024 [ 131.875560][ T6429] loop0: detected capacity change from 0 to 32768 [ 131.888921][ T6429] btrfs: Deprecated parameter 'usebackuproot' [ 131.899393][ T6429] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.916246][ T6429] btrfs: Unknown parameter 'smackfsroot' [ 131.930499][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.931459][ T6439] loop1: detected capacity change from 0 to 32768 [ 131.951036][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 131.955264][ T6439] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.164 (6439) [ 131.973458][ T5145] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.141936][ T8] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 132.173312][ T6439] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.183822][ T5145] usb 3-1: Using ep0 maxpacket: 16 [ 132.193931][ T8] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 132.206908][ T6439] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 132.219268][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.228255][ T48] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.232250][ T5145] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 132.245694][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.248218][ T6439] BTRFS info (device loop1): using free-space-tree [ 132.256148][ T5145] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 132.277775][ T5145] usb 3-1: Product: syz [ 132.283664][ T5145] usb 3-1: Manufacturer: syz [ 132.291508][ T5145] usb 3-1: SerialNumber: syz [ 132.300420][ T5145] usb 3-1: config 0 descriptor?? [ 132.418219][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 132.429677][ T48] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 132.450667][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.477431][ T48] usb 4-1: config 0 descriptor?? [ 132.512960][ T48] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 132.547690][ T6422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.654393][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.695191][ T8] usb 5-1: string descriptor 0 read error: -71 [ 132.735874][ T8] usb 5-1: USB disconnect, device number 5 [ 132.815225][ T5112] usb 3-1: USB disconnect, device number 7 [ 133.049339][ T48] gspca_nw80x: reg_r err -71 [ 133.061718][ T48] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 133.080991][ T48] usb 4-1: USB disconnect, device number 5 [ 133.201870][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.208515][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.261793][ C1] eth0: bad gso: type: 1, size: 1408 [ 133.582759][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 133.616600][ T6474] veth5: entered allmulticast mode [ 133.786153][ T5098] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 134.130090][ T6484] bond0: (slave erspan0): Opening slave failed [ 134.213129][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'. [ 134.418476][ T5148] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.626261][ T5148] usb 5-1: Using ep0 maxpacket: 16 [ 134.647818][ T5148] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 134.667750][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 134.706716][ T5148] usb 5-1: Product: syz [ 134.718930][ T5148] usb 5-1: Manufacturer: syz [ 134.723788][ T5148] usb 5-1: SerialNumber: syz [ 134.756864][ T5148] usb 5-1: config 0 descriptor?? [ 135.125509][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 135.151319][ T6496] loop1: detected capacity change from 0 to 32768 [ 135.236965][ T6496] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.176 (6496) [ 135.294951][ T6496] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.348335][ T6496] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 135.528282][ T6496] BTRFS info (device loop1): rebuilding free space tree [ 135.582676][ T6496] BTRFS info (device loop1): disabling free space tree [ 135.611484][ T6496] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.648183][ T6496] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.821637][ T6527] can: request_module (can-proto-0) failed. [ 136.428961][ T29] audit: type=1800 audit(1721034220.912:8): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 136.795115][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 136.802740][ T59] usb 5-1: USB disconnect, device number 6 [ 137.075355][ T6541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.746818][ C1] eth0: bad gso: type: 1, size: 1408 [ 137.824206][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.948360][ T5145] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.137539][ T6551] loop0: detected capacity change from 0 to 32768 [ 138.148486][ T6551] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.185 (6551) [ 138.159839][ T5145] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.180976][ T6551] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.187636][ T5145] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.193358][ T6551] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 138.214103][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.235722][ T5145] usb 3-1: SerialNumber: syz [ 138.244659][ T5112] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.304304][ T6551] BTRFS info (device loop0): rebuilding free space tree [ 138.330308][ T6551] BTRFS info (device loop0): disabling free space tree [ 138.347601][ T6551] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.370817][ T6551] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.462478][ T5112] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.475894][ T29] audit: type=1800 audit(1721034222.952:9): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.185" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 138.484806][ T5112] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.506942][ T29] audit: type=1800 audit(1721034222.962:10): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.185" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 138.542923][ T5112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.575660][ T5112] usb 5-1: SerialNumber: syz [ 138.875909][ T5145] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 138.896302][ T5095] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.910216][ T5145] usb 3-1: USB disconnect, device number 8 [ 139.065240][ T6572] loop1: detected capacity change from 0 to 32768 [ 139.084414][ T6572] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.188 (6572) [ 139.126158][ T6572] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.157067][ T6572] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.246991][ T5112] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 139.291567][ T5112] usb 5-1: USB disconnect, device number 7 [ 139.380416][ T6572] BTRFS info (device loop1): rebuilding free space tree [ 139.490627][ T6572] BTRFS info (device loop1): disabling free space tree [ 139.534078][ T6572] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.551553][ T6572] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.668238][ T29] audit: type=1800 audit(1721034224.152:11): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.188" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 139.853710][ T6588] loop3: detected capacity change from 0 to 32768 [ 139.854277][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.190'. [ 139.860464][ T29] audit: type=1800 audit(1721034224.192:12): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.188" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 139.918363][ T6612] can: request_module (can-proto-0) failed. [ 139.993126][ T6588] BTRFS: device /dev/loop3 (7:3) using temp-fsid 03ac6410-b3ae-4c63-91f1-d970c50382f9 [ 140.219049][ T6588] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.189 (6588) [ 140.401591][ T6588] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.444396][ T6588] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.520172][ T6588] BTRFS info (device loop3): using free-space-tree [ 140.768303][ T6627] bond0: (slave erspan0): Opening slave failed [ 140.893670][ T5098] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 141.688130][ C0] sched: RT throttling activated [ 141.701740][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 141.701934][ T6577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.702364][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 143.016471][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 143.133970][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 143.222205][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 143.269659][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 143.363788][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 143.381264][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 143.392842][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 143.409792][ T6588] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 143.582910][ T6588] BTRFS error (device loop3): open_ctree failed [ 143.678355][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.520528][ T6657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.928219][ T5112] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.179401][ T5112] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.207031][ T5112] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.231741][ C1] eth0: bad gso: type: 1, size: 1408 [ 145.252686][ T5112] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.262237][ T5112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.314078][ T6656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.158055][ T59] usb 4-1: USB disconnect, device number 6 [ 146.444838][ T6661] loop1: detected capacity change from 0 to 32768 [ 146.459642][ T6661] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.197 (6661) [ 146.509528][ T6661] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 146.564857][ T6661] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.608196][ T6661] BTRFS info (device loop1): using free-space-tree [ 146.751886][ T6680] loop2: detected capacity change from 0 to 64 [ 147.076739][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 147.348748][ T6688] veth5: entered allmulticast mode [ 147.740726][ T6668] loop4: detected capacity change from 0 to 32768 [ 147.764221][ T6668] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.200 (6668) [ 147.818671][ T6668] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.873744][ T6668] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 147.900214][ T29] audit: type=1804 audit(1721034232.392:13): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.197" name="/newroot/42/file0/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 148.677902][ T6707] can: request_module (can-proto-0) failed. [ 148.723807][ T6668] BTRFS info (device loop4): rebuilding free space tree [ 148.762821][ T6668] BTRFS info (device loop4): disabling free space tree [ 148.782299][ T6668] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.818183][ T6668] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.890580][ T5100] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 148.915716][ T6723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.947239][ T29] audit: type=1800 audit(1721034233.412:14): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.200" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 149.009317][ T29] audit: type=1800 audit(1721034233.422:15): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.200" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 149.300867][ T6729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.446607][ T5110] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.128656][ T6753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.263956][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'. [ 150.727933][ T6739] loop1: detected capacity change from 0 to 32768 [ 150.742026][ T6739] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.205 (6739) [ 150.833886][ T6739] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 150.868340][ T6739] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 150.898227][ T6739] BTRFS info (device loop1): using free-space-tree [ 151.070020][ T6746] loop2: detected capacity change from 0 to 32768 [ 151.077780][ T6746] BTRFS: device /dev/loop2 (7:2) using temp-fsid ef9de97f-f8e8-4cb0-8578-bdd67aa6f86d [ 151.087775][ T6746] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.210 (6746) [ 151.123275][ T6746] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 151.187271][ T6746] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 151.206431][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 151.236517][ T6746] BTRFS info (device loop2): using free-space-tree [ 151.498806][ T6784] veth3: entered allmulticast mode [ 152.177785][ T29] audit: type=1804 audit(1721034236.662:16): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.205" name="/newroot/43/file0/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 152.463475][ T29] audit: type=1804 audit(1721034236.942:17): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.210" name="/newroot/41/file0/cgroup.controllers" dev="loop2" ino=263 res=1 errno=0 [ 152.622599][ T5100] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 152.737096][ T6811] loop3: detected capacity change from 0 to 32768 [ 152.780447][ T6822] can: request_module (can-proto-0) failed. [ 152.797155][ T6811] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.213 (6811) [ 152.845707][ T5099] BTRFS info (device loop2): last unmount of filesystem ef9de97f-f8e8-4cb0-8578-bdd67aa6f86d [ 152.854894][ T6814] loop0: detected capacity change from 0 to 32768 [ 152.915119][ T6814] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.215 (6814) [ 152.930608][ T6811] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.964778][ T6814] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.986312][ T6814] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 153.002178][ T6814] BTRFS info (device loop0): using free-space-tree [ 153.024150][ T6811] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 153.098309][ T6811] BTRFS info (device loop3): using free-space-tree [ 153.290284][ T5095] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.455121][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 153.576746][ T6860] veth3: entered allmulticast mode [ 153.600415][ T5106] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.943578][ T6872] loop3: detected capacity change from 0 to 64 [ 154.221429][ T6839] loop1: detected capacity change from 0 to 32768 [ 154.264647][ T6839] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.217 (6839) [ 154.441038][ T6839] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.568888][ T6839] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 154.881203][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'. [ 155.219287][ T6839] BTRFS info (device loop1): rebuilding free space tree [ 155.243382][ T6839] BTRFS info (device loop1): disabling free space tree [ 155.257837][ T6839] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.272315][ T6839] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.362180][ T29] audit: type=1800 audit(1721034239.852:18): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 155.425448][ T29] audit: type=1800 audit(1721034239.872:19): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 155.478364][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.680021][ T8] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 155.703642][ T8] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 155.768365][ T8] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 155.810381][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.925283][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.253243][ T8] usb 1-1: string descriptor 0 read error: -71 [ 156.278509][ T8] usb 1-1: USB disconnect, device number 8 [ 156.313871][ T6922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.438541][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 156.470176][ T6929] veth5: entered allmulticast mode [ 156.478272][ T5112] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.661186][ T6934] FAULT_INJECTION: forcing a failure. [ 156.661186][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.673954][ T5112] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 156.677375][ T6934] CPU: 0 UID: 0 PID: 6934 Comm: syz.4.234 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 156.687076][ T5112] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 156.694363][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 156.694382][ T6934] Call Trace: [ 156.694392][ T6934] [ 156.694401][ T6934] dump_stack_lvl+0x241/0x360 [ 156.718287][ T5112] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 156.719609][ T6934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.724400][ T5112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.733332][ T6934] ? __pfx__printk+0x10/0x10 [ 156.733369][ T6934] ? __pfx_lock_release+0x10/0x10 [ 156.733405][ T6934] should_fail_ex+0x3b0/0x4e0 [ 156.733442][ T6934] _copy_to_user+0x2f/0xb0 [ 156.733470][ T6934] put_timespec64+0xfa/0x150 [ 156.733492][ T6934] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 156.733523][ T6934] ? __pfx_put_timespec64+0x10/0x10 [ 156.733545][ T6934] ? timekeeping_get_ns+0x2c0/0x420 [ 156.733579][ T6934] nanosleep_copyout+0x79/0x120 [ 156.733606][ T6934] alarmtimer_do_nsleep+0x405/0x620 [ 156.733641][ T6934] ? alarmtimer_do_nsleep+0xb2/0x620 [ 156.733671][ T6934] ? __pfx_alarmtimer_do_nsleep+0x10/0x10 [ 156.733702][ T6934] ? __asan_memset+0x23/0x50 [ 156.733733][ T6934] ? __hrtimer_init+0x170/0x250 [ 156.733759][ T6934] alarm_timer_nsleep_restart+0x1dd/0x2c0 [ 156.733784][ T6934] ? __pfx_alarm_timer_nsleep_restart+0x10/0x10 [ 156.733811][ T6934] ? __pfx_alarmtimer_fired+0x10/0x10 [ 156.733840][ T6934] ? __pfx_alarmtimer_nsleep_wakeup+0x10/0x10 [ 156.733872][ T6934] ? rcu_is_watching+0x15/0xb0 [ 156.733893][ T6934] ? rcu_is_watching+0x15/0xb0 [ 156.733925][ T6934] do_syscall_64+0xf3/0x230 [ 156.733956][ T6934] ? clear_bhb_loop+0x35/0x90 [ 156.733982][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.734006][ T6934] RIP: 0033:0x7fe50df75bd9 [ 156.870378][ T6934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.890137][ T6934] RSP: 002b:00007fe50edee048 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 156.898605][ T6934] RAX: ffffffffffffffda RBX: 00007fe50e103f60 RCX: 00007fe50df75bd9 [ 156.906610][ T6934] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000009 [ 156.914611][ T6934] RBP: 00007fe50edee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.922612][ T6934] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 156.930615][ T6934] R13: 000000000000000b R14: 00007fe50e103f60 R15: 00007ffd545f5b18 [ 156.938628][ T6934] [ 157.166727][ T5112] usb 3-1: string descriptor 0 read error: -71 [ 157.197709][ T5112] usb 3-1: USB disconnect, device number 9 [ 157.439169][ T6948] loop1: detected capacity change from 0 to 32768 [ 157.455735][ T6948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.237 (6948) [ 157.517593][ T6948] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.550708][ T6948] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 157.764886][ T6972] FAULT_INJECTION: forcing a failure. [ 157.764886][ T6972] name failslab, interval 1, probability 0, space 0, times 1 [ 157.787507][ T6948] BTRFS info (device loop1): rebuilding free space tree [ 157.795010][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: syz.2.239 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 157.805117][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.809981][ T6948] BTRFS info (device loop1): disabling free space tree [ 157.815189][ T6972] Call Trace: [ 157.815202][ T6972] [ 157.815211][ T6972] dump_stack_lvl+0x241/0x360 [ 157.832327][ T6948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.832940][ T6972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.847796][ T6972] ? __pfx__printk+0x10/0x10 [ 157.852418][ T6972] ? __asan_memcpy+0x40/0x70 [ 157.857083][ T6972] ? __pfx___might_resched+0x10/0x10 [ 157.857258][ T6948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.862385][ T6972] ? dynamic_dname+0x141/0x1b0 [ 157.862418][ T6972] should_fail_ex+0x3b0/0x4e0 [ 157.862453][ T6972] ? tomoyo_encode+0x26f/0x540 [ 157.862481][ T6972] should_failslab+0xac/0x100 [ 157.862506][ T6972] ? tomoyo_encode+0x26f/0x540 [ 157.862532][ T6972] __kmalloc_noprof+0xd8/0x400 [ 157.862563][ T6972] tomoyo_encode+0x26f/0x540 [ 157.862592][ T6972] ? __pfx_sockfs_dname+0x10/0x10 [ 157.862624][ T6972] tomoyo_realpath_from_path+0x59e/0x5e0 [ 157.862661][ T6972] tomoyo_path_number_perm+0x23a/0x880 [ 157.862687][ T6972] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.862718][ T6972] ? bpf_lsm_file_permission+0x9/0x10 [ 157.862743][ T6972] ? tomoyo_path_number_perm+0x208/0x880 [ 157.862767][ T6972] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.862794][ T6972] ? rcu_is_watching+0x15/0xb0 [ 157.862820][ T6972] ? __pfx_lock_acquire+0x10/0x10 [ 157.862861][ T6972] ? fput+0x193/0x210 [ 157.862887][ T6972] ? __fget_files+0x29/0x470 [ 157.862910][ T6972] ? __fget_files+0x3f6/0x470 [ 157.862930][ T6972] ? __fget_files+0x29/0x470 [ 157.862955][ T6972] security_file_ioctl+0x75/0xb0 [ 157.862981][ T6972] __se_sys_ioctl+0x47/0x170 [ 157.863014][ T6972] do_syscall_64+0xf3/0x230 [ 157.863045][ T6972] ? clear_bhb_loop+0x35/0x90 [ 157.863072][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.863096][ T6972] RIP: 0033:0x7fd253175bd9 [ 157.863115][ T6972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.863133][ T6972] RSP: 002b:00007fd253ea4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.863157][ T6972] RAX: ffffffffffffffda RBX: 00007fd253303f60 RCX: 00007fd253175bd9 [ 157.863174][ T6972] RDX: 0000000020000400 RSI: 00000000000089f2 RDI: 0000000000000003 [ 157.863189][ T6972] RBP: 00007fd253ea40a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.863203][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.863217][ T6972] R13: 000000000000000b R14: 00007fd253303f60 R15: 00007ffc26869188 [ 157.863242][ T6972] [ 158.098276][ T6972] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.236180][ T29] audit: type=1800 audit(1721034242.722:20): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.237" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 158.299269][ T6951] loop4: detected capacity change from 0 to 32768 [ 158.333687][ T6951] BTRFS: device /dev/loop4 (7:4) using temp-fsid f1b18722-d915-4c6a-ab06-5f73d5d800a7 [ 158.368227][ T6951] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.238 (6951) [ 158.445287][ T6951] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.464730][ T6955] loop3: detected capacity change from 0 to 32768 [ 158.484185][ T6951] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 158.501981][ T6955] BTRFS: device /dev/loop3 (7:3) using temp-fsid fdabc1e6-a843-4f78-94cb-eaaccfe583b1 [ 158.528701][ T6955] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.235 (6955) [ 158.548657][ T5112] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.664191][ T6955] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.679662][ T6955] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 158.746301][ T5112] usb 3-1: Using ep0 maxpacket: 32 [ 158.777046][ T6955] BTRFS info (device loop3): using free-space-tree [ 158.777098][ T5112] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 158.796122][ T5112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.817595][ T5112] usb 3-1: config 0 descriptor?? [ 158.860046][ T5112] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 158.871754][ T6951] BTRFS info (device loop4): rebuilding free space tree [ 158.909696][ T6951] BTRFS info (device loop4): disabling free space tree [ 158.946440][ T6951] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.978003][ T6951] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.109703][ T6936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.154924][ T29] audit: type=1800 audit(1721034243.642:21): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.238" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 159.276168][ T29] audit: type=1800 audit(1721034243.702:22): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.238" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 159.509359][ T5106] BTRFS info (device loop3): last unmount of filesystem fdabc1e6-a843-4f78-94cb-eaaccfe583b1 [ 159.560057][ T5112] gspca_nw80x: reg_r err -110 [ 159.575499][ T5112] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 159.821731][ T5110] BTRFS info (device loop4): last unmount of filesystem f1b18722-d915-4c6a-ab06-5f73d5d800a7 [ 159.947255][ T8] usb 3-1: USB disconnect, device number 10 [ 160.091498][ C1] eth0: bad gso: type: 1, size: 1408 [ 160.197553][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.269986][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 160.506327][ T7021] veth5: entered allmulticast mode [ 160.607440][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.241'. [ 160.710609][ T7032] loop1: detected capacity change from 0 to 2048 [ 160.847816][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.242'. [ 160.871812][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.129607][ T7032] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 161.151100][ T7032] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 161.186675][ T7032] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.186675][ T7032] [ 161.222409][ T7032] EXT4-fs (loop1): Total free blocks count 0 [ 161.289309][ T7032] EXT4-fs (loop1): Free/Dirty block details [ 161.328231][ T7032] EXT4-fs (loop1): free_blocks=2415919104 [ 161.335432][ T7032] EXT4-fs (loop1): dirty_blocks=16 [ 161.351847][ T7032] EXT4-fs (loop1): Block reservation details [ 161.369272][ T7032] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 161.495123][ T5100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.687679][ T7054] warning: `syz.2.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.803001][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 161.828581][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 162.209884][ T7066] loop2: detected capacity change from 0 to 32768 [ 162.236758][ T7066] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.252 (7066) [ 162.288730][ T7066] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.308400][ T7066] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 162.388467][ T48] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.437296][ T7066] BTRFS info (device loop2): rebuilding free space tree [ 162.458856][ T7066] BTRFS info (device loop2): disabling free space tree [ 162.475981][ T7066] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.489089][ T7066] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.591018][ T29] audit: type=1800 audit(1721034247.072:23): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.252" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 162.613263][ T48] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.634223][ T48] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.657351][ T29] audit: type=1800 audit(1721034247.072:24): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.252" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 162.693483][ T48] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.723649][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.749862][ T7078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.849024][ T7073] loop4: detected capacity change from 0 to 32768 [ 162.861354][ T7073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.253 (7073) [ 162.896857][ T7073] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.943327][ T7073] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 162.970500][ T7076] loop3: detected capacity change from 0 to 32768 [ 163.001723][ T7073] BTRFS info (device loop4): using free-space-tree [ 163.009395][ T7076] BTRFS: device /dev/loop3 (7:3) using temp-fsid 991c85b8-ac90-469c-8c67-b5bcbebc404c [ 163.029497][ T7080] loop0: detected capacity change from 0 to 32768 [ 163.074209][ T5099] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.085985][ T7076] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.254 (7076) [ 163.135415][ T7080] BTRFS: device /dev/loop0 (7:0) using temp-fsid d078cd84-bc8d-44a1-a646-bd32ecb7c20a [ 163.150402][ T7080] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.251 (7080) [ 163.166876][ T7076] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.192919][ T7080] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.219497][ T7076] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 163.251717][ T7080] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 163.282243][ T5145] usb 2-1: USB disconnect, device number 4 [ 163.302170][ T7080] BTRFS info (device loop0): using free-space-tree [ 163.503544][ T7073] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 163.572973][ T7076] BTRFS info (device loop3): rebuilding free space tree [ 163.581438][ T5110] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.620587][ T7076] BTRFS info (device loop3): disabling free space tree [ 163.628138][ T7076] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.640203][ T7076] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.684725][ T7149] can: request_module (can-proto-0) failed. [ 163.811231][ T29] audit: type=1800 audit(1721034248.292:25): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.254" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 163.855971][ T7056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.019748][ T5095] BTRFS info (device loop0): last unmount of filesystem d078cd84-bc8d-44a1-a646-bd32ecb7c20a [ 164.314477][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.324050][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.358549][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.366985][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.374858][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.384240][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.325541][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 165.401636][ T7168] loop1: detected capacity change from 0 to 2048 [ 165.486691][ T7168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.505479][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.627566][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.749908][ T7172] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.779276][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.804926][ T7172] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 165.836328][ T7172] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.836328][ T7172] [ 165.857742][ T7172] EXT4-fs (loop1): Total free blocks count 0 [ 165.864207][ T7172] EXT4-fs (loop1): Free/Dirty block details [ 165.880928][ T7172] EXT4-fs (loop1): free_blocks=2415919104 [ 165.886946][ T7172] EXT4-fs (loop1): dirty_blocks=16 [ 165.892565][ T7172] EXT4-fs (loop1): Block reservation details [ 165.909959][ T7172] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 165.919626][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.974902][ T5106] BTRFS info (device loop3): last unmount of filesystem 991c85b8-ac90-469c-8c67-b5bcbebc404c [ 166.017138][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 166.141557][ T5100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.166169][ T7193] loop2: detected capacity change from 0 to 512 [ 166.189350][ T7193] ======================================================= [ 166.189350][ T7193] WARNING: The mand mount option has been deprecated and [ 166.189350][ T7193] and is ignored by this kernel. Remove the mand [ 166.189350][ T7193] option from the mount to silence this warning. [ 166.189350][ T7193] ======================================================= [ 166.262598][ T7193] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.265: bad orphan inode 17 [ 166.322470][ T7193] ext4_test_bit(bit=16, block=4) = 1 [ 166.327921][ T7193] is_bad_inode(inode)=0 [ 166.343964][ T7193] NEXT_ORPHAN(inode)=0 [ 166.348642][ T7193] max_ino=32 [ 166.353839][ T7193] i_nlink=1 [ 166.360325][ T7193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.398423][ T7193] EXT4-fs error (device loop2): ext4_find_dest_de:2066: inode #2: block 13: comm syz.2.265: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 166.433489][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.453191][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.473393][ T7155] bridge_slave_0: entered allmulticast mode [ 166.484270][ T55] Bluetooth: hci5: command tx timeout [ 166.495286][ T7155] bridge_slave_0: entered promiscuous mode [ 166.568876][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 166.585260][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.618521][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.633451][ T7155] bridge_slave_1: entered allmulticast mode [ 166.645677][ T7155] bridge_slave_1: entered promiscuous mode [ 166.684007][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 166.713299][ T5099] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.771075][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.814874][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.852834][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.862898][ T35] bridge_slave_1: left allmulticast mode [ 166.873402][ T35] bridge_slave_1: left promiscuous mode [ 166.888493][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.909824][ T7201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.917329][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.052589][ T35] bridge_slave_0: left allmulticast mode [ 167.065090][ T35] bridge_slave_0: left promiscuous mode [ 167.089012][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.542539][ T55] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 167.746082][ T7191] loop0: detected capacity change from 0 to 40427 [ 167.796141][ T7191] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.937409][ T7191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.146289][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.444827][ T9] usb 2-1: USB disconnect, device number 5 [ 168.454934][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.486992][ T35] bond0 (unregistering): Released all slaves [ 168.558894][ T55] Bluetooth: hci5: command tx timeout [ 168.639225][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.665840][ T7214] bond0: (slave erspan0): Opening slave failed [ 168.755994][ T5095] syz-executor: attempt to access beyond end of device [ 168.755994][ T5095] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.804749][ T5095] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 168.833087][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.102838][ T7229] bond0: (slave erspan0): Opening slave failed [ 169.167997][ T55] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 169.503957][ T7155] team0: Port device team_slave_0 added [ 169.555676][ T7155] team0: Port device team_slave_1 added [ 169.792440][ T35] hsr_slave_0: left promiscuous mode [ 169.857068][ T35] hsr_slave_1: left promiscuous mode [ 169.907578][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.935889][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.100354][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.567570][ T7242] can: request_module (can-proto-0) failed. [ 170.582532][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.638264][ T55] Bluetooth: hci5: command tx timeout [ 170.663145][ T35] veth1_macvtap: left promiscuous mode [ 170.704169][ T35] veth0_macvtap: left promiscuous mode [ 170.748363][ T35] veth1_vlan: left promiscuous mode [ 170.753733][ T35] veth0_vlan: left promiscuous mode [ 171.324644][ T35] team0 (unregistering): Port device team_slave_1 removed [ 171.350589][ T7237] loop1: detected capacity change from 0 to 32768 [ 171.367898][ T7237] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.270 (7237) [ 171.384577][ T35] team0 (unregistering): Port device team_slave_0 removed [ 171.406433][ T7237] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 171.428701][ T7237] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 171.438061][ T7237] BTRFS info (device loop1): using free-space-tree [ 171.458969][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.477429][ T7253] loop3: detected capacity change from 0 to 32768 [ 171.501702][ T7253] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.273 (7253) [ 171.537542][ T7253] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.565631][ T7253] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 171.740203][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.766536][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 171.778789][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.789388][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.804234][ T7268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.860782][ T7253] BTRFS info (device loop3): rebuilding free space tree [ 171.940123][ T7253] BTRFS info (device loop3): disabling free space tree [ 171.947101][ T7253] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.959280][ T7253] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.061405][ T29] audit: type=1804 audit(1721034256.542:26): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.270" name="/newroot/53/file0/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 172.123956][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.162386][ T29] audit: type=1800 audit(1721034256.642:27): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.273" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 172.182938][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.378491][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.412964][ T7307] bond0: (slave erspan0): Opening slave failed [ 172.442179][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.458371][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.485336][ T55] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 172.529169][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.658953][ T5100] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 172.671006][ T7155] hsr_slave_0: entered promiscuous mode [ 172.690403][ T7155] hsr_slave_1: entered promiscuous mode [ 172.717453][ T7155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.728396][ T55] Bluetooth: hci5: command tx timeout [ 172.762931][ T7155] Cannot create hsr debugfs directory [ 172.800733][ T5148] usb 3-1: USB disconnect, device number 11 [ 173.594393][ T7333] Zero length message leads to an empty skb [ 174.547225][ T7155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.747877][ T7155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.779234][ T55] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 174.815372][ T7344] bond0: (slave erspan0): Opening slave failed [ 174.835839][ T7155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.916705][ T7155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.145119][ T7326] loop0: detected capacity change from 0 to 32768 [ 175.183067][ T7326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.279 (7326) [ 175.204259][ T5106] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.245992][ T7326] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.282129][ T7326] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 175.395686][ T7326] BTRFS info (device loop0): using free-space-tree [ 175.511771][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.560908][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.624408][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.631773][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.726789][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 175.813716][ T7326] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 175.923516][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.930709][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.063551][ T5095] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.740546][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 177.074267][ T7407] fuse: Bad value for 'fd' [ 177.087303][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.393524][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.598472][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.655165][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.689518][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.720458][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.740606][ T7155] veth0_vlan: entered promiscuous mode [ 177.767532][ T7409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 177.789955][ T7155] veth1_vlan: entered promiscuous mode [ 177.900314][ T7155] veth0_macvtap: entered promiscuous mode [ 177.960840][ T7155] veth1_macvtap: entered promiscuous mode [ 178.033002][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.070265][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.111534][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.141313][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.169234][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.194346][ T7415] loop1: detected capacity change from 0 to 32768 [ 178.200956][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.214147][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.224935][ T7415] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.290 (7415) [ 178.241115][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.241384][ T7414] loop0: detected capacity change from 0 to 40427 [ 178.262898][ T7415] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.276135][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.286042][ T7415] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 178.300734][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 178.351356][ T7414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 178.361688][ T8] usb 4-1: USB disconnect, device number 7 [ 178.403588][ T7436] veth5: entered allmulticast mode [ 178.477121][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.487722][ T7415] BTRFS info (device loop1): rebuilding free space tree [ 178.508814][ T7415] BTRFS info (device loop1): disabling free space tree [ 178.510234][ T7414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.518356][ T7415] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.525799][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.590163][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.610861][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.636522][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.654626][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.675534][ T7415] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.698347][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.709053][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.722183][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.916440][ T7155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.676607][ T55] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 179.732337][ T7155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.776991][ T7155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.780175][ T29] audit: type=1800 audit(1721034264.252:28): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.290" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 179.789134][ T7155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.831359][ T7463] bond0: (slave erspan0): Opening slave failed [ 179.931499][ T5095] syz-executor: attempt to access beyond end of device [ 179.931499][ T5095] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.936799][ T29] audit: type=1800 audit(1721034264.412:29): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.290" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 180.042515][ T5095] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 180.352460][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 180.359358][ T55] Bluetooth: Wrong link type (-22) [ 180.364596][ T55] Bluetooth: Unknown BR/EDR signaling command 0xee [ 180.372100][ T55] Bluetooth: Wrong link type (-22) [ 181.548451][ T55] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 181.563149][ T55] Bluetooth: Wrong link type (-22) [ 181.569551][ T55] Bluetooth: hci3: link tx timeout [ 181.574730][ T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.671672][ T55] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 181.831972][ T7484] bond0: (slave erspan0): Opening slave failed [ 181.982139][ T6880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.996488][ T7491] fuse: Bad value for 'fd' [ 182.065667][ T6880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.228561][ T6877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.268363][ T6877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.472779][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 182.733258][ T7501] bond0: (slave erspan0): Opening slave failed [ 182.848522][ T55] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 183.423342][ T7508] fuse: Bad value for 'fd' [ 183.565470][ T5100] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.598182][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 184.100683][ T7524] bond0: (slave erspan0): Opening slave failed [ 184.474114][ T55] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 184.481230][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 184.491798][ T5098] Bluetooth: Wrong link type (-22) [ 184.497161][ T5098] Bluetooth: Unknown BR/EDR signaling command 0xee [ 184.540131][ T5098] Bluetooth: Wrong link type (-22) [ 184.545339][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 184.551918][ T5098] Bluetooth: Wrong link type (-22) [ 184.557327][ T5098] Bluetooth: hci1: link tx timeout [ 184.562527][ T5098] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.132886][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 185.141638][ T55] Bluetooth: Wrong link type (-22) [ 185.147086][ T55] Bluetooth: Unknown BR/EDR signaling command 0xee [ 185.153790][ T55] Bluetooth: Wrong link type (-22) [ 185.159344][ T55] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 185.165972][ T55] Bluetooth: Wrong link type (-22) [ 185.171945][ T55] Bluetooth: hci1: link tx timeout [ 185.177527][ T55] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.691149][ T7534] bond0: (slave erspan0): Opening slave failed [ 185.781811][ T55] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 186.228636][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.458179][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 186.497234][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 186.548515][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 186.568507][ T9] usb 5-1: Product: syz [ 186.576996][ T9] usb 5-1: Manufacturer: syz [ 186.588287][ T9] usb 5-1: SerialNumber: syz [ 186.619627][ T9] usb 5-1: config 0 descriptor?? [ 186.718227][ T5098] Bluetooth: hci1: command 0x0406 tx timeout [ 186.973656][ T7559] loop2: detected capacity change from 0 to 32768 [ 187.004056][ T7559] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.312 (7559) [ 187.134623][ T7559] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.156706][ T5148] usb 5-1: USB disconnect, device number 8 [ 187.183402][ T7559] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.234070][ T7567] bond0: (slave erspan0): Opening slave failed [ 187.304797][ T5098] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 187.735876][ T7561] loop1: detected capacity change from 0 to 32768 [ 187.748267][ T7561] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.313 (7561) [ 187.804548][ T7561] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 187.837519][ T7561] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 187.876032][ T7559] BTRFS info (device loop2): rebuilding free space tree [ 187.910230][ T7561] BTRFS info (device loop1): using free-space-tree [ 188.000435][ T7559] BTRFS info (device loop2): disabling free space tree [ 188.007389][ T7559] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.065823][ T7559] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.204952][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 188.211812][ T5098] Bluetooth: Wrong link type (-22) [ 188.217326][ T5098] Bluetooth: Unknown BR/EDR signaling command 0xee [ 188.227076][ T5098] Bluetooth: Wrong link type (-22) [ 188.232562][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 188.240586][ T5098] Bluetooth: Wrong link type (-22) [ 188.612684][ T29] audit: type=1800 audit(1721034273.102:30): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.312" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 188.651588][ T29] audit: type=1800 audit(1721034273.112:31): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.312" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 189.099602][ T7615] bond0: (slave erspan0): Opening slave failed [ 189.214130][ T5098] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 189.557458][ T29] audit: type=1804 audit(1721034274.042:32): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.313" name="/newroot/59/file0/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 189.656745][ T7622] fuse: Bad value for 'fd' [ 189.699769][ T7577] loop0: detected capacity change from 0 to 32768 [ 189.737259][ T7577] BTRFS: device /dev/loop0 (7:0) using temp-fsid b2d62eb7-6651-4e3c-b8a9-c2d3da5f18f4 [ 189.905134][ T7577] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.315 (7577) [ 189.922082][ T7626] bond0: (slave erspan0): Opening slave failed [ 189.981253][ T4498] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 190.071321][ T7577] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 190.084357][ T7577] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 190.141655][ T7577] BTRFS info (device loop0): using free-space-tree [ 190.501642][ T7648] loop3: detected capacity change from 0 to 64 [ 190.555909][ T5099] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.569104][ T5095] BTRFS info (device loop0): last unmount of filesystem b2d62eb7-6651-4e3c-b8a9-c2d3da5f18f4 [ 190.586203][ T5100] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 191.341323][ T4498] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 191.352874][ T4498] Bluetooth: Wrong link type (-22) [ 191.428462][ T4498] Bluetooth: Unknown BR/EDR signaling command 0xee [ 191.435169][ T4498] Bluetooth: Wrong link type (-22) [ 191.444981][ T4498] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 191.679906][ T5098] Bluetooth: hci2: command 0x0406 tx timeout [ 191.686178][ T7663] Bluetooth: hci0: command 0x0406 tx timeout [ 191.756024][ T4498] Bluetooth: Wrong link type (-22) [ 191.761491][ T4498] ================================================================== [ 191.769581][ T4498] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x67b/0x8d0 [ 191.777239][ T4498] Read of size 4 at addr ffff8880230b1010 by task kworker/u9:1/4498 [ 191.785217][ T4498] [ 191.787539][ T4498] CPU: 0 UID: 0 PID: 4498 Comm: kworker/u9:1 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 191.797872][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.807930][ T4498] Workqueue: hci1 hci_rx_work [ 191.812619][ T4498] Call Trace: [ 191.815899][ T4498] [ 191.818832][ T4498] dump_stack_lvl+0x241/0x360 [ 191.823557][ T4498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.828789][ T4498] ? __pfx__printk+0x10/0x10 [ 191.833387][ T4498] ? _printk+0xd5/0x120 [ 191.837549][ T4498] ? __virt_addr_valid+0x183/0x530 [ 191.842660][ T4498] ? __virt_addr_valid+0x183/0x530 [ 191.847788][ T4498] print_report+0x169/0x550 [ 191.852297][ T4498] ? __virt_addr_valid+0x183/0x530 [ 191.857410][ T4498] ? __virt_addr_valid+0x183/0x530 [ 191.862523][ T4498] ? __virt_addr_valid+0x45f/0x530 [ 191.867641][ T4498] ? __phys_addr+0xba/0x170 [ 191.872146][ T4498] ? l2cap_send_cmd+0x67b/0x8d0 [ 191.876999][ T4498] kasan_report+0x143/0x180 [ 191.881522][ T4498] ? l2cap_send_cmd+0x67b/0x8d0 [ 191.886397][ T4498] l2cap_send_cmd+0x67b/0x8d0 [ 191.891077][ T4498] ? skb_pull+0xc1/0x1e0 [ 191.895324][ T4498] l2cap_recv_frame+0x22f1/0x10840 [ 191.900450][ T4498] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 191.906617][ T4498] ? lock_release+0xbf/0xa30 [ 191.911226][ T4498] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 191.916613][ T4498] ? do_raw_spin_lock+0x14f/0x370 [ 191.921650][ T4498] ? __pfx_lock_release+0x10/0x10 [ 191.926692][ T4498] ? rcu_is_watching+0x15/0xb0 [ 191.931460][ T4498] ? lock_release+0xbf/0xa30 [ 191.936068][ T4498] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.942404][ T4498] ? __pfx_lock_release+0x10/0x10 [ 191.947440][ T4498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.953778][ T4498] ? rcu_is_watching+0x15/0xb0 [ 191.958555][ T4498] ? rcu_is_watching+0x15/0xb0 [ 191.963331][ T4498] ? lock_acquire+0xe3/0x550 [ 191.967932][ T4498] ? rcu_is_watching+0x15/0xb0 [ 191.972702][ T4498] ? lock_release+0xbf/0xa30 [ 191.977306][ T4498] ? __pfx___might_resched+0x10/0x10 [ 191.982635][ T4498] ? __pfx_lock_release+0x10/0x10 [ 191.987674][ T4498] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 191.993578][ T4498] ? rcu_is_watching+0x15/0xb0 [ 191.998364][ T4498] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 192.004264][ T4498] ? lock_release+0xbf/0xa30 [ 192.008866][ T4498] ? __mutex_unlock_slowpath+0x21d/0x750 [ 192.014507][ T4498] ? __pfx_lock_release+0x10/0x10 [ 192.019541][ T4498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.025626][ T4498] ? hci_conn_enter_active_mode+0x260/0x370 [ 192.031558][ T4498] ? l2cap_recv_acldata+0x490/0x1560 [ 192.036850][ T4498] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 192.042752][ T4498] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 192.048745][ T4498] hci_rx_work+0x50f/0xca0 [ 192.053199][ T4498] ? process_scheduled_works+0x945/0x1830 [ 192.058948][ T4498] process_scheduled_works+0xa2c/0x1830 [ 192.064524][ T4498] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.070538][ T4498] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 192.076113][ T4498] ? assign_work+0x364/0x3d0 [ 192.080724][ T4498] worker_thread+0x86d/0xd40 [ 192.085337][ T4498] ? __kthread_parkme+0x169/0x1d0 [ 192.090380][ T4498] ? __pfx_worker_thread+0x10/0x10 [ 192.095500][ T4498] kthread+0x2f0/0x390 [ 192.099577][ T4498] ? __pfx_worker_thread+0x10/0x10 [ 192.104695][ T4498] ? __pfx_kthread+0x10/0x10 [ 192.109287][ T4498] ret_from_fork+0x4b/0x80 [ 192.113733][ T4498] ? __pfx_kthread+0x10/0x10 [ 192.118441][ T4498] ret_from_fork_asm+0x1a/0x30 [ 192.123413][ T4498] [ 192.126437][ T4498] [ 192.128771][ T4498] Allocated by task 5098: [ 192.133118][ T4498] kasan_save_track+0x3f/0x80 [ 192.137812][ T4498] __kasan_kmalloc+0x98/0xb0 [ 192.142426][ T4498] __kmalloc_cache_noprof+0x19c/0x2c0 [ 192.147805][ T4498] l2cap_conn_add+0xa9/0x8e0 [ 192.152419][ T4498] l2cap_connect_cfm+0x136/0x1220 [ 192.157466][ T4498] hci_remote_features_evt+0x536/0xaf0 [ 192.163060][ T4498] hci_event_packet+0xac2/0x1540 [ 192.168191][ T4498] hci_rx_work+0x3e8/0xca0 [ 192.172619][ T4498] process_scheduled_works+0xa2c/0x1830 [ 192.178190][ T4498] worker_thread+0x86d/0xd40 [ 192.182808][ T4498] kthread+0x2f0/0x390 [ 192.186913][ T4498] ret_from_fork+0x4b/0x80 [ 192.191344][ T4498] ret_from_fork_asm+0x1a/0x30 [ 192.196123][ T4498] [ 192.198454][ T4498] Freed by task 5098: [ 192.202430][ T4498] kasan_save_track+0x3f/0x80 [ 192.207136][ T4498] kasan_save_free_info+0x40/0x50 [ 192.212185][ T4498] poison_slab_object+0xe0/0x150 [ 192.217297][ T4498] __kasan_slab_free+0x37/0x60 [ 192.222063][ T4498] kfree+0x149/0x360 [ 192.225971][ T4498] l2cap_connect_cfm+0x11f/0x1220 [ 192.231004][ T4498] hci_conn_failed+0x1f6/0x340 [ 192.235808][ T4498] hci_abort_conn_sync+0x583/0xde0 [ 192.240929][ T4498] hci_cmd_sync_work+0x22b/0x400 [ 192.245915][ T4498] process_scheduled_works+0xa2c/0x1830 [ 192.251484][ T4498] worker_thread+0x86d/0xd40 [ 192.256129][ T4498] kthread+0x2f0/0x390 [ 192.260216][ T4498] ret_from_fork+0x4b/0x80 [ 192.264681][ T4498] ret_from_fork_asm+0x1a/0x30 [ 192.269469][ T4498] [ 192.271812][ T4498] Last potentially related work creation: [ 192.277523][ T4498] kasan_save_stack+0x3f/0x60 [ 192.282236][ T4498] __kasan_record_aux_stack+0xac/0xc0 [ 192.287705][ T4498] insert_work+0x3e/0x330 [ 192.292044][ T4498] __queue_work+0xc8b/0xf50 [ 192.296555][ T4498] call_timer_fn+0x18e/0x650 [ 192.301152][ T4498] __run_timer_base+0x695/0x8e0 [ 192.306012][ T4498] run_timer_softirq+0xb7/0x170 [ 192.310884][ T4498] handle_softirqs+0x2c4/0x970 [ 192.315664][ T4498] __irq_exit_rcu+0xf4/0x1c0 [ 192.320302][ T4498] irq_exit_rcu+0x9/0x30 [ 192.324556][ T4498] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 192.330201][ T4498] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.336191][ T4498] [ 192.338527][ T4498] Second to last potentially related work creation: [ 192.345105][ T4498] kasan_save_stack+0x3f/0x60 [ 192.349793][ T4498] __kasan_record_aux_stack+0xac/0xc0 [ 192.355174][ T4498] insert_work+0x3e/0x330 [ 192.359508][ T4498] __queue_work+0xb66/0xf50 [ 192.364018][ T4498] queue_work_on+0x1c2/0x380 [ 192.368622][ T4498] l2cap_connect_cfm+0xec2/0x1220 [ 192.373655][ T4498] hci_remote_features_evt+0x536/0xaf0 [ 192.379130][ T4498] hci_event_packet+0xac2/0x1540 [ 192.384073][ T4498] hci_rx_work+0x3e8/0xca0 [ 192.388509][ T4498] process_scheduled_works+0xa2c/0x1830 [ 192.394069][ T4498] worker_thread+0x86d/0xd40 [ 192.398666][ T4498] kthread+0x2f0/0x390 [ 192.402736][ T4498] ret_from_fork+0x4b/0x80 [ 192.407160][ T4498] ret_from_fork_asm+0x1a/0x30 [ 192.411949][ T4498] [ 192.414275][ T4498] The buggy address belongs to the object at ffff8880230b1000 [ 192.414275][ T4498] which belongs to the cache kmalloc-1k of size 1024 [ 192.428336][ T4498] The buggy address is located 16 bytes inside of [ 192.428336][ T4498] freed 1024-byte region [ffff8880230b1000, ffff8880230b1400) [ 192.442136][ T4498] [ 192.444460][ T4498] The buggy address belongs to the physical page: [ 192.450877][ T4498] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x230b0 [ 192.459647][ T4498] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 192.468150][ T4498] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 192.476142][ T4498] page_type: 0xfdffffff(slab) [ 192.480836][ T4498] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 192.489426][ T4498] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 192.498010][ T4498] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 192.506684][ T4498] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 192.515372][ T4498] head: 00fff00000000003 ffffea00008c2c01 ffffffffffffffff 0000000000000000 [ 192.524048][ T4498] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 192.532734][ T4498] page dumped because: kasan: bad access detected [ 192.539251][ T4498] page_owner tracks the page as allocated [ 192.544965][ T4498] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4764, tgid 4764 (rcS), ts 42108371300, free_ts 42105440704 [ 192.564775][ T4498] post_alloc_hook+0x1f3/0x230 [ 192.569583][ T4498] get_page_from_freelist+0x2ccb/0x2d80 [ 192.575136][ T4498] __alloc_pages_noprof+0x256/0x6c0 [ 192.580340][ T4498] alloc_slab_page+0x5f/0x120 [ 192.585030][ T4498] allocate_slab+0x5a/0x2f0 [ 192.589547][ T4498] ___slab_alloc+0xcd1/0x14b0 [ 192.594238][ T4498] __slab_alloc+0x58/0xa0 [ 192.598581][ T4498] __kmalloc_noprof+0x25a/0x400 [ 192.603522][ T4498] tomoyo_init_log+0x1b3e/0x2050 [ 192.608466][ T4498] tomoyo_supervisor+0x38a/0x11f0 [ 192.613497][ T4498] tomoyo_env_perm+0x178/0x210 [ 192.618263][ T4498] tomoyo_find_next_domain+0x1384/0x1cf0 [ 192.623897][ T4498] tomoyo_bprm_check_security+0x115/0x180 [ 192.629630][ T4498] security_bprm_check+0x65/0x90 [ 192.634575][ T4498] bprm_execve+0xa56/0x1770 [ 192.639090][ T4498] do_execveat_common+0x553/0x700 [ 192.644114][ T4498] page last free pid 4764 tgid 4764 stack trace: [ 192.650524][ T4498] free_unref_page+0xd22/0xea0 [ 192.655307][ T4498] __put_partials+0xeb/0x130 [ 192.659918][ T4498] put_cpu_partial+0x17c/0x250 [ 192.664690][ T4498] __slab_free+0x2ea/0x3d0 [ 192.669117][ T4498] qlist_free_all+0x9e/0x140 [ 192.673716][ T4498] kasan_quarantine_reduce+0x14f/0x170 [ 192.679192][ T4498] __kasan_slab_alloc+0x23/0x80 [ 192.684048][ T4498] kmem_cache_alloc_noprof+0x135/0x2a0 [ 192.689513][ T4498] getname_flags+0xb7/0x540 [ 192.694022][ T4498] __x64_sys_execve+0x78/0xb0 [ 192.698708][ T4498] do_syscall_64+0xf3/0x230 [ 192.703218][ T4498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.709113][ T4498] [ 192.711433][ T4498] Memory state around the buggy address: [ 192.717059][ T4498] ffff8880230b0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.725125][ T4498] ffff8880230b0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.733213][ T4498] >ffff8880230b1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.741275][ T4498] ^ [ 192.745866][ T4498] ffff8880230b1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.753951][ T4498] ffff8880230b1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.762031][ T4498] ================================================================== [ 193.273890][ T4498] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.281205][ T4498] CPU: 0 UID: 0 PID: 4498 Comm: kworker/u9:1 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 193.291638][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 193.301893][ T4498] Workqueue: hci1 hci_rx_work [ 193.306580][ T4498] Call Trace: [ 193.309866][ T4498] [ 193.312826][ T4498] dump_stack_lvl+0x241/0x360 [ 193.317775][ T4498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.323012][ T4498] ? __pfx__printk+0x10/0x10 [ 193.327653][ T4498] ? rcu_is_watching+0x15/0xb0 [ 193.332477][ T4498] ? vscnprintf+0x5d/0x90 [ 193.336838][ T4498] panic+0x349/0x870 [ 193.340815][ T4498] ? check_panic_on_warn+0x21/0xb0 [ 193.345963][ T4498] ? __pfx_panic+0x10/0x10 [ 193.350404][ T4498] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 193.356392][ T4498] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 193.362826][ T4498] check_panic_on_warn+0x86/0xb0 [ 193.367771][ T4498] ? l2cap_send_cmd+0x67b/0x8d0 [ 193.372629][ T4498] end_report+0x77/0x160 [ 193.376879][ T4498] kasan_report+0x154/0x180 [ 193.381501][ T4498] ? l2cap_send_cmd+0x67b/0x8d0 [ 193.386363][ T4498] l2cap_send_cmd+0x67b/0x8d0 [ 193.391050][ T4498] ? skb_pull+0xc1/0x1e0 [ 193.395311][ T4498] l2cap_recv_frame+0x22f1/0x10840 [ 193.400451][ T4498] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 193.406629][ T4498] ? lock_release+0xbf/0xa30 [ 193.411236][ T4498] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 193.416613][ T4498] ? do_raw_spin_lock+0x14f/0x370 [ 193.421654][ T4498] ? __pfx_lock_release+0x10/0x10 [ 193.426718][ T4498] ? rcu_is_watching+0x15/0xb0 [ 193.431507][ T4498] ? lock_release+0xbf/0xa30 [ 193.436112][ T4498] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 193.442452][ T4498] ? __pfx_lock_release+0x10/0x10 [ 193.447491][ T4498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.453863][ T4498] ? rcu_is_watching+0x15/0xb0 [ 193.458638][ T4498] ? rcu_is_watching+0x15/0xb0 [ 193.463407][ T4498] ? lock_acquire+0xe3/0x550 [ 193.468012][ T4498] ? rcu_is_watching+0x15/0xb0 [ 193.472784][ T4498] ? lock_release+0xbf/0xa30 [ 193.477390][ T4498] ? __pfx___might_resched+0x10/0x10 [ 193.482699][ T4498] ? __pfx_lock_release+0x10/0x10 [ 193.487759][ T4498] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 193.493668][ T4498] ? rcu_is_watching+0x15/0xb0 [ 193.498453][ T4498] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 193.504408][ T4498] ? lock_release+0xbf/0xa30 [ 193.509022][ T4498] ? __mutex_unlock_slowpath+0x21d/0x750 [ 193.514693][ T4498] ? __pfx_lock_release+0x10/0x10 [ 193.519742][ T4498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.525736][ T4498] ? hci_conn_enter_active_mode+0x260/0x370 [ 193.531650][ T4498] ? l2cap_recv_acldata+0x490/0x1560 [ 193.536944][ T4498] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 193.542865][ T4498] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 193.549031][ T4498] hci_rx_work+0x50f/0xca0 [ 193.553459][ T4498] ? process_scheduled_works+0x945/0x1830 [ 193.559193][ T4498] process_scheduled_works+0xa2c/0x1830 [ 193.564772][ T4498] ? __pfx_process_scheduled_works+0x10/0x10 [ 193.570770][ T4498] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 193.576328][ T4498] ? assign_work+0x364/0x3d0 [ 193.580936][ T4498] worker_thread+0x86d/0xd40 [ 193.585568][ T4498] ? __kthread_parkme+0x169/0x1d0 [ 193.590626][ T4498] ? __pfx_worker_thread+0x10/0x10 [ 193.595757][ T4498] kthread+0x2f0/0x390 [ 193.599841][ T4498] ? __pfx_worker_thread+0x10/0x10 [ 193.605063][ T4498] ? __pfx_kthread+0x10/0x10 [ 193.609662][ T4498] ret_from_fork+0x4b/0x80 [ 193.614097][ T4498] ? __pfx_kthread+0x10/0x10 [ 193.618697][ T4498] ret_from_fork_asm+0x1a/0x30 [ 193.623490][ T4498] [ 193.626862][ T4498] Kernel Offset: disabled [ 193.631191][ T4498] Rebooting in 86400 seconds..