last executing test programs: 1m26.523118178s ago: executing program 4 (id=173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x401, 0xeffffffd}, 0x10) write(r1, &(0x7f0000000040)="240000001a005f0214f9f507000909000a000000000000000000000004001e0000000000", 0x24) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f"], 0x58}}, 0x0) 1m25.215950841s ago: executing program 4 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000003d000900000000000000000001000000040000001c000180180010800c000f00090000000000005008000f00e0000001080002"], 0x3c}}, 0x0) 1m24.077878973s ago: executing program 4 (id=181): r0 = socket(0x1, 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @private0, 0x2}, 0x1c) connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffff000003119078000004c0ac"], 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x4, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0x6, 0x2, 0x9, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x9, 0x80000001, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x3, 0x7, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xffbffffd, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0xafba, 0x2, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xffffffff, 0x4, 0x4c, 0x7, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x20583c, 0x6, 0xb, 0x4, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xadd, 0x6, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x3, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x10000, 0x2, 0x5, 0xc, 0x3ff, 0xb0f, 0x22, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xf4, 0x4, 0xe, 0xfffffffc, 0x6, 0x3, 0x800, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0d787d, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x5, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0xd, 0xcc, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x5, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10004, &(0x7f0000000080)=ANY=[], 0x1, 0x489, &(0x7f0000000580)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO") syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0xa00400, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0xfffffffffffffffd, 0x29}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={@loopback, 0x1, 0x0, 0x60, 0x0, [{@broadcast}, {@local}, {@remote}, {@initdev}, {@loopback}, {@empty}]}}) userfaultfd(0x80001) 1m21.983160546s ago: executing program 4 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000000)='./file0\x00', 0x23) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x9e5, 0x400, 0x98, 0x46e, 0x2, 0x1, 0x0, 0x0, 0x80, 0x90}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x9e5, 0x400, 0x98, 0x46e, 0x2, 0x1, 0x0, 0x0, 0x80, 0x90}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x0, {0x5, 0x2, 0x6, 0x0, 0x0, 0x0, {0x40, 0x1, 0x6, 0xfff7, 0xffe, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x1) (async) lseek(r2, 0x100, 0x1) getdents64(r2, 0x0, 0xfffffffffffffff4) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5587, &(0x7f0000002040)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) clock_gettime(0x4, &(0x7f0000000180)) openat$cgroup_ro(r3, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000000080)={0x14}, 0x14) 1m18.555862776s ago: executing program 4 (id=190): r0 = socket(0x26, 0x800, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={[{@umask}, {}, {@nls={'nls', 0x3d, 'iso8859-2'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@part={'part', 0x3d, 0x6}}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") process_vm_readv(0x0, &(0x7f0000002e40)=[{&(0x7f00000006c0)=""/267, 0xfe}], 0x10000000000000b6, &(0x7f0000002c40), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000f40)={0xa, "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"}) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x2, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044044}, 0x400c804) r7 = getegid() r8 = getgid() ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000003c0)={0x100000001, 0x40, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getgroups(0x2, &(0x7f0000000300)=[r7, r8]) 1m17.137505209s ago: executing program 4 (id=193): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) 1m13.86117623s ago: executing program 32 (id=193): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) 55.667820974s ago: executing program 2 (id=240): syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 54.723899699s ago: executing program 2 (id=245): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000cc0), 0x1, 0xc3c, &(0x7f0000000d00)="$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") 52.711352727s ago: executing program 2 (id=248): r0 = socket(0x1, 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @private0, 0x2}, 0x1c) connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffff000003119078000004c0ac"], 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x4, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0x6, 0x2, 0x9, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x9, 0x80000001, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x3, 0x7, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xffbffffd, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0xafba, 0x2, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xffffffff, 0x4, 0x4c, 0x7, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x20583c, 0x6, 0xb, 0x4, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xadd, 0x6, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x3, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x10000, 0x2, 0x5, 0xc, 0x3ff, 0xb0f, 0x22, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xf4, 0x4, 0xe, 0xfffffffc, 0x6, 0x3, 0x800, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0d787d, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x5, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0xd, 0xcc, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x5, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10004, &(0x7f0000000080)=ANY=[], 0x1, 0x489, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0xa00400, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0xfffffffffffffffd, 0x29}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 51.508678506s ago: executing program 2 (id=251): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f0000001280)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae840099cb4d037cc46b3980928a506f800befa5037ecc4c128dc83d62f8d7ede6c05d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c5", @ANYRESOCT, @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x403, 0x1c1480) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xffffff3b) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x2, 0xfffffffa}, {0x3, 0x1003ff}, 0x0, 0x8}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000078000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 50.387080527s ago: executing program 2 (id=252): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@local, 0x400}, 0x400, "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"}, 0x418}) 47.100243835s ago: executing program 2 (id=257): r0 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x470001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x8000, 0xaa}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r5, 0x627, 0x4c1, 0x9, 0x0, 0x18) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x100005, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10832) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r4, 0x0) unshare(0x22020600) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0xcac3, 0x0, 0x0, 0x0) 42.829519042s ago: executing program 33 (id=257): r0 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x470001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x8000, 0xaa}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r5, 0x627, 0x4c1, 0x9, 0x0, 0x18) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x100005, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10832) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r4, 0x0) unshare(0x22020600) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0xcac3, 0x0, 0x0, 0x0) 16.034685149s ago: executing program 1 (id=317): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2, 0xb, 0x4c, 0x9, 0x4, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_ident={0x2, 0xb, 0x0, 0x0, 0x1}]}, 0x20}}, 0x4008040) syz_usb_connect(0x0, 0xc6d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000341374f40ac057302976b0102030109025b0c04039c00060904d8490e03f502"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x10000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) 13.359939354s ago: executing program 3 (id=325): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000040, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x12020, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) 12.941332841s ago: executing program 1 (id=326): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000006c0)='netlink_extack\x00', r1}, 0x18) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000001c0)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x440d0) 12.027026522s ago: executing program 1 (id=329): syz_usb_connect(0x2, 0x6b, &(0x7f0000000000)=ANY=[], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x6b, &(0x7f0000000000)=ANY=[], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) (async) 11.820706745s ago: executing program 6 (id=258): r0 = socket(0x26, 0x800, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={[{@umask}, {}, {@nls={'nls', 0x3d, 'iso8859-2'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@part={'part', 0x3d, 0x6}}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") process_vm_readv(0x0, &(0x7f0000002e40)=[{&(0x7f00000006c0)=""/267, 0xfe}], 0x10000000000000b6, &(0x7f0000002c40), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000f40)={0xa, "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"}) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x2, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044044}, 0x400c804) r7 = getegid() r8 = getgid() ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000003c0)={0x100000001, 0x40, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getgroups(0x2, &(0x7f0000000300)=[r7, r8]) 11.282798877s ago: executing program 5 (id=331): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x29, {0x29, 0x24, "0ed53173fbfb0460fc3022952bf09e3e8728aae019de94bf4d982ca93f3e197e55e5cd7535ca2a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000100)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xd0, "811bc3903a2218d83a8f5f381f8b5563"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0e5d980f0eb9c05beb1be3f79c1ba2cf"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x5, 0xfb, 0x834, 0xe6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x40, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0021cf9e3632de2a0b33205b6807b261"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x8, 0xfd, 0xd, 0xcc}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0xc, 0xc0, 's\v> ', "185567f6"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0x1, 0x2, 0x6, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x3, 0x69, "935cc7b719b35772e48591b6ccd69a504dc79333c0f6fc0bc921a890c007a9a0b6c7c73c00f2ed020259eb1df285dc6e2fbf4a8b57a0c06f4311bd0393d5460391c510817221385411c22c42b81d6f17c4660566dea0e5b6cc7080b7aee7c966f20c0de866ba8a6f83"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1000, 0x40, [0xf000]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x5e}, &(0x7f0000000440)={0x40, 0xb, 0x2, "05ce"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x19, 0x2, "c54d"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0xe8}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 10.645793115s ago: executing program 3 (id=333): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) 10.638734898s ago: executing program 6 (id=334): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9.876317364s ago: executing program 6 (id=336): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = semget(0x1, 0x5, 0x6b4) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000680)=""/148) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x5668a5a41429f6ce) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x40010) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4000000) 9.637423386s ago: executing program 0 (id=337): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffff7c00, 0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket(0x8, 0xa, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 9.509905997s ago: executing program 3 (id=338): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 8.973981571s ago: executing program 6 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4605030908770000000000000003000600155eef2e5a020002380000000b03010008000000e10a200007"], 0x98) close(r0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x37, 0x67, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x7fffffff}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x65, 0x31, 0x39, 0x70, 0x36, 0x34]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) r2 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000841) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000003c0)={0xafd, 0x7000000000000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000100)={[{@grpquota}, {@bsdgroups}]}, 0xff, 0x98b5, &(0x7f0000009780)="$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") 8.74078323s ago: executing program 5 (id=340): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) (async, rerun: 64) r2 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 64) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28) (async, rerun: 32) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x181c04, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRESHEX=0x0, @ANYRES16=r2], 0x1, 0x29b, &(0x7f00000004c0)="$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") (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) link(&(0x7f0000000200)='./file1\x00', 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1, r4}, 0x14) 8.560151348s ago: executing program 3 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000f4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a2c000000050a03000000000000000000020000f00c00024000000000000000010900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) 8.439719875s ago: executing program 0 (id=342): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nobh}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") 8.138650493s ago: executing program 1 (id=343): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000040, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x12020, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) 7.519870855s ago: executing program 5 (id=344): r0 = socket(0x26, 0x800, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={[{@umask}, {}, {@nls={'nls', 0x3d, 'iso8859-2'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@part={'part', 0x3d, 0x6}}]}, 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKvHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//9tSfWT") process_vm_readv(0x0, &(0x7f0000002e40)=[{&(0x7f00000006c0)=""/267, 0xfe}], 0x10000000000000b6, &(0x7f0000002c40), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000f40)={0xa, "f7b681e1265a927e4586b90d8bcbff636dfc5f5e359cdb87c2d2961a3f75bacbee072346fffab992dfd7f227de22072e76cf02fe611aff0cb4f0d289633fa2898eb73bb39c4bc56f41f6a1bcf61494acbd3ce6553cb803c505e512d07dcdbde979d9953a7226729b1f28dc1f970e06c30900fb73234930c218e2fa4fa438ea9ff26bd0fbdc6f360290355864cad116cbc06590be225b7eb9bb0feb82dfed5234dee339568eb8eb7d0eba1356cce6088dc92648cb2d41dc2950a6ee1019527a65dacabf5e1cb1bff1b80f48984d4080afa2871b1f59877d3fd691fc0eacf8f1a73cbc798f72779dd4cd74d9a789ad5f1ef04d684c108935152fa6619890433e7034f4b86c3ab32461c4d4938a41824b45fdddd4dc1249f238fe4126ca58d9c59a3de0c16579b9ea095b372eef008bf9b4836f8fadabc50e34142cc00338d769dff3ea52425f307d32090571287faf147bcddac52ac6d21fdf11f03de0d4eaebce3609280f24521cec83bf69a78bb8fe9e7e7386f780c75c4430ab0a888aaff64e6d6006e8bf230e0b1c3fb5178dffb9371ff63b5cc06ef530045a21a82fb593b978a63437dc4ed10bb4eb537c3c367af33daf4f64184f3b73fd105874a7ec740a6a64791199923b54e058ae189db95b5ac9e442b004ee59c19b6416ace2829d101da091751d980ce50669f12b8a47d401594927b9ed98c6c4ad059e710d0353f2"}) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x2, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044044}, 0x400c804) r7 = getegid() r8 = getgid() ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000003c0)={0x100000001, 0x40, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getgroups(0x2, &(0x7f0000000300)=[r7, r8]) 7.364216252s ago: executing program 3 (id=345): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f0000000180), 0x4, 0x5eb, &(0x7f0000000c00)="$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") syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402", @ANYRESOCT=0x0], 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./bus\x00') 5.510835603s ago: executing program 0 (id=346): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x2400c000) 5.388945858s ago: executing program 6 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=0x0], 0xec, 0x5a84, &(0x7f0000011bc0)="$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") syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1338720402068829527010203010902240001020000100904d30002be79e8000905040200020500ff090582"], 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000280)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x401}}, {@space_cache_v1}, {@fatal_errors_bug}, {@datacow}, {@ssd}, {@clear_cache}, {@nobarrier}, {@clear_cache}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@noflushoncommit}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14967e, 0x20) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)='\n', 0x1}], 0x1, 0x10, 0xc, 0xa) 4.949829909s ago: executing program 5 (id=348): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) 4.510956611s ago: executing program 0 (id=349): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 4.332179637s ago: executing program 1 (id=350): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x30, {0x30, 0x24, "0ed53173fbfb0460fc3022952bf09e3e8728aae019de94bf4d982ca93f3e197e55e5cd7535ca2ab95c8681944b97"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000100)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xd0, "811bc3903a2218d83a8f5f381f8b5563"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0e5d980f0eb9c05beb1be3f79c1ba2cf"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x5, 0xfb, 0x834, 0xe6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x40, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0021cf9e3632de2a0b33205b6807b261"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x8, 0xfd, 0xd, 0xcc}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0xc, 0xc0, 's\v> ', "185567f6"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0x1, 0x2, 0x6, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x3, 0x69, "935cc7b719b35772e48591b6ccd69a504dc79333c0f6fc0bc921a890c007a9a0b6c7c73c00f2ed020259eb1df285dc6e2fbf4a8b57a0c06f4311bd0393d5460391c510817221385411c22c42b81d6f17c4660566dea0e5b6cc7080b7aee7c966f20c0de866ba8a6f83"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1000, 0x40, [0xf000]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x5e}, &(0x7f0000000440)={0x40, 0xb, 0x2, "05ce"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x19, 0x2, "c54d"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0xe8}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 3.204810622s ago: executing program 3 (id=351): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x1}, &(0x7f00000000c0)=0x8) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f00000001c0)={[{@adinicb}, {@partition={'partition', 0x3d, 0x1}}, {@utf8}, {@uid}, {@dmode={'dmode', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@gid_ignore}, {@fileset={'fileset', 0x3d, 0x8bd}}, {@adinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@gid_forget}, {@uid}, {@session}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FldxWTJwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZsOhh9AYAOCBuDz2tVNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+/LzQ+e7eak98wH199pn49WxKxcbL83enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvnZr8vr1hcaZ585u2nx74L3+J44PXBh65uTT3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORopnv/+z1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnz32Fq6mt/6UZ2HL1UDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/ijilUjx87dPxLV8n6nuNV+MeKXMH0a8WeaLEan8YpyLeHeb7xGPploU8efl9b+wliar+0H3vnLp642vzlyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcRnIsXL//ZH1bjiqMalH7sw9PsDv9w7ZvypD9lPWfa5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPI8UL75xIy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIt6PFN/55lqKFBHNiIno5Er/w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDqT0X8IFI0/qB5Z10tIlL1b8eJ8pdz0Txc5iejOVTmi9G8mLNVZa357YfQfnanLxXxk0jRX3/rzgXP17+v8+nO1yDe/NbGp8/WOnmou3Hgvf4njh+7MDTy+ad2Wk7bNWDwUnvm1u3G+PDIyFjP6lo++id71g3k4xZ703UiYuH1N15rTU9Pzd//QvkVuM/q3Su5i6M/yIVUe2SaamEvFqJ2IJrxcPq+Sf1h3JzYd+Xz/91I8dvv/Hv3gd95/tfjlzqf7jzh4xd/svH8f2Hrju7x+V/bWi8//8snwXbP/yd71r2QfzfSV4uoL96c6zseUV94/Y2T7ZutG1M3pmbOnTr1laGhr5w91Xc4on69PT3Vs7QnpwsAAAAAAAAAAAAAAADgwUlF/G6kaP1kLTUi4nY1XmvgwtAzJ58+FIeq8Vabxm2/OnblYuOl2Ztz81MLC1OTjfGZ9rXZyal7PVy9Gu41PjyyL535UEf2uf1H6i/Nzr0+377xh4vbbj9av3h1YXG+dW37zXEkiohm75rBqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EimvnGukLeV0e/791hP+m8f9LW3e0h+P/P390Y/zfJ3qKlsdMqYhfRIrf+oun4gtVO4/GXecsl/ubSDF4/nO5XBwuy3Xb0HmvQGdkYFn2fyLFP7y/uWx3POSTG2VPf6ST+wgor/+xSPGDP/te/Hpet/n9D9tf/6Nbd7RP73/4VM+6o5veV7DrrpOv/8lI8eKTb8VvVGv+7wPf/9F9Y8OJTuGN93Ps0/X/1Z51A/m4v7lXnQcAAAAAAAAAAHiE9aUi/jZS/Giklp7P6+7l7/9Nbt3RPv39r0/3rJvcm/mKPnRh1ycVAAAAAA6IvlTETyPFjcW37oyh3jz+u2f85+9sjP8cTlu2Vn/O9yvVewP28s//eg3k407svtsAAAAAAAAAAAAAAAAAAABwoKRUxPN5PvWJajz/5I7zqa9Eipf/69lcLh0vy3XngR+ofq1fnp05eXF6erYei62r01ONsbnWtamy7qcixdpffy7XLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzknfnA6+vrEafLsp+IFP/595vL5qmp89zR1X7PlGX/KlJ845+2L3t8o+zZsuz3IsWPv9Holj1alu2+H/XTG2WfuzZb7MNVAQAAAAAAAAAAAAAAAAAA4OOmLxXxp5Hiv28u3xnLn+f/7+v5WHnzWz3z/W9xu5rnf6Ca/3+n5fuZ/796r8DSTkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3ogUc5fX0kp/+bmjfqk9c+v2+PDI9tWOpKrmoap8+VM/febsuS8/P3S+mx9cf699Jl4du3Kx8dLszbn5qYWFqcnG+Ez72uzk1D3vYbf1txqsTkDj5mu3Jq9fX2icee7sps23B97rf+L4wIWhZ04+3S07PjwyMtZTptZ330e/S9ph/eEo4i8jxbPf/1n6UX9EEbs/Fx/y3dlvR6pODFadGB8eqToy3W7NLJYbR7snooho9FRqds/RA7gWu9KMWCqbXzZ4sOze2FxrvnV1eqox2ppfbC+2Z2dGU6e1ZX8aUcT5FLEcEav9d++uL4p4LVJ899ha+uf+iEPd8/Cly2NfO3Vm53YU+9jHe1C2s9EXsVw8AtfsAOuPIv4xUvz87RPxL/0Rtej8xBcjXinzhxFvRud6p/KLcS7i3W2+RzyaalHE/5bX/8Jaeru/vB907yuXvt746sz12Z6y3fvKI/98eJAO+L2pHkX8uLrjr6V/9d81AAAAAAAAAAAAAAAAwAFSxK9FihfeOZGq8cF3xhS3Z240rrSuTneG9XXH/nXHTK+vr683UiebOSdyLuVczrmSczVnFLl+zmaZ9fX1ifx5KedyzpWcqznjUK6fs5lzIudSzuWcKzlXc0Yt18/ZzDmRcynncs6VnKs544CM3QMAAAAAAAAAAAAAAAAAAB4vRfVPiu98cy2t93fml56ITq6YD/Sx9/8BAAD//9kg9g0=") symlink(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) 3.030296041s ago: executing program 5 (id=352): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804010, &(0x7f0000000e80)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6b4, &(0x7f0000000500)="$eJzs3c1vHGcdB/DvrDd2Ni0hTZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXaREyHi8HrtoX9AOeSCOCFx4hKpcOBCb72BL0hISFzKAXNh0c7Orte7643dNl5bfD7R7DzzPM8885vfvOyLFU2A/1tXz6X+KEWunnt1rbW88XB2aePh7O12+bV6kqkk60mrWEtS/LvZbH6QXEmK7jBF33zAe4tzb3z08cbf20v1air710at16fqt95Xvd6pm04yUc0/hW3jXfvU4xXdyK8kOVvNYeyOJGlu84M/Pd1t6dEYtvbRfYkReLKK9vvmgBPJsfaF3r4BVO+8tX0Nbg+mdtmv/xMEAAAAHDbld+D6QPW2ms9vZjNrxfF9DAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOtfWt5/8X1VTrlKdTVM//z2RVl6p8sLy4t+6PnlQcAAAAAAAAALCPXtzMZtZyvLPcLMq/+b9ULpwqX5/KO1nJQpZzPmuZz2pWs5yLSU70DDS5Nr+6OtVZGrXmpWFrLl96TKCdoRufwU4DAAAAAAAAwGFR7xT++rieP8nVrb//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQVAkE+1Zigc91SdSqyc5mmSyVbGefNgpH2aPxh0AAAAA7IOpZDNrOd5ZbhY5leS58jeAo3knd7KaxaxmKQu5Xv4u0P7WX9t4OLu08XD2dmsaHPdb/9xTGOWIaf/2MHzLZ8oejdzIYllzPtfyVpZyPbVyzZYzVTydUfvietCKqfhm5ZXdRXa9mrf2/N1qPuD+nnZ2J3v8MeVEmZEj7YxMJDNVbK1sPNM5MsOP0B6PzrYtZSEXU+sGe6pvS5Pbd2Z7zreGrI3a3rG/3emWf7FTzseinYn/NtsWcqnn7HtudM6TL//uN9+fqcoHZ5d2Z6KaN8vXxuA5MduTied3k4mbS3du3byxcu6wZWLATJmJ093lq/luvpdzmc7rWc5ifpj5rGYh0/lOWZqvDn7Rc8nvkKkr25Zef1wkk9UZ2j5Ye4vppXLd41nMa3kr17OQl8t/l3Ixr+RyLmeu5wifHn2Ey6u+NnjVl5qfGxr82a9UhUaSX1bzg6GV12d68rp11s+U+X5mW81Wlk7uIktD7o2j1L9YFVrb+OnjbqT7qj8TF3sy8ezoTPyqvK2sLN25tXxz/u3dbe7ku1WhdR39PJk+ODeS1vlysnWwyqWpbWdHq+3Zbtv2fLXaTnXbagNtp/P71OudrSxmfccrdbL6DDc40qWy7fmhbbNl25metu7nrSPpft4C4MA79tVjk41/NP7ceL/xs8bNxqtHvz319akXJnPkD0e+UZ+Z+FLtheK3eT8/3vr+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHIrd+/dml9aWljuKzSbzfsfDm/aZaHzvJpPuHp/ofNUqF10zvRfnmp1HdI0keb9HZqeVOELTyf7ta2DW/hPs9msaood+vz6j/2JmsqYUlc95695IFI3psLYbknAPrmwevvtCyt3731t8fb8mwtvLtyZu3x5bmbu8suzF24sLi3MtF/HHSXwJKzcvXeq/aY/7kgAAAAAAAAAAACA3fqM/8/A+rCmce8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLhdPZf6oxS5OHN+prW88XB2qTV1yls960lqSYofJcUHyZW0p5zoGa7YaTvvLc698dHHG/9qtlXjlf1ro9YbYmKwar2aMl21TycP9jDkyPGuVfORilG7UHT3sJWws53Ewbj9LwAA//8wChHT") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f00000000c0)="bd", 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r2, 0x0, 0xb0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x2, 0x0, 0x2604, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xbffefffe, 0x3}, 0x48) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002c000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0b0004809a6b64086860300005e6b1a92b5ab15dc144efde000180a5000000"], 0x2c}], 0x1}, 0x0) mprotect(&(0x7f0000c9f000/0x2000)=nil, 0x2000, 0x200000e) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) recvfrom$packet(r5, &(0x7f0000000180)=""/117, 0x75, 0x1, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @random="9c060073cbaa"}, 0x14) syz_clone3(&(0x7f00000002c0)={0x1001100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x3, 0xb0, [0x8, 0x1, 0x8, 0x5, 0x3ff, 0x101], 0x3, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000400)=""/176}, &(0x7f0000000380)=0x78) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x80400002, 0x1220}, {0x1000, 0x200}]}, 0x14, 0x1) write$cgroup_type(r6, &(0x7f0000000000), 0x9) 2.846421433s ago: executing program 0 (id=353): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa10000000000000701000004ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20002000}) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) sendto$inet6(r1, &(0x7f0000000200)="cf", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004a80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000004ac0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200008c5}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x5, 0x1, 0x4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x80, 0x100, 0x8}}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r8, @ANYBLOB="f60012000a00020013"], 0x28}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0xc4, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x44010) 1.314820582s ago: executing program 1 (id=354): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000001900)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB='6\x00'], 0x2, 0x1548, &(0x7f0000000380)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) syz_emit_ethernet(0x4e, &(0x7f0000000b40)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0xfffc, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x7, 0xd5, [@multicast2]}, @timestamp={0x44, 0x4, 0xdd}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffe}}}}}}, 0x0) 1.123020357s ago: executing program 6 (id=355): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="380000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605001800128009000100626f6e64000000000800028004001f"], 0x38}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x9}) r3 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800) r4 = getuid() quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r4, &(0x7f0000000080)={0x101000, 0x0, 0x0, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) 1.042508994s ago: executing program 0 (id=356): socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x2015, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 3) 0s ago: executing program 5 (id=357): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xffffffd1, 0x2, 0x2, 0x831a, 0x4, "aaa700000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201}) epoll_create(0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) kernel console output (not intermixed with test programs): t(1758524822.592:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ebf8ec29 code=0x7ffc0000 [ 222.587970][ T6238] loop0: detected capacity change from 0 to 4096 [ 222.622508][ T5813] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.648447][ T6242] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.919469][ T6244] loop1: detected capacity change from 0 to 512 [ 222.960561][ T6244] EXT4-fs: Ignoring removed orlov option [ 223.171091][ T9] usb 4-1: USB disconnect, device number 3 [ 223.571037][ T6251] FAULT_INJECTION: forcing a failure. [ 223.571037][ T6251] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.588682][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(none) [ 223.588815][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.588889][ T6251] Call Trace: [ 223.588936][ T6251] [ 223.588983][ T6251] __dump_stack+0x26/0x30 [ 223.589143][ T6251] dump_stack_lvl+0x1df/0x270 [ 223.589315][ T6251] dump_stack+0x1e/0x25 [ 223.589460][ T6251] should_fail_ex+0x7dc/0x8a0 [ 223.589616][ T6251] should_fail+0x2a/0x40 [ 223.589744][ T6251] should_fail_usercopy+0x2e/0x40 [ 223.589885][ T6251] _copy_from_user+0x33/0x100 [ 223.590038][ T6251] kstrtouint_from_user+0x75/0x140 [ 223.590164][ T6251] ? kmsan_get_metadata+0xfb/0x160 [ 223.590318][ T6251] ? proc_fail_nth_write+0x43/0x300 [ 223.590453][ T6251] ? vfs_write+0x48a/0x15d0 [ 223.590607][ T6251] proc_fail_nth_write+0x61/0x300 [ 223.590741][ T6251] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 223.590917][ T6251] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.591081][ T6251] vfs_write+0x48a/0x15d0 [ 223.591228][ T6251] ? stack_depot_save_flags+0x35/0x7b0 [ 223.591364][ T6251] ? kmsan_get_metadata+0xfb/0x160 [ 223.591510][ T6251] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 223.591645][ T6251] ? kmsan_get_metadata+0xfb/0x160 [ 223.591825][ T6251] __x64_sys_write+0x1fb/0x4d0 [ 223.592001][ T6251] x64_sys_call+0x3014/0x3e20 [ 223.592170][ T6251] do_syscall_64+0xd9/0x210 [ 223.592302][ T6251] ? irqentry_exit+0x16/0x60 [ 223.592462][ T6251] ? clear_bhb_loop+0x40/0x90 [ 223.592602][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.592738][ T6251] RIP: 0033:0x7f2c2eb8d6df [ 223.592834][ T6251] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 223.592942][ T6251] RSP: 002b:00007f2c2fa03030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 223.593065][ T6251] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c2eb8d6df [ 223.593152][ T6251] RDX: 0000000000000001 RSI: 00007f2c2fa030a0 RDI: 0000000000000006 [ 223.593233][ T6251] RBP: 00007f2c2fa03090 R08: 0000000000000000 R09: 000000000000000a [ 223.593319][ T6251] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 223.593396][ T6251] R13: 00007f2c2edd6128 R14: 00007f2c2edd6090 R15: 00007fff33dc9848 [ 223.593519][ T6251] [ 223.883995][ T6244] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 223.897960][ T6244] EXT4-fs (loop1): #clusters per group too big: 131071 [ 224.516151][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 224.575637][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.582808][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.855071][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 224.947138][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 224.958747][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.099079][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.108718][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.117442][ T9] usb 2-1: Product: syz [ 225.125459][ T9] usb 2-1: Manufacturer: syz [ 225.130246][ T9] usb 2-1: SerialNumber: syz [ 225.170743][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 225.181002][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 225.449152][ T6261] loop2: detected capacity change from 0 to 2048 [ 225.569932][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 225.623667][ T6261] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 225.751124][ T9] usb 2-1: USB disconnect, device number 3 [ 226.077317][ T6264] loop3: detected capacity change from 0 to 512 [ 226.140965][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.307878][ T6264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.321921][ T6264] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.995328][ T6276] overlayfs: workdir and upperdir must be separate subtrees [ 227.092436][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 227.320457][ T6271] loop0: detected capacity change from 0 to 32768 [ 227.396790][ T5893] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 227.405661][ T5893] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 227.416000][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.440483][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 227.450036][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 227.458657][ T5893] usb 2-1: Product: syz [ 227.463096][ T5893] usb 2-1: Manufacturer: syz [ 227.467848][ T5893] usb 2-1: SerialNumber: syz [ 227.494350][ T5893] usb 2-1: config 0 descriptor?? [ 227.495263][ T6271] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 227.516043][ T6271] allowing incompatible features above 0.0: (unknown version) [ 227.524236][ T6271] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 227.538800][ T6271] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 227.547985][ T6271] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 227.556685][ T6271] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 227.556685][ T6271] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 227.604260][ T5893] hub 2-1:0.0: bad descriptor, ignoring hub [ 227.610698][ T5893] hub 2-1:0.0: probe with driver hub failed with error -5 [ 227.627507][ T5893] usb 2-1: selecting invalid altsetting 0 [ 227.689912][ T6271] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 227.690008][ T6271] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 227.690108][ T6271] loop0 node offset 16/32 bset u64s 13: checksum error, type none: got should be [ 227.690188][ T6271] loop0 btree validate error [ 227.690250][ T6271] flagging btree freespace lost data [ 227.690318][ T6271] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 227.690417][ T6271] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 227.690500][ T6271] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 227.690591][ T6271] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 227.690670][ T6271] ret fsck_errors_not_fixed [ 227.778818][ T6271] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 227.806852][ T6271] bcachefs (loop0): check_topology... done [ 227.833979][ T6271] bcachefs (loop0): accounting_read... done [ 227.843905][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.849079][ T6271] bcachefs (loop0): alloc_read... done [ 227.864082][ T6271] bcachefs (loop0): snapshots_read... done [ 227.874772][ T6271] bcachefs (loop0): check_allocations... [ 227.878640][ T6271] bcachefs (loop0): pointer to nonexistent bucket 4294964982 on device loop0 (valid range 0-128) [ 227.878746][ T6271] emergency read only at seq 10 [ 227.906223][ T6271] bcachefs (loop0): bch2_gc_mark_key(): error trigger_alloc [ 227.913815][ T6271] bcachefs (loop0): bch2_gc_btree(): error trigger_alloc [ 227.921012][ T6271] bcachefs (loop0): bch2_gc_btrees(): error trigger_alloc [ 227.929042][ T6271] bcachefs (loop0): bch2_check_allocations(): error trigger_alloc [ 227.937367][ T6271] bcachefs (loop0): error in recovery: trigger_alloc [ 227.944469][ T6271] bcachefs (loop0): bch2_fs_start(): error starting filesystem trigger_alloc [ 227.953513][ T6271] bcachefs (loop0): shutting down [ 227.977714][ T6271] bcachefs (loop0): shutdown complete [ 228.258580][ T5893] usb 2-1: USB disconnect, device number 4 [ 229.219907][ T6271] bcachefs: bch2_fs_get_tree() error: trigger_alloc [ 229.241251][ T6283] loop4: detected capacity change from 0 to 32768 [ 229.261770][ T6283] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.79 (6283) [ 229.290189][ T6283] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.301890][ T6283] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 229.311037][ T6283] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 229.368932][ T6292] loop3: detected capacity change from 0 to 512 [ 229.520868][ T6292] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 229.537832][ T6292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.548031][ T6292] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.557375][ T6292] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 229.580551][ T6283] BTRFS info (device loop4): rebuilding free space tree [ 229.667573][ T6283] BTRFS info (device loop4): disabling free space tree [ 229.674846][ T6283] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.685786][ T6283] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.756312][ T6283] BTRFS info (device loop4): enabling ssd optimizations [ 229.763756][ T6283] BTRFS info (device loop4): turning on sync discard [ 229.770622][ T6283] BTRFS info (device loop4): enabling disk space caching [ 229.781064][ T6283] BTRFS info (device loop4): force clearing of disk cache [ 229.788613][ T6283] BTRFS info (device loop4): enabling auto defrag [ 229.795390][ T6283] BTRFS info (device loop4): doing ref verification [ 229.857565][ T6310] udevd[6310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.449209][ T5813] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.892893][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 231.091948][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 231.104938][ T6318] loop2: detected capacity change from 0 to 4096 [ 231.136751][ T5893] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.146555][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.155025][ T5893] usb 1-1: Product: syz [ 231.159370][ T5893] usb 1-1: Manufacturer: syz [ 231.168066][ T5893] usb 1-1: SerialNumber: syz [ 231.270736][ T5893] usb 1-1: config 0 descriptor?? [ 231.303911][ T6326] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.794479][ T6320] loop3: detected capacity change from 0 to 4096 [ 232.349483][ T5893] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 233.302472][ T5893] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 233.435467][ T5893] usb 1-1: USB disconnect, device number 3 [ 233.437754][ T6328] loop1: detected capacity change from 0 to 4096 [ 233.640567][ T6320] ntfs3(loop3): Failed to read $UpCase (-4). [ 233.690743][ T6328] EXT4-fs (loop1): Test dummy encryption mode enabled [ 233.737246][ T6328] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 233.903840][ T6328] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 233.953122][ T6328] System zones: 0-5 [ 234.013312][ T6328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.647261][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.501161][ T6357] netlink: 'syz.3.97': attribute type 2 has an invalid length. [ 236.071914][ T6362] loop2: detected capacity change from 0 to 1024 [ 236.628706][ T6368] loop3: detected capacity change from 0 to 4096 [ 236.798251][ T6370] loop4: detected capacity change from 0 to 256 [ 236.888540][ T6375] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.954894][ T6373] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 236.963160][ T6373] team0: Device netdevsim3 is up. Set it down before adding it as a team port [ 237.388503][ T6370] FAT-fs (loop4): Directory bread(block 64) failed [ 237.396594][ T6370] FAT-fs (loop4): Directory bread(block 65) failed [ 237.405022][ T6370] FAT-fs (loop4): Directory bread(block 66) failed [ 237.416390][ T6370] FAT-fs (loop4): Directory bread(block 67) failed [ 237.424993][ T6370] FAT-fs (loop4): Directory bread(block 68) failed [ 237.431875][ T6370] FAT-fs (loop4): Directory bread(block 69) failed [ 237.438749][ T6370] FAT-fs (loop4): Directory bread(block 70) failed [ 237.445570][ T6370] FAT-fs (loop4): Directory bread(block 71) failed [ 237.452558][ T6370] FAT-fs (loop4): Directory bread(block 72) failed [ 237.459250][ T6370] FAT-fs (loop4): Directory bread(block 73) failed [ 237.728965][ T6381] loop0: detected capacity change from 0 to 256 [ 238.237542][ T6381] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 239.019819][ T6392] loop2: detected capacity change from 0 to 512 [ 239.279863][ T6392] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.108: EA inode hash validation failed [ 239.293242][ T6392] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 239.307186][ T6392] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.108: corrupted inode contents [ 239.358863][ T6392] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.108: mark_inode_dirty error [ 239.463789][ T6392] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.108: corrupted inode contents [ 239.537041][ T6392] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.108: mark_inode_dirty error [ 239.643058][ T6392] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.108: mark inode dirty (error -117) [ 239.676956][ T6392] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 239.687050][ T6392] EXT4-fs (loop2): 1 orphan inode deleted [ 239.733579][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.131869][ T9] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 240.232355][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.399864][ T9] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 240.408935][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 240.417442][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 240.426611][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 240.437756][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.447964][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 240.653253][ T9] usb 1-1: string descriptor 0 read error: -22 [ 240.659994][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 240.669689][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.774344][ T9] usb 1-1: config 0 descriptor?? [ 240.808428][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 240.814673][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 241.045298][ T6414] loop2: detected capacity change from 0 to 2048 [ 241.053686][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.063800][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.225121][ T6414] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 241.233474][ T6414] UDF-fs: Scanning with blocksize 512 failed [ 241.345250][ T6420] process 'syz.0.113' launched '/dev/fd/14' with NULL argv: empty string added [ 241.414997][ T6414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.777013][ T6426] FAULT_INJECTION: forcing a failure. [ 241.777013][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.790599][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.4.119 Not tainted syzkaller #0 PREEMPT(none) [ 241.790729][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.790802][ T6426] Call Trace: [ 241.790846][ T6426] [ 241.790892][ T6426] __dump_stack+0x26/0x30 [ 241.791054][ T6426] dump_stack_lvl+0x1df/0x270 [ 241.791226][ T6426] dump_stack+0x1e/0x25 [ 241.791368][ T6426] should_fail_ex+0x7dc/0x8a0 [ 241.791523][ T6426] should_fail+0x2a/0x40 [ 241.791642][ T6426] should_fail_usercopy+0x2e/0x40 [ 241.791779][ T6426] _copy_from_user+0x33/0x100 [ 241.791931][ T6426] ___sys_sendmsg+0x11b/0x3b0 [ 241.792112][ T6426] ? kmsan_get_metadata+0xfb/0x160 [ 241.792261][ T6426] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.792421][ T6426] ? __rcu_read_unlock+0x6d/0xd0 [ 241.792555][ T6426] ? __fget_files+0x3b4/0x4a0 [ 241.792717][ T6426] ? __fget_files+0x3b9/0x4a0 [ 241.792884][ T6426] ? kmsan_get_metadata+0xfb/0x160 [ 241.793031][ T6426] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.793198][ T6426] __sys_sendmmsg+0x2d9/0x7c0 [ 241.793363][ T6426] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 241.793509][ T6426] ? vfs_write+0x13e2/0x15d0 [ 241.793653][ T6426] ? kmsan_get_metadata+0xfb/0x160 [ 241.793798][ T6426] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 241.793945][ T6426] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 241.794116][ T6426] __x64_sys_sendmmsg+0xc6/0x150 [ 241.794304][ T6426] x64_sys_call+0x21de/0x3e20 [ 241.794472][ T6426] do_syscall_64+0xd9/0x210 [ 241.794595][ T6426] ? irqentry_exit+0x16/0x60 [ 241.794754][ T6426] ? clear_bhb_loop+0x40/0x90 [ 241.794893][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.795028][ T6426] RIP: 0033:0x7f52ebf8ec29 [ 241.795130][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.795234][ T6426] RSP: 002b:00007f52ece0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.795355][ T6426] RAX: ffffffffffffffda RBX: 00007f52ec1d5fa0 RCX: 00007f52ebf8ec29 [ 241.795444][ T6426] RDX: 0000000000000001 RSI: 0000200000003240 RDI: 0000000000000003 [ 241.795522][ T6426] RBP: 00007f52ece0f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.795598][ T6426] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 241.795675][ T6426] R13: 00007f52ec1d6038 R14: 00007f52ec1d5fa0 R15: 00007ffc6bde41a8 [ 241.795794][ T6426] [ 242.340131][ T6428] loop6: detected capacity change from 0 to 7 [ 242.385915][ T6428] Dev loop6: unable to read RDB block 7 [ 242.392069][ T6428] loop6: AHDI p3 p4 [ 242.396217][ T6428] loop6: partition table partially beyond EOD, truncated [ 242.404452][ T6428] loop6: p3 start 1886353253 is beyond EOD, truncated [ 243.028390][ T6430] loop2: detected capacity change from 0 to 4096 [ 243.295489][ T6436] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.382961][ T9] usb 1-1: USB disconnect, device number 4 [ 243.817069][ T6444] loop0: detected capacity change from 0 to 128 [ 243.899268][ T6443] loop3: detected capacity change from 0 to 128 [ 243.919742][ T6442] loop1: detected capacity change from 0 to 256 [ 244.110440][ T6443] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.247588][ T6442] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.258885][ T6442] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 244.282323][ T6443] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.449409][ T6443] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.127: No space for directory leaf checksum. Please run e2fsck -D. [ 244.465471][ T6443] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.127: checksumming directory block 0 [ 244.668182][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.034564][ T6442] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 245.423046][ T6452] tipc: Started in network mode [ 245.428224][ T6452] tipc: Node identity 76165bdfb4ea, cluster identity 4711 [ 245.436715][ T6452] tipc: Enabled bearer , priority 0 [ 245.584132][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.832097][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.842719][ T5893] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 245.852208][ T5893] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 245.861633][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.930705][ T5893] usb 4-1: config 0 descriptor?? [ 245.940934][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 246.205922][ T6449] tipc: Disabling bearer [ 246.398666][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 246.686056][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 246.694746][ T9] usb 1-1: config 0 has no interface number 0 [ 246.824590][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 246.838392][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.847960][ T9] usb 1-1: Product: syz [ 246.852521][ T9] usb 1-1: Manufacturer: syz [ 246.857287][ T9] usb 1-1: SerialNumber: syz [ 247.031020][ T6460] loop2: detected capacity change from 0 to 32768 [ 247.045228][ T6460] ocfs2: Unknown parameter ' ' [ 247.052164][ T5893] Bluetooth: Can't get version to change to load ram patch err [ 247.059868][ T5893] Bluetooth: Loading patch file failed [ 247.065772][ T5893] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 247.125067][ T9] usb 1-1: config 0 descriptor?? [ 247.186570][ T5893] usb 4-1: USB disconnect, device number 4 [ 247.230738][ T6464] loop6: detected capacity change from 0 to 7 [ 247.378820][ T6464] Dev loop6: unable to read RDB block 7 [ 247.384947][ T6464] loop6: AHDI p3 p4 [ 247.389170][ T6464] loop6: partition table partially beyond EOD, truncated [ 247.397501][ T6464] loop6: p3 start 1886353253 is beyond EOD, truncated [ 247.863782][ T6459] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 247.873398][ T6459] overlayfs: missing 'lowerdir' [ 248.436599][ T6466] loop4: detected capacity change from 0 to 4096 [ 248.504582][ T6466] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 249.009029][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 249.019568][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 249.032704][ T9] asix 1-1:0.251: probe with driver asix failed with error -71 [ 249.137239][ T6466] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 249.180690][ T6477] loop3: detected capacity change from 0 to 128 [ 249.188122][ T9] usb 1-1: USB disconnect, device number 5 [ 249.431159][ T6477] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.566160][ T6477] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.795011][ T6477] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.138: No space for directory leaf checksum. Please run e2fsck -D. [ 249.814768][ T6477] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.138: checksumming directory block 0 [ 250.144754][ T6481] loop2: detected capacity change from 0 to 40427 [ 250.189848][ T6481] F2FS-fs (loop2): Small segment_count (20 < 1 * 24) [ 250.196933][ T6481] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 250.322772][ T6481] F2FS-fs (loop2): invalid crc value [ 250.355450][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.607460][ T6481] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 250.635730][ T6481] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 250.643813][ T6481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 251.305117][ T6497] batman_adv: batadv0: Adding interface: dummy0 [ 251.312193][ T6497] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.342583][ T6497] batman_adv: batadv0: Interface activated: dummy0 [ 251.394772][ T6497] batadv0: mtu less than device minimum [ 251.402982][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.415883][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.428835][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.441889][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.454775][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.467675][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.480602][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.493557][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.506531][ T6497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.903434][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.913352][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.036469][ T6505] FAULT_INJECTION: forcing a failure. [ 252.036469][ T6505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.060701][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(none) [ 252.060824][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.060895][ T6505] Call Trace: [ 252.060941][ T6505] [ 252.060985][ T6505] __dump_stack+0x26/0x30 [ 252.061137][ T6505] dump_stack_lvl+0x1df/0x270 [ 252.061288][ T6505] dump_stack+0x1e/0x25 [ 252.061429][ T6505] should_fail_ex+0x7dc/0x8a0 [ 252.061577][ T6505] should_fail+0x2a/0x40 [ 252.061694][ T6505] should_fail_usercopy+0x2e/0x40 [ 252.061830][ T6505] _copy_from_user+0x33/0x100 [ 252.061987][ T6505] ___sys_sendmsg+0x11b/0x3b0 [ 252.062164][ T6505] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.062322][ T6505] ? __rcu_read_unlock+0x6d/0xd0 [ 252.062451][ T6505] ? __fget_files+0x3b4/0x4a0 [ 252.062614][ T6505] ? __fget_files+0x3b9/0x4a0 [ 252.062776][ T6505] ? kmsan_get_metadata+0xfb/0x160 [ 252.062919][ T6505] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.063086][ T6505] __x64_sys_sendmsg+0x211/0x3e0 [ 252.063251][ T6505] ? fput+0x113/0x160 [ 252.063365][ T6505] ? kmsan_get_metadata+0xfb/0x160 [ 252.063512][ T6505] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.063662][ T6505] ? kmsan_get_metadata+0xfb/0x160 [ 252.063825][ T6505] x64_sys_call+0x1dfd/0x3e20 [ 252.063995][ T6505] do_syscall_64+0xd9/0x210 [ 252.064120][ T6505] ? irqentry_exit+0x16/0x60 [ 252.064278][ T6505] ? clear_bhb_loop+0x40/0x90 [ 252.064413][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.064546][ T6505] RIP: 0033:0x7f457a78ec29 [ 252.064641][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.064747][ T6505] RSP: 002b:00007f457b6d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.064871][ T6505] RAX: ffffffffffffffda RBX: 00007f457a9d5fa0 RCX: 00007f457a78ec29 [ 252.064964][ T6505] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 252.065043][ T6505] RBP: 00007f457b6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 252.065124][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.065198][ T6505] R13: 00007f457a9d6038 R14: 00007f457a9d5fa0 R15: 00007ffe11788ce8 [ 252.065319][ T6505] [ 252.432209][ T6502] loop2: detected capacity change from 0 to 64 [ 252.470214][ T1570] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 252.553182][ T6508] loop0: detected capacity change from 0 to 512 [ 252.570521][ T6502] hfs: unable to load codepage "macturkistĂÁd=˘_7ćvÂ;ł‡Ä˙˛Żw7•iŽ¸ä]^ÖšŽÁ6q¶Dtţún*âh*˘m”'…˘CŚuĺ «N\´­ëâFiŹ§$Ľg+AÄ9‡néjSčőń­‰S+ú›˛µš÷űhbo7±q6ďÓ”l­ănŰčÖľŁčn‚˙¬^ăĎkóőT@D|§Ň_ › [ 252.570521][ T6502] ‚¦ŕţwí0x0000000000000000" [ 252.691149][ T6508] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 252.700761][ T6508] EXT4-fs (loop0): Invalid default hash set in the superblock [ 252.714063][ T1570] usb 3-1: Using ep0 maxpacket: 32 [ 252.738147][ T1570] usb 3-1: config 0 has an invalid interface number: 228 but max is 0 [ 252.747013][ T1570] usb 3-1: config 0 has no interface number 0 [ 252.753878][ T1570] usb 3-1: config 0 interface 228 has no altsetting 0 [ 252.840137][ T1570] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02 [ 252.850132][ T1570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.858754][ T1570] usb 3-1: Product: syz [ 252.863214][ T1570] usb 3-1: Manufacturer: syz [ 252.867973][ T1570] usb 3-1: SerialNumber: syz [ 253.625740][ T6508] loop0: detected capacity change from 0 to 32768 [ 253.634788][ T6508] btrfs: Deprecated parameter 'usebackuproot' [ 253.641053][ T6508] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 253.652684][ T6508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.149 (6508) [ 253.672635][ T1570] usb 3-1: config 0 descriptor?? [ 253.810095][ T6514] loop3: detected capacity change from 0 to 2048 [ 253.901365][ T1570] net1080 3-1:0.228: probe with driver net1080 failed with error -71 [ 253.910179][ T6508] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.920758][ T6508] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 253.951940][ T6514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.073860][ T1570] usb 3-1: USB disconnect, device number 2 [ 254.073885][ T6514] FAULT_INJECTION: forcing a failure. [ 254.073885][ T6514] name failslab, interval 1, probability 0, space 0, times 1 [ 254.074013][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(none) [ 254.074126][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.074195][ T6514] Call Trace: [ 254.074239][ T6514] [ 254.074284][ T6514] __dump_stack+0x26/0x30 [ 254.074442][ T6514] dump_stack_lvl+0x1df/0x270 [ 254.074605][ T6514] dump_stack+0x1e/0x25 [ 254.074752][ T6514] should_fail_ex+0x7dc/0x8a0 [ 254.074906][ T6514] should_failslab+0x15b/0x200 [ 254.075061][ T6514] kmem_cache_alloc_noprof+0xf0/0xec0 [ 254.075222][ T6514] ? getname_flags+0x102/0xac0 [ 254.075392][ T6514] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 254.075534][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 254.075701][ T6514] getname_flags+0x102/0xac0 [ 254.075874][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 254.076033][ T6514] __x64_sys_symlink+0x70/0x140 [ 254.076195][ T6514] x64_sys_call+0x2b54/0x3e20 [ 254.076360][ T6514] do_syscall_64+0xd9/0x210 [ 254.076482][ T6514] ? irqentry_exit+0x16/0x60 [ 254.076638][ T6514] ? clear_bhb_loop+0x40/0x90 [ 254.076780][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.076913][ T6514] RIP: 0033:0x7f2bba58ec29 [ 254.077007][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.077113][ T6514] RSP: 002b:00007f2bbb386038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 254.077232][ T6514] RAX: ffffffffffffffda RBX: 00007f2bba7d5fa0 RCX: 00007f2bba58ec29 [ 254.077327][ T6514] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000200000000500 [ 254.077410][ T6514] RBP: 00007f2bbb386090 R08: 0000000000000000 R09: 0000000000000000 [ 254.077489][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.077563][ T6514] R13: 00007f2bba7d6038 R14: 00007f2bba7d5fa0 R15: 00007ffcdcf16c78 [ 254.077690][ T6514] [ 254.300310][ T6508] BTRFS info (device loop0): rebuilding free space tree [ 254.403981][ T6508] BTRFS info (device loop0): turning on flush-on-commit [ 254.415905][ T6508] BTRFS info (device loop0): enabling free space tree [ 254.428719][ T6508] BTRFS info (device loop0): force clearing of disk cache [ 254.436263][ T6508] BTRFS info (device loop0): trying to use backup root at mount time [ 254.445204][ T6508] BTRFS info (device loop0): force zlib compression, level 3 [ 254.593140][ T5811] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.315737][ T6531] 9pnet: Could not find request transport: o=î˙? [ 256.847248][ T6557] syz.0.160(6557): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 257.303599][ T6564] loop2: detected capacity change from 0 to 2048 [ 257.403679][ T6564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.112128][ T6575] FAULT_INJECTION: forcing a failure. [ 258.112128][ T6575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.126448][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(none) [ 258.126579][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.126653][ T6575] Call Trace: [ 258.126699][ T6575] [ 258.126746][ T6575] __dump_stack+0x26/0x30 [ 258.126903][ T6575] dump_stack_lvl+0x1df/0x270 [ 258.127062][ T6575] dump_stack+0x1e/0x25 [ 258.127223][ T6575] should_fail_ex+0x7dc/0x8a0 [ 258.127388][ T6575] should_fail+0x2a/0x40 [ 258.127507][ T6575] should_fail_usercopy+0x2e/0x40 [ 258.127648][ T6575] _copy_from_user+0x33/0x100 [ 258.127797][ T6575] ___sys_sendmsg+0x11b/0x3b0 [ 258.127973][ T6575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 258.128132][ T6575] ? __rcu_read_unlock+0x6d/0xd0 [ 258.128269][ T6575] ? __fget_files+0x3b4/0x4a0 [ 258.128429][ T6575] ? __fget_files+0x3b9/0x4a0 [ 258.128597][ T6575] ? kmsan_get_metadata+0xfb/0x160 [ 258.128742][ T6575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 258.128899][ T6575] __x64_sys_sendmsg+0x211/0x3e0 [ 258.129066][ T6575] ? fput+0x113/0x160 [ 258.129178][ T6575] ? kmsan_get_metadata+0xfb/0x160 [ 258.129327][ T6575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 258.129481][ T6575] ? kmsan_get_metadata+0xfb/0x160 [ 258.129640][ T6575] x64_sys_call+0x1dfd/0x3e20 [ 258.129802][ T6575] do_syscall_64+0xd9/0x210 [ 258.129918][ T6575] ? irqentry_exit+0x16/0x60 [ 258.130081][ T6575] ? clear_bhb_loop+0x40/0x90 [ 258.130220][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.130359][ T6575] RIP: 0033:0x7f457a78ec29 [ 258.130455][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.130562][ T6575] RSP: 002b:00007f457b6b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.130683][ T6575] RAX: ffffffffffffffda RBX: 00007f457a9d6090 RCX: 00007f457a78ec29 [ 258.130784][ T6575] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 258.130865][ T6575] RBP: 00007f457b6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 258.130944][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.131020][ T6575] R13: 00007f457a9d6128 R14: 00007f457a9d6090 R15: 00007ffe11788ce8 [ 258.131143][ T6575] [ 259.089782][ T6583] loop3: detected capacity change from 0 to 128 [ 259.237346][ T6580] loop0: detected capacity change from 0 to 2048 [ 259.277854][ T6580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.298772][ T6583] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.410246][ T6583] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.486025][ T6583] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.170: No space for directory leaf checksum. Please run e2fsck -D. [ 259.502736][ T6583] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.170: checksumming directory block 0 [ 259.664027][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.314510][ T6594] netlink: 'syz.4.173': attribute type 30 has an invalid length. [ 260.339902][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 261.283772][ T6603] net_ratelimit: 10 callbacks suppressed [ 261.283850][ T6603] openvswitch: netlink: Multiple metadata blocks provided [ 261.336772][ T6596] loop3: detected capacity change from 0 to 32768 [ 261.528080][ T6596] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 261.528208][ T6596] allowing incompatible features above 0.0: (unknown version) [ 261.528290][ T6596] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 261.578000][ T6596] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 261.587215][ T6596] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 261.596745][ T6596] bcachefs (loop3): Version upgrade required: [ 261.596745][ T6596] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 261.596745][ T6596] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 261.596745][ T6596] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 261.713601][ T6596] bcachefs (loop3): dropping and reconstructing all alloc info [ 261.846029][ T6596] bcachefs (loop3): accounting_read... done [ 261.865817][ T6596] bcachefs (loop3): alloc_read... done [ 261.890009][ T6596] bcachefs (loop3): snapshots_read... done [ 261.938542][ T6596] bcachefs (loop3): check_allocations... done [ 262.376251][ T6596] bcachefs (loop3): going read-write [ 262.382271][ T6596] bcachefs (loop3): insufficient writeable journal devices available: have 0, need 1 [ 262.382271][ T6596] rw journal devs: [ 262.481928][ T6596] bcachefs (loop3): done starting filesystem [ 262.647438][ T6608] loop1: detected capacity change from 0 to 32768 [ 262.809825][ T6608] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 262.809943][ T6608] allowing incompatible features above 0.0: (unknown version) [ 262.810032][ T6608] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 262.851778][ T6608] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 262.860866][ T6608] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 262.869514][ T6608] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 262.869514][ T6608] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 262.891630][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.940768][ T5823] bcachefs (loop3): shutting down [ 262.946769][ T5823] bcachefs (loop3): going read-only [ 262.952517][ T6623] binder: 6622:6623 ioctl c0306201 200000000080 returned -14 [ 262.960322][ T5823] bcachefs (loop3): finished waiting for writes to stop [ 263.028196][ T6623] loop4: detected capacity change from 0 to 128 [ 263.074512][ T6623] udf: Unknown parameter '' [ 263.159110][ T6608] bcachefs (loop1): btree node read error at btree freespace level 0/0 [ 263.159207][ T6608] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 263.159306][ T6608] loop1 node offset 16/32 bset u64s 13: checksum error, type none: got should be [ 263.159368][ T5823] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 263.159384][ T6608] loop1 btree validate error [ 263.159460][ T6608] flagging btree freespace lost data [ 263.159526][ T6608] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 263.159608][ T6608] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 263.159674][ T5823] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 263.159691][ T6608] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 263.159778][ T6608] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 263.159856][ T6608] ret fsck_errors_not_fixed [ 263.160342][ T5823] bcachefs (loop3): unclean shutdown complete, journal seq 10 [ 263.169298][ T6608] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 263.319029][ T6608] bcachefs (loop1): check_topology... done [ 263.369442][ T6608] bcachefs (loop1): accounting_read... [ 263.378947][ T6626] loop0: detected capacity change from 0 to 128 [ 263.562644][ T6608] done [ 263.565580][ T6608] bcachefs (loop1): alloc_read... done [ 263.575632][ T6608] bcachefs (loop1): snapshots_read... done [ 263.600064][ T6608] bcachefs (loop1): check_allocations... [ 263.605265][ T6608] bcachefs (loop1): pointer to nonexistent bucket 4294964982 on device loop1 (valid range 0-128) [ 263.605373][ T6608] emergency read only at seq 10 [ 263.632857][ T6608] bcachefs (loop1): bch2_gc_mark_key(): error trigger_alloc [ 263.640353][ T6608] bcachefs (loop1): bch2_gc_btree(): error trigger_alloc [ 263.648226][ T6608] bcachefs (loop1): bch2_gc_btrees(): error trigger_alloc [ 263.656257][ T6608] bcachefs (loop1): bch2_check_allocations(): error trigger_alloc [ 263.664698][ T6608] bcachefs (loop1): error in recovery: trigger_alloc [ 263.671807][ T6608] bcachefs (loop1): bch2_fs_start(): error starting filesystem trigger_alloc [ 263.674364][ T6626] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.680754][ T6608] bcachefs (loop1): shutting down [ 263.716804][ T6608] bcachefs (loop1): shutdown complete [ 263.752705][ T5823] bcachefs (loop3): done going read-only, filesystem not clean [ 263.814238][ T6630] loop2: detected capacity change from 0 to 128 [ 263.966770][ T6608] bcachefs: bch2_fs_get_tree() error: trigger_alloc [ 263.985396][ T6626] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.015271][ T5823] bcachefs (loop3): shutdown complete [ 264.085135][ T6630] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.226596][ T6630] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.380400][ T6630] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.184: No space for directory leaf checksum. Please run e2fsck -D. [ 264.396597][ T6630] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.184: checksumming directory block 0 [ 264.552599][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 264.791981][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 264.863162][ T5893] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 264.873374][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.944992][ T6634] loop4: detected capacity change from 0 to 2048 [ 264.967339][ T5893] usb 1-1: config 0 descriptor?? [ 265.014391][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.021096][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 265.178078][ T6634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.186607][ T6626] syz.0.182 (pid 6626) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 265.562363][ T5153] bcm5974 1-1:0.0: could not read from device [ 265.636871][ T5153] bcm5974 1-1:0.0: could not read from device [ 266.396014][ T5893] usb 1-1: USB disconnect, device number 6 [ 266.398498][ T5153] bcm5974 1-1:0.0: could not read from device [ 266.579205][ T5153] bcm5974 1-1:0.0: could not read from device [ 266.707016][ T5153] bcm5974 1-1:0.0: could not read from device [ 266.824963][ T5811] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.975176][ T6310] udevd[6310]: Error opening device "/dev/input/event4": No such file or directory [ 267.143482][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 267.151697][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 267.246367][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 267.290189][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 268.085632][ T6650] FAULT_INJECTION: forcing a failure. [ 268.085632][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 268.098769][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT(none) [ 268.098900][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.098973][ T6650] Call Trace: [ 268.099019][ T6650] [ 268.099066][ T6650] __dump_stack+0x26/0x30 [ 268.099222][ T6650] dump_stack_lvl+0x1df/0x270 [ 268.099386][ T6650] dump_stack+0x1e/0x25 [ 268.099537][ T6650] should_fail_ex+0x7dc/0x8a0 [ 268.099698][ T6650] should_failslab+0x15b/0x200 [ 268.099856][ T6650] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 268.100027][ T6650] ? __alloc_skb+0x1e0/0x7d0 [ 268.100182][ T6650] ? kmsan_get_metadata+0xfb/0x160 [ 268.100327][ T6650] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.100492][ T6650] __alloc_skb+0x1e0/0x7d0 [ 268.100656][ T6650] netlink_alloc_large_skb+0xa5/0x280 [ 268.100819][ T6650] netlink_sendmsg+0xaea/0x1250 [ 268.101010][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.101170][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.101336][ T6650] __sock_sendmsg+0x333/0x3d0 [ 268.101481][ T6650] ____sys_sendmsg+0x7e0/0xd80 [ 268.101673][ T6650] ___sys_sendmsg+0x271/0x3b0 [ 268.101843][ T6650] ? __rcu_read_unlock+0x6d/0xd0 [ 268.101969][ T6650] ? __fget_files+0x3b4/0x4a0 [ 268.102124][ T6650] ? __fget_files+0x3b9/0x4a0 [ 268.102293][ T6650] ? kmsan_get_metadata+0xfb/0x160 [ 268.102439][ T6650] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.102609][ T6650] __x64_sys_sendmsg+0x211/0x3e0 [ 268.102794][ T6650] ? kmsan_get_metadata+0xfb/0x160 [ 268.102958][ T6650] x64_sys_call+0x1dfd/0x3e20 [ 268.103127][ T6650] do_syscall_64+0xd9/0x210 [ 268.103251][ T6650] ? irqentry_exit+0x16/0x60 [ 268.103412][ T6650] ? clear_bhb_loop+0x40/0x90 [ 268.103559][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.103694][ T6650] RIP: 0033:0x7f2c2eb8ec29 [ 268.103790][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.103897][ T6650] RSP: 002b:00007f2c2fa24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.104019][ T6650] RAX: ffffffffffffffda RBX: 00007f2c2edd5fa0 RCX: 00007f2c2eb8ec29 [ 268.104111][ T6650] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 268.104192][ T6650] RBP: 00007f2c2fa24090 R08: 0000000000000000 R09: 0000000000000000 [ 268.104273][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.104350][ T6650] R13: 00007f2c2edd6038 R14: 00007f2c2edd5fa0 R15: 00007fff33dc9848 [ 268.104476][ T6650] [ 268.579089][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.634543][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.777374][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.897511][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.178481][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.614352][ T5893] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 269.706965][ T14] bridge_slave_1: left allmulticast mode [ 269.713348][ T14] bridge_slave_1: left promiscuous mode [ 269.719883][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.778587][ T14] bridge_slave_0: left allmulticast mode [ 269.785164][ T14] bridge_slave_0: left promiscuous mode [ 269.791973][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.824683][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 269.846346][ T5893] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 269.904254][ T5893] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 269.913730][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.922188][ T5893] usb 1-1: Product: syz [ 269.926518][ T5893] usb 1-1: Manufacturer: syz [ 269.931268][ T5893] usb 1-1: SerialNumber: syz [ 270.154478][ T5893] usb 1-1: config 0 descriptor?? [ 270.219283][ T5893] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 270.227712][ T5893] usb 1-1: setting power ON [ 270.233029][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 270.286792][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.313272][ T5893] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 270.322367][ T5893] usb 1-1: media controller created [ 270.388922][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.615867][ T5893] usb 1-1: selecting invalid altsetting 6 [ 270.623544][ T5893] usb 1-1: digital interface selection failed (-22) [ 270.630302][ T5893] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 270.708883][ T6658] dvb-usb: bulk message failed: -22 (3/0) [ 270.715068][ T6658] cxusb: i2c rd: len=4096 is too big! [ 270.715068][ T6658] [ 270.746609][ T5893] usb 1-1: setting power OFF [ 270.751745][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 270.757628][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 270.767432][ T5893] (NULL device *): no alternate interface [ 270.819771][ T6658] dvb-usb: bulk message failed: -22 (3/0) [ 270.832254][ T6658] dvb-usb: bulk message failed: -22 (3/0) [ 270.853651][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.953357][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.992014][ T14] bond0 (unregistering): Released all slaves [ 271.061272][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'. [ 271.159912][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 271.252874][ T14] tipc: Left network mode [ 271.477384][ T1570] usb 1-1: USB disconnect, device number 7 [ 271.899939][ T14] hsr_slave_0: left promiscuous mode [ 271.919990][ T14] hsr_slave_1: left promiscuous mode [ 271.928750][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.936466][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.946932][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.954733][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.068468][ T14] veth1_macvtap: left promiscuous mode [ 272.074457][ T14] veth0_macvtap: left promiscuous mode [ 272.080282][ T14] veth1_vlan: left promiscuous mode [ 272.085987][ T14] veth0_vlan: left promiscuous mode [ 273.425922][ T6687] loop2: detected capacity change from 0 to 8 [ 273.610525][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 273.869839][ T14] team0 (unregistering): Port device team_slave_1 removed [ 273.893642][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.904188][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.914883][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.942983][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.962178][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.027697][ T14] team0 (unregistering): Port device team_slave_0 removed [ 274.358058][ T6690] kvm: pic: non byte write [ 274.423938][ T6699] binder: 6695:6699 ioctl c0306201 200000000080 returned -14 [ 274.516856][ T6699] loop0: detected capacity change from 0 to 128 [ 274.565081][ T6699] udf: Unknown parameter '' [ 275.283744][ T6706] loop0: detected capacity change from 0 to 1024 [ 275.725044][ T6711] hfsplus: bad catalog entry type [ 275.850034][ T6710] affs: No valid root block on device nullb0 [ 275.893615][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 276.042813][ T5819] Bluetooth: hci1: command tx timeout [ 276.356750][ T14] hfsplus: b-tree write err: -5, ino 4 [ 276.385260][ T6691] chnl_net:caif_netlink_parms(): no params data found [ 276.508519][ T6718] netlink: 'syz.2.206': attribute type 29 has an invalid length. [ 277.052030][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 277.232842][ T5893] usb 1-1: device descriptor read/64, error -71 [ 277.379683][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 277.493646][ T5893] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 277.671812][ T5893] usb 1-1: device descriptor read/64, error -71 [ 277.777439][ T6737] binder: 6736:6737 ioctl c0306201 200000000080 returned -14 [ 277.786792][ T5893] usb usb1-port1: attempt power cycle [ 277.930224][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.937958][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.946324][ T6691] bridge_slave_0: entered allmulticast mode [ 277.955569][ T6691] bridge_slave_0: entered promiscuous mode [ 277.986588][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.996077][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.003853][ T6691] bridge_slave_1: entered allmulticast mode [ 278.013609][ T6691] bridge_slave_1: entered promiscuous mode [ 278.030053][ T6742] netlink: 156 bytes leftover after parsing attributes in process `syz.1.213'. [ 278.155667][ T5819] Bluetooth: hci1: command tx timeout [ 278.171818][ T5893] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 278.237891][ T5893] usb 1-1: device descriptor read/8, error -71 [ 278.552246][ T5893] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 278.649228][ T5893] usb 1-1: device descriptor read/8, error -71 [ 278.760871][ T6742] loop1: detected capacity change from 0 to 32768 [ 278.774278][ T5893] usb usb1-port1: unable to enumerate USB device [ 278.866453][ T6742] [ 278.866453][ T6742] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.866453][ T6742] [ 279.036242][ T6749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.215'. [ 279.405755][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 279.527811][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 279.942972][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.353497][ T6752] tipc: Started in network mode [ 280.358616][ T6752] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 280.369232][ T6752] tipc: Enabled bearer , priority 10 [ 280.390894][ T5819] Bluetooth: hci1: command tx timeout [ 280.533708][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.545769][ T6754] loop2: detected capacity change from 0 to 40427 [ 280.602637][ T6754] F2FS-fs (loop2): build fault injection rate: 690 [ 280.616333][ T6754] F2FS-fs (loop2): invalid crc value [ 280.642288][ T4031] [ 280.642288][ T4031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.642288][ T4031] [ 280.653222][ T4031] [ 280.653222][ T4031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.653222][ T4031] [ 280.680793][ T113] [ 280.680793][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.680793][ T113] [ 280.923387][ T6754] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 280.933260][ T5820] [ 280.933260][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.933260][ T5820] [ 280.994569][ T6754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 280.995076][ T5820] [ 280.995076][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.995076][ T5820] [ 281.073069][ T6691] team0: Port device team_slave_0 added [ 281.141816][ T6691] team0: Port device team_slave_1 added [ 281.482910][ T1570] tipc: Node number set to 1 [ 281.613903][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.621021][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.652236][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.795785][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.803134][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.829895][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.180182][ T6768] loop1: detected capacity change from 0 to 1024 [ 282.275885][ T6691] hsr_slave_0: entered promiscuous mode [ 282.285829][ T6691] hsr_slave_1: entered promiscuous mode [ 282.294425][ T6691] debugfs: 'hsr0' already exists in 'hsr' [ 282.300330][ T6691] Cannot create hsr debugfs directory [ 282.511382][ T5108] Bluetooth: hci1: command tx timeout [ 282.760587][ T6768] hfsplus: bad catalog entry type [ 282.762603][ T6774] NILFS (loop2): device size too small [ 283.002230][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 283.585393][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805266ac00: rx timeout, send abort [ 283.887198][ T6774] loop2: detected capacity change from 0 to 32768 [ 283.914909][ T6774] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.219 (6774) [ 283.941378][ T6774] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.952163][ T6774] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 283.961372][ T6774] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 284.094016][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805266ac00: abort rx timeout. Force session deactivation [ 284.285548][ T35] hfsplus: b-tree write err: -5, ino 4 [ 284.301090][ T6774] BTRFS info (device loop2): rebuilding free space tree [ 284.394968][ T6774] BTRFS info (device loop2): disabling free space tree [ 284.402324][ T6774] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 284.417793][ T6774] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 284.456150][ T6774] BTRFS info (device loop2): setting nodatasum [ 284.462714][ T6774] BTRFS info (device loop2): setting nodatacow [ 284.469130][ T6774] BTRFS info (device loop2): enabling ssd optimizations [ 284.476416][ T6774] BTRFS info (device loop2): turning on async discard [ 284.483462][ T6774] BTRFS info (device loop2): enabling disk space caching [ 284.490668][ T6774] BTRFS info (device loop2): force clearing of disk cache [ 284.498098][ T6774] BTRFS info (device loop2): doing ref verification [ 284.707031][ T6797] binder: 6796:6797 ioctl c0306201 200000000080 returned -14 [ 285.010831][ T6691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.117739][ T5828] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 285.195625][ T6691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.303983][ T6691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.452846][ T6691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.575269][ T6807] capability: warning: `syz.0.227' uses 32-bit capabilities (legacy support in use) [ 286.003140][ T6813] binder: 6809:6813 ioctl c018620c 200000000040 returned -22 [ 286.016763][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.023761][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.086491][ T6819] loop1: detected capacity change from 0 to 32768 [ 287.096939][ T6819] BTRFS warning: excessive commit interval 21112, use with care [ 287.115358][ T6819] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.228 (6819) [ 287.154261][ T6819] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.165738][ T6819] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm [ 287.180526][ T6819] BTRFS error (device loop1 state S): superblock checksum mismatch [ 287.189031][ T6819] BTRFS error (device loop1 state S): open_ctree failed: -22 [ 287.754091][ T6691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.975270][ T6826] loop3: detected capacity change from 0 to 1024 [ 288.790115][ T6691] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.957347][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.965005][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.153558][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.161095][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.225306][ T6836] binder: 6834:6836 ioctl c0306201 200000000080 returned -14 [ 289.343000][ T6839] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 289.350949][ T6839] team0: Device netdevsim3 is up. Set it down before adding it as a team port [ 289.538734][ T74] hfsplus: b-tree write err: -5, ino 4 [ 290.157289][ T6848] loop0: detected capacity change from 0 to 256 [ 290.243599][ T6848] vfat: Unknown parameter 'check' [ 291.149538][ T6863] loop0: detected capacity change from 0 to 8 [ 291.235749][ T6863] SQUASHFS error: zlib decompression failed, data probably corrupt [ 291.244028][ T6863] SQUASHFS error: Failed to read block 0x9b: -5 [ 291.250502][ T6863] SQUASHFS error: Unable to read metadata cache entry [99] [ 291.258049][ T6863] SQUASHFS error: Unable to read inode 0x127 [ 291.354354][ T6866] FAULT_INJECTION: forcing a failure. [ 291.354354][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 291.367437][ T6866] CPU: 0 UID: 0 PID: 6866 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT(none) [ 291.367562][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.367631][ T6866] Call Trace: [ 291.367676][ T6866] [ 291.367717][ T6866] __dump_stack+0x26/0x30 [ 291.367878][ T6866] dump_stack_lvl+0x1df/0x270 [ 291.368036][ T6866] dump_stack+0x1e/0x25 [ 291.368173][ T6866] should_fail_ex+0x7dc/0x8a0 [ 291.368317][ T6866] should_failslab+0x15b/0x200 [ 291.368472][ T6866] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 291.368641][ T6866] ? zswap_store+0x1ec7/0x44f0 [ 291.368802][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.368954][ T6866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.369108][ T6866] zswap_store+0x1ec7/0x44f0 [ 291.369259][ T6866] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 291.369418][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.369571][ T6866] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 291.369742][ T6866] swap_writeout+0x8c0/0x1370 [ 291.369910][ T6866] ? folio_clear_dirty_for_io+0x153/0xa00 [ 291.370084][ T6866] shrink_folio_list+0x5953/0x7e30 [ 291.370326][ T6866] ? filter_irq_stacks+0x49/0x190 [ 291.370466][ T6866] ? kmsan_get_metadata+0x30/0x160 [ 291.370646][ T6866] reclaim_folio_list+0xe0/0x7a0 [ 291.370857][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.370999][ T6866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.371160][ T6866] reclaim_pages+0x8f3/0xa20 [ 291.371359][ T6866] madvise_cold_or_pageout_pte_range+0x2c49/0x4170 [ 291.371554][ T6866] ? kernel_text_address+0x10e/0x1a0 [ 291.371728][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.371891][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.372056][ T6866] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 291.372243][ T6866] walk_pgd_range+0x1a87/0x42a0 [ 291.372490][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.372654][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.372827][ T6866] __walk_page_range+0x2d1/0xaf0 [ 291.373000][ T6866] ? stack_depot_save_flags+0x35/0x7b0 [ 291.373127][ T6866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.373278][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.373423][ T6866] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 291.373587][ T6866] walk_page_range_vma+0x5fd/0x720 [ 291.373786][ T6866] madvise_vma_behavior+0x5bdf/0x7290 [ 291.373975][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.374116][ T6866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.374270][ T6866] ? find_vma_prev+0x70/0x1c0 [ 291.374415][ T6866] madvise_walk_vmas+0x87e/0x1350 [ 291.374577][ T6866] ? stack_depot_save_flags+0x35/0x7b0 [ 291.374745][ T6866] madvise_do_behavior+0x691/0x850 [ 291.374919][ T6866] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 291.375066][ T6866] ? madvise_should_skip+0x398/0x3b0 [ 291.375234][ T6866] __se_sys_process_madvise+0x900/0x1230 [ 291.375458][ T6866] ? vfs_write+0x13e2/0x15d0 [ 291.375600][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.375745][ T6866] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 291.375898][ T6866] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 291.376035][ T6866] ? kmsan_get_metadata+0xfb/0x160 [ 291.376181][ T6866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.376338][ T6866] __x64_sys_process_madvise+0xe4/0x150 [ 291.376521][ T6866] x64_sys_call+0x394c/0x3e20 [ 291.376691][ T6866] do_syscall_64+0xd9/0x210 [ 291.376818][ T6866] ? irqentry_exit+0x16/0x60 [ 291.376978][ T6866] ? clear_bhb_loop+0x40/0x90 [ 291.377117][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.377251][ T6866] RIP: 0033:0x7f2bba58ec29 [ 291.377347][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.377454][ T6866] RSP: 002b:00007f2bbb386038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 291.377574][ T6866] RAX: ffffffffffffffda RBX: 00007f2bba7d5fa0 RCX: 00007f2bba58ec29 [ 291.377661][ T6866] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 291.377741][ T6866] RBP: 00007f2bbb386090 R08: 0000000000000000 R09: 0000000000000000 [ 291.377827][ T6866] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 291.377903][ T6866] R13: 00007f2bba7d6038 R14: 00007f2bba7d5fa0 R15: 00007ffcdcf16c78 [ 291.378025][ T6866] [ 292.466598][ T6691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.512434][ T6869] loop2: detected capacity change from 0 to 2048 [ 292.674213][ T6869] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 292.682446][ T6869] UDF-fs: Scanning with blocksize 512 failed [ 292.768181][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 292.777919][ T6877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.244'. [ 292.829045][ T6876] loop3: detected capacity change from 0 to 1024 [ 292.843135][ T6869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.666138][ T3700] hfsplus: b-tree write err: -5, ino 4 [ 293.672275][ T1570] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 293.686894][ T6887] binder: 6886:6887 ioctl c0306201 200000000080 returned -14 [ 293.894662][ T6887] loop2: detected capacity change from 0 to 128 [ 293.944390][ T1570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.955596][ T1570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.966212][ T1570] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 293.975924][ T1570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.985685][ T6887] udf: Unknown parameter '' [ 294.757241][ T6898] loop2: detected capacity change from 0 to 16 [ 294.796728][ T6893] loop3: detected capacity change from 0 to 32768 [ 294.839854][ T6898] erofs (device loop2): mounted with root inode @ nid 36. [ 294.891855][ T1570] usb 1-1: config 0 descriptor?? [ 294.986268][ T6893] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 294.986420][ T6893] allowing incompatible features above 0.0: (unknown version) [ 294.986502][ T6893] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 295.035191][ T6893] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 295.043662][ T6893] bcachefs (loop3): initializing new filesystem [ 295.063574][ T6893] bcachefs (loop3): going read-write [ 295.068546][ T6898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.251'. [ 295.130270][ T6893] bcachefs (loop3): marking superblocks [ 295.200940][ T6893] bcachefs (loop3): initializing freespace [ 295.237514][ T6893] bcachefs (loop3): done initializing freespace [ 295.267291][ T6893] bcachefs (loop3): reading snapshots table [ 295.273872][ T6893] bcachefs (loop3): reading snapshots done [ 295.395348][ T6893] bcachefs (loop3): done starting filesystem [ 295.618637][ T6883] loop0: detected capacity change from 0 to 8 [ 295.636898][ T5828] syz-executor: attempt to access beyond end of device [ 295.636898][ T5828] loop2: rw=524288, sector=103079215096, nr_sectors = 64 limit=16 [ 295.653519][ T5828] syz-executor: attempt to access beyond end of device [ 295.653519][ T5828] loop2: rw=0, sector=103079215096, nr_sectors = 8 limit=16 [ 295.668755][ T5828] erofs (device loop2): failed to readdir of logical block 0 of nid 46 [ 295.745835][ T5828] erofs (device loop2): bogus i_mode (0) @ nid 281474976710655 [ 295.824938][ T6893] syz.3.249 (6893) used greatest stack depth: 1200 bytes left [ 295.832361][ T6883] SQUASHFS error: xz decompression failed, data probably corrupt [ 295.840631][ T6883] SQUASHFS error: Failed to read block 0x108: -5 [ 295.847415][ T6883] SQUASHFS error: Unable to read metadata cache entry [106] [ 295.855078][ T6883] SQUASHFS error: Unable to read inode 0x11f [ 295.920149][ T5823] bcachefs (loop3): shutting down [ 295.925808][ T5823] bcachefs (loop3): going read-only [ 295.931306][ T5823] bcachefs (loop3): finished waiting for writes to stop [ 295.952421][ T5828] erofs (device loop2): bogus i_mode (0) @ nid 281474976710655 [ 296.043210][ T5823] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 296.488386][ T6691] veth0_vlan: entered promiscuous mode [ 296.537344][ T5823] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 296.598143][ T6691] veth1_vlan: entered promiscuous mode [ 296.659853][ T6883] loop0: detected capacity change from 0 to 1024 [ 296.730100][ T5823] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 296.803785][ T5823] bcachefs (loop3): marking filesystem clean [ 296.886019][ T6691] veth0_macvtap: entered promiscuous mode [ 297.017460][ T6883] hfsplus: xattr searching failed [ 297.042928][ T6883] hfsplus: xattr searching failed [ 297.073161][ T6691] veth1_macvtap: entered promiscuous mode [ 297.125899][ T5823] bcachefs (loop3): shutdown complete [ 297.403402][ T1570] usbhid 1-1:0.0: can't add hid device: -71 [ 297.410037][ T1570] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.421433][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.555229][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.573804][ T1570] usb 1-1: USB disconnect, device number 12 [ 297.648703][ T3763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.754231][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.800960][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.874446][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.284091][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 298.290313][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 298.299467][ T6913] Bluetooth: hci3: command 0x0406 tx timeout [ 298.308605][ T6913] Bluetooth: hci4: command 0x0406 tx timeout [ 300.025528][ T6931] loop1: detected capacity change from 0 to 32768 [ 300.034973][ T6931] btrfs: Unknown parameter 'fragment' [ 300.294728][ T3700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.629294][ T3700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.847419][ T3700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.000202][ T3700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.669887][ T3700] bridge_slave_1: left allmulticast mode [ 301.675979][ T3700] bridge_slave_1: left promiscuous mode [ 301.682739][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.779918][ T3700] bridge_slave_0: left allmulticast mode [ 301.785870][ T3700] bridge_slave_0: left promiscuous mode [ 301.792538][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.377747][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.452863][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.498181][ T3700] bond0 (unregistering): Released all slaves [ 302.800442][ T3700] tipc: Disabling bearer [ 302.807137][ T3700] tipc: Left network mode [ 303.566130][ T3700] hsr_slave_0: left promiscuous mode [ 303.608003][ T3700] hsr_slave_1: left promiscuous mode [ 303.616232][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.623980][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.664393][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.672416][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.752257][ T3700] veth1_macvtap: left promiscuous mode [ 303.757963][ T3700] veth0_macvtap: left promiscuous mode [ 303.766815][ T3700] veth1_vlan: left promiscuous mode [ 303.772509][ T3700] veth0_vlan: left promiscuous mode [ 304.067569][ T6952] loop1: detected capacity change from 0 to 128 [ 304.328037][ T6952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 304.328456][ T6952] System zones: 1-3, 19-19, 35-36 [ 304.627023][ T6952] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.628419][ T6952] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.727486][ T6952] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 305.052307][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.073298][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.084405][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.095591][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.123419][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.274120][ T3700] team0 (unregistering): Port device team_slave_1 removed [ 305.414135][ T3700] team0 (unregistering): Port device team_slave_0 removed [ 305.967672][ T5820] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.773421][ T6981] loop3: detected capacity change from 0 to 4096 [ 306.910467][ T6986] loop1: detected capacity change from 0 to 2048 [ 307.162737][ T6924] Bluetooth: hci4: command tx timeout [ 307.216285][ T6986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.539937][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 307.915333][ T6996] ntfs3(loop3): failed to convert "0080" to koi8-ru [ 308.537431][ T7002] loop0: detected capacity change from 0 to 128 [ 308.624685][ T4090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.632867][ T4090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.783049][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 308.783119][ T30] audit: type=1800 audit(1758524909.562:75): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.268" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 308.979193][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.990061][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.244383][ T6924] Bluetooth: hci4: command tx timeout [ 309.333644][ T5869] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 309.547074][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.559100][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.569298][ T5869] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 309.578682][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.667988][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.677036][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.684912][ T6967] bridge_slave_0: entered allmulticast mode [ 309.694047][ T6967] bridge_slave_0: entered promiscuous mode [ 309.739970][ T7018] loop5: detected capacity change from 0 to 128 [ 309.785557][ T5869] usb 2-1: config 0 descriptor?? [ 309.873081][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.880929][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.889191][ T6967] bridge_slave_1: entered allmulticast mode [ 309.900392][ T6967] bridge_slave_1: entered promiscuous mode [ 310.060361][ T7018] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.120035][ T7023] FAULT_INJECTION: forcing a failure. [ 310.120035][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 310.133347][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.3.272 Not tainted syzkaller #0 PREEMPT(none) [ 310.133481][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.133560][ T7023] Call Trace: [ 310.133612][ T7023] [ 310.133659][ T7023] __dump_stack+0x26/0x30 [ 310.133825][ T7023] dump_stack_lvl+0x1df/0x270 [ 310.133990][ T7023] dump_stack+0x1e/0x25 [ 310.134132][ T7023] should_fail_ex+0x7dc/0x8a0 [ 310.134286][ T7023] should_failslab+0x15b/0x200 [ 310.134450][ T7023] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 310.134621][ T7023] ? __alloc_skb+0x1e0/0x7d0 [ 310.134776][ T7023] ? kmsan_get_metadata+0xfb/0x160 [ 310.134929][ T7023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.135091][ T7023] __alloc_skb+0x1e0/0x7d0 [ 310.135255][ T7023] netlink_alloc_large_skb+0xa5/0x280 [ 310.135417][ T7023] netlink_sendmsg+0xaea/0x1250 [ 310.135610][ T7023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.135771][ T7023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.135943][ T7023] __sock_sendmsg+0x333/0x3d0 [ 310.136084][ T7023] ____sys_sendmsg+0x7e0/0xd80 [ 310.136285][ T7023] ___sys_sendmsg+0x271/0x3b0 [ 310.136476][ T7023] ? __rcu_read_unlock+0x6d/0xd0 [ 310.136610][ T7023] ? __fget_files+0x3b4/0x4a0 [ 310.136774][ T7023] ? __fget_files+0x3b9/0x4a0 [ 310.136948][ T7023] ? kmsan_get_metadata+0xfb/0x160 [ 310.137094][ T7023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.137256][ T7023] __x64_sys_sendmsg+0x211/0x3e0 [ 310.137439][ T7023] ? kmsan_get_metadata+0xfb/0x160 [ 310.137604][ T7023] x64_sys_call+0x1dfd/0x3e20 [ 310.137790][ T7023] do_syscall_64+0xd9/0x210 [ 310.137920][ T7023] ? irqentry_exit+0x16/0x60 [ 310.138079][ T7023] ? clear_bhb_loop+0x40/0x90 [ 310.138218][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.138359][ T7023] RIP: 0033:0x7f2bba58ec29 [ 310.138456][ T7023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.138560][ T7023] RSP: 002b:00007f2bbb386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.138679][ T7023] RAX: ffffffffffffffda RBX: 00007f2bba7d5fa0 RCX: 00007f2bba58ec29 [ 310.138767][ T7023] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 310.138854][ T7023] RBP: 00007f2bbb386090 R08: 0000000000000000 R09: 0000000000000000 [ 310.138933][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.139010][ T7023] R13: 00007f2bba7d6038 R14: 00007f2bba7d5fa0 R15: 00007ffcdcf16c78 [ 310.139134][ T7023] [ 310.194859][ T7018] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.442070][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.480270][ T5869] hid-led 0003:1D34:000A.0001: item fetching failed at offset 2/3 [ 310.538563][ T5869] hid-led 0003:1D34:000A.0001: probe with driver hid-led failed with error -22 [ 310.629732][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.648418][ T5893] usb 2-1: USB disconnect, device number 5 [ 310.659576][ T7025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.273'. [ 310.664322][ T7018] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.196: No space for directory leaf checksum. Please run e2fsck -D. [ 310.684537][ T7018] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.196: checksumming directory block 0 [ 311.079208][ T6691] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.130640][ T6967] team0: Port device team_slave_0 added [ 311.229628][ T6967] team0: Port device team_slave_1 added [ 311.345000][ T6924] Bluetooth: hci4: command tx timeout [ 311.508715][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.517112][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.549099][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.948390][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.960193][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.988598][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.348797][ T7037] loop5: detected capacity change from 0 to 32768 [ 312.450824][ T7037] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 312.737668][ T6967] hsr_slave_0: entered promiscuous mode [ 312.748122][ T6967] hsr_slave_1: entered promiscuous mode [ 312.756744][ T6967] debugfs: 'hsr0' already exists in 'hsr' [ 312.762738][ T6967] Cannot create hsr debugfs directory [ 312.822434][ T5869] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 312.860105][ T7037] XFS (loop5): Ending clean mount [ 312.880147][ T7037] XFS (loop5): Quotacheck needed: Please wait. [ 312.966476][ T7037] XFS (loop5): Quotacheck: Done. [ 313.061910][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 313.084800][ T5869] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 313.093455][ T5869] usb 1-1: config 0 has no interface number 0 [ 313.154103][ T5869] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 313.163655][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.172595][ T5869] usb 1-1: Product: syz [ 313.176925][ T5869] usb 1-1: Manufacturer: syz [ 313.181789][ T5869] usb 1-1: SerialNumber: syz [ 313.256697][ T6691] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 313.365531][ T5869] usb 1-1: config 0 descriptor?? [ 313.402210][ T6924] Bluetooth: hci4: command tx timeout [ 313.438681][ T5869] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 313.646351][ T5869] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 313.764006][ T5869] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 314.076759][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 314.082700][ T5893] usb 1-1: USB disconnect, device number 13 [ 314.223906][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 314.252470][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 314.316550][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 314.330854][ T5893] quatech2 1-1:0.51: device disconnected [ 314.432430][ T5862] usb 4-1: device descriptor read/64, error -71 [ 314.633182][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 314.682150][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 314.816775][ T6967] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.873615][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 314.880672][ T5862] usb 4-1: device descriptor read/64, error -71 [ 314.896798][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 314.908866][ T24] usb 2-1: config 0 has no interface number 0 [ 314.933728][ T6967] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.985839][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 314.995678][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.004114][ T24] usb 2-1: Product: syz [ 315.008445][ T24] usb 2-1: Manufacturer: syz [ 315.013372][ T24] usb 2-1: SerialNumber: syz [ 315.029154][ T5862] usb usb4-port1: attempt power cycle [ 315.053171][ T6967] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 315.124805][ T24] usb 2-1: config 0 descriptor?? [ 315.146103][ T6967] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 315.264212][ T7075] loop0: detected capacity change from 0 to 128 [ 315.357347][ T24] smsc95xx v2.0.0 [ 315.385758][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 315.397673][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 315.417199][ T5862] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 315.451133][ T24] usb 2-1: USB disconnect, device number 6 [ 315.460101][ T5862] usb 4-1: device descriptor read/8, error -71 [ 315.507510][ T7075] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.587047][ T7075] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.636067][ T7075] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.285: No space for directory leaf checksum. Please run e2fsck -D. [ 315.656196][ T7075] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.285: checksumming directory block 0 [ 315.752293][ T5862] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 315.820873][ T5862] usb 4-1: device descriptor read/8, error -71 [ 315.950631][ T5862] usb usb4-port1: unable to enumerate USB device [ 316.080496][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.232658][ T5811] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.409963][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.517437][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.525023][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.669850][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.677451][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.731125][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 317.053152][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.065466][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.079451][ T5869] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 317.089812][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.093571][ T7093] loop0: detected capacity change from 0 to 512 [ 317.192595][ T5893] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 317.208683][ T5869] usb 2-1: config 0 descriptor?? [ 317.226369][ T7093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.307915][ T7093] EXT4-fs (loop0): filesystem is read-only [ 317.349579][ T7093] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 317.454943][ T5893] usb 6-1: config 0 has no interfaces? [ 317.524749][ T5893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.534689][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 317.543058][ T5893] usb 6-1: SerialNumber: syz [ 317.563980][ T5893] usb 6-1: config 0 descriptor?? [ 317.581995][ T7093] EXT4-fs (loop0): filesystem is read-only [ 317.591666][ T7093] EXT4-fs (loop0): orphan cleanup on readonly fs [ 317.712166][ T7093] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.287: iget: bad i_size value: 648518346341360424 [ 317.752187][ T7093] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.287: couldn't read orphan inode 16 (err -117) [ 317.779032][ T5869] hid-led 0003:1D34:000A.0002: item fetching failed at offset 2/3 [ 317.796472][ T7099] veth0_to_team: entered promiscuous mode [ 317.836364][ T7093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 317.853041][ T5869] hid-led 0003:1D34:000A.0002: probe with driver hid-led failed with error -22 [ 317.923851][ T5869] usb 2-1: USB disconnect, device number 7 [ 318.608087][ T7102] loop3: detected capacity change from 0 to 4096 [ 318.666657][ T7102] ntfs3: Unknown parameter 'veth0_to_team' [ 318.789417][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.852998][ T7097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.859379][ T7097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 318.934229][ T7097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.940670][ T7097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 319.026229][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.039173][ T7097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.045811][ T7097] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 319.128808][ T7097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.135272][ T7097] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 319.172008][ T7097] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 319.184718][ T7113] 9p: Unknown access argument 18446744073709551615: -34 [ 319.207223][ T7097] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.214840][ T7097] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 319.299277][ T7097] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 319.374965][ T5869] usb 6-1: USB disconnect, device number 2 [ 319.563177][ T6924] Bluetooth: hci0: command 0x0406 tx timeout [ 319.602040][ T5865] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 319.698097][ T7118] loop1: detected capacity change from 0 to 1764 [ 319.745774][ T7118] iso9660: Unknown parameter '‚bsector' [ 319.827490][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.841107][ T5865] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 319.851776][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.035674][ T5865] usb 1-1: config 0 descriptor?? [ 320.075390][ T5865] usb 1-1: bad CDC descriptors [ 320.263395][ T5865] usb 1-1: USB disconnect, device number 14 [ 320.713451][ T5869] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 320.902211][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 320.914087][ T5865] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 320.954558][ T5869] usb 4-1: config 5 has an invalid interface number: 197 but max is 1 [ 320.963543][ T5869] usb 4-1: config 5 has an invalid interface number: 174 but max is 1 [ 320.975122][ T5869] usb 4-1: config 5 has no interface number 0 [ 320.982420][ T5869] usb 4-1: config 5 has no interface number 1 [ 320.988692][ T5869] usb 4-1: config 5 interface 197 has no altsetting 0 [ 320.996289][ T5869] usb 4-1: config 5 interface 174 has no altsetting 0 [ 321.002239][ T6924] Bluetooth: hci2: command 0x0406 tx timeout [ 321.083956][ T6924] Bluetooth: hci3: command 0x0406 tx timeout [ 321.094508][ T7137] netlink: 104 bytes leftover after parsing attributes in process `syz.5.295'. [ 321.127042][ T5865] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.137454][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.144631][ T5865] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 321.154019][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.174699][ T6924] Bluetooth: hci1: command 0x0c1a tx timeout [ 321.192862][ T5865] usb 2-1: config 0 descriptor?? [ 321.251759][ T6924] Bluetooth: hci4: command 0x0c1a tx timeout [ 321.337338][ T5869] usb 4-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=e5.59 [ 321.346802][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.355287][ T5869] usb 4-1: Product: syz [ 321.359622][ T5869] usb 4-1: Manufacturer: syz [ 321.364506][ T5869] usb 4-1: SerialNumber: syz [ 321.646182][ T6924] Bluetooth: hci0: command 0x0406 tx timeout [ 321.883357][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 321.894373][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 321.929500][ T5865] usb 2-1: USB disconnect, device number 8 [ 322.190537][ T5869] usbhid 4-1:5.174: couldn't find an input interrupt endpoint [ 322.288076][ T5869] usb 4-1: USB disconnect, device number 9 [ 322.555364][ T6967] veth0_vlan: entered promiscuous mode [ 322.623245][ T6967] veth1_vlan: entered promiscuous mode [ 322.979653][ T6967] veth0_macvtap: entered promiscuous mode [ 323.057323][ T6967] veth1_macvtap: entered promiscuous mode [ 323.087949][ T6924] Bluetooth: hci2: command 0x0406 tx timeout [ 323.161976][ T6924] Bluetooth: hci3: command 0x0406 tx timeout [ 323.293942][ T6924] Bluetooth: hci1: command 0x0c1a tx timeout [ 323.337802][ T6924] Bluetooth: hci4: command 0x0c1a tx timeout [ 323.406203][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.445776][ T7157] loop1: detected capacity change from 0 to 512 [ 323.514226][ T7157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.588607][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.607942][ T7157] EXT4-fs (loop1): filesystem is read-only [ 323.672424][ T7157] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 323.844282][ T4510] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.864277][ T7157] EXT4-fs (loop1): filesystem is read-only [ 323.870322][ T7157] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.900843][ T7161] loop0: detected capacity change from 0 to 32768 [ 323.911409][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 323.940883][ T7161] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.302 (7161) [ 323.962463][ T7157] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.299: iget: bad i_size value: 648518346341360424 [ 323.978481][ T4090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.007263][ T7161] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.018078][ T7161] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 324.027290][ T7161] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 324.082593][ T4090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.103732][ T7157] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.299: couldn't read orphan inode 16 (err -117) [ 324.128092][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.143438][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.154912][ T5865] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 324.164583][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.206258][ T7157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 324.227061][ T4090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.270830][ T7157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.465064][ T5865] usb 6-1: config 0 descriptor?? [ 324.558027][ T7161] BTRFS info (device loop0): rebuilding free space tree [ 324.610009][ T7161] BTRFS info (device loop0): disabling free space tree [ 324.617386][ T7161] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 324.627583][ T7161] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 324.710927][ T7161] BTRFS info (device loop0): enabling ssd optimizations [ 324.718530][ T7161] BTRFS info (device loop0): turning on sync discard [ 324.725770][ T7161] BTRFS info (device loop0): enabling disk space caching [ 324.733315][ T7161] BTRFS info (device loop0): force clearing of disk cache [ 324.740919][ T7161] BTRFS info (device loop0): enabling auto defrag [ 324.747855][ T7161] BTRFS info (device loop0): doing ref verification [ 324.977213][ T5865] hid-led 0003:1D34:000A.0003: item fetching failed at offset 2/3 [ 325.040821][ T5865] hid-led 0003:1D34:000A.0003: probe with driver hid-led failed with error -22 [ 325.157161][ T5865] usb 6-1: USB disconnect, device number 3 [ 325.355514][ T6924] Bluetooth: hci1: command 0x0c1a tx timeout [ 325.402772][ T6924] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.543434][ T5811] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.032078][ T1570] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 327.268910][ T1570] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.279253][ T1570] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.286390][ T1570] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 327.295878][ T1570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.465396][ T1570] usb 4-1: config 0 descriptor?? [ 328.065121][ T1570] usbhid 4-1:0.0: can't add hid device: -71 [ 328.071946][ T1570] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 328.184538][ T1570] usb 4-1: USB disconnect, device number 10 [ 328.402606][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 328.674436][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 328.686422][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 141, setting to 64 [ 328.804168][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 328.813763][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.822786][ T9] usb 6-1: Product: syz [ 328.827209][ T9] usb 6-1: Manufacturer: syz [ 328.832211][ T9] usb 6-1: SerialNumber: syz [ 328.934961][ T9] usb 6-1: config 0 descriptor?? [ 328.945423][ T7225] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 328.971231][ T7237] overlay: ./file1 is not a directory [ 328.994423][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 329.000543][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 329.017356][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 329.039687][ T7232] loop0: detected capacity change from 0 to 512 [ 329.078412][ T7232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 329.142561][ T7232] EXT4-fs (loop0): filesystem is read-only [ 329.197205][ T7232] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 329.416400][ T7232] EXT4-fs (loop0): filesystem is read-only [ 329.423320][ T7232] EXT4-fs (loop0): orphan cleanup on readonly fs [ 329.454266][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 329.531398][ T7232] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.314: iget: bad i_size value: 648518346341360424 [ 329.601447][ T7232] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.314: couldn't read orphan inode 16 (err -117) [ 329.626324][ T7232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 329.865248][ T5865] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 330.143374][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.156013][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.166354][ T5865] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 330.175736][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.276556][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.425957][ T5865] usb 4-1: config 0 descriptor?? [ 330.619127][ T1570] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 330.706131][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.319'. [ 330.886763][ T5865] hid-led 0003:1D34:000A.0004: item fetching failed at offset 2/3 [ 330.908113][ T5865] hid-led 0003:1D34:000A.0004: probe with driver hid-led failed with error -22 [ 330.920469][ T1570] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.029350][ T1570] usb 2-1: config 3 has an invalid interface number: 216 but max is 3 [ 331.037926][ T1570] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 331.048544][ T1570] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 331.057734][ T1570] usb 2-1: config 3 has no interface number 0 [ 331.064164][ T1570] usb 2-1: config 3 interface 216 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 331.077797][ T1570] usb 2-1: config 3 interface 216 has no altsetting 0 [ 331.094227][ T5865] usb 4-1: USB disconnect, device number 11 [ 331.384882][ T1570] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=6b.97 [ 331.394326][ T1570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.403313][ T1570] usb 2-1: Product: syz [ 331.407652][ T1570] usb 2-1: Manufacturer: syz [ 331.415711][ T1570] usb 2-1: SerialNumber: syz [ 331.832001][ T1570] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.216/input/input7 [ 331.943675][ T1570] usb 2-1: USB disconnect, device number 9 [ 332.739725][ T7278] FAULT_INJECTION: forcing a failure. [ 332.739725][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 332.756412][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.0.324 Not tainted syzkaller #0 PREEMPT(none) [ 332.756550][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.756625][ T7278] Call Trace: [ 332.756673][ T7278] [ 332.756722][ T7278] __dump_stack+0x26/0x30 [ 332.756882][ T7278] dump_stack_lvl+0x1df/0x270 [ 332.757041][ T7278] dump_stack+0x1e/0x25 [ 332.757171][ T7278] should_fail_ex+0x7dc/0x8a0 [ 332.757327][ T7278] should_failslab+0x15b/0x200 [ 332.757483][ T7278] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 332.757657][ T7278] ? __alloc_skb+0x1e0/0x7d0 [ 332.757811][ T7278] ? kmsan_get_metadata+0xfb/0x160 [ 332.757956][ T7278] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 332.758111][ T7278] __alloc_skb+0x1e0/0x7d0 [ 332.758276][ T7278] netlink_alloc_large_skb+0xa5/0x280 [ 332.758448][ T7278] netlink_sendmsg+0xaea/0x1250 [ 332.758642][ T7278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.758805][ T7278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.758992][ T7278] __sock_sendmsg+0x333/0x3d0 [ 332.759135][ T7278] ____sys_sendmsg+0x7e0/0xd80 [ 332.759342][ T7278] ___sys_sendmsg+0x271/0x3b0 [ 332.759536][ T7278] ? __rcu_read_unlock+0x6d/0xd0 [ 332.759674][ T7278] ? __fget_files+0x3b4/0x4a0 [ 332.759841][ T7278] ? __fget_files+0x3b9/0x4a0 [ 332.760010][ T7278] ? kmsan_get_metadata+0xfb/0x160 [ 332.760158][ T7278] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 332.760324][ T7278] __x64_sys_sendmsg+0x211/0x3e0 [ 332.760511][ T7278] ? kmsan_get_metadata+0xfb/0x160 [ 332.760679][ T7278] x64_sys_call+0x1dfd/0x3e20 [ 332.760851][ T7278] do_syscall_64+0xd9/0x210 [ 332.760978][ T7278] ? irqentry_exit+0x16/0x60 [ 332.761137][ T7278] ? clear_bhb_loop+0x40/0x90 [ 332.761278][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.761421][ T7278] RIP: 0033:0x7f780738ec29 [ 332.761516][ T7278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.761626][ T7278] RSP: 002b:00007f780814b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.761755][ T7278] RAX: ffffffffffffffda RBX: 00007f78075d5fa0 RCX: 00007f780738ec29 [ 332.761850][ T7278] RDX: 0000000004004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 332.761939][ T7278] RBP: 00007f780814b090 R08: 0000000000000000 R09: 0000000000000000 [ 332.762024][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.762102][ T7278] R13: 00007f78075d6038 R14: 00007f78075d5fa0 R15: 00007ffe841840c8 [ 332.762226][ T7278] [ 332.900489][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.037603][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.213358][ T9] usb 6-1: USB disconnect, device number 4 [ 333.349113][ T7285] loop5: detected capacity change from 0 to 512 [ 333.407814][ T6310] udevd[6310]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 333.421948][ T1570] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 333.444236][ T7285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.492453][ T6310] udevd[6310]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 333.557782][ T7285] EXT4-fs (loop5): filesystem is read-only [ 333.647380][ T7285] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 333.683596][ T7288] loop6: detected capacity change from 0 to 7 [ 333.688408][ T1570] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.700032][ T1570] usb 4-1: config 0 interface 0 has no altsetting 0 [ 333.706965][ T1570] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 333.716351][ T1570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.732878][ T7288] Dev loop6: unable to read RDB block 7 [ 333.738801][ T7288] loop6: AHDI p3 p4 [ 333.743186][ T7288] loop6: partition table partially beyond EOD, truncated [ 333.751229][ T7288] loop6: p3 start 1886353253 is beyond EOD, truncated [ 333.817478][ T4031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.826497][ T4031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.836783][ T7285] EXT4-fs (loop5): filesystem is read-only [ 333.843201][ T7285] EXT4-fs (loop5): orphan cleanup on readonly fs [ 333.930071][ T7285] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #16: comm syz.5.327: iget: bad i_size value: 648518346341360424 [ 333.950854][ T1570] usb 4-1: config 0 descriptor?? [ 334.014770][ T7285] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.327: couldn't read orphan inode 16 (err -117) [ 334.104046][ T7285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 334.546604][ T1570] usbhid 4-1:0.0: can't add hid device: -71 [ 334.555255][ T1570] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 334.613622][ T1570] usb 4-1: USB disconnect, device number 12 [ 334.702809][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 334.724410][ T6691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.755903][ T7295] loop6: detected capacity change from 0 to 1024 [ 334.869310][ T9] usb 2-1: device descriptor read/64, error -71 [ 335.152547][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 335.342426][ T9] usb 2-1: device descriptor read/64, error -71 [ 335.363220][ T57] hfsplus: b-tree write err: -5, ino 4 [ 335.382231][ T5865] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 335.480617][ T9] usb usb2-port1: attempt power cycle [ 335.619349][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.632209][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.642426][ T5865] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 335.651808][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.674848][ T7306] Set syz1 is full, maxelem 65536 reached [ 335.744211][ T5865] usb 6-1: config 0 descriptor?? [ 335.778263][ T7308] binder: 7307:7308 unknown command 0 [ 335.783997][ T7308] binder: 7307:7308 ioctl c0306201 200000000080 returned -22 [ 335.928876][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 336.007624][ T9] usb 2-1: device descriptor read/8, error -71 [ 336.252416][ T5865] hid-led 0003:1D34:000A.0005: item fetching failed at offset 2/3 [ 336.292080][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 336.309815][ T5865] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -22 [ 336.345351][ T9] usb 2-1: device descriptor read/8, error -71 [ 336.471894][ T5865] usb 6-1: USB disconnect, device number 5 [ 336.474402][ T9] usb usb2-port1: unable to enumerate USB device [ 336.753156][ T7323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.337'. [ 336.826130][ T7320] loop6: detected capacity change from 0 to 7 [ 336.876159][ T7320] Dev loop6: unable to read RDB block 7 [ 336.883018][ T7320] loop6: AHDI p3 p4 [ 336.887319][ T7320] loop6: partition table partially beyond EOD, truncated [ 336.895554][ T7320] loop6: p3 start 1886353253 is beyond EOD, truncated [ 337.942747][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 338.032425][ T7326] loop6: detected capacity change from 0 to 32768 [ 338.045718][ T7326] BTRFS warning: excessive commit interval 2147483647, use with care [ 338.088691][ T7326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.339 (7326) [ 338.114722][ T7326] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.125328][ T7326] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 338.132989][ T7337] loop0: detected capacity change from 0 to 512 [ 338.134274][ T7326] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 338.174573][ T7337] EXT4-fs: Ignoring removed nobh option [ 338.287744][ T7337] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 338.433624][ T7326] BTRFS info (device loop6): rebuilding free space tree [ 338.552674][ T7337] EXT4-fs (loop0): orphan cleanup on readonly fs [ 338.554310][ T7326] BTRFS info (device loop6): disabling free space tree [ 338.567368][ T7326] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 338.582336][ T7326] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 338.621113][ T7326] BTRFS info (device loop6): setting nodatasum [ 338.626330][ T7337] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.342: bad orphan inode 15 [ 338.628161][ T7326] BTRFS info (device loop6): enabling ssd optimizations [ 338.644745][ T7326] BTRFS info (device loop6): turning off barriers [ 338.651333][ T7326] BTRFS info (device loop6): turning on flush-on-commit [ 338.652225][ T1570] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 338.658593][ T7326] BTRFS info (device loop6): enabling disk space caching [ 338.673496][ T7326] BTRFS info (device loop6): force clearing of disk cache [ 338.685640][ T7326] BTRFS info (device loop6): doing ref verification [ 338.694142][ T7326] BTRFS info (device loop6): max_inline set to 0 [ 338.762151][ T7337] ext4_test_bit(bit=14, block=18) = 1 [ 338.767714][ T7337] is_bad_inode(inode)=0 [ 338.772545][ T7337] NEXT_ORPHAN(inode)=1023 [ 338.777001][ T7337] max_ino=32 [ 338.780312][ T7337] i_nlink=0 [ 338.893555][ T7337] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.342: bg 0: block 161: padding at end of block bitmap is not set [ 338.995114][ T1570] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.005399][ T1570] usb 2-1: config 0 interface 0 has no altsetting 0 [ 339.012528][ T1570] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 339.021883][ T1570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.149399][ T7337] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 339.252720][ T7337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 339.305853][ T7360] loop5: detected capacity change from 0 to 1024 [ 339.408266][ T1570] usb 2-1: config 0 descriptor?? [ 339.498347][ T7361] loop3: detected capacity change from 0 to 1024 [ 340.257709][ T7361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.478089][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.490610][ T1570] usbhid 2-1:0.0: can't add hid device: -71 [ 340.498896][ T1570] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 340.578308][ T6967] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 340.606133][ T1570] usb 2-1: USB disconnect, device number 14 [ 340.803137][ T5865] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 341.049316][ T74] hfsplus: b-tree write err: -5, ino 4 [ 341.064775][ T5865] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 341.073490][ T5865] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 341.084061][ T5865] usb 4-1: config 0 has no interface number 0 [ 341.168285][ T5865] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 341.177845][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.186284][ T5865] usb 4-1: Product: syz [ 341.190635][ T5865] usb 4-1: Manufacturer: syz [ 341.195656][ T5865] usb 4-1: SerialNumber: syz [ 341.223549][ T5865] usb 4-1: config 0 descriptor?? [ 341.530364][ T5865] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 341.760454][ T7361] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.345: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 341.938685][ T5865] usb 4-1: USB disconnect, device number 13 [ 342.114481][ T7381] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 342.125236][ T7381] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 342.412774][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 342.612282][ T1570] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 342.635246][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.647289][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.657531][ T5893] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 342.666929][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.759570][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.818306][ T1570] usb 7-1: config 2 has an invalid interface number: 211 but max is 0 [ 342.824496][ T5893] usb 2-1: config 0 descriptor?? [ 342.827175][ T1570] usb 7-1: config 2 has no interface number 0 [ 342.838167][ T1570] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 342.849632][ T1570] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 4 [ 342.861165][ T1570] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1023 [ 343.106738][ T1570] usb 7-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 343.116366][ T1570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.124747][ T1570] usb 7-1: Product: syz [ 343.129089][ T1570] usb 7-1: Manufacturer: syz [ 343.133967][ T1570] usb 7-1: SerialNumber: syz [ 343.270582][ T5893] hid-led 0003:1D34:000A.0006: unknown main item tag 0x3 [ 343.278074][ T5893] hid-led 0003:1D34:000A.0006: item fetching failed at offset 2/3 [ 343.364382][ T7374] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 343.395418][ T1570] em28xx 7-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 343.407559][ T1570] em28xx 7-1:2.211: Device initialization failed. [ 343.414340][ T1570] em28xx 7-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 343.428382][ T5893] hid-led 0003:1D34:000A.0006: probe with driver hid-led failed with error -22 [ 343.476669][ T7386] loop5: detected capacity change from 0 to 1024 [ 343.535556][ T7390] sctp: [Deprecated]: syz.3.351 (pid 7390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.535556][ T7390] Use struct sctp_sack_info instead [ 343.563332][ T5893] usb 2-1: USB disconnect, device number 15 [ 344.258395][ T7374] loop6: detected capacity change from 0 to 32768 [ 344.261117][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.352'. [ 344.280061][ T7374] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.347 (7374) [ 344.302577][ T7374] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.317340][ T7374] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 344.327490][ T7374] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 344.449571][ T7393] loop3: detected capacity change from 0 to 2048 [ 344.607060][ T7374] BTRFS info (device loop6): rebuilding free space tree [ 344.682904][ T7374] BTRFS info (device loop6): disabling free space tree [ 344.690143][ T7374] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 344.700136][ T7374] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 344.736544][ T7374] BTRFS info (device loop6): enabling ssd optimizations [ 344.743928][ T7374] BTRFS info (device loop6): using spread ssd allocation scheme [ 344.751900][ T7374] BTRFS info (device loop6): turning off barriers [ 344.758498][ T7374] BTRFS info (device loop6): enabling disk space caching [ 344.766277][ T7374] BTRFS info (device loop6): force clearing of disk cache [ 344.849512][ T1570] usb 7-1: USB disconnect, device number 2 [ 344.874092][ T6967] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.910054][ T7393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.249908][ T7416] loop1: detected capacity change from 0 to 256 [ 345.294310][ T7419] FAULT_INJECTION: forcing a failure. [ 345.294310][ T7419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.309085][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(none) [ 345.309219][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.309298][ T7419] Call Trace: [ 345.309344][ T7419] [ 345.309394][ T7419] __dump_stack+0x26/0x30 [ 345.309551][ T7419] dump_stack_lvl+0x1df/0x270 [ 345.309719][ T7419] dump_stack+0x1e/0x25 [ 345.309864][ T7419] should_fail_ex+0x7dc/0x8a0 [ 345.310029][ T7419] should_fail+0x2a/0x40 [ 345.310152][ T7419] should_fail_usercopy+0x2e/0x40 [ 345.310296][ T7419] _copy_from_user+0x33/0x100 [ 345.310452][ T7419] ____sys_sendmsg+0x472/0xd80 [ 345.310657][ T7419] ___sys_sendmsg+0x271/0x3b0 [ 345.310885][ T7419] ? kmsan_get_metadata+0xfb/0x160 [ 345.311041][ T7419] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.311204][ T7419] __x64_sys_sendmsg+0x211/0x3e0 [ 345.311394][ T7419] ? kmsan_get_metadata+0xfb/0x160 [ 345.311563][ T7419] x64_sys_call+0x1dfd/0x3e20 [ 345.311720][ T7419] do_syscall_64+0xd9/0x210 [ 345.311839][ T7419] ? irqentry_exit+0x16/0x60 [ 345.312003][ T7419] ? clear_bhb_loop+0x40/0x90 [ 345.312139][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.312271][ T7419] RIP: 0033:0x7f780738ec29 [ 345.312368][ T7419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.312481][ T7419] RSP: 002b:00007f780814b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.312605][ T7419] RAX: ffffffffffffffda RBX: 00007f78075d5fa0 RCX: 00007f780738ec29 [ 345.312714][ T7419] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 345.312797][ T7419] RBP: 00007f780814b090 R08: 0000000000000000 R09: 0000000000000000 [ 345.312881][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.312964][ T7419] R13: 00007f78075d6038 R14: 00007f78075d5fa0 R15: 00007ffe841840c8 [ 345.313089][ T7419] [ 345.324822][ T7416] exfat: Deprecated parameter 'utf8' [ 345.339757][ T1570] IPVS: starting estimator thread 0... [ 345.494477][ T7420] IPVS: using max 240 ests per chain, 12000 per kthread [ 345.808211][ T7416] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 345.994789][ T6691] ===================================================== [ 346.002073][ T6691] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x9a6/0x27a0 [ 346.009419][ T6691] hfsplus_uni2asc+0x9a6/0x27a0 [ 346.014866][ T6691] hfsplus_readdir+0xd60/0x1a70 [ 346.020407][ T6691] iterate_dir+0x452/0x620 [ 346.025172][ T6691] __se_sys_getdents64+0x17e/0x550 [ 346.030439][ T6691] __x64_sys_getdents64+0x97/0xe0 [ 346.035810][ T6691] x64_sys_call+0x3a14/0x3e20 [ 346.040666][ T6691] do_syscall_64+0xd9/0x210 [ 346.045521][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.051763][ T6691] [ 346.057126][ T6691] Uninit was created at: [ 346.062759][ T6691] __kmalloc_noprof+0x95f/0x1310 [ 346.067863][ T6691] hfsplus_find_init+0x90/0x1d0 [ 346.073072][ T6691] hfsplus_readdir+0x1dc/0x1a70 [ 346.078097][ T6691] iterate_dir+0x452/0x620 [ 346.082790][ T6691] __se_sys_getdents64+0x17e/0x550 [ 346.088055][ T6691] __x64_sys_getdents64+0x97/0xe0 [ 346.093405][ T6691] x64_sys_call+0x3a14/0x3e20 [ 346.098270][ T6691] do_syscall_64+0xd9/0x210 [ 346.103624][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.109675][ T6691] [ 346.112194][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 346.126148][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.138293][ T6691] ===================================================== [ 346.145558][ T6691] Disabling lock debugging due to kernel taint [ 346.151915][ T6691] Kernel panic - not syncing: kmsan.panic set ... [ 346.158459][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(none) [ 346.169678][ T6691] Tainted: [B]=BAD_PAGE [ 346.173916][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.184086][ T6691] Call Trace: [ 346.187468][ T6691] [ 346.190535][ T6691] __dump_stack+0x26/0x30 [ 346.195038][ T6691] dump_stack_lvl+0x53/0x270 [ 346.199806][ T6691] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 346.205826][ T6691] dump_stack+0x1e/0x25 [ 346.210153][ T6691] vpanic+0x361/0xc50 [ 346.214409][ T6691] panic+0x15d/0x160 [ 346.218513][ T6691] kmsan_report+0x31c/0x320 [ 346.223194][ T6691] ? kmsan_get_metadata+0xfb/0x160 [ 346.228469][ T6691] ? __msan_warning+0x1b/0x30 [ 346.233287][ T6691] ? hfsplus_uni2asc+0x9a6/0x27a0 [ 346.238661][ T6691] ? hfsplus_readdir+0xd60/0x1a70 [ 346.243871][ T6691] ? iterate_dir+0x452/0x620 [ 346.248660][ T6691] ? __se_sys_getdents64+0x17e/0x550 [ 346.254112][ T6691] ? __x64_sys_getdents64+0x97/0xe0 [ 346.259474][ T6691] ? x64_sys_call+0x3a14/0x3e20 [ 346.264527][ T6691] ? do_syscall_64+0xd9/0x210 [ 346.269355][ T6691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.275590][ T6691] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 346.281995][ T6691] ? kmsan_get_metadata+0xfb/0x160 [ 346.287277][ T6691] ? kmsan_get_metadata+0xfb/0x160 [ 346.292564][ T6691] ? kmsan_get_metadata+0xfb/0x160 [ 346.297845][ T6691] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 346.304240][ T6691] ? kmsan_get_metadata+0xfb/0x160 [ 346.309515][ T6691] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 346.315569][ T6691] ? utf32_to_utf8+0x3e4/0x410 [ 346.320528][ T6691] ? kmsan_get_metadata+0xfb/0x160 [ 346.325841][ T6691] __msan_warning+0x1b/0x30 [ 346.330505][ T6691] hfsplus_uni2asc+0x9a6/0x27a0 [ 346.335535][ T6691] ? __msan_memcpy+0x108/0x1c0 [ 346.340554][ T6691] hfsplus_readdir+0xd60/0x1a70 [ 346.345706][ T6691] ? aa_file_perm+0x549/0x2140 [ 346.350723][ T6691] ? kmsan_get_metadata+0xfb/0x160 [ 346.356080][ T6691] ? __pfx_hfsplus_readdir+0x10/0x10 [ 346.361640][ T6691] iterate_dir+0x452/0x620 [ 346.366226][ T6691] __se_sys_getdents64+0x17e/0x550 [ 346.371500][ T6691] ? __pfx_filldir64+0x10/0x10 [ 346.376441][ T6691] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 346.382443][ T6691] __x64_sys_getdents64+0x97/0xe0 [ 346.387792][ T6691] x64_sys_call+0x3a14/0x3e20 [ 346.392809][ T6691] do_syscall_64+0xd9/0x210 [ 346.397456][ T6691] ? irqentry_exit+0x16/0x60 [ 346.402230][ T6691] ? clear_bhb_loop+0x40/0x90 [ 346.407074][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.413120][ T6691] RIP: 0033:0x7f19075c1593 [ 346.417661][ T6691] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 346.437443][ T6691] RSP: 002b:00007fffaa1fbf08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 346.446028][ T6691] RAX: ffffffffffffffda RBX: 000055558aca9600 RCX: 00007f19075c1593 [ 346.454133][ T6691] RDX: 0000000000008000 RSI: 000055558aca9600 RDI: 0000000000000005 [ 346.462228][ T6691] RBP: 000055558aca95d4 R08: 0000000000000000 R09: 0000000000000000 [ 346.470317][ T6691] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 346.478487][ T6691] R13: 0000000000000010 R14: 000055558aca95d0 R15: 00007fffaa1fe1c0 [ 346.486620][ T6691] [ 346.490024][ T6691] Kernel Offset: disabled [ 346.494391][ T6691] Rebooting in 86400 seconds..