last executing test programs:

15m21.653402393s ago: executing program 2 (id=486):
syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x3, 0x4)
r1 = syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000002c0))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)=<r6=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d200000500"})

15m20.567618619s ago: executing program 2 (id=488):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

15m18.553385688s ago: executing program 2 (id=496):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x2e, 0x760, &(0x7f0000001100)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x33, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xffff0001}, 0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000480)={'wlan1\x00'})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0], 0x1})
close(0x3)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x9, 0x0, 0x0})

15m17.532532573s ago: executing program 2 (id=498):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
chdir(&(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

15m17.137284489s ago: executing program 2 (id=500):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0xa100}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000340)=[@request_death, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x0, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/144, 0x0, 0x2, 0x14}, @fda={0x66646185, 0xa, 0x0, 0x18}}}}], 0xfffffffffffffe97, 0x1000000, 0x0})

15m16.617641827s ago: executing program 2 (id=504):
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

15m16.131775154s ago: executing program 32 (id=504):
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

16.069384542s ago: executing program 3 (id=2612):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000300)={[{@space_cache_v1}, {@nossd_spread}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@clear_cache}, {@noacl}, {@nodatacow}, {@barrier}, {@ref_verify}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3)
sendfile(r1, r1, 0x0, 0x1000200201005)
r3 = openat(r1, 0x0, 0x105042, 0x1fe)
statx(r1, &(0x7f0000000100)='./file1\x00', 0x100, 0x777, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000001c0)={0x4, 0x7, {}, {r4}, 0x3, 0xfffffffffffffffe})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5, 0x204})
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6f5e042c})
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

12.252877788s ago: executing program 1 (id=2622):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

12.252471468s ago: executing program 4 (id=2623):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x91}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x86443, 0x0)

12.080288441s ago: executing program 1 (id=2624):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001a00), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

12.003201532s ago: executing program 4 (id=2625):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x1460, 0x5, 0x1, 0x2, 0x8000000000000000, 0x2, 0x1, 0x10000, 0x15ba9a49, 0x6, 0x9, 0x5, 0x9, 0x7fffffff, 0x10, 0x0, {0x80000000, 0x3ff}, 0x2, 0x1}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x80000001, &(0x7f00000003c0))
ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, 0x0, 0x0, r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, &(0x7f0000000100))
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008880}, 0x24000898)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})

11.790358965s ago: executing program 3 (id=2626):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x1460, 0x5, 0x1, 0x2, 0x8000000000000000, 0x2, 0x1, 0x10000, 0x15ba9a49, 0x6, 0x9, 0x5, 0x9, 0x7fffffff, 0x10, 0x0, {0x80000000, 0x3ff}, 0x2, 0x1}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x80000001, &(0x7f00000003c0))
ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r4, 0x0, r1}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, &(0x7f0000000100))
sendmsg$NFT_MSG_GETOBJ(r5, 0x0, 0x24000898)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})

10.77808532s ago: executing program 1 (id=2628):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020)

10.698216862s ago: executing program 4 (id=2629):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=")
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

9.46973919s ago: executing program 0 (id=2631):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001180)="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", 0x165)

8.330807066s ago: executing program 3 (id=2632):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x91}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x86443, 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file1\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

8.190796338s ago: executing program 1 (id=2633):
gettid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x40080)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, 0x0, 0xfffffffffffffe33, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x800000, @empty, 0x9}, 0x1c)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendto$packet(r1, &(0x7f0000000400)="205ae946", 0x4, 0x20008801, &(0x7f00000002c0)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

8.134344639s ago: executing program 4 (id=2634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
r3 = open(0x0, 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
timerfd_create(0x0, 0x0)
r5 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = open$dir(0x0, 0x80, 0x107)
symlinkat(&(0x7f0000000280)='./file1\x00', r8, &(0x7f0000000340)='./bus\x00')
syz_io_uring_submit(r6, r7, 0x0)
io_uring_enter(r5, 0x1f82, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r5, 0x2ba1, 0x9bb6, 0xb, &(0x7f0000000040)={[0xb]}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1807000000000d000000000000000000851000000200000026000000feffff859500007b0000000095", @ANYRESHEX], &(0x7f0000000400)='GPL\x00', 0x2, 0x95, &(0x7f00000004c0)=""/149, 0x41100, 0x1}, 0x94)

7.799919864s ago: executing program 3 (id=2635):
syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x28e41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x17, 0x30)

6.527784873s ago: executing program 4 (id=2636):
syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x28e41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x17, 0x30)
r4 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@rand_addr=0x64010100, 0x0, 0x3, 0x4e20, 0x4000, 0x2, 0x0, 0xa0, 0x67}, {0x0, 0x15000000000003, 0x0, 0xe, 0x7ffd, 0xffffffffffffffff, 0xfffffffffffffffe, 0xd3d}, {0x0, 0x4, 0x0, 0xfffffffffffffffa}, 0x0, 0x6e6bba, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc92}]}, &(0x7f0000000140)=0x10)
r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0xbdf)

6.08023726s ago: executing program 0 (id=2637):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x1460, 0x5, 0x1, 0x2, 0x8000000000000000, 0x2, 0x1, 0x10000, 0x15ba9a49, 0x6, 0x9, 0x5, 0x9, 0x7fffffff, 0x10, 0x0, {0x80000000, 0x3ff}, 0x2, 0x1}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x80000001, &(0x7f00000003c0))
ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, 0x0, 0x0, r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, &(0x7f0000000100))
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008880}, 0x24000898)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})

4.834008188s ago: executing program 1 (id=2638):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = fsopen(0x0, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001a00), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

4.766305429s ago: executing program 0 (id=2639):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000001, 0x80000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b0000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x48)

4.349860995s ago: executing program 0 (id=2640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r3, r3, 0x0, 0x7f03)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = timerfd_create(0x0, 0x0)
r6 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = open$dir(0x0, 0x80, 0x107)
symlinkat(&(0x7f0000000280)='./file1\x00', r9, &(0x7f0000000340)='./bus\x00')
syz_io_uring_submit(r7, r8, 0x0)
io_uring_enter(r6, 0x1f82, 0x0, 0x0, 0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000080)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1807000000000d000000000000000000851000000200000026000000feffff859500007b0000000095", @ANYRESHEX], &(0x7f0000000400)='GPL\x00', 0x2, 0x95, &(0x7f00000004c0)=""/149, 0x41100, 0x1}, 0x94)

2.564969102s ago: executing program 0 (id=2641):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x1460, 0x5, 0x1, 0x2, 0x8000000000000000, 0x2, 0x1, 0x10000, 0x15ba9a49, 0x6, 0x9, 0x5, 0x9, 0x7fffffff, 0x10, 0x0, {0x80000000, 0x3ff}, 0x2, 0x1}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x80000001, &(0x7f00000003c0))
ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r4, 0x0, r1}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, &(0x7f0000000100))
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x24000898)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})

2.444846114s ago: executing program 3 (id=2642):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020)

2.110302768s ago: executing program 1 (id=2643):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1000000, 0x8010002})

1.142712173s ago: executing program 0 (id=2644):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_getattr(r0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x3a)
r8 = dup(r7)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r2, r5, 0x27, 0x2004, 0x0, @value=r6}, 0x20)
bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
munlockall()

565.31µs ago: executing program 4 (id=2645):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
listen(r1, 0x100)

0s ago: executing program 3 (id=2646):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000d0"])

kernel console output (not intermixed with test programs):

lowed only from OUTPUT/FORWARD/POSTROUTING chains
[  686.349918][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  686.356338][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  687.949083][ T1199] libceph: connect (1)[c::]:6789 error -101
[  687.955153][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[  688.222691][ T1199] libceph: connect (1)[c::]:6789 error -101
[  688.229725][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[  688.743222][ T1199] libceph: connect (1)[c::]:6789 error -101
[  688.779462][T11131] ceph: No mds server is up or the cluster is laggy
[  688.780138][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[  691.741416][T11166] overlayfs: failed to resolve './file1': -2
[  692.983132][T11175] ksmbd: Unknown IPC event: 6, ignore.
[  694.428975][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1410'.
[  694.438175][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1410'.
[  698.702251][T11204] overlayfs: failed to resolve './file1': -2
[  701.427139][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'.
[  701.535468][T11240] overlayfs: failed to resolve './file1': -2
[  701.819222][ T5882] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  702.115972][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.141111][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  702.180589][ T5882] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  702.219084][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  702.242798][ T5882] usb 4-1: SerialNumber: syz
[  702.545127][ T5882] usb 4-1: 0:2 : does not exist
[  702.691095][ T5882] usb 4-1: USB disconnect, device number 41
[  702.987273][T10267] udevd[10267]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  704.487515][T11277] fuse: Unknown parameter 'grou00000000000000000000'
[  705.466298][T11283] overlayfs: failed to resolve './file0': -2
[  706.899494][T11290] overlayfs: failed to resolve './file1': -2
[  709.079154][ T5882] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  709.311247][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  709.334456][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  709.355116][ T5882] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  709.372733][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  709.391753][ T5882] usb 2-1: SerialNumber: syz
[  709.733938][ T5882] usb 2-1: 0:2 : does not exist
[  709.869165][ T5882] usb 2-1: USB disconnect, device number 36
[  710.036207][T10267] udevd[10267]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  711.715461][T11326] random: crng reseeded on system resumption
[  713.474414][T11338] fuse: Unknown parameter 'group_i00000000000000000000'
[  716.900668][T11364] overlayfs: failed to resolve './file1': -2
[  717.971864][T11371] overlayfs: failed to resolve './file0': -2
[  718.832656][T11377] fuse: Unknown parameter 'group_i00000000000000000000'
[  721.025112][T11393] misc userio: Invalid payload size
[  721.045548][T11393] misc userio: No port type given on /dev/userio
[  721.129607][T11396] misc userio: The device must be registered before sending interrupts
[  722.712074][T11408] overlayfs: failed to resolve './file0': -2
[  729.788310][T11461] overlayfs: failed to resolve './file1': -2
[  731.832065][T11490] bridge_slave_0: left allmulticast mode
[  731.838072][T11490] bridge_slave_0: left promiscuous mode
[  731.891720][T11490] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.121495][T11490] bridge_slave_1: left allmulticast mode
[  732.127404][T11490] bridge_slave_1: left promiscuous mode
[  732.135456][T11490] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.150819][T11490] bond0: (slave bond_slave_0): Releasing backup interface
[  732.186182][T11490] bond0: (slave bond_slave_1): Releasing backup interface
[  732.255813][T11490] team0: Port device team_slave_0 removed
[  732.361713][T11490] team0: Port device team_slave_1 removed
[  732.400836][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  732.416059][T11490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  732.445834][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  732.463317][T11490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  734.668812][ T5853] libceph: connect (1)[c::]:6789 error -101
[  734.675245][ T5853] libceph: mon0 (1)[c::]:6789 connect error
[  735.089856][ T5853] libceph: connect (1)[c::]:6789 error -101
[  735.142575][ T5853] libceph: mon0 (1)[c::]:6789 connect error
[  735.266223][T11510] ceph: No mds server is up or the cluster is laggy
[  735.728789][   T28] audit: type=1326 audit(1751630772.758:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c138e929 code=0x7fc00000
[  742.549263][ T5853] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  742.571151][T11576] fuse: Bad value for 'user_id'
[  743.554613][ T5853] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  743.599021][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.617399][ T5853] usb 2-1: Product: syz
[  743.627539][ T5853] usb 2-1: Manufacturer: syz
[  743.644951][ T5853] usb 2-1: SerialNumber: syz
[  743.776476][ T5853] usb 2-1: config 0 descriptor??
[  744.144587][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  745.647274][ T5853] gspca_sunplus: reg_r err -110
[  745.992296][  T787] libceph: connect (1)[c::]:6789 error -101
[  746.014651][  T787] libceph: mon0 (1)[c::]:6789 connect error
[  746.043923][  T787] libceph: connect (1)[c::]:6789 error -101
[  746.071588][  T787] libceph: mon0 (1)[c::]:6789 connect error
[  746.223404][T11595] ceph: No mds server is up or the cluster is laggy
[  746.782385][ T5838] usb 2-1: USB disconnect, device number 37
[  747.534260][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  747.540881][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  748.191154][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'.
[  748.314935][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1528'.
[  749.044272][T11622] fuse: Bad value for 'user_id'
[  750.479086][T11627] misc userio: Invalid payload size
[  750.560755][T11633] misc userio: The device must be registered before sending interrupts
[  752.041334][T11654] fuse: Bad value for 'user_id'
[  754.599035][T11671] ceph: No mds server is up or the cluster is laggy
[  755.875374][T11699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'.
[  755.884616][T11699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'.
[  758.619141][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1554'.
[  758.628315][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'.
[  761.014753][T11739] random: crng reseeded on system resumption
[  761.285750][ T5853] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  762.023913][ T5853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  762.054851][ T5853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  762.086757][ T5853] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  762.115124][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  762.132819][ T5853] usb 2-1: SerialNumber: syz
[  762.380463][ T5853] usb 2-1: 0:2 : does not exist
[  762.432314][ T5853] usb 2-1: USB disconnect, device number 38
[  762.564347][T11669] udevd[11669]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  769.858320][T11808] ceph: No mds server is up or the cluster is laggy
[  770.911566][T11823] random: crng reseeded on system resumption
[  773.738268][T11848] fuse: Bad value for 'fd'
[  779.469321][T11902] overlayfs: failed to resolve './file0': -2
[  782.908582][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1618'.
[  784.165555][T11948] random: crng reseeded on system resumption
[  786.696042][T11971] input: syz1 as /devices/virtual/input/input42
[  788.670379][ T1199] libceph: connect (1)[c::]:6789 error -101
[  788.689083][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[  788.832732][T11990] ceph: No mds server is up or the cluster is laggy
[  789.726451][T12010] netlink: 'syz.4.1637': attribute type 13 has an invalid length.
[  790.786649][T12015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'.
[  790.797304][T12015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'.
[  794.956469][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'.
[  794.966045][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'.
[  801.374341][T12122] fuse: Invalid rootmode
[  803.622424][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'.
[  803.694284][T12133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1672'.
[  805.848682][ T5882] libceph: connect (1)[c::]:6789 error -101
[  805.903614][T12156] random: crng reseeded on system resumption
[  805.936881][T12153] ceph: No mds server is up or the cluster is laggy
[  805.973268][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  807.100364][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1680'.
[  808.984371][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  808.990928][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  809.258769][ T5882] libceph: connect (1)[c::]:6789 error -101
[  809.268356][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  809.533047][ T5882] libceph: connect (1)[c::]:6789 error -101
[  809.543282][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  809.584832][T12189] ceph: No mds server is up or the cluster is laggy
[  810.370104][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1694'.
[  811.381089][ T5101] Bluetooth: hci2: command 0x0406 tx timeout
[  812.994377][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1705'.
[  813.680127][ T5853] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  813.989260][ T5853] usb 5-1: Using ep0 maxpacket: 8
[  814.043839][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  814.090513][ T5853] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  814.100041][ T5853] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  814.109583][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.127523][ T5853] usb 5-1: config 0 descriptor??
[  814.454068][T12240] ceph: No mds server is up or the cluster is laggy
[  815.138124][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1709'.
[  815.149461][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1709'.
[  816.059110][ T5882] usb 5-1: USB disconnect, device number 8
[  816.187476][T12270] "syz.1.1715" (12270) uses obsolete ecb(arc4) skcipher
[  816.417772][T12272] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  816.444578][T12272] CIFS: Unable to determine destination address
[  818.192279][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1720'.
[  818.202489][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1720'.
[  818.859568][ T5853] libceph: connect (1)[c::]:6789 error -101
[  818.878698][ T5853] libceph: mon0 (1)[c::]:6789 connect error
[  819.207082][ T8883] libceph: connect (1)[c::]:6789 error -101
[  819.214223][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[  819.221438][T12293] ceph: No mds server is up or the cluster is laggy
[  820.967419][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'.
[  824.046848][ T8883] libceph: connect (1)[c::]:6789 error -101
[  824.141421][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[  824.475183][ T8883] libceph: connect (1)[c::]:6789 error -101
[  824.541958][T12341] ceph: No mds server is up or the cluster is laggy
[  824.594797][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[  825.926538][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'.
[  827.650497][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1745'.
[  827.666586][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1745'.
[  829.578419][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'.
[  834.511007][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'.
[  835.012780][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1759'.
[  835.022829][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1759'.
[  837.161387][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'.
[  839.221660][T12476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'.
[  839.231000][T12476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'.
[  841.160962][T12497] "syz.3.1780" (12497) uses obsolete ecb(arc4) skcipher
[  841.963876][T12500] CIFS: Unable to determine destination address
[  844.364379][T12516] 9pnet_fd: Insufficient options for proto=fd
[  847.101328][T12555] 9pnet_fd: Insufficient options for proto=fd
[  847.565389][ T5838] libceph: connect (1)[c::]:6789 error -101
[  847.595847][ T5838] libceph: mon0 (1)[c::]:6789 connect error
[  847.889491][ T5838] libceph: connect (1)[c::]:6789 error -101
[  847.924134][T12563] ceph: No mds server is up or the cluster is laggy
[  847.939607][ T5838] libceph: mon0 (1)[c::]:6789 connect error
[  850.130275][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1808'.
[  850.148727][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1808'.
[  852.749101][ T1199] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  852.850233][T12627] fuse: Unknown parameter 'user_id00000000000000000000'
[  853.029130][ T1199] usb 2-1: Using ep0 maxpacket: 8
[  853.706286][ T1199] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  853.733578][ T1199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.744418][ T1199] usb 2-1: Product: syz
[  853.748631][ T1199] usb 2-1: Manufacturer: syz
[  853.753371][ T1199] usb 2-1: SerialNumber: syz
[  853.771815][ T1199] usb 2-1: config 0 descriptor??
[  853.789357][ T1199] gspca_main: sq930x-2.14.0 probing 2770:930c
[  853.991955][T12635] "syz.4.1824" (12635) uses obsolete ecb(arc4) skcipher
[  854.879953][T12638] CIFS: Unable to determine destination address
[  854.909678][ T1199] gspca_sq930x: reg_r 001f failed -110
[  854.937080][ T1199] sq930x: probe of 2-1:0.0 failed with error -110
[  857.472335][ T5838] usb 2-1: USB disconnect, device number 39
[  857.707775][T12666] fuse: Unknown parameter 'user_id00000000000000000000'
[  859.805105][T12676] "syz.1.1835" (12676) uses obsolete ecb(arc4) skcipher
[  860.013369][T12680] CIFS: Unable to determine destination address
[  864.043442][T12712] fuse: Bad value for 'fd'
[  868.459118][ T1199] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  868.654899][T12747] fuse: Bad value for 'fd'
[  868.957484][ T1199] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  868.986941][ T1199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  869.880353][ T1199] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  869.933117][ T1199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  870.051553][ T1199] usb 5-1: SerialNumber: syz
[  870.195702][ T1199] usb 5-1: 0:2 : does not exist
[  870.347045][ T1199] usb 5-1: USB disconnect, device number 9
[  870.480081][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  870.492555][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  872.170698][T12757] udevd[12757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  874.822716][  T787] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  875.151191][  T787] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  875.167058][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.313258][  T787] usb 2-1: Product: syz
[  875.334222][  T787] usb 2-1: Manufacturer: syz
[  875.341117][  T787] usb 2-1: SerialNumber: syz
[  875.365773][  T787] usb 2-1: config 0 descriptor??
[  875.386165][  T787] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  877.185589][  T787] gspca_sunplus: reg_r err -110
[  881.001722][T12843] random: crng reseeded on system resumption
[  884.618974][ T1199] usb 2-1: USB disconnect, device number 40
[  891.250645][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1901'.
[  891.481550][T12923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1903'.
[  891.493988][T12923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1903'.
[  891.589541][ T1199] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  891.850506][ T1199] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  891.861889][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.874721][ T1199] usb 5-1: Product: syz
[  891.880573][ T1199] usb 5-1: Manufacturer: syz
[  891.885895][ T1199] usb 5-1: SerialNumber: syz
[  891.953444][ T1199] usb 5-1: config 0 descriptor??
[  891.999323][ T1199] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  893.047781][ T1199] gspca_sunplus: reg_r err -110
[  893.952292][ T5838] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  894.833885][ T5838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  894.874330][ T5838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  894.920946][ T5838] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  894.939055][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  894.962149][ T5838] usb 4-1: SerialNumber: syz
[  895.860853][ T1199] libceph: connect (1)[c::]:6789 error -101
[  895.876027][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[  895.896503][T12953] ceph: No mds server is up or the cluster is laggy
[  895.912735][ T5838] usb 4-1: 0:2 : does not exist
[  895.930673][ T5838] usb 4-1: USB disconnect, device number 42
[  896.142532][T12963] udevd[12963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  896.375545][  T787] usb 5-1: USB disconnect, device number 10
[  897.500627][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1915'.
[  897.517127][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1915'.
[  898.999945][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1924'.
[  899.159032][ T8883] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  899.179578][T13002] "syz.0.1926" (13002) uses obsolete ecb(arc4) skcipher
[  899.993240][ T8883] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  900.099130][ T8883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.109688][T13005] CIFS: Unable to determine destination address
[  900.169221][ T8883] usb 2-1: Product: syz
[  900.213858][ T8883] usb 2-1: Manufacturer: syz
[  900.241273][ T8883] usb 2-1: SerialNumber: syz
[  900.348203][ T8883] usb 2-1: config 0 descriptor??
[  900.521641][ T8883] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  901.079101][ T8883] gspca_sunplus: reg_r err -110
[  906.647646][ T8883] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  906.822098][    T9] usb 2-1: USB disconnect, device number 41
[  907.026982][ T8883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  907.046676][ T8883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  907.070326][ T8883] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  907.129074][ T8883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  907.156654][ T8883] usb 4-1: SerialNumber: syz
[  907.941487][ T8883] usb 4-1: 0:2 : does not exist
[  908.193278][ T8883] usb 4-1: USB disconnect, device number 43
[  908.235713][T12963] udevd[12963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  909.656833][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1950'.
[  913.677019][ T5838] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  914.018711][T13127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1962'.
[  914.097963][ T5838] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  914.107864][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.118133][ T5838] usb 4-1: Product: syz
[  914.123318][ T5838] usb 4-1: Manufacturer: syz
[  914.127992][ T5838] usb 4-1: SerialNumber: syz
[  914.218395][ T5838] usb 4-1: config 0 descriptor??
[  914.326854][   T23] libceph: connect (1)[c::]:6789 error -101
[  914.440900][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  914.474422][ T5838] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  914.725460][T13129] ceph: No mds server is up or the cluster is laggy
[  915.096305][ T5838] gspca_sunplus: reg_r err -110
[  917.427258][T13138] block nbd3: shutting down sockets
[  917.659051][   T23] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  917.744420][ T5882] usb 4-1: USB disconnect, device number 44
[  918.036615][   T23] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  918.045820][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.055169][   T23] usb 2-1: Product: syz
[  918.059890][   T23] usb 2-1: Manufacturer: syz
[  918.789154][   T23] usb 2-1: SerialNumber: syz
[  918.802113][   T23] usb 2-1: config 0 descriptor??
[  918.814381][   T23] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  919.338983][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  919.351201][   T23] gspca_sunplus: reg_r err -110
[  919.531086][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  919.542909][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  919.556118][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  919.568863][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  919.577278][    T9] usb 5-1: SerialNumber: syz
[  919.813037][    T9] usb 5-1: 0:2 : does not exist
[  919.870677][    T9] usb 5-1: USB disconnect, device number 11
[  919.948338][T12963] udevd[12963]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  921.408758][T13180] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  922.418158][    T9] usb 2-1: USB disconnect, device number 42
[  924.827949][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1983'.
[  924.837107][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1983'.
[  925.616673][T13230] 9pnet_fd: Insufficient options for proto=fd
[  927.209295][  T787] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  927.403572][  T787] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  927.427872][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.448285][  T787] usb 5-1: Product: syz
[  927.468442][  T787] usb 5-1: Manufacturer: syz
[  927.475870][  T787] usb 5-1: SerialNumber: syz
[  928.251012][  T787] usb 5-1: config 0 descriptor??
[  928.279384][  T787] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  929.186184][  T787] gspca_sunplus: reg_r err -110
[  930.042398][   T23] usb 5-1: USB disconnect, device number 12
[  930.869228][T13268] 9pnet_fd: Insufficient options for proto=fd
[  931.960254][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  931.966699][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  932.312766][  T787] libceph: connect (1)[c::]:6789 error -101
[  932.419253][T13283] ceph: No mds server is up or the cluster is laggy
[  932.465797][  T787] libceph: mon0 (1)[c::]:6789 connect error
[  939.078505][T13336] 9pnet_fd: Insufficient options for proto=fd
[  941.634693][T13361] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  942.259085][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  943.535667][    T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  943.553010][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.580979][    T9] usb 5-1: Product: syz
[  943.591512][    T9] usb 5-1: Manufacturer: syz
[  943.611348][    T9] usb 5-1: SerialNumber: syz
[  943.639614][    T9] usb 5-1: config 0 descriptor??
[  943.672826][    T9] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  944.189952][    T9] gspca_sunplus: reg_r err -110
[  946.357341][   T23] libceph: connect (1)[c::]:6789 error -101
[  946.596806][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  946.858604][T13402] ceph: No mds server is up or the cluster is laggy
[  946.994699][    T9] usb 5-1: USB disconnect, device number 13
[  948.583629][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2030'.
[  948.599715][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2030'.
[  952.974347][   T23] libceph: connect (1)[c::]:6789 error -101
[  953.176847][T13450] ceph: No mds server is up or the cluster is laggy
[  953.474117][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  956.174171][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2044'.
[  956.479032][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2044'.
[  960.109804][ T5853] libceph: connect (1)[c::]:6789 error -101
[  960.177162][ T5853] libceph: mon0 (1)[c::]:6789 connect error
[  960.286843][T13502] ceph: No mds server is up or the cluster is laggy
[  962.642322][T13525] random: crng reseeded on system resumption
[  964.810536][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'.
[  964.848512][T13542] batadv0: entered promiscuous mode
[  964.854907][T13542] macvtap1: entered promiscuous mode
[  964.860942][T13542] macvtap1: entered allmulticast mode
[  964.867322][T13542] batadv0: entered allmulticast mode
[  964.874297][T13542] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  965.219075][ T5853] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  965.411811][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  965.454129][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  965.492073][ T5853] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  965.513917][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.532240][ T5853] usb 5-1: config 0 descriptor??
[  965.679551][   T28] audit: type=1326 audit(1751631002.708:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  965.970614][   T28] audit: type=1326 audit(1751631002.708:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  966.370458][   T28] audit: type=1326 audit(1751631002.708:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  966.491639][ T5853] hid-generic 0003:04F3:0754.0004: failed to start in urb: -90
[  966.590484][   T28] audit: type=1326 audit(1751631002.738:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  966.658547][ T5853] hid-generic 0003:04F3:0754.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.4-1/input0
[  966.717823][   T28] audit: type=1326 audit(1751631002.738:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  966.760413][ T5853] usb 5-1: USB disconnect, device number 14
[  966.864388][   T28] audit: type=1326 audit(1751631002.778:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  966.991995][   T28] audit: type=1326 audit(1751631002.788:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  967.044201][T13552] fido_id[13552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  967.140060][   T28] audit: type=1326 audit(1751631002.788:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  967.307518][   T28] audit: type=1326 audit(1751631002.798:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  967.361383][   T28] audit: type=1326 audit(1751631002.818:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfe38e929 code=0x7ffc0000
[  969.367185][T13563] random: crng reseeded on system resumption
[  970.619006][T13376] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  971.644379][T13376] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  971.663214][T13376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.680599][T13376] usb 2-1: Product: syz
[  971.690064][T13376] usb 2-1: Manufacturer: syz
[  971.694746][T13376] usb 2-1: SerialNumber: syz
[  971.712312][T13376] usb 2-1: config 0 descriptor??
[  971.721346][T13376] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  973.082199][T13376] gspca_sunplus: reg_r err -110
[  973.251425][T13376] usb 2-1: USB disconnect, device number 43
[  982.112400][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2102'.
[  983.284874][T13699] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2109'.
[  983.947833][   T23] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  984.196307][   T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  984.320033][   T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  984.456387][   T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  984.562825][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.725808][T13704] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  984.766317][   T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  985.010146][   T23] usb 2-1: USB disconnect, device number 44
[  985.031748][T13717] netlink: 'syz.4.2114': attribute type 3 has an invalid length.
[  985.093766][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'.
[  987.645537][T13750] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2127'.
[  991.408760][T13788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2137'.
[  992.976553][T13803] "syz.1.2142" (13803) uses obsolete ecb(arc4) skcipher
[  993.366320][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  993.373803][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  993.384477][T13808] CIFS: Unable to determine destination address
[  995.041517][   T23] libceph: connect (1)[c::]:6789 error -101
[  995.196133][T13816] ceph: No mds server is up or the cluster is laggy
[  995.229073][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  996.877418][T13832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2148'.
[  997.591552][T13839] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  998.726865][T13843] 9pnet_fd: Insufficient options for proto=fd
[ 1002.061686][T13873] ceph: No mds server is up or the cluster is laggy
[ 1002.932294][T13884] 9pnet_fd: Insufficient options for proto=fd
[ 1003.027851][T13885] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1003.027851][T13885] The task syz.0.2160 (13885) triggered the difference, watch for misbehavior.
[ 1003.456288][T13896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1003.468201][T13896] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1007.670646][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2168'.
[ 1007.679760][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2168'.
[ 1008.671168][T13921] ceph: No mds server is up or the cluster is laggy
[ 1008.979747][T13927] 9pnet_fd: Insufficient options for proto=fd
[ 1010.882358][T13955] random: crng reseeded on system resumption
[ 1012.052159][T13962] fuse: Bad value for 'fd'
[ 1014.505408][T13975] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1015.108435][T13987] overlayfs: failed to resolve './file0': -2
[ 1019.176033][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'.
[ 1021.989066][T14024] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1022.844715][T14030] netlink: 'syz.3.2197': attribute type 10 has an invalid length.
[ 1023.074538][T14030] bridge0: port 3(team0) entered blocking state
[ 1023.099097][T14030] bridge0: port 3(team0) entered disabled state
[ 1023.116018][T14030] team0: entered allmulticast mode
[ 1023.125168][T14030] team_slave_0: entered allmulticast mode
[ 1023.141846][T14030] team_slave_1: entered allmulticast mode
[ 1023.169551][T14030] team0: entered promiscuous mode
[ 1023.191217][T14030] team_slave_0: entered promiscuous mode
[ 1023.224480][T14030] team_slave_1: entered promiscuous mode
[ 1023.293447][T14030] bridge0: port 3(team0) entered blocking state
[ 1023.299940][T14030] bridge0: port 3(team0) entered forwarding state
[ 1023.559411][T13376] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1023.858837][T13376] usb 5-1: Using ep0 maxpacket: 8
[ 1023.989749][T13376] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1024.016108][T13376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.798208][T13376] usb 5-1: Product: syz
[ 1024.872552][T13376] usb 5-1: Manufacturer: syz
[ 1025.032670][T13376] usb 5-1: SerialNumber: syz
[ 1025.102931][T13376] usb 5-1: config 0 descriptor??
[ 1025.111475][T13376] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1026.268900][T13376] gspca_sq930x: reg_w 0305 fd00 failed -110
[ 1027.257671][T14076] ceph: No mds server is up or the cluster is laggy
[ 1027.426678][T13376] gspca_sq930x: Unknown sensor
[ 1027.481902][T13376] sq930x: probe of 5-1:0.0 failed with error -22
[ 1027.493809][T13376] usb 5-1: USB disconnect, device number 15
[ 1033.956008][T14117] ceph: No mds server is up or the cluster is laggy
[ 1034.249455][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'.
[ 1034.264856][T14125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2222'.
[ 1038.514686][T13376] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1039.935536][ T5882] libceph: connect (1)[c::]:6789 error -101
[ 1040.215659][T14166] ceph: No mds server is up or the cluster is laggy
[ 1040.259871][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[ 1040.374841][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'.
[ 1040.416034][T14172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2234'.
[ 1046.852374][T14224] random: crng reseeded on system resumption
[ 1047.992956][T14220] loop4: detected capacity change from 0 to 32768
[ 1048.001166][T14220] =======================================================
[ 1048.001166][T14220] WARNING: The mand mount option has been deprecated and
[ 1048.001166][T14220]          and is ignored by this kernel. Remove the mand
[ 1048.001166][T14220]          option from the mount to silence this warning.
[ 1048.001166][T14220] =======================================================
[ 1048.210924][T14220] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1048.670840][T13376] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1049.683220][T13376] usb 5-1: device descriptor read/all, error -71
[ 1049.917148][ T7600] ocfs2: Unmounting device (7,4) on (node local)
[ 1050.861505][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2257'.
[ 1050.870702][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2257'.
[ 1052.673730][T14254] loop1: detected capacity change from 0 to 32768
[ 1052.676995][T14256] loop3: detected capacity change from 0 to 32768
[ 1052.861315][T14256] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2259 (14256)
[ 1053.003532][T14256] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1053.038578][T14256] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1053.060309][T14256] BTRFS info (device loop3): turning on sync discard
[ 1053.080353][T14256] BTRFS info (device loop3): disabling tree log
[ 1053.101677][T14256] BTRFS info (device loop3): metadata ratio 5
[ 1053.111359][T14256] BTRFS info (device loop3): using free space tree
[ 1053.243555][T14256] BTRFS info (device loop3): enabling ssd optimizations
[ 1054.378933][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 1054.378949][   T28] audit: type=1804 audit(1751631091.408:28): pid=14256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2259" name="/newroot/558/file2/cpuacct.usage_percpu" dev="loop3" ino=264 res=1 errno=0
[ 1054.429176][T14304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2263'.
[ 1054.470573][   T28] audit: type=1804 audit(1751631091.418:29): pid=14300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2259" name="/newroot/558/file2/cpuacct.usage_percpu" dev="loop3" ino=264 res=1 errno=0
[ 1054.743357][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.749852][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.792935][ T5786] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1057.930361][ T1199] libceph: connect (1)[c::]:6789 error -101
[ 1057.946845][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[ 1058.019478][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'.
[ 1058.028611][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'.
[ 1058.120039][T14324] ceph: No mds server is up or the cluster is laggy
[ 1059.841547][T14345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2275'.
[ 1060.321664][T14341] loop3: detected capacity change from 0 to 32768
[ 1060.359246][T14341] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2274 (14341)
[ 1060.400458][T14341] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1060.421701][T14341] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1060.442454][T14341] BTRFS info (device loop3): turning on flush-on-commit
[ 1060.470031][T14341] BTRFS info (device loop3): doing ref verification
[ 1060.478257][T14341] BTRFS info (device loop3): doing ref verification
[ 1060.519405][T14341] BTRFS info (device loop3): force clearing of disk cache
[ 1060.526616][T14341] BTRFS info (device loop3): enabling disk space caching
[ 1060.537945][T14341] BTRFS info (device loop3): enabling free space tree
[ 1060.545200][T14341] BTRFS info (device loop3): enabling ssd optimizations
[ 1060.557295][T14341] BTRFS info (device loop3): using spread ssd allocation scheme
[ 1060.567853][T14341] BTRFS info (device loop3): max_inline at 4096
[ 1060.586666][T14341] BTRFS info (device loop3): using free space tree
[ 1060.785957][T14341] BTRFS info (device loop3): auto enabling async discard
[ 1060.822145][T14341] BTRFS info (device loop3): rebuilding free space tree
[ 1061.211019][   T28] audit: type=1804 audit(1751631098.248:30): pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2279" name="/newroot/460/file1" dev="fuse" ino=1 res=1 errno=0
[ 1061.358277][T14341] BTRFS info (device loop3): balance: start -s
[ 1061.401095][T14341] BTRFS info (device loop3): left=0, need=98304, flags=2
[ 1061.408593][T14341] BTRFS info (device loop3): space_info SYSTEM has 0 free, is not full
[ 1061.417345][T14341] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[ 1061.431101][T14341] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792
[ 1061.440422][T14341] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[ 1061.448099][T14341] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[ 1061.455940][T14341] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[ 1061.463910][T14341] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0
[ 1061.578134][T14341] BTRFS info (device loop3): relocating block group 1048576 flags system
[ 1061.631880][T14341] BTRFS info (device loop3): balance: canceled
[ 1061.781531][ T5786] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1061.939940][   T28] audit: type=1800 audit(1751631098.978:31): pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2279" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1062.565155][ T8883] libceph: connect (1)[c::]:6789 error -101
[ 1062.672117][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[ 1062.782824][T14378] ceph: No mds server is up or the cluster is laggy
[ 1063.878997][  T787] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1064.182095][  T787] usb 2-1: device descriptor read/64, error -71
[ 1064.468863][  T787] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1064.618964][  T787] usb 2-1: device descriptor read/64, error -71
[ 1064.741264][  T787] usb usb2-port1: attempt power cycle
[ 1065.188865][  T787] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1065.253526][  T787] usb 2-1: device descriptor read/8, error -71
[ 1065.548984][  T787] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1065.604979][  T787] usb 2-1: device descriptor read/8, error -71
[ 1065.729326][  T787] usb usb2-port1: unable to enumerate USB device
[ 1066.607788][ T5882] libceph: connect (1)[c::]:6789 error -101
[ 1066.716946][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[ 1066.870518][T14427] ceph: No mds server is up or the cluster is laggy
[ 1067.686212][T14449] overlayfs: missing 'lowerdir'
[ 1069.543302][T14463] "syz.3.2304" (14463) uses obsolete ecb(arc4) skcipher
[ 1069.851741][T14464] CIFS: Unable to determine destination address
[ 1073.149634][ T8883] libceph: connect (1)[c::]:6789 error -101
[ 1073.155749][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[ 1073.251018][T14481] ceph: No mds server is up or the cluster is laggy
[ 1074.426192][T14495] overlayfs: failed to resolve './file1': -2
[ 1075.366582][T14501] "syz.1.2313" (14501) uses obsolete ecb(arc4) skcipher
[ 1075.458903][T14503] CIFS: Unable to determine destination address
[ 1078.590316][T14533] overlayfs: failed to resolve './file1': -2
[ 1079.704856][T14542] loop1: detected capacity change from 0 to 2048
[ 1079.792700][T14542] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1079.907549][T14006] udevd[14006]: incorrect nilfs2 checksum on /dev/loop1
[ 1079.916938][T14548] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1080.022013][T14550] "syz.3.2324" (14550) uses obsolete ecb(arc4) skcipher
[ 1080.226126][T14551] CIFS: Unable to determine destination address
[ 1081.187999][   T23] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1081.409765][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.543661][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1081.727816][   T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1081.899798][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1081.937051][   T23] usb 2-1: SerialNumber: syz
[ 1082.339053][   T23] usb 2-1: 0:2 : does not exist
[ 1082.440031][   T23] usb 2-1: USB disconnect, device number 49
[ 1082.638151][T14006] udevd[14006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1083.062791][T14576] loop1: detected capacity change from 0 to 512
[ 1083.113807][T14576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1083.181232][T14576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1083.183010][T14578] "syz.3.2334" (14578) uses obsolete ecb(arc4) skcipher
[ 1083.297718][T14576] EXT4-fs (loop1): 1 truncate cleaned up
[ 1083.351737][T14576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1083.445626][T14583] CIFS: Unable to determine destination address
[ 1084.090513][T14589] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1085.168583][T14601] 9pnet_fd: Insufficient options for proto=fd
[ 1085.175485][T14599] loop4: detected capacity change from 0 to 512
[ 1085.190877][T14599] EXT4-fs: Ignoring removed oldalloc option
[ 1085.221288][T14599] EXT4-fs (loop4): 1 truncate cleaned up
[ 1085.238625][T14599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1085.367576][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1085.386383][ T7600] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1085.758929][ T8883] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1086.834761][ T8883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1086.976348][ T8883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1087.099237][ T8883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1087.127489][ T8883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1087.139213][ T8883] usb 2-1: SerialNumber: syz
[ 1087.381085][ T8883] usb 2-1: 0:2 : does not exist
[ 1087.404928][T14626] loop3: detected capacity change from 0 to 2048
[ 1087.407538][ T8883] usb 2-1: USB disconnect, device number 50
[ 1087.429818][T14626] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1087.476538][T14627] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1087.496043][T14038] udevd[14038]: incorrect nilfs2 checksum on /dev/loop3
[ 1087.505704][T14006] udevd[14006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1087.587922][ T5156] udevd[5156]: worker [14006] terminated by signal 33 (Unknown signal 33)
[ 1087.627531][   T28] audit: type=1800 audit(1751631124.658:32): pid=14626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2347" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1087.725324][ T5786] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1087.739585][ T5786] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1087.760873][ T5786] Remounting filesystem read-only
[ 1087.766082][ T5786] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1087.790868][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1087.802699][ T5786] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1087.812626][ T5786] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1087.825208][ T5786] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1087.835458][ T5786] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1088.925315][T14635] 9pnet_fd: Insufficient options for proto=fd
[ 1089.015085][T14642] loop4: detected capacity change from 0 to 512
[ 1089.050060][T14642] EXT4-fs: Ignoring removed oldalloc option
[ 1089.119097][T14642] EXT4-fs (loop4): 1 truncate cleaned up
[ 1089.126055][T14642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1089.659418][T14644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2353'.
[ 1089.715948][ T7600] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1089.763817][T12196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1089.774101][T12196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1089.784953][T12196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1089.797502][T12196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1089.817922][T12196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1089.828046][T12196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1090.007311][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.369232][ T8883] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1090.558223][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.635075][ T8883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.782756][ T8883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1090.806842][ T8883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1090.838892][ T8883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1090.877263][ T8883] usb 2-1: SerialNumber: syz
[ 1090.961337][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.080194][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.120513][ T8883] usb 2-1: 0:2 : does not exist
[ 1091.144608][ T8883] usb 2-1: USB disconnect, device number 51
[ 1091.222250][T14651] chnl_net:caif_netlink_parms(): no params data found
[ 1091.239818][ T5853] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1091.399517][ T5853] usb 5-1: device descriptor read/64, error -71
[ 1091.494253][T14651] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.506701][T14651] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.517572][T14651] bridge_slave_0: entered allmulticast mode
[ 1091.535904][T14651] bridge_slave_0: entered promiscuous mode
[ 1091.573721][T14651] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.585220][T14651] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.594258][T14651] bridge_slave_1: entered allmulticast mode
[ 1091.605843][T14651] bridge_slave_1: entered promiscuous mode
[ 1091.678920][ T5853] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1091.784356][T14651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1091.840817][T14676] 9pnet_fd: Insufficient options for proto=fd
[ 1091.857261][ T5853] usb 5-1: device descriptor read/64, error -71
[ 1091.929536][T12196] Bluetooth: hci0: command tx timeout
[ 1091.982613][ T5853] usb usb5-port1: attempt power cycle
[ 1092.042100][T14651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1092.201113][T14651] team0: Port device team_slave_0 added
[ 1092.219218][T14651] team0: Port device team_slave_1 added
[ 1092.320431][T14651] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1092.354111][T14651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1092.438845][ T5853] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1092.447329][T14651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1092.481834][ T5853] usb 5-1: device descriptor read/8, error -71
[ 1092.810936][ T5853] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1092.828079][T14651] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1092.837617][T14651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1092.864029][T14651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.912488][ T5853] usb 5-1: device descriptor read/8, error -71
[ 1093.029274][ T5853] usb usb5-port1: unable to enumerate USB device
[ 1093.066656][T14651] hsr_slave_0: entered promiscuous mode
[ 1093.077254][T14651] hsr_slave_1: entered promiscuous mode
[ 1093.087099][T14651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1093.106644][T14651] Cannot create hsr debugfs directory
[ 1093.448555][   T35] hsr_slave_0: left promiscuous mode
[ 1093.467296][   T35] hsr_slave_1: left promiscuous mode
[ 1093.523554][   T35] batadv0: left allmulticast mode
[ 1093.531368][   T35] batadv0: left promiscuous mode
[ 1093.542871][   T35] veth1_macvtap: left promiscuous mode
[ 1093.548560][   T35] veth0_macvtap: left promiscuous mode
[ 1093.557351][   T35] veth1_vlan: left promiscuous mode
[ 1093.564938][   T35] veth0_vlan: left promiscuous mode
[ 1094.014209][T12196] Bluetooth: hci0: command tx timeout
[ 1094.407709][T14680] loop3: detected capacity change from 0 to 131072
[ 1094.505939][T14680] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1094.580574][T14680] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[ 1094.634412][T14680] F2FS-fs (loop3): Failed to read root inode
[ 1096.101495][T12196] Bluetooth: hci0: command tx timeout
[ 1096.415587][   T35] bond0 (unregistering): Released all slaves
[ 1096.455096][T14704] loop3: detected capacity change from 0 to 2048
[ 1096.464735][T14704] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1096.490097][T14705] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1096.565964][ T5786] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1096.609336][ T5786] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1096.669240][ T5786] Remounting filesystem read-only
[ 1096.674334][ T5786] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1096.736052][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1096.773087][ T5786] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1096.781165][ T5786] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1096.789243][ T5786] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1096.796572][ T5786] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1096.806142][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=3
[ 1096.812923][ T5786] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[ 1096.820436][ T5786] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[ 1096.827759][ T5786] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[ 1096.835358][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1096.844295][ T5786] NILFS (loop3): discard dirty page: offset=196608, ino=3
[ 1096.853868][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1096.863358][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1096.884040][ T5786] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[ 1096.891767][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1096.918995][ T5853] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1097.106619][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1097.136069][   T35] IPVS: stop unused estimator thread 0...
[ 1097.148823][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1097.255118][ T5853] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1097.340848][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1097.674454][ T5853] usb 5-1: SerialNumber: syz
[ 1097.791316][T14651] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1097.832296][T14651] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1097.872770][T14651] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1097.886731][T14651] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1097.996355][ T5853] usb 5-1: 0:2 : does not exist
[ 1098.022064][ T5853] usb 5-1: USB disconnect, device number 22
[ 1098.032066][T14651] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.060099][T14651] 8021q: adding VLAN 0 to HW filter on device team0
[ 1098.074721][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.082009][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1098.103766][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.110973][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1098.170166][T12196] Bluetooth: hci0: command tx timeout
[ 1098.188875][T13376] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1098.379658][T13376] usb 2-1: no configurations
[ 1098.384402][T13376] usb 2-1: can't read configurations, error -22
[ 1098.441549][T14651] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1098.505556][T14651] veth0_vlan: entered promiscuous mode
[ 1098.538804][T14651] veth1_vlan: entered promiscuous mode
[ 1098.559201][T13376] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1098.593438][T14651] veth0_macvtap: entered promiscuous mode
[ 1098.620778][T14651] veth1_macvtap: entered promiscuous mode
[ 1098.646901][T14651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1098.663965][T14651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1098.674685][T14651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1098.691853][T14651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1098.702066][T14651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1098.954272][T14651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1098.969318][T13376] usb 2-1: no configurations
[ 1098.973962][T13376] usb 2-1: can't read configurations, error -22
[ 1099.011085][T14651] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1099.169672][ T8883] libceph: connect (1)[c::]:6789 error -101
[ 1099.176431][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[ 1099.191150][T14651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1099.203092][T13376] usb usb2-port1: attempt power cycle
[ 1099.323520][T14651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1099.409281][T14651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1099.567152][T14734] ceph: No mds server is up or the cluster is laggy
[ 1099.575178][ T8883] libceph: connect (1)[c::]:6789 error -101
[ 1099.598770][T14651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1099.628856][T14651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1099.636088][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[ 1099.646205][T14651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1099.657669][T14651] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1099.716842][T14651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1099.745344][T14651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1099.775304][T14651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1099.805835][T13376] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1099.811155][T14651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1099.850402][T13376] usb 2-1: no configurations
[ 1099.855080][T13376] usb 2-1: can't read configurations, error -22
[ 1100.037936][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1100.046026][T13376] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1100.056770][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1100.101127][T13376] usb 2-1: no configurations
[ 1100.109516][T13376] usb 2-1: can't read configurations, error -22
[ 1100.118575][T13376] usb usb2-port1: unable to enumerate USB device
[ 1100.129315][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1100.141524][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1101.046976][T14761] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 1101.048553][T14760] loop4: detected capacity change from 0 to 512
[ 1101.102644][T14760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1101.120158][T14760] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1101.205358][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'.
[ 1102.447286][T14774] ceph: No mds server is up or the cluster is laggy
[ 1102.486381][T13376] libceph: connect (1)[c::]:6789 error -101
[ 1102.528987][T13376] libceph: mon0 (1)[c::]:6789 connect error
[ 1102.659029][T12196] Bluetooth: hci0: command 0x0401 tx timeout
[ 1102.797495][ T7600] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1103.231652][T14785] loop0: detected capacity change from 0 to 4096
[ 1103.279654][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1103.293060][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1103.301980][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1103.312685][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1103.322147][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1103.330553][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1103.438944][T13376] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1103.563881][ T1309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.641500][T13376] usb 5-1: no configurations
[ 1103.646173][T13376] usb 5-1: can't read configurations, error -22
[ 1103.702463][ T1309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.795940][ T1309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.808967][T13376] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1103.844365][T14788] chnl_net:caif_netlink_parms(): no params data found
[ 1103.921145][ T1309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.019530][T13376] usb 5-1: no configurations
[ 1104.024184][T13376] usb 5-1: can't read configurations, error -22
[ 1104.048297][T13376] usb usb5-port1: attempt power cycle
[ 1104.056716][T14788] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1104.064203][T14788] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.071944][T14788] bridge_slave_0: entered allmulticast mode
[ 1104.079444][T14788] bridge_slave_0: entered promiscuous mode
[ 1104.090193][T14788] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1104.097396][T14788] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.105067][T14788] bridge_slave_1: entered allmulticast mode
[ 1104.120237][T14788] bridge_slave_1: entered promiscuous mode
[ 1104.176582][T14788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1104.207379][T14788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1104.281192][T14788] team0: Port device team_slave_0 added
[ 1104.302206][T14788] team0: Port device team_slave_1 added
[ 1104.459011][T13376] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1104.494313][T14788] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1104.510245][T13376] usb 5-1: no configurations
[ 1104.511970][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1104.515087][T13376] usb 5-1: can't read configurations, error -22
[ 1104.575063][T14788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1104.620101][T14788] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1104.627328][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1104.641356][T14807] loop1: detected capacity change from 0 to 2048
[ 1104.670398][T14788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1104.683270][T14807] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1104.718563][T14808] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1104.734487][T13376] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1104.776678][T13376] usb 5-1: no configurations
[ 1104.782008][T13376] usb 5-1: can't read configurations, error -22
[ 1104.805835][T13376] usb usb5-port1: unable to enumerate USB device
[ 1104.824349][   T28] audit: type=1800 audit(1751631141.858:33): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2391" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1104.875238][T14788] hsr_slave_0: entered promiscuous mode
[ 1104.893910][T14788] hsr_slave_1: entered promiscuous mode
[ 1104.905970][T14788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1104.915174][T14788] Cannot create hsr debugfs directory
[ 1105.391714][ T5101] Bluetooth: hci1: command tx timeout
[ 1105.641997][T13158] libceph: connect (1)[c::]:6789 error -101
[ 1105.664367][T13158] libceph: mon0 (1)[c::]:6789 connect error
[ 1105.911855][T14814] ceph: No mds server is up or the cluster is laggy
[ 1106.325301][ T1309] hsr_slave_0: left promiscuous mode
[ 1106.346204][ T1309] hsr_slave_1: left promiscuous mode
[ 1106.352751][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1106.369042][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1106.377352][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1106.410941][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.420079][ T1309] team0: left allmulticast mode
[ 1106.424987][ T1309] team_slave_0: left allmulticast mode
[ 1106.436723][ T1309] team_slave_1: left allmulticast mode
[ 1106.459026][ T1309] team0: left promiscuous mode
[ 1106.468464][ T1309] team_slave_0: left promiscuous mode
[ 1106.475029][ T1309] team_slave_1: left promiscuous mode
[ 1106.480900][ T1309] bridge0: port 3(team0) entered disabled state
[ 1106.493062][ T1309] bridge_slave_1: left allmulticast mode
[ 1106.499646][ T1309] bridge_slave_1: left promiscuous mode
[ 1106.506081][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.516132][ T1309] bridge_slave_0: left allmulticast mode
[ 1106.522030][ T1309] bridge_slave_0: left promiscuous mode
[ 1106.527816][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.844341][ T1309] veth1_macvtap: left promiscuous mode
[ 1106.878478][ T1309] veth0_macvtap: left promiscuous mode
[ 1106.937170][ T1309] veth1_vlan: left promiscuous mode
[ 1106.990007][ T1309] veth0_vlan: left promiscuous mode
[ 1107.453161][ T5101] Bluetooth: hci1: command tx timeout
[ 1108.389548][T14836] loop4: detected capacity change from 0 to 32768
[ 1108.398624][T14836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2398 (14836)
[ 1108.436986][T14836] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1108.449252][T14836] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1108.457998][T14836] BTRFS info (device loop4): turning on sync discard
[ 1108.466457][T14836] BTRFS info (device loop4): disabling tree log
[ 1108.472883][T14836] BTRFS info (device loop4): metadata ratio 5
[ 1108.479752][T14836] BTRFS info (device loop4): using free space tree
[ 1108.563023][T14836] BTRFS info (device loop4): enabling ssd optimizations
[ 1108.616332][   T28] audit: type=1800 audit(1751631145.648:34): pid=14836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2398" name="bus" dev="loop4" ino=263 res=0 errno=0
[ 1108.926385][ T7600] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1108.969219][ T1309] team0 (unregistering): Port device team_slave_1 removed
[ 1109.084896][ T1309] team0 (unregistering): Port device team_slave_0 removed
[ 1109.197340][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1109.307451][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1109.529274][ T5101] Bluetooth: hci1: command tx timeout
[ 1110.012141][ T1309] bond0 (unregistering): Released all slaves
[ 1110.282191][T14788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1110.330955][T14788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1110.371580][T14788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1110.497808][T14788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1110.936098][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1111.014002][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1111.255549][T14872] ceph: No mds server is up or the cluster is laggy
[ 1111.354624][T14879] loop4: detected capacity change from 0 to 2048
[ 1111.409223][T14879] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1111.581148][T14882] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1111.619826][ T5101] Bluetooth: hci1: command tx timeout
[ 1111.981546][   T28] audit: type=1800 audit(1751631149.018:35): pid=14879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2403" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1111.989104][T14788] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1112.196753][T14788] 8021q: adding VLAN 0 to HW filter on device team0
[ 1112.205317][ T1309] IPVS: stop unused estimator thread 0...
[ 1112.223305][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.230496][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1112.251806][ T7600] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1112.262844][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.267517][ T7600] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1112.270020][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1112.298380][ T7600] Remounting filesystem read-only
[ 1112.307560][ T7600] NILFS (loop4): error -5 truncating bmap (ino=15)
[ 1112.327986][ T7600] NILFS (loop4): discard dirty page: offset=0, ino=6
[ 1112.343758][ T7600] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1112.365796][ T7600] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[ 1112.395790][ T7600] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[ 1112.416027][ T7600] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[ 1112.765954][T14788] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1112.864524][T14788] veth0_vlan: entered promiscuous mode
[ 1112.891560][T14788] veth1_vlan: entered promiscuous mode
[ 1112.962321][T14788] veth0_macvtap: entered promiscuous mode
[ 1112.984633][T14788] veth1_macvtap: entered promiscuous mode
[ 1112.992810][T14891] loop1: detected capacity change from 0 to 32768
[ 1113.006634][T14891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2408 (14891)
[ 1113.027352][T14891] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1113.028046][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.049892][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.058211][T14891] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 1113.059812][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.079547][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.089437][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.095410][T14891] BTRFS info (device loop1): turning on sync discard
[ 1113.099965][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.101941][T14788] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1113.117092][T14891] BTRFS info (device loop1): disabling tree log
[ 1113.135644][T14891] BTRFS info (device loop1): metadata ratio 5
[ 1113.143987][T14891] BTRFS info (device loop1): using free space tree
[ 1113.163958][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1113.175101][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.185625][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1113.196648][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.207067][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1113.218180][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.231893][T14788] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1113.244759][T14891] BTRFS info (device loop1): enabling ssd optimizations
[ 1113.253866][T14788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.262742][T14788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.271558][T14788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.280437][T14788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.358265][ T5793] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1113.390355][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.398202][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.430425][T11623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.438297][T11623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.502979][T14896] loop4: detected capacity change from 0 to 40427
[ 1113.513087][T14896] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[ 1113.521798][T14896] F2FS-fs (loop4): Image doesn't support compression
[ 1113.532565][T14896] F2FS-fs (loop4): heap/no_heap options were deprecated
[ 1113.571133][T14896] F2FS-fs (loop4): invalid crc value
[ 1113.693879][T14896] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1114.260333][T14920] overlayfs: missing 'lowerdir'
[ 1116.201958][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.208497][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.447437][ T8883] libceph: connect (1)[c::]:6789 error -101
[ 1116.470426][ T8883] libceph: mon0 (1)[c::]:6789 connect error
[ 1116.901738][T14936] ceph: No mds server is up or the cluster is laggy
[ 1118.661987][  T787] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1118.868978][  T787] usb 4-1: Using ep0 maxpacket: 8
[ 1118.887146][  T787] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1118.907002][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.932596][  T787] usb 4-1: Product: syz
[ 1118.943743][  T787] usb 4-1: Manufacturer: syz
[ 1118.956680][  T787] usb 4-1: SerialNumber: syz
[ 1118.973194][  T787] usb 4-1: config 0 descriptor??
[ 1118.993891][  T787] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1120.275694][  T787] gspca_sq930x: ucbus_write failed -110
[ 1120.718972][ T5882] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1121.318853][  T787] gspca_sq930x: Unknown sensor
[ 1121.323758][  T787] sq930x: probe of 4-1:0.0 failed with error -22
[ 1121.950803][T13376] usb 4-1: USB disconnect, device number 46
[ 1122.666118][T14979] ceph: No mds server is up or the cluster is laggy
[ 1122.673768][  T787] libceph: connect (1)[c::]:6789 error -101
[ 1122.680479][  T787] libceph: mon0 (1)[c::]:6789 connect error
[ 1122.830946][ T5882] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1122.854796][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1122.874618][ T5882] usb 5-1: Product: syz
[ 1122.879491][ T5882] usb 5-1: Manufacturer: syz
[ 1122.894742][ T5882] usb 5-1: SerialNumber: syz
[ 1122.932901][ T5882] usb 5-1: config 0 descriptor??
[ 1122.958204][ T5882] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1123.555572][ T5882] gspca_sunplus: reg_r err -110
[ 1124.212729][T14997] "syz.3.2428" (14997) uses obsolete ecb(arc4) skcipher
[ 1124.419081][T15000] CIFS: Unable to determine destination address
[ 1124.515118][T14992] block nbd4: shutting down sockets
[ 1124.615894][  T787] usb 5-1: USB disconnect, device number 27
[ 1125.172977][T15004] 9pnet_fd: Insufficient options for proto=fd
[ 1125.808958][ T5882] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1126.178828][ T5882] usb 4-1: Using ep0 maxpacket: 8
[ 1126.188133][ T5882] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1126.197713][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1126.210377][ T5882] usb 4-1: Product: syz
[ 1126.214591][ T5882] usb 4-1: Manufacturer: syz
[ 1126.228874][ T5882] usb 4-1: SerialNumber: syz
[ 1126.580985][ T5882] usb 4-1: config 0 descriptor??
[ 1126.606459][ T5838] libceph: connect (1)[c::]:6789 error -101
[ 1126.682129][ T5838] libceph: mon0 (1)[c::]:6789 connect error
[ 1126.737014][ T5882] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1126.833493][T15020] ceph: No mds server is up or the cluster is laggy
[ 1126.958110][T15025] loop0: detected capacity change from 0 to 2048
[ 1127.022877][T15025] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1127.091167][T15028] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1127.144807][   T28] audit: type=1800 audit(1751631164.178:36): pid=15025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2434" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1127.788809][ T5882] gspca_sq930x: reg_w 0305 fd00 failed -110
[ 1128.908386][ T5882] gspca_sq930x: Unknown sensor
[ 1128.914928][ T5882] sq930x: probe of 4-1:0.0 failed with error -22
[ 1128.965924][ T5882] usb 4-1: USB disconnect, device number 47
[ 1129.281330][T15043] overlayfs: missing 'workdir'
[ 1130.078959][ T5882] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1130.281251][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1130.292058][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1130.306623][ T5882] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1130.316352][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1130.324753][ T5882] usb 4-1: SerialNumber: syz
[ 1130.794668][ T5882] usb 4-1: 0:2 : does not exist
[ 1130.827393][ T5882] usb 4-1: USB disconnect, device number 48
[ 1132.370617][T15057] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1132.743566][T15062] loop3: detected capacity change from 0 to 2048
[ 1132.805282][T15062] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1132.905219][T15065] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1133.186631][T14788] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1133.278618][T14788] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1133.407964][T14788] Remounting filesystem read-only
[ 1133.482949][T14788] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1133.590776][T14788] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1133.675434][T14788] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1133.766352][T14788] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1133.863416][T14788] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1133.911837][T14788] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1133.921307][T14788] NILFS (loop3): discard dirty page: offset=0, ino=3
[ 1133.928172][T14788] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[ 1133.936791][T14788] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[ 1133.944351][T14788] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[ 1133.951721][T14788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1133.960815][T14788] NILFS (loop3): discard dirty page: offset=196608, ino=3
[ 1133.967959][T14788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1133.977071][T14788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1133.986068][T14788] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[ 1133.993527][T14788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1134.178882][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1134.354251][T15074] overlayfs: missing 'workdir'
[ 1135.188873][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1135.198850][    T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1135.207949][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.248936][    T9] usb 5-1: Product: syz
[ 1135.255081][    T9] usb 5-1: Manufacturer: syz
[ 1135.263485][    T9] usb 5-1: SerialNumber: syz
[ 1135.310556][    T9] usb 5-1: config 0 descriptor??
[ 1135.357444][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1136.408987][T13376] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1136.766703][ T1199] libceph: connect (1)[c::]:6789 error -101
[ 1136.778244][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[ 1137.139054][ T1199] libceph: connect (1)[c::]:6789 error -101
[ 1137.194141][ T1199] libceph: mon0 (1)[c::]:6789 connect error
[ 1137.266191][T15095] ceph: No mds server is up or the cluster is laggy
[ 1137.618801][    T9] gspca_sq930x: reg_w 0305 fd00 failed -110
[ 1137.639550][T13376] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1137.671479][T13376] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1137.681985][T13376] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1137.691150][T13376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1137.699401][T13376] usb 4-1: SerialNumber: syz
[ 1137.941609][T13376] usb 4-1: 0:2 : does not exist
[ 1137.981044][T13376] usb 4-1: USB disconnect, device number 49
[ 1138.062904][T15104] loop4: detected capacity change from 0 to 2048
[ 1138.075412][T15104] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1138.109461][T15106] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1138.182677][   T28] audit: type=1800 audit(1751631175.218:37): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2455" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1138.375671][T15108] loop0: detected capacity change from 0 to 2048
[ 1138.384123][T15108] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1138.415003][T15111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1138.442332][   T28] audit: type=1800 audit(1751631175.478:38): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2456" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1138.491794][T15108] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1138.508885][T15108] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1138.603356][T15108] Remounting filesystem read-only
[ 1138.609444][    T9] gspca_sq930x: Unknown sensor
[ 1138.614331][    T9] sq930x: probe of 5-1:0.0 failed with error -22
[ 1138.639776][T15108] NILFS (loop0): error -5 truncating bmap (ino=15)
[ 1138.673211][T15113] loop3: detected capacity change from 0 to 2048
[ 1138.681041][    T9] usb 5-1: USB disconnect, device number 28
[ 1138.694861][T15113] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1138.695167][T14651] NILFS (loop0): discard dirty page: offset=0, ino=6
[ 1138.736303][T14651] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[ 1138.755686][T14651] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[ 1138.758850][T15114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1138.774999][T14651] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[ 1138.797379][T14651] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[ 1138.906156][T15117] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1138.935485][   T28] audit: type=1800 audit(1751631175.938:39): pid=15113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2458" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1138.967159][T15117] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1139.015481][T15117] Remounting filesystem read-only
[ 1139.039998][T15117] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1139.162151][T15123] overlayfs: missing 'lowerdir'
[ 1139.889201][T14788] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1139.895946][T14788] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1139.934716][T14788] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1139.966161][T14788] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1139.997931][T14788] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1140.593322][ T5838] libceph: connect (1)[c::]:6789 error -101
[ 1140.698416][ T5838] libceph: mon0 (1)[c::]:6789 connect error
[ 1140.909556][T15133] ceph: No mds server is up or the cluster is laggy
[ 1141.429116][    T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1141.628989][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1141.650896][    T9] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1141.666211][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.678347][    T9] usb 4-1: Product: syz
[ 1141.698762][    T9] usb 4-1: Manufacturer: syz
[ 1141.722288][    T9] usb 4-1: SerialNumber: syz
[ 1141.748412][    T9] usb 4-1: config 0 descriptor??
[ 1141.768516][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1142.249184][ T1199] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1142.442199][ T1199] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1142.529755][T15154] overlayfs: missing 'lowerdir'
[ 1143.098452][    T9] gspca_sq930x: reg_w 0305 fd00 failed -110
[ 1143.231744][ T1199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1143.251550][ T1199] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1143.264302][ T1199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1143.272395][ T1199] usb 5-1: SerialNumber: syz
[ 1143.594371][ T1199] usb 5-1: 0:2 : does not exist
[ 1144.307530][ T1199] usb 5-1: USB disconnect, device number 29
[ 1144.534161][T15166] loop0: detected capacity change from 0 to 2048
[ 1144.547346][T15166] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1144.576353][T15169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1144.632712][   T28] audit: type=1800 audit(1751631181.668:40): pid=15166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2470" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1144.664246][T15166] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1144.708953][T15166] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1144.754483][T15166] Remounting filesystem read-only
[ 1144.759708][T15166] NILFS (loop0): error -5 truncating bmap (ino=15)
[ 1144.868122][    T9] gspca_sq930x: Unknown sensor
[ 1145.011119][    T9] sq930x: probe of 4-1:0.0 failed with error -22
[ 1145.179346][ T5853] libceph: connect (1)[c::]:6789 error -101
[ 1145.186958][ T5853] libceph: mon0 (1)[c::]:6789 connect error
[ 1145.322931][    T9] usb 4-1: USB disconnect, device number 50
[ 1145.455099][T15174] ceph: No mds server is up or the cluster is laggy
[ 1145.539401][T13376] libceph: connect (1)[c::]:6789 error -101
[ 1145.553472][T13376] libceph: mon0 (1)[c::]:6789 connect error
[ 1145.587330][T14651] NILFS (loop0): discard dirty page: offset=0, ino=6
[ 1145.758063][T14651] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[ 1145.798753][T14651] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[ 1145.806779][T14651] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[ 1145.815215][T14651] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[ 1146.808887][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1147.640284][T15202] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1147.650489][T15202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1147.658474][T15202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1147.667879][T15202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1147.675641][T15202] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1147.683206][T15202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1147.808866][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1147.829099][    T9] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1147.845261][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.889081][    T9] usb 4-1: Product: syz
[ 1147.893333][    T9] usb 4-1: Manufacturer: syz
[ 1147.897964][    T9] usb 4-1: SerialNumber: syz
[ 1147.940906][    T9] usb 4-1: config 0 descriptor??
[ 1148.003086][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1148.688892][    T9] gspca_sq930x: ucbus_write failed -110
[ 1149.286851][T15201] chnl_net:caif_netlink_parms(): no params data found
[ 1149.334975][T15217] loop4: detected capacity change from 0 to 2048
[ 1149.349946][T15217] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1149.389863][T15220] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1149.431217][   T28] audit: type=1800 audit(1751631186.468:41): pid=15217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2483" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1149.456633][T15217] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1149.465384][T15217] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1149.475894][T15217] Remounting filesystem read-only
[ 1149.481074][T15217] NILFS (loop4): error -5 truncating bmap (ino=15)
[ 1149.494594][T15201] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.502392][T15201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1149.509691][T15201] bridge_slave_0: entered allmulticast mode
[ 1149.517011][T15201] bridge_slave_0: entered promiscuous mode
[ 1149.525630][T15201] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.533724][T15201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1149.540995][T15201] bridge_slave_1: entered allmulticast mode
[ 1149.549111][T15201] bridge_slave_1: entered promiscuous mode
[ 1149.576937][ T7600] NILFS (loop4): discard dirty page: offset=0, ino=6
[ 1149.585787][ T7600] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1149.590058][T15201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1149.600971][ T7600] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[ 1149.614775][ T7600] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[ 1149.622276][ T7600] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[ 1149.623208][T15201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1149.717414][T15201] team0: Port device team_slave_0 added
[ 1149.727368][T15224] loop4: detected capacity change from 0 to 2048
[ 1149.742056][T15224] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1149.754798][T15201] team0: Port device team_slave_1 added
[ 1149.768990][    T9] gspca_sq930x: Unknown sensor
[ 1149.773850][    T9] sq930x: probe of 4-1:0.0 failed with error -22
[ 1149.785802][    T9] usb 4-1: USB disconnect, device number 51
[ 1149.807400][T15225] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1149.840857][T15201] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1149.847900][T15201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1149.848998][T15202] Bluetooth: hci3: command tx timeout
[ 1149.883208][T15201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1149.896870][T15201] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1149.905696][T15201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1149.909024][   T28] audit: type=1800 audit(1751631186.928:42): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2484" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1149.932361][T15201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1149.977688][T15224] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1150.013516][T15224] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1150.024623][T15201] hsr_slave_0: entered promiscuous mode
[ 1150.053367][T15201] hsr_slave_1: entered promiscuous mode
[ 1150.067140][T15224] Remounting filesystem read-only
[ 1150.089320][T15224] NILFS (loop4): error -5 truncating bmap (ino=15)
[ 1150.209811][ T7600] NILFS (loop4): discard dirty page: offset=0, ino=6
[ 1150.235672][ T7600] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1150.245534][ T7600] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[ 1150.257712][ T7600] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[ 1150.266201][ T7600] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[ 1151.000784][T15201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.933285][T15202] Bluetooth: hci3: command tx timeout
[ 1152.111716][T15201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.592194][T15261] overlayfs: missing 'workdir'
[ 1153.399238][T15201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.051794][T15202] Bluetooth: hci3: command tx timeout
[ 1154.517946][T15201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.903124][T15201] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1154.923766][T15201] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1154.942162][T15201] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1154.954071][T15201] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1155.230330][T15201] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1155.285303][T15201] 8021q: adding VLAN 0 to HW filter on device team0
[ 1155.333398][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1155.340606][ T6707] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1155.395278][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1155.402603][ T6707] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1156.043367][T15201] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1156.090370][T15202] Bluetooth: hci3: command tx timeout
[ 1156.664052][T15201] veth0_vlan: entered promiscuous mode
[ 1156.686641][T15201] veth1_vlan: entered promiscuous mode
[ 1156.744983][T15201] veth0_macvtap: entered promiscuous mode
[ 1156.853564][T15201] veth1_macvtap: entered promiscuous mode
[ 1158.087721][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1158.128794][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.157853][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1158.175160][T15306] loop4: detected capacity change from 0 to 2048
[ 1158.183231][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.199496][T15306] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1158.219919][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1158.235951][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.245915][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1158.261897][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.281298][T15201] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1158.299193][T15307] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1158.319501][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1158.330055][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.340040][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1158.350634][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.360214][T15306] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1158.360494][   T28] audit: type=1800 audit(1751631195.388:43): pid=15306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2504" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1158.383026][T15306] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1158.389622][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1158.389639][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.389654][T15201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1158.389667][T15201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1158.396340][T15201] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1158.423665][T15306] Remounting filesystem read-only
[ 1158.461049][T15306] NILFS (loop4): error -5 truncating bmap (ino=15)
[ 1158.710935][T15201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1158.829233][T15201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1158.840273][T15201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1158.849926][T15201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1159.163087][ T7600] NILFS (loop4): discard dirty page: offset=0, ino=6
[ 1159.178847][ T7600] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1159.186118][ T7600] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[ 1159.194098][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1159.211430][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1159.231492][ T7600] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[ 1159.255516][ T7600] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[ 1159.308165][ T6707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1159.355955][ T6707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1161.616933][T15337] 9pnet_fd: Insufficient options for proto=fd
[ 1162.069143][ T1199] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1162.504894][ T1199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1162.653971][ T1199] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1162.665206][ T1199] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1162.674680][ T1199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1162.683209][ T1199] usb 4-1: SerialNumber: syz
[ 1163.048616][ T1199] usb 4-1: 0:2 : does not exist
[ 1163.138895][ T1199] usb 4-1: USB disconnect, device number 52
[ 1163.442101][T15349] loop0: detected capacity change from 0 to 2048
[ 1163.473965][T15349] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1163.528502][T15352] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1163.655095][   T28] audit: type=1800 audit(1751631200.688:44): pid=15349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2517" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1163.667141][T15354] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1163.793479][T15354] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1163.948057][T15354] Remounting filesystem read-only
[ 1163.997712][T15354] NILFS (loop0): error -5 truncating bmap (ino=15)
[ 1164.472680][T14651] NILFS (loop0): discard dirty page: offset=0, ino=6
[ 1164.489098][T14651] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[ 1164.496443][T14651] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[ 1164.554631][T14651] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[ 1164.593320][T14651] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[ 1167.089114][ T1199] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1167.390467][T15378] loop4: detected capacity change from 0 to 2048
[ 1167.408334][ T1199] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1167.424249][ T1199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.432805][ T1199] usb 4-1: Product: syz
[ 1167.437729][ T1199] usb 4-1: Manufacturer: syz
[ 1167.438378][T15378] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1167.442508][ T1199] usb 4-1: SerialNumber: syz
[ 1167.445207][ T1199] usb 4-1: config 0 descriptor??
[ 1167.484459][ T1199] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1167.634963][T15380] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1167.765555][   T28] audit: type=1800 audit(1751631204.798:45): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2524" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1167.787226][T15372] block nbd3: shutting down sockets
[ 1167.825984][ T1199] gspca_sunplus: reg_r err -71
[ 1167.844009][ T1199] usb 4-1: USB disconnect, device number 53
[ 1170.210526][T15403] random: crng reseeded on system resumption
[ 1173.138983][T15413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1173.148382][T15413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1174.087158][T15420] loop3: detected capacity change from 0 to 2048
[ 1174.157800][T15420] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1174.202415][T15424] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1174.266308][   T28] audit: type=1800 audit(1751631211.298:46): pid=15420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2538" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1174.302345][T15420] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1174.318021][T15420] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1174.344121][T15420] Remounting filesystem read-only
[ 1174.350407][T15420] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1174.419259][T14788] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1174.428816][T14788] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1174.448823][T14788] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1174.456158][T14788] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1174.488848][T14788] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1176.151753][T15444] random: crng reseeded on system resumption
[ 1176.786141][T15455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1176.795142][T15455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1177.613366][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.619713][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.734013][T15461] loop3: detected capacity change from 0 to 2048
[ 1177.743551][T15461] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1177.777759][T15463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1177.796886][T15462] 9pnet_fd: Insufficient options for proto=fd
[ 1177.825706][   T28] audit: type=1800 audit(1751631214.858:47): pid=15461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2551" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1177.853284][T15461] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1177.878852][T15461] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1177.904379][T15461] Remounting filesystem read-only
[ 1177.909706][T15461] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1177.971323][T14788] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1177.988364][T14788] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1177.996108][T14788] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1178.005851][T14788] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1178.013423][T14788] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1181.843594][T15498] loop4: detected capacity change from 0 to 2048
[ 1181.854115][T15498] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1181.885726][T15503] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1181.904409][T15501] loop3: detected capacity change from 0 to 2048
[ 1181.911907][T15505] loop0: detected capacity change from 0 to 128
[ 1181.919581][T15501] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1181.945081][T15502] 9pnet_fd: Insufficient options for proto=fd
[ 1181.959095][T15498] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1181.959405][   T28] audit: type=1800 audit(1751631218.988:48): pid=15498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2561" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1181.976705][T15498] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1182.004090][T15498] Remounting filesystem read-only
[ 1182.011946][T15498] NILFS (loop4): error -5 truncating bmap (ino=15)
[ 1182.025365][T15508] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1182.038940][   T28] audit: type=1800 audit(1751631219.058:49): pid=15505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2564" name="file2" dev="loop0" ino=1048614 res=0 errno=0
[ 1182.078661][T15505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1182.081779][ T7600] NILFS (loop4): discard dirty page: offset=0, ino=6
[ 1182.089990][T15505] FAT-fs (loop0): Filesystem has been set read-only
[ 1182.105334][T15505] syz.0.2564: attempt to access beyond end of device
[ 1182.105334][T15505] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[ 1182.108991][ T7600] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1182.128114][T15505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1182.143281][ T7600] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[ 1182.151196][   T28] audit: type=1800 audit(1751631219.188:50): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2563" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1182.152137][T15505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1182.177711][ T7600] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[ 1182.188075][ T7600] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[ 1182.197047][T15501] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1182.206337][T15505] syz.0.2564: attempt to access beyond end of device
[ 1182.206337][T15505] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[ 1182.220617][T15501] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1182.249228][T15505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1182.267388][T15505] syz.0.2564: attempt to access beyond end of device
[ 1182.267388][T15505] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[ 1182.293384][T15505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1182.330945][T15501] Remounting filesystem read-only
[ 1182.336163][T15501] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1182.353101][T15505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1182.382641][T15505] syz.0.2564: attempt to access beyond end of device
[ 1182.382641][T15505] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[ 1182.457600][T14788] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1182.473669][T14788] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1182.502706][T14788] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1182.562370][T14788] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1182.577420][T14788] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1187.102488][T15542] loop1: detected capacity change from 0 to 2048
[ 1187.117035][T15542] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1187.146537][T15547] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1187.152650][T15546] loop4: detected capacity change from 0 to 2048
[ 1187.170659][T15546] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1187.180977][   T28] audit: type=1800 audit(1751631224.208:51): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2575" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1187.182819][T15542] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1187.235902][T15542] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1187.270994][T15542] Remounting filesystem read-only
[ 1187.271052][T15550] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1187.303926][T15542] NILFS (loop1): error -5 truncating bmap (ino=15)
[ 1187.393030][   T28] audit: type=1800 audit(1751631224.428:52): pid=15546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2576" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1187.398107][T15546] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1187.447903][T15546] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1187.467967][T15546] Remounting filesystem read-only
[ 1187.473476][T15546] NILFS (loop4): error -5 truncating bmap (ino=15)
[ 1187.482205][T15201] NILFS (loop1): discard dirty page: offset=0, ino=6
[ 1187.505340][T15201] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1187.522767][T15201] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[ 1187.543867][T15201] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[ 1187.565008][ T7600] NILFS (loop4): discard dirty page: offset=0, ino=6
[ 1187.565161][T15201] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[ 1187.588489][ T7600] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[ 1187.630750][ T7600] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[ 1187.669502][ T7600] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[ 1187.714664][ T7600] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[ 1187.840044][T15559] loop0: detected capacity change from 0 to 2048
[ 1187.882612][T15559] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1187.975457][T15562] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1188.068965][   T28] audit: type=1800 audit(1751631225.098:53): pid=15559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2582" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1190.483554][T15587] loop1: detected capacity change from 0 to 2048
[ 1190.496901][T15587] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1190.527177][T15589] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1190.548851][T15281] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1190.569807][   T28] audit: type=1800 audit(1751631227.598:54): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2590" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1190.609607][T15587] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1190.618242][T15587] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1190.663424][T15587] Remounting filesystem read-only
[ 1190.668532][T15587] NILFS (loop1): error -5 truncating bmap (ino=15)
[ 1190.865506][T15201] NILFS (loop1): discard dirty page: offset=0, ino=6
[ 1190.885787][T15201] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[ 1190.911075][T15201] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[ 1190.923521][T15201] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[ 1190.932396][T15201] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[ 1190.986902][T15281] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1190.996304][T15281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.004754][T15281] usb 4-1: Product: syz
[ 1191.009132][T15281] usb 4-1: Manufacturer: syz
[ 1191.013795][T15281] usb 4-1: SerialNumber: syz
[ 1191.029620][T15281] usb 4-1: config 0 descriptor??
[ 1191.047576][T15281] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1191.751948][T15281] gspca_sunplus: reg_r err -110
[ 1194.122102][T15633] loop0: detected capacity change from 0 to 2048
[ 1194.145126][T15633] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1194.212719][T15609] block nbd3: shutting down sockets
[ 1194.337038][T15637] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1194.400184][T13376] usb 4-1: USB disconnect, device number 54
[ 1194.760081][   T28] audit: type=1800 audit(1751631231.778:55): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2605" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1195.141889][T14651] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1195.188849][T14651] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1195.219975][T14651] Remounting filesystem read-only
[ 1195.225051][T14651] NILFS (loop0): error -5 truncating bmap (ino=15)
[ 1195.272764][T14651] NILFS (loop0): discard dirty page: offset=0, ino=6
[ 1195.290050][T14651] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[ 1195.297358][T14651] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[ 1195.305409][T14651] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[ 1195.312802][T14651] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[ 1195.552970][T15642] loop4: detected capacity change from 0 to 2048
[ 1195.714506][T15642] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1196.007272][T15646] loop0: detected capacity change from 0 to 2048
[ 1196.031253][T15649] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1196.058118][T15646] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1196.128977][T15650] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1196.148826][   T28] audit: type=1800 audit(1751631233.168:56): pid=15642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2609" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1196.215885][   T28] audit: type=1800 audit(1751631233.248:57): pid=15646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2608" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1196.245226][T15646] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1196.280024][T15646] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1196.313851][T15646] Remounting filesystem read-only
[ 1196.329555][T15646] NILFS (loop0): error -5 truncating bmap (ino=15)
[ 1196.412171][T14651] NILFS (loop0): discard dirty page: offset=0, ino=6
[ 1196.424385][T14651] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[ 1196.444771][T14651] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[ 1196.467877][T14651] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[ 1196.488972][T14651] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[ 1196.864086][T15654] loop3: detected capacity change from 0 to 32768
[ 1196.956618][T15654] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2612 (15654)
[ 1197.187176][T15654] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1197.345707][T15654] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1197.428441][T15654] BTRFS info (device loop3): enabling disk space caching
[ 1197.491589][T15654] BTRFS info (device loop3): doing ref verification
[ 1197.532089][T15654] BTRFS info (device loop3): use zlib compression, level 3
[ 1197.539406][T15654] BTRFS info (device loop3): force clearing of disk cache
[ 1197.546644][T15654] BTRFS info (device loop3): setting nodatacow, compression disabled
[ 1197.554991][T15654] BTRFS info (device loop3): doing ref verification
[ 1197.561698][T15654] BTRFS info (device loop3): disk space caching is enabled
[ 1197.793617][T15654] BTRFS info (device loop3): enabling ssd optimizations
[ 1197.805114][T15654] BTRFS info (device loop3): auto enabling async discard
[ 1197.814935][T15654] BTRFS info (device loop3): rebuilding free space tree
[ 1198.035891][T15654] BTRFS info (device loop3): disabling free space tree
[ 1198.138292][T15654] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1198.258497][T15654] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1198.686078][   T28] audit: type=1800 audit(1751631235.708:58): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2612" name="bus" dev="loop3" ino=263 res=0 errno=0
[ 1198.727028][T15654] BTRFS error (device loop3): balance: mixed groups data and metadata options must be the same
[ 1198.964136][   T28] audit: type=1800 audit(1751631235.718:59): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2612" name="bus" dev="loop3" ino=263 res=0 errno=0
[ 1198.992947][T15691] random: crng reseeded on system resumption
[ 1200.098990][T15702] loop4: detected capacity change from 0 to 2048
[ 1200.129284][T15702] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1200.158230][T15703] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1200.196929][   T28] audit: type=1800 audit(1751631237.228:60): pid=15702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2623" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1200.373486][T15706] CIFS: Unable to determine destination address
[ 1201.637545][T14788] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1202.783657][T15714] loop4: detected capacity change from 0 to 32768
[ 1202.867120][T15714] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[ 1204.051868][T15735] loop3: detected capacity change from 0 to 2048
[ 1204.077159][T15735] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1204.097277][ T7600] ocfs2: Unmounting device (7,4) on (node local)
[ 1204.176887][T15739] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1204.219178][   T28] audit: type=1800 audit(1751631241.248:61): pid=15735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2632" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1204.228967][T15735] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1204.256162][T15735] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1204.272065][T15735] Remounting filesystem read-only
[ 1204.281709][T15735] NILFS (loop3): error -5 truncating bmap (ino=15)
[ 1204.466518][T14788] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1204.519930][T14788] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[ 1204.551455][T14788] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[ 1204.578667][T14788] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1204.614017][T14788] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1205.998808][ T5853] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1206.108913][ T5882] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1206.227509][ T5853] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1206.653977][ T5882] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1206.693085][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.761804][ T5882] usb 5-1: Product: syz
[ 1206.783308][ T5882] usb 5-1: Manufacturer: syz
[ 1206.812641][ T5882] usb 5-1: SerialNumber: syz
[ 1206.872111][ T5882] usb 5-1: config 0 descriptor??
[ 1206.916490][ T5882] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1207.171694][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.188854][ T5853] usb 4-1: Product: syz
[ 1207.195937][ T5853] usb 4-1: Manufacturer: syz
[ 1207.200718][ T5853] usb 4-1: SerialNumber: syz
[ 1207.398950][ T5853] usb 4-1: config 0 descriptor??
[ 1207.422347][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1207.460425][ T5882] gspca_sunplus: reg_r err -110
[ 1207.959184][ T5853] gspca_sunplus: reg_r err -110
[ 1209.758987][T13158] usb 4-1: USB disconnect, device number 55
[ 1212.062032][T15753] block nbd4: shutting down sockets
[ 1212.087580][ T1199] usb 5-1: USB disconnect, device number 30
[ 1212.399361][T15788] ==================================================================
[ 1212.407477][T15788] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990
[ 1212.415140][T15788] Read of size 1 at addr ffff888030a81430 by task syz.4.2645/15788
[ 1212.423050][T15788] 
[ 1212.425400][T15788] CPU: 0 PID: 15788 Comm: syz.4.2645 Not tainted 6.6.95-syzkaller #0
[ 1212.433474][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1212.443550][T15788] Call Trace:
[ 1212.446840][T15788]  <TASK>
[ 1212.449783][T15788]  dump_stack_lvl+0x16c/0x230
[ 1212.454503][T15788]  ? __lock_acquire+0x7c80/0x7c80
[ 1212.459574][T15788]  ? show_regs_print_info+0x20/0x20
[ 1212.464798][T15788]  ? load_image+0x3b0/0x3b0
[ 1212.469323][T15788]  ? __virt_addr_valid+0x469/0x540
[ 1212.474468][T15788]  print_report+0xac/0x230
[ 1212.478921][T15788]  ? rose_get_neigh+0x391/0x990
[ 1212.483811][T15788]  kasan_report+0x117/0x150
[ 1212.488352][T15788]  ? rose_get_neigh+0x391/0x990
[ 1212.493244][T15788]  rose_get_neigh+0x391/0x990
[ 1212.497960][T15788]  rose_connect+0x417/0x10a0
[ 1212.502593][T15788]  ? aa_sk_perm+0x7fc/0x930
[ 1212.507120][T15788]  ? rose_bind+0x7c0/0x7c0
[ 1212.511562][T15788]  ? aa_af_perm+0x200/0x2b0
[ 1212.516085][T15788]  ? tomoyo_socket_connect_permission+0x164/0x290
[ 1212.522534][T15788]  ? __might_fault+0xaa/0x120
[ 1212.527247][T15788]  ? bpf_lsm_socket_connect+0x9/0x10
[ 1212.532586][T15788]  ? security_socket_connect+0x80/0xa0
[ 1212.538076][T15788]  ? rose_bind+0x7c0/0x7c0
[ 1212.542534][T15788]  __sys_connect+0x397/0x420
[ 1212.547164][T15788]  ? __sys_connect_file+0x180/0x180
[ 1212.552405][T15788]  __x64_sys_connect+0x7a/0x90
[ 1212.557220][T15788]  do_syscall_64+0x55/0xb0
[ 1212.561665][T15788]  ? clear_bhb_loop+0x40/0x90
[ 1212.566366][T15788]  ? clear_bhb_loop+0x40/0x90
[ 1212.571066][T15788]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1212.576983][T15788] RIP: 0033:0x7fefb6b8e929
[ 1212.581430][T15788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1212.601057][T15788] RSP: 002b:00007fefb791f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1212.609522][T15788] RAX: ffffffffffffffda RBX: 00007fefb6db5fa0 RCX: 00007fefb6b8e929
[ 1212.617527][T15788] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007
[ 1212.625530][T15788] RBP: 00007fefb6c10b39 R08: 0000000000000000 R09: 0000000000000000
[ 1212.633532][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1212.641535][T15788] R13: 0000000000000000 R14: 00007fefb6db5fa0 R15: 00007ffeec3935a8
[ 1212.649554][T15788]  </TASK>
[ 1212.652588][T15788] 
[ 1212.654939][T15788] Allocated by task 14750:
[ 1212.659372][T15788]  kasan_set_track+0x4e/0x70
[ 1212.663992][T15788]  __kasan_kmalloc+0x8f/0xa0
[ 1212.668634][T15788]  rose_add_node+0x23a/0xdd0
[ 1212.673264][T15788]  rose_rt_ioctl+0xa42/0xfb0
[ 1212.677922][T15788]  rose_ioctl+0x3cf/0x8b0
[ 1212.682637][T15788]  sock_do_ioctl+0xd7/0x2f0
[ 1212.687167][T15788]  sock_ioctl+0x623/0x7a0
[ 1212.691538][T15788]  __se_sys_ioctl+0xfd/0x170
[ 1212.696166][T15788]  do_syscall_64+0x55/0xb0
[ 1212.700603][T15788]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1212.706522][T15788] 
[ 1212.708872][T15788] Freed by task 15788:
[ 1212.712958][T15788]  kasan_set_track+0x4e/0x70
[ 1212.717580][T15788]  kasan_save_free_info+0x2e/0x50
[ 1212.722644][T15788]  ____kasan_slab_free+0x126/0x1e0
[ 1212.727795][T15788]  slab_free_freelist_hook+0x130/0x1b0
[ 1212.733305][T15788]  __kmem_cache_free+0xba/0x1f0
[ 1212.738181][T15788]  rose_rt_device_down+0x66d/0x6c0
[ 1212.743327][T15788]  rose_device_event+0x604/0x690
[ 1212.748292][T15788]  notifier_call_chain+0x197/0x390
[ 1212.753433][T15788]  __dev_notify_flags+0x18e/0x2e0
[ 1212.758512][T15788]  dev_change_flags+0xe8/0x1a0
[ 1212.763313][T15788]  dev_ifsioc+0x6a7/0xe20
[ 1212.767663][T15788]  dev_ioctl+0x7e2/0x1170
[ 1212.772014][T15788]  sock_do_ioctl+0x226/0x2f0
[ 1212.776627][T15788]  sock_ioctl+0x623/0x7a0
[ 1212.780979][T15788]  __se_sys_ioctl+0xfd/0x170
[ 1212.785607][T15788]  do_syscall_64+0x55/0xb0
[ 1212.790232][T15788]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1212.796157][T15788] 
[ 1212.798508][T15788] Last potentially related work creation:
[ 1212.804244][T15788]  kasan_save_stack+0x3e/0x60
[ 1212.808954][T15788]  __kasan_record_aux_stack+0xaf/0xc0
[ 1212.814362][T15788]  insert_work+0x3d/0x310
[ 1212.818722][T15788]  __queue_work+0xd2c/0x1020
[ 1212.823344][T15788]  call_timer_fn+0x16e/0x530
[ 1212.827969][T15788]  __run_timers+0x558/0x7d0
[ 1212.832518][T15788]  run_timer_softirq+0x67/0xf0
[ 1212.837309][T15788]  handle_softirqs+0x280/0x820
[ 1212.842101][T15788]  __irq_exit_rcu+0xc7/0x190
[ 1212.846739][T15788]  irq_exit_rcu+0x9/0x20
[ 1212.851000][T15788]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1212.856670][T15788]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1212.862704][T15788] 
[ 1212.865057][T15788] Second to last potentially related work creation:
[ 1212.871652][T15788]  kasan_save_stack+0x3e/0x60
[ 1212.876346][T15788]  __kasan_record_aux_stack+0xaf/0xc0
[ 1212.881725][T15788]  insert_work+0x3d/0x310
[ 1212.886057][T15788]  __queue_work+0xd2c/0x1020
[ 1212.890639][T15788]  call_timer_fn+0x16e/0x530
[ 1212.895226][T15788]  __run_timers+0x558/0x7d0
[ 1212.899745][T15788]  run_timer_softirq+0x67/0xf0
[ 1212.904510][T15788]  handle_softirqs+0x280/0x820
[ 1212.909287][T15788]  __irq_exit_rcu+0xc7/0x190
[ 1212.913889][T15788]  irq_exit_rcu+0x9/0x20
[ 1212.918147][T15788]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1212.923779][T15788]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1212.929764][T15788] 
[ 1212.932086][T15788] The buggy address belongs to the object at ffff888030a81400
[ 1212.932086][T15788]  which belongs to the cache kmalloc-512 of size 512
[ 1212.946142][T15788] The buggy address is located 48 bytes inside of
[ 1212.946142][T15788]  freed 512-byte region [ffff888030a81400, ffff888030a81600)
[ 1212.959855][T15788] 
[ 1212.962212][T15788] The buggy address belongs to the physical page:
[ 1212.968657][T15788] page:ffffea0000c2a000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888030a80400 pfn:0x30a80
[ 1212.980132][T15788] head:ffffea0000c2a000 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1212.989321][T15788] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1212.997315][T15788] page_type: 0xffffffff()
[ 1213.001663][T15788] raw: 00fff00000000840 ffff888017841c80 ffffea0000bf2d10 ffffea0000852410
[ 1213.010275][T15788] raw: ffff888030a80400 000000000010000e 00000001ffffffff 0000000000000000
[ 1213.018865][T15788] page dumped because: kasan: bad access detected
[ 1213.025281][T15788] page_owner tracks the page as allocated
[ 1213.030986][T15788] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4660, tgid 4660 (kworker/u4:3), ts 23215629470, free_ts 0
[ 1213.051563][T15788]  post_alloc_hook+0x1cd/0x210
[ 1213.056358][T15788]  get_page_from_freelist+0x195c/0x19f0
[ 1213.061919][T15788]  __alloc_pages+0x1e3/0x460
[ 1213.066521][T15788]  alloc_slab_page+0x5d/0x170
[ 1213.071194][T15788]  new_slab+0x87/0x2e0
[ 1213.075275][T15788]  ___slab_alloc+0xc6d/0x12f0
[ 1213.079948][T15788]  __kmem_cache_alloc_node+0x1a2/0x260
[ 1213.085420][T15788]  kmalloc_trace+0x2a/0xe0
[ 1213.089874][T15788]  alloc_bprm+0x56/0x9c0
[ 1213.094123][T15788]  kernel_execve+0x98/0x9c0
[ 1213.098635][T15788]  call_usermodehelper_exec_async+0x20b/0x350
[ 1213.104715][T15788]  ret_from_fork+0x48/0x80
[ 1213.109145][T15788]  ret_from_fork_asm+0x11/0x20
[ 1213.113940][T15788] page_owner free stack trace missing
[ 1213.119324][T15788] 
[ 1213.121659][T15788] Memory state around the buggy address:
[ 1213.127284][T15788]  ffff888030a81300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1213.135347][T15788]  ffff888030a81380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1213.143406][T15788] >ffff888030a81400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1213.151469][T15788]                                      ^
[ 1213.157116][T15788]  ffff888030a81480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1213.165206][T15788]  ffff888030a81500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1213.173281][T15788] ==================================================================
[ 1213.181576][T15788] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1213.188793][T15788] CPU: 0 PID: 15788 Comm: syz.4.2645 Not tainted 6.6.95-syzkaller #0
[ 1213.196880][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1213.206958][T15788] Call Trace:
[ 1213.210254][T15788]  <TASK>
[ 1213.213208][T15788]  dump_stack_lvl+0x16c/0x230
[ 1213.217894][T15788]  ? show_regs_print_info+0x20/0x20
[ 1213.223100][T15788]  ? load_image+0x3b0/0x3b0
[ 1213.227610][T15788]  panic+0x2c0/0x710
[ 1213.231505][T15788]  ? bpf_jit_dump+0xd0/0xd0
[ 1213.236020][T15788]  ? _raw_spin_unlock_irqrestore+0xa9/0x110
[ 1213.241927][T15788]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1213.247873][T15788]  ? _raw_spin_unlock+0x40/0x40
[ 1213.252755][T15788]  ? print_memory_metadata+0x314/0x400
[ 1213.258250][T15788]  ? rose_get_neigh+0x391/0x990
[ 1213.263111][T15788]  check_panic_on_warn+0x84/0xa0
[ 1213.268057][T15788]  ? rose_get_neigh+0x391/0x990
[ 1213.272918][T15788]  end_report+0x6f/0x140
[ 1213.277165][T15788]  kasan_report+0x128/0x150
[ 1213.281682][T15788]  ? rose_get_neigh+0x391/0x990
[ 1213.286554][T15788]  rose_get_neigh+0x391/0x990
[ 1213.291242][T15788]  rose_connect+0x417/0x10a0
[ 1213.295858][T15788]  ? aa_sk_perm+0x7fc/0x930
[ 1213.300371][T15788]  ? rose_bind+0x7c0/0x7c0
[ 1213.304796][T15788]  ? aa_af_perm+0x200/0x2b0
[ 1213.309299][T15788]  ? tomoyo_socket_connect_permission+0x164/0x290
[ 1213.315710][T15788]  ? __might_fault+0xaa/0x120
[ 1213.320387][T15788]  ? bpf_lsm_socket_connect+0x9/0x10
[ 1213.325679][T15788]  ? security_socket_connect+0x80/0xa0
[ 1213.331155][T15788]  ? rose_bind+0x7c0/0x7c0
[ 1213.335573][T15788]  __sys_connect+0x397/0x420
[ 1213.340180][T15788]  ? __sys_connect_file+0x180/0x180
[ 1213.345440][T15788]  __x64_sys_connect+0x7a/0x90
[ 1213.350225][T15788]  do_syscall_64+0x55/0xb0
[ 1213.354641][T15788]  ? clear_bhb_loop+0x40/0x90
[ 1213.359327][T15788]  ? clear_bhb_loop+0x40/0x90
[ 1213.364001][T15788]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1213.369894][T15788] RIP: 0033:0x7fefb6b8e929
[ 1213.374304][T15788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1213.393935][T15788] RSP: 002b:00007fefb791f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1213.402373][T15788] RAX: ffffffffffffffda RBX: 00007fefb6db5fa0 RCX: 00007fefb6b8e929
[ 1213.410360][T15788] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007
[ 1213.418336][T15788] RBP: 00007fefb6c10b39 R08: 0000000000000000 R09: 0000000000000000
[ 1213.426306][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1213.434275][T15788] R13: 0000000000000000 R14: 00007fefb6db5fa0 R15: 00007ffeec3935a8
[ 1213.442257][T15788]  </TASK>
[ 1213.445624][T15788] Kernel Offset: disabled
[ 1213.449950][T15788] Rebooting in 86400 seconds..