last executing test programs: 16m57.096080636s ago: executing program 32 (id=183): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)}, 0x4}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 16m38.551111757s ago: executing program 33 (id=262): connect$inet6(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x40, r3, 0x1, 0x70bd2c, 0x25dfd9fb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 16m26.198843774s ago: executing program 34 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) keyctl$link(0x8, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x40, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x5, 0x7, 0x3, 0x7fff, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x4, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x1, 0x3, 0x3, 0x2, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x8001, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x6, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x1004, 0x9, 0x7, 0x5, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x9, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0x80000801, 0x8001, 0x7, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74de, 0xec9, 0x140, 0x5, 0x3, 0xfb61, 0x201, 0x7fff, 0xa, 0x2, 0x7, 0x3], [0x0, 0x20f, 0xfffffffd, 0x200, 0x0, 0x3, 0x6, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0x8000, 0xb7, 0x6, 0xfffffff1, 0x1, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x5, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x1, 0x400, 0x6, 0x6, 0x5, 0x5, 0x20, 0x4, 0xde, 0x6, 0x1, 0x6, 0x2, 0x2, 0x2, 0x1000, 0x5, 0x3, 0x8, 0x1, 0x7, 0xfffffffb]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 15m57.856019913s ago: executing program 5 (id=365): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 15m56.530776985s ago: executing program 5 (id=368): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000001380)="7201cc576a0c42dc9734b695f6b360bbe06853a4f0703787e506b7a171e18f1a6f2d920a2e56d90e4f", 0x29}], 0x1) 15m55.835193856s ago: executing program 5 (id=370): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000240)=""/157, 0x9d) getdents(r0, 0x0, 0x0) 15m55.110939469s ago: executing program 5 (id=377): io_setup(0x4, &(0x7f00000014c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') io_setup(0x2278, &(0x7f0000000180)=0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) statfs(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x7, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x0, r3, 0x0, 0x0, 0xfffffffffffffffd}]) io_submit(r1, 0x3, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xe7b, r0, &(0x7f0000000040)="e184d94aefaf6ca993bf", 0xa, 0xb, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc79, 0xffffffffffffffff, &(0x7f0000000140)="a0aaad933b4091b4634a67e4ff65b5f2871d9fbcc9cbc1c90622b2fb654fe1b7fec022bd2aa5f50bd9bc5b0f491ed8b5e17f67746c3c4fcfe2af872c958c95be3d5f83ea12c0631d70b6e5288bcb751939430a813829df3bf54fe2548d005843b6f2041495a04a38dbe2ee", 0x6b, 0x1, 0x0, 0x2, r0}]) 15m52.105435193s ago: executing program 5 (id=386): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000140), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x2d) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) syz_mount_image$ext4(&(0x7f0000000900)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1295c40, &(0x7f0000000200), 0x1, 0x5a3, &(0x7f00000002c0)="$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") unlink(&(0x7f0000000580)='./file1\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, 0x0, 0x0) 15m50.264033071s ago: executing program 5 (id=392): socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) 15m49.588430822s ago: executing program 35 (id=392): socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) 14m11.696617644s ago: executing program 1 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 14m9.792061083s ago: executing program 1 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 14m5.187955577s ago: executing program 1 (id=632): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x0, 0xbbcb}) 13m57.247516397s ago: executing program 1 (id=649): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 13m55.475436082s ago: executing program 1 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 13m54.546294711s ago: executing program 1 (id=658): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 13m51.647329772s ago: executing program 36 (id=658): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 12m10.90118616s ago: executing program 7 (id=842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 12m9.189367833s ago: executing program 7 (id=847): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x80800, 0x0) io_uring_setup(0x522, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r1, r1, 0x0, 0x200000) 12m9.098280296s ago: executing program 9 (id=848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r1, 0x0, 0x317e, 0x4) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) close_range(r0, 0xffffffffffffffff, 0x0) 12m5.887556337s ago: executing program 9 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, 0x0}, 0x28000) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000015c0)=@raw={'raw\x00', 0x8, 0x3, 0x1248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x11b4, 0x2a8, 0x2a8, 0x11b4, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10c4, 0x1124, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x12a4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 12m3.390340045s ago: executing program 9 (id=856): munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@mblk_io_submit}, {@quota}]}, 0xff, 0x269, &(0x7f0000000a00)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x0, 0x1, 0x0, &(0x7f0000000000)) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404043000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) mount$9p_tcp(0x0, 0x0, &(0x7f0000000540), 0x1000004, &(0x7f0000000600)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@version_L}], [{@smackfsroot={'smackfsroot', 0x3d, '.$#,\xb8\xce%{-@(:p\x15'}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'[-\x94!,\\.$'}}]}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) mmap$fb(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x2, 0x80010, r2, 0x43000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5d5dfca8) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000140)='./bus\x00', 0x0, 0x3801000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50}, 0xffd3) 12m1.198292164s ago: executing program 7 (id=861): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 12m1.100339877s ago: executing program 9 (id=862): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180), &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1, 0x0], 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0]}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c850}, 0x8000002) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r0, 0xc008644c, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 11m59.935032763s ago: executing program 7 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 11m58.796528019s ago: executing program 7 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x7f) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 11m57.474146701s ago: executing program 7 (id=873): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) 11m57.282786826s ago: executing program 9 (id=875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, 0x0) 11m54.646297569s ago: executing program 9 (id=878): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) dup2(r1, r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 11m42.038803724s ago: executing program 37 (id=873): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) 11m39.266881831s ago: executing program 38 (id=878): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) dup2(r1, r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 8m35.725702855s ago: executing program 8 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 8m35.351801186s ago: executing program 8 (id=1136): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) mknod$loop(0x0, 0x8fff, 0x0) semget(0x1, 0x2, 0x210) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000004200)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES32], 0x0, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) epoll_create1(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000000), 0x10) io_submit(r4, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@part={'part', 0x3d, 0x9}}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'cp855'}}, {@gid={'gid', 0x3d, 0xee00}}, {@nobarrier}, {@uid}, {}]}, 0xfe, 0x5ee, &(0x7f0000000680)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x80d018, 0x0, 0x0, 0x0, &(0x7f0000000240)) 8m33.345890489s ago: executing program 8 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310002000015000300686173683a69702c706f72742c6e6574000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0xc0c1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="06000000200d"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000a0500010007080000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0xf00, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, r8, 0x2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x1, 0x800002b, r9, 0x0) 8m30.987856503s ago: executing program 8 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 8m27.009170488s ago: executing program 8 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) getpeername(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x240981, 0x0) fcntl$getflags(r7, 0x3) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xfffe, 0x3ff}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4, r3}, 0x38) 8m23.651984543s ago: executing program 8 (id=1154): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 8m5.626121388s ago: executing program 39 (id=1154): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 23.587980197s ago: executing program 6 (id=2413): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8004, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x10, 0x1, 0x3, "7e0efeac3d4fd6e0c46a2ca55aab2500b482b200f475a8f64100", 0x47425247}) 22.229114019s ago: executing program 6 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000033c0)={0x2020}, 0x2042) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) syz_mount_image$udf(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x0, &(0x7f0000003340)=ANY=[@ANYBLOB="00e9c655ee4708d304c5a20d854fb29bc0815156d4a1c8c5e67b11054a016a1c8a5af527a4a5b6ffb6bc35a4a6f709bc361489eff75209e3297e9f2194a0fdb2bf3993ba8ec61a7ad684860088ed6c765bc3013ad5fdcc6fb1be44c2e460b8ce295d59cfbaa4175da1f5d9b3f9ca3c91a1f5790ae208ce2044fc8fb3f70de141152bf726b3838587d24802992b3995624fd7705f2d64c6524d9cea8cc909d0f727154985464ac46e974449dcef0b41b4465f50223fdb36bcae080bd6c92083765c0fa49fe536a392caf67f"], 0x1, 0x1905, &(0x7f0000001a00)="$eJzs3E9oXOe1APDzaWYsWc6LJ06sOA8vJsnj2U/5gyy99yKjFuREHhIQzh9ZLcEby9bYnUYeqZJd5BBShyzaTamhm9KVKbhQSiGlXRVKQumigRbcUGi7KJgSnG4SVChkU+pyr66ksSzXSmJZdfL7RdH57pnz3Tl3BIZzNZoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACKePHigb1/a7C4AAACAjXRo7IW+AfM/AAAAfKod9vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICNkKIUj0SKv/9xIR3Njxd1jTZbZ+bHR+prb9uaIkVHlPL67P+uff0D//t////E4FL81/tvtQfi2bHDB2pPTZ+amW3MzTUma+Ot5vHpyca6z/BJ96/Wm78AtVMvnZk8cWKu1v/4wDUPz1evdG7rqQ4NHjk4ulQ7PlKvj7XVlCsf+9mvk27dqQAAALgDbYlS7I0UtZ/+JU1EREd88ln4JvcONtrWqGbzd34R4yP1/EKmmhOt09mDqaOoquZfy4aXZuTbMIt/MinOZT+nrOHe7PLGZiZmJ45NNWrPTcyebp5uTrdSx2K3Kb/MjhhMETMRsVDa7N4BAADYLJUoxZuR4rtvL6RjEVFamoMfOTT2Qt/AjTdWb2OTayhnLZQiLsWdMLMDAADA5uqMUjwTKbZ+ry+OF3N1PjYPV+KuLC5EfKWoPF8cpxQRlyP+6vfJAAAAcEcoRyl+Eymm00KaXJr98/eVj36h9kzrxHRb7dL7yu/4vw+4nbw3AQAAgH8DXVGKY/k7/hfSx/+wOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYaKX4WaR449TeNJMd9o6P1GtjMxOzzdbJ2uGJY1ONvCp1lCtZrBW7rl69erWaFmOtiH1FHC7ic0U8WsSZIp4r4vkiXijiG0V8q4iXini5iAtFjI7i+YtYK2JfEYeL+FwRjxZxpojnini+iBeK+EYR3yripSJeLuJCEaO0iT8uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACADbI1SjEdKb72/lfjXJaoXunc1rN9aP//3L0ltdXtusl5strHI+IXEXEpS/SONltn5mvjI/X6WFtdubIYt0RER7avI/vv1l8XAAAAsKIrSvFqPr0vpNc2uxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCO1BGleD9SfL21kCJlmRRHYzFeLm12dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8VnSmUqRIMfn88HKuHBEp/1q0N/u2EMN54lIM35vFczG8lN+Xx67hA5vQPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALdIKsXrkeKH7yykakTMV690buupDg0eOThailKkrKS9/tmxwwdqT02fmpltzM01Jmvjrebx6cnGep+ua7TZOjM/PlLfkIu5qa0b3P/WrqemZ87ONk9+6fSaj3d3HTg2d3p24vjaD8fWqEb0tWd684bHR+p501PNiVa+NXXcoMFqRG29FwMAAMBnRncqxWSk+NNrfy7fU+TKizN/ZfGotFx78ZWVewH/Wb42LsvvH2wf2r+nv3c967TeRnvzwTsbhOtjbely0eWOtlzW09zZl1+amJpqzFpYWFgsLz7CP44AAPApk83/P4oUTz6d0tIMXcz/dy0ercz/H766Mv/vXxWXbdL8f29bbn/xnoVKOaLr9KmZys6IrrmzLz/WPDVxsnGy0ep/on9gYHBgsLIloutEc6rRt7Ja9ysHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLtKKsVcpPjg27+KWpErR0SK+I/Fo9Jy7cVX8nxu76rzzFevdG7rqQ4NHjk4eqN1WquB3tFm68x8bXykXh9rS5cr15dmz5lSKY5Eihd/uSvvN0V3RDWWewcAAACu151KsTtS7P/y0+nBIlfM/+XFo7Xn/3Or4rJ83t8+tH9Pf+961mveE1jLTe4T3NOWO1fcJzgbKcbe2xUPtt0n6Ft12qyuEike+MHuoi62ZHVL59uRf+860Zxq9GW1b0aK77x7be2Oovbeldp9670sAAAAuB2y+f9CpPjw++/EQ0WumP+LyXrt+b97VVy2SfP/fe3XFBFzZ19+aWJqqjE7t+6XAgAAAD61svn/H5HiwE/+EA8XuWvn/5UJPZv/O4r13oevjct3CTZp/t/ZlqsWff3XR3wtAAAAAAAAAAAAAAAAAAAAYLN0p1L8LVL87uePpj1Fbj2f/ze5Ki7bpL//v78tN3nN5/9t3GLdLzIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJuukkqxI1J8a/Ld1FfkyhGRFkNElJZrL34uoqNYj6RVJ6pe6dzWc/fQ4JGDo4vr7UP79/T3tq9Xb8n1jjZbZ+Zr4yP1+lhbuly5vjR7zpRK8Y1IMfberujL++yOqEb0rarN6nZHil9/8GhRl3qyuuGldvPvXYemW48dmJqaPj5xeuLYVKM2NjNxvJHtHYoU51/cXezt2JJteLDYe8/i3hPNqUZfVvt2pPjv55dqI699qKi9b6V2X1b7aKR4/YvX1j5c1O5cqe3Pan8bKT7/5Nq1PSu1A1ntjyPFznptqbY7q91T1N6/Uvv48empybV+DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJVUikOR4pu/vxDDRa4cESmi0naYu/hKnl/TfPVK57ae6tDgkYOjN1qvubd3tNk6M18bH6nXx9rS5eLZq7fmMgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn+zbvU9kVRjA4ffMAXeJFlOZ2N3SYGJw8YPEmKAiiQlRIouNDbMCZiIMI7DJlnS21FYbWxND4R+wrYkFrR1+rLEy194Ecy9nzKrrRwSZJXme7OaXYc6ZOReql7kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADnlCLH55Hil6/rdJKbx2euL/UHt++sLiw+fNtUihSdyO365v/1527MPv/Ciy/Njfr3+y/aU/H2ys1Xq9d3toe7G3t7G+vV6qD//s76xr9+hfPu/6Pp9htQbX94e31zc6+68ezs756+0/3h2uNPdl+ee++NpdHa1YXFxZUH1kxM/ud3/5N0cS8FAADAFfRY5PgsUlRf/Ji+yRGdOP8s/A+/O/i/TUW3mb/bi1hdWGwvZKvfG+w3T6ZOWdVt//1mfjQjX8Isfj4pDiKi0xx4urm8lWFvt3dra6Na7u3u9/f7O4PUOTttai+zE3MpYhgRdR732QEAABiXycjxWqT45Ms6fZsj8mgOfuatlXdmZv96Y/cSD/kQE80RcsRxXIWZHQAAAMbrWuT4KlJMfToT3+Wzubodm+cn44mmdcRHZeVheZxSRJxE/OzzZAAAALgSJiLHcqTYSXX6PpfZv72vfOnd6s3B5s4Da0f3lV/5vw+4TO5NAAAA4BFwPXLcb+/4r9N9n+cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MjK8UqkONp+OtU5IqZXFxarlWFvtz/4oLrZu7W10a5KnYnJplXZdXp6etpNZ61KZ0rnS5dL10qHpQelh6V3S49K75Uel56U1qXRKe9fWpXOlM6XLpeulQ5LD0oPS++WHpXeKz0uPSmtSyOP8+cFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAencjxU6T4eFCn09x8JcVanPUkj/t0AAAAwEX4NQAA//9ohSnw") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 20.943819069s ago: executing program 6 (id=2416): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80c8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@max_inline={'max_inline', 0x3d, [0x78, 0x35, 0x36]}}, {@compress}, {@discard}]}, 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000002b40)={0x1000, &(0x7f0000000880), &(0x7f0000002940), &(0x7f0000002980), {0x38}, &(0x7f00000029c0)=""/252, 0xfc, 0x0, &(0x7f0000002b00)}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 16.958752583s ago: executing program 2 (id=2426): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000700)=""/147, &(0x7f00000007c0)=0x93) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, 0xffffffffffffffff, r6) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0xf0, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x26000884}, 0x12) 16.760020709s ago: executing program 4 (id=2427): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0xf730ac4d9e9750df, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 14.982875694s ago: executing program 4 (id=2428): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8", 0x9}, {0x0}, {0x0}, {0x0}], 0x4}, 0x41) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000180)={0xa, 0xf7fa, 0xfffffffe, @loopback, 0x3}, 0x1c, 0x0}}], 0x1, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.952686706s ago: executing program 6 (id=2429): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13.673759565s ago: executing program 0 (id=2430): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}], 0x1, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 12.605043008s ago: executing program 2 (id=2431): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x4) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff004) 11.677687406s ago: executing program 0 (id=2432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x9201, 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000001c0)={{0x8000}, 0x100, './file0\x00'}) write$binfmt_script(r8, &(0x7f0000000040)={'#! ', './file0'}, 0xb) 10.974998928s ago: executing program 2 (id=2433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 10.011257358s ago: executing program 0 (id=2435): syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1009}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) 9.449329466s ago: executing program 6 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000003, 0x8, 0x409, 0x8, 0x80, 0x11, 0x4, 0x8000000000000000, 0x6, 0x0, 0x3, 0x2, 0x3, 0xb], 0x0, 0x194d40}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000210557510110f3020fda9010203010902240001de0d000809041f0b02511bdcfc09058e030002", @ANYRES64], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) set_mempolicy(0x6, 0x0, 0xe0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, 0x0, 0x0) fsopen(0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x143101, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae03, 0x4c) 8.871970484s ago: executing program 3 (id=2437): socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4011}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = getpid() r6 = openat(r0, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0x12) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[], 0x0, 0x26}, 0x28) 8.586429233s ago: executing program 4 (id=2438): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, 0x0, 0x0) getdents(r3, 0x0, 0x0) 7.38164518s ago: executing program 4 (id=2439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 7.04565644s ago: executing program 6 (id=2440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f1"], 0x20}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 6.887027875s ago: executing program 3 (id=2441): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000440)=""/112, 0x70, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) fsmount(0xffffffffffffffff, 0x0, 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) 6.705254291s ago: executing program 2 (id=2442): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x80) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 5.976985663s ago: executing program 4 (id=2443): socket$rds(0x15, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r0, &(0x7f0000000300)=""/56, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ptrace$setregs(0xd, r8, 0x5, &(0x7f0000000340)) 5.360013123s ago: executing program 2 (id=2444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, &(0x7f0000000580)=""/243, 0xf3) socket(0x1, 0x6, 0x570) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x13, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x1a1, &(0x7f0000000440)="$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") 4.446560301s ago: executing program 2 (id=2445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x9201, 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000001c0)={{0x8000}, 0x100, './file0\x00'}) write$binfmt_script(r8, &(0x7f0000000040)={'#! ', './file0'}, 0xb) 4.243186897s ago: executing program 3 (id=2446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009520000100000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = creat(0x0, 0x4b) close(r6) 3.405684903s ago: executing program 0 (id=2447): syz_open_dev$vbi(0x0, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f00000000c0), 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/48, 0x30}, {0x0}], 0x2, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000000) 3.348095325s ago: executing program 4 (id=2448): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) 2.391606535s ago: executing program 3 (id=2449): socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r0, r0, 0x7}) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r3, &(0x7f0000001400)=""/4046, 0xffd8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) 1.999173277s ago: executing program 0 (id=2450): r0 = io_uring_setup(0x8a9, &(0x7f0000000300)={0x0, 0xe4ac, 0x80, 0x1, 0x390}) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000380), 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500"/80], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xf) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) sendfile(r1, r2, &(0x7f0000000040)=0x10000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20030a00) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl(r4, 0x6f41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r7 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r7, 0x890d}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 1.188605492s ago: executing program 3 (id=2451): socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = getpid() r6 = openat(r0, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0x12) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[], 0x0, 0x26}, 0x28) 825.030763ms ago: executing program 0 (id=2452): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r1}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x3fe0) 0s ago: executing program 3 (id=2453): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = timerfd_create(0x9, 0x80800) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000019340)={0x80000000, 0x9, 0xa, 0x3, 0x6, 0x0, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f000095b000/0x3000)=nil, &(0x7f00007ad000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000019300), 0x80) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_emit_ethernet(0xeb, &(0x7f0000019380)=ANY=[], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r4) kernel console output (not intermixed with test programs): tead. [ 714.442750][T10322] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.452128][T10322] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.461041][T10322] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.469827][T10322] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.877388][T10322] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.886588][T10322] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.895746][T10322] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.904731][T10322] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.471193][T10338] slcan: can't register candev [ 715.476895][T10338] Falling back ldisc for ttyS3. [ 716.021441][T10351] binder: 10346:10351 ioctl c05c5340 200000000000 returned -22 [ 716.127185][T10355] xt_hashlimit: max too large, truncated to 1048576 [ 717.466189][T10361] 9pnet_virtio: no channels available for device 127.0.0.1 [ 719.941902][ T6343] Bluetooth: (null): Invalid header checksum [ 725.152698][ T4274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 725.945596][ T4274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 725.983265][ T4274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.006867][ T4274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.014543][ T4274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 726.023905][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 726.082524][T10418] loop2: detected capacity change from 0 to 512 [ 726.092943][T10418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 726.359469][T10422] xt_hashlimit: max too large, truncated to 1048576 [ 728.417783][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 728.461891][T10418] EXT4-fs (loop2): 1 truncate cleaned up [ 728.695957][T10418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 729.783707][ T8812] EXT4-fs (loop2): unmounting filesystem. [ 730.808387][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 732.349744][T10464] Bluetooth: MGMT ver 1.22 [ 732.921399][T10409] chnl_net:caif_netlink_parms(): no params data found [ 732.993112][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 733.134622][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.142164][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.150968][T10409] device bridge_slave_0 entered promiscuous mode [ 733.236837][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.278705][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.421592][T10409] device bridge_slave_1 entered promiscuous mode [ 734.353114][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.439575][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.798578][T10485] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 735.542970][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 735.545060][T10484] xt_CT: No such helper "syz0" [ 735.764831][T10483] block device autoloading is deprecated and will be removed. [ 736.839511][ T26] audit: type=1326 audit(1781355150.275:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.3.1264" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad2db9ce59 code=0x0 [ 737.552451][T10409] team0: Port device team_slave_0 added [ 738.645703][T10409] team0: Port device team_slave_1 added [ 740.025843][ T4304] device hsr_slave_0 left promiscuous mode [ 740.035446][ T4304] device hsr_slave_1 left promiscuous mode [ 740.064891][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.088556][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.106837][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1268'. [ 740.127682][ T4304] device bridge_slave_1 left promiscuous mode [ 740.151253][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.196473][ T4304] device bridge_slave_0 left promiscuous mode [ 740.202818][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.790246][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 740.916869][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 740.980110][T10527] loop6: detected capacity change from 0 to 1024 [ 740.987854][T10527] EXT4-fs: Ignoring removed nobh option [ 740.993777][T10527] EXT4-fs: inline encryption not supported [ 741.008607][T10527] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 741.020955][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.026795][T10527] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 741.026795][T10527] [ 742.235161][T10528] loop6: detected capacity change from 0 to 512 [ 742.587613][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.646214][T10173] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 743.909874][T10542] loop2: detected capacity change from 0 to 64 [ 744.668995][ T4304] bond0 (unregistering): Released all slaves [ 744.687934][ T4361] bio_check_eod: 7 callbacks suppressed [ 744.687950][ T4361] kworker/u4:7: attempt to access beyond end of device [ 744.687950][ T4361] loop2: rw=1, sector=161, nr_sectors = 1 limit=64 [ 744.729075][ T4361] buffer_io_error: 6 callbacks suppressed [ 744.729091][ T4361] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 744.764637][T10539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1278'. [ 744.778503][ T4361] kworker/u4:7: attempt to access beyond end of device [ 744.778503][ T4361] loop2: rw=1, sector=162, nr_sectors = 1 limit=64 [ 744.793282][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.801254][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.813501][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.820540][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.914877][ T4361] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 744.939249][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.987813][ T4361] kworker/u4:7: attempt to access beyond end of device [ 744.987813][ T4361] loop2: rw=1, sector=163, nr_sectors = 1 limit=64 [ 745.040020][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.047042][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.092682][ T4361] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 745.101619][ T4361] kworker/u4:7: attempt to access beyond end of device [ 745.101619][ T4361] loop2: rw=1, sector=167, nr_sectors = 1 limit=64 [ 745.388936][ T4361] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 745.508728][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.175967][ T4361] kworker/u4:7: attempt to access beyond end of device [ 746.175967][ T4361] loop2: rw=1, sector=169, nr_sectors = 1 limit=64 [ 746.367075][T10557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 746.825212][ T4361] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 746.833876][ T4361] kworker/u4:7: attempt to access beyond end of device [ 746.833876][ T4361] loop2: rw=1, sector=171, nr_sectors = 1 limit=64 [ 747.060214][T10409] device hsr_slave_0 entered promiscuous mode [ 747.066820][ T4361] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 747.077005][T10409] device hsr_slave_1 entered promiscuous mode [ 747.083304][ T4361] kworker/u4:7: attempt to access beyond end of device [ 747.083304][ T4361] loop2: rw=1, sector=172, nr_sectors = 1 limit=64 [ 747.946575][ T4361] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 747.955903][ T4361] kworker/u4:7: attempt to access beyond end of device [ 747.955903][ T4361] loop2: rw=1, sector=173, nr_sectors = 1 limit=64 [ 747.969764][ T4361] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 747.996409][ T4361] kworker/u4:7: attempt to access beyond end of device [ 747.996409][ T4361] loop2: rw=1, sector=174, nr_sectors = 1 limit=64 [ 748.011092][ T4361] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 748.020016][ T4361] kworker/u4:7: attempt to access beyond end of device [ 748.020016][ T4361] loop2: rw=1, sector=175, nr_sectors = 1 limit=64 [ 748.033628][ T4361] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 748.149838][T10569] overlayfs: missing 'workdir' [ 749.087689][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1270'. [ 749.117420][T10570] device bridge_slave_1 left promiscuous mode [ 749.141042][T10570] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.440486][T10570] device bridge_slave_0 left promiscuous mode [ 749.447546][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.815340][T10582] Malformed UNC in devname [ 749.815340][T10582] [ 749.822365][T10582] CIFS: VFS: Malformed UNC in devname [ 750.920113][T10582] SET target dimension over the limit! [ 754.415325][T10588] netlink: 'syz.0.1276': attribute type 12 has an invalid length. [ 754.423309][T10588] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 754.431225][T10588] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1276'. [ 754.440313][T10588] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1276'. [ 754.449400][T10589] netlink: 'syz.0.1276': attribute type 12 has an invalid length. [ 754.530672][T10589] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 754.538609][T10589] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1276'. [ 754.547668][T10589] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1276'. [ 755.961892][T10409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.994784][T10409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.189685][T10409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 757.766822][T10409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 758.034371][T10409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.060762][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 758.073960][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.087610][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.105084][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 758.186401][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.201233][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.208394][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.251188][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 758.288555][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 758.335119][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.367826][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.375080][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.383713][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 759.260258][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 759.291363][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 759.568693][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 759.760184][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 759.941908][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 760.097071][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 760.249332][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 760.386454][T10409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.957073][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 762.114791][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 762.128864][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 763.435379][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 763.859543][T10656] loop6: detected capacity change from 0 to 512 [ 764.105549][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.111980][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.203005][T10669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.300208][T10656] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 764.309998][T10656] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.102527][T10674] netlink: 'syz.6.1286': attribute type 1 has an invalid length. [ 765.466170][T10672] xt_CT: No such helper "syz0" [ 765.597755][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.605365][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 765.638117][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.766231][ T5284] EXT4-fs (loop6): unmounting filesystem. [ 770.373913][T10706] netlink: 'syz.6.1296': attribute type 1 has an invalid length. [ 770.402897][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1296'. [ 772.294441][T10719] netlink: 'syz.6.1298': attribute type 10 has an invalid length. [ 772.632095][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.641391][T10719] bond0: (slave team0): Enslaving as an active interface with an up link [ 772.748540][T10721] batman_adv: batadv0: Adding interface: dummy0 [ 772.755333][T10721] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.849551][T10721] batman_adv: batadv0: Interface activated: dummy0 [ 772.882711][T10722] batadv0: mtu less than device minimum [ 772.913123][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 772.926423][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 772.938738][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 772.951073][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 772.963570][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 772.975917][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 772.988268][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.000694][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.013084][T10722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.111320][T10727] Bluetooth: MGMT ver 1.22 [ 773.186722][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 773.215769][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 773.308757][T10409] device veth0_vlan entered promiscuous mode [ 773.322211][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 773.367724][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 773.411855][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 773.433014][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 773.631995][T10409] device veth1_vlan entered promiscuous mode [ 773.714884][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'. [ 774.000427][T10409] device veth0_macvtap entered promiscuous mode [ 774.411976][T10736] xt_hashlimit: max too large, truncated to 1048576 [ 774.968909][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 774.996992][T10741] loop2: detected capacity change from 0 to 2048 [ 775.010801][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 775.052448][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 776.121383][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 776.787048][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 776.800463][T10741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 776.846001][T10741] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 776.898246][T10409] device veth1_macvtap entered promiscuous mode [ 776.973242][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.020362][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.435311][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.612300][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.622337][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.633104][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.699130][T10409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.741300][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 777.799122][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 777.830124][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.891032][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.927479][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.960370][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.003818][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.032949][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.110107][T10409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.167328][T10409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.443079][T10409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.794406][T10768] loop6: detected capacity change from 0 to 4096 [ 778.814533][T10409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.014457][T10409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.060612][T10768] ntfs: volume version 3.1. [ 779.190983][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 779.228101][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 780.418879][T10782] loop0: detected capacity change from 0 to 4096 [ 780.672921][T10783] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 780.736098][T10779] bio_check_eod: 7 callbacks suppressed [ 780.736112][T10779] syz.0.1308: attempt to access beyond end of device [ 780.736112][T10779] loop0: rw=0, sector=6054, nr_sectors = 2 limit=4096 [ 780.756403][T10779] NILFS (loop0): I/O error reading data block for GC (ino=15, vblocknr=3) [ 780.767155][T10779] NILFS (loop0): error -5 preparing GC: cannot read source blocks [ 781.432587][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.493953][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.588747][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 782.762860][ T6367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.813272][ T6367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.865187][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 783.483743][T10799] xt_hashlimit: max too large, truncated to 1048576 [ 783.757309][T10802] xt_hashlimit: max too large, truncated to 1048576 [ 784.919157][ T8812] EXT4-fs (loop2): unmounting filesystem. [ 785.159953][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1314'. [ 785.591994][T10822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 787.497386][T10832] loop0: detected capacity change from 0 to 64 [ 788.978738][ T9139] kworker/u4:31: attempt to access beyond end of device [ 788.978738][ T9139] loop0: rw=1, sector=161, nr_sectors = 1 limit=64 [ 789.025565][ T9139] buffer_io_error: 6 callbacks suppressed [ 789.025580][ T9139] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 789.063186][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.063186][ T9139] loop0: rw=1, sector=162, nr_sectors = 1 limit=64 [ 789.132151][ T9139] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 789.166782][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.166782][ T9139] loop0: rw=1, sector=163, nr_sectors = 1 limit=64 [ 789.254634][ T9139] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 789.263277][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.263277][ T9139] loop0: rw=1, sector=167, nr_sectors = 1 limit=64 [ 789.363266][ T9139] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 789.404750][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.404750][ T9139] loop0: rw=1, sector=169, nr_sectors = 1 limit=64 [ 789.469405][ T9139] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 789.478639][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.478639][ T9139] loop0: rw=1, sector=171, nr_sectors = 1 limit=64 [ 789.492668][ T9139] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 789.501281][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.501281][ T9139] loop0: rw=1, sector=172, nr_sectors = 1 limit=64 [ 789.515106][ T9139] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 789.523719][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.523719][ T9139] loop0: rw=1, sector=173, nr_sectors = 1 limit=64 [ 789.544500][ T9139] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 789.569096][T10844] loop6: detected capacity change from 0 to 1024 [ 789.600367][ T9139] kworker/u4:31: attempt to access beyond end of device [ 789.600367][ T9139] loop0: rw=1, sector=174, nr_sectors = 1 limit=64 [ 789.807163][T10844] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 789.971318][T10844] EXT4-fs error (device loop6): ext4_get_journal_inode:5762: inode #32: comm syz.6.1311: iget: special inode unallocated [ 790.102583][ T9139] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 790.263927][T10844] EXT4-fs (loop6): no journal found [ 790.269218][T10844] EXT4-fs (loop6): can't get journal size [ 790.275521][ T9139] kworker/u4:31: attempt to access beyond end of device [ 790.275521][ T9139] loop0: rw=1, sector=175, nr_sectors = 1 limit=64 [ 790.333423][T10844] EXT4-fs error (device loop6): ext4_protect_reserved_inode:160: inode #32: comm syz.6.1311: iget: special inode unallocated [ 790.354141][ T4542] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 790.363772][ T9139] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 790.452161][T10844] EXT4-fs (loop6): failed to initialize system zone (-117) [ 790.468213][T10844] EXT4-fs (loop6): mount failed [ 790.564457][ T4542] usb 3-1: Using ep0 maxpacket: 8 [ 790.571466][ T4542] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 790.633145][ T4542] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 790.677340][ T4542] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 790.824379][ T4542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.115262][T10862] xt_hashlimit: max too large, truncated to 1048576 [ 793.082619][T10871] xt_hashlimit: max too large, truncated to 1048576 [ 795.666495][ T27] usb 3-1: USB disconnect, device number 7 [ 795.845087][T10885] loop4: detected capacity change from 0 to 16 [ 795.875934][T10885] erofs: (device loop4): mounted with root inode @ nid 36. [ 796.291480][T10883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.620203][T10898] loop6: detected capacity change from 0 to 1024 [ 797.881051][T10898] hfsplus: invalid extended attribute record [ 798.028810][T10912] xt_hashlimit: max too large, truncated to 1048576 [ 798.845982][T10910] loop4: detected capacity change from 0 to 4096 [ 798.881331][T10910] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 801.709627][T10940] comedi comedi3: pcl726: I/O port conflict (0x84f29,16) [ 802.037176][T10947] loop6: detected capacity change from 0 to 128 [ 802.050190][T10947] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 802.070281][T10947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 802.451593][T10944] loop2: detected capacity change from 0 to 1024 [ 802.834641][T10944] hfsplus: failed to load root directory [ 803.378829][T10965] loop4: detected capacity change from 0 to 2048 [ 803.403736][T10965] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 803.427646][T10965] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 804.156530][T10987] loop6: detected capacity change from 0 to 128 [ 804.211659][T10987] EXT4-fs: inline encryption not supported [ 804.266867][ T9559] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 804.314689][T10990] loop4: detected capacity change from 0 to 128 [ 804.332859][T10990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 804.355765][T10990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 804.575245][ T9559] usb 3-1: unable to get BOS descriptor or descriptor too short [ 804.628306][T10987] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 804.656247][ T9559] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 804.823208][T10987] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 804.839236][ T9559] usb 3-1: config 114 has no interface number 0 [ 805.004710][ T9559] usb 3-1: config 114 interface 240 has no altsetting 0 [ 805.266851][ T9559] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 805.342308][ T9559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.391806][ T9559] usb 3-1: Product: syz [ 805.413258][ T9559] usb 3-1: Manufacturer: syz [ 805.440312][ T9559] usb 3-1: SerialNumber: syz [ 805.503184][ T5284] EXT4-fs (loop6): unmounting filesystem. [ 805.791471][ T9559] ir_usb 3-1:114.240: required endpoints missing [ 805.832739][ T9559] usb 3-1: USB disconnect, device number 8 [ 805.896116][T11010] xt_hashlimit: max too large, truncated to 1048576 [ 806.294144][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 807.082409][T11032] xt_hashlimit: max too large, truncated to 1048576 [ 808.272067][T11039] IPv6: Can't replace route, no match found [ 808.410612][T11045] loop2: detected capacity change from 0 to 256 [ 808.422881][T11046] loop4: detected capacity change from 0 to 128 [ 808.452305][T11045] exfat: Deprecated parameter 'utf8' [ 808.464308][T11045] exfat: Deprecated parameter 'utf8' [ 808.505662][T11046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 808.545250][T11045] exfat: Deprecated parameter 'utf8' [ 808.566665][T11046] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 808.640645][T11045] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 808.826955][ T26] audit: type=1800 audit(1781355216.690:43): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1380" name="file1" dev="loop2" ino=1048635 res=0 errno=0 [ 808.934780][T10409] EXT4-fs (loop4): unmounting filesystem. [ 809.013925][T11057] xt_hashlimit: max too large, truncated to 1048576 [ 811.882023][T11077] xt_hashlimit: max too large, truncated to 1048576 [ 812.310702][T11086] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1395'. [ 812.486061][T11088] syz.3.1393 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 812.784676][T11094] loop6: detected capacity change from 0 to 4096 [ 812.839980][T11094] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 812.888872][ T5332] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 813.097371][ T5332] usb 1-1: Using ep0 maxpacket: 8 [ 813.103336][ T5332] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 813.145664][ T5332] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 813.171532][ T5332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 813.201976][ T5332] usb 1-1: Product: syz [ 813.212930][ T5332] usb 1-1: Manufacturer: syz [ 813.223937][ T5332] usb 1-1: SerialNumber: syz [ 813.267079][ T5332] usb 1-1: config 0 descriptor?? [ 813.459798][T11103] xt_hashlimit: max too large, truncated to 1048576 [ 814.164776][ T5332] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 814.207972][ T5332] usb 1-1: USB disconnect, device number 6 [ 816.288587][T11129] xt_hashlimit: max too large, truncated to 1048576 [ 816.359483][T11133] loop4: detected capacity change from 0 to 256 [ 816.377742][T11132] loop2: detected capacity change from 0 to 2048 [ 817.397929][T11135] virtio-fs: tag not found [ 817.563223][ T26] audit: type=1326 audit(1781355224.657:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42db9ce59 code=0x7ffc0000 [ 817.632920][T11132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 817.666809][T11133] FAT-fs (loop4): Directory bread(block 64) failed [ 817.673433][T11133] FAT-fs (loop4): Directory bread(block 65) failed [ 817.747392][T11133] FAT-fs (loop4): Directory bread(block 66) failed [ 817.749916][ T26] audit: type=1326 audit(1781355224.657:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42db9ce59 code=0x7ffc0000 [ 817.791398][T11133] FAT-fs (loop4): Directory bread(block 67) failed [ 817.828525][T11133] FAT-fs (loop4): Directory bread(block 68) failed [ 817.857263][ T26] audit: type=1326 audit(1781355224.657:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff42db9ce59 code=0x7ffc0000 [ 817.881308][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.921082][ T26] audit: type=1326 audit(1781355224.657:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42db9ce59 code=0x7ffc0000 [ 817.978294][ T26] audit: type=1326 audit(1781355224.657:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42db9ce59 code=0x7ffc0000 [ 818.002410][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.089958][T11133] FAT-fs (loop4): Directory bread(block 69) failed [ 818.208388][T11143] xt_hashlimit: max too large, truncated to 1048576 [ 818.712903][T11133] FAT-fs (loop4): Directory bread(block 70) failed [ 818.773376][T11133] FAT-fs (loop4): Directory bread(block 71) failed [ 818.813991][T11133] FAT-fs (loop4): Directory bread(block 72) failed [ 818.820660][T11133] FAT-fs (loop4): Directory bread(block 73) failed [ 819.390550][T11154] xt_hashlimit: max too large, truncated to 1048576 [ 821.828101][T11148] loop2: detected capacity change from 0 to 32768 [ 821.938141][T11148] XFS (loop2): Mounting V5 Filesystem [ 822.083282][T11148] XFS (loop2): Ending clean mount [ 822.297978][ T8812] XFS (loop2): Unmounting Filesystem [ 822.479510][T11194] loop0: detected capacity change from 0 to 256 [ 822.809617][T11199] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 822.816556][T11199] PKCS7: Only support pkcs7_signedData type [ 822.827116][T11199] tmpfs: Bad value for 'mpol' [ 822.881565][T11194] FAT-fs (loop0): Directory bread(block 64) failed [ 822.911700][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1422'. [ 822.985558][T11194] FAT-fs (loop0): Directory bread(block 65) failed [ 823.329086][T11194] FAT-fs (loop0): Directory bread(block 66) failed [ 823.408576][T11204] xt_hashlimit: max too large, truncated to 1048576 [ 823.903376][T11194] FAT-fs (loop0): Directory bread(block 67) failed [ 823.954082][T11194] FAT-fs (loop0): Directory bread(block 68) failed [ 824.029269][T11194] FAT-fs (loop0): Directory bread(block 69) failed [ 824.036849][T11194] FAT-fs (loop0): Directory bread(block 70) failed [ 824.043449][T11194] FAT-fs (loop0): Directory bread(block 71) failed [ 824.050319][T11194] FAT-fs (loop0): Directory bread(block 72) failed [ 824.057237][T11194] FAT-fs (loop0): Directory bread(block 73) failed [ 824.257936][T11217] loop6: detected capacity change from 0 to 512 [ 824.603247][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1427'. [ 824.632059][ T9558] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 824.954196][T11230] xt_hashlimit: max too large, truncated to 1048576 [ 825.000972][ T9558] usb 5-1: unable to get BOS descriptor or descriptor too short [ 825.017066][ T9558] usb 5-1: not running at top speed; connect to a high speed hub [ 825.034137][ T9558] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.096319][ T9558] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.143173][ T9558] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 825.167564][T11237] loop6: detected capacity change from 0 to 512 [ 825.174099][ T9558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.182722][ T9558] usb 5-1: Product: syz [ 825.208418][T11237] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 825.221520][ T9558] usb 5-1: Manufacturer: syz [ 825.247996][ T9558] usb 5-1: SerialNumber: syz [ 825.264921][T11239] loop0: detected capacity change from 0 to 64 [ 825.405439][T11237] bio_check_eod: 7 callbacks suppressed [ 825.405459][T11237] syz.6.1430: attempt to access beyond end of device [ 825.405459][T11237] loop6: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 825.505767][ T9558] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 825.531774][T11237] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 825.559743][T11237] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 825.683121][T11242] netlink: 'syz.0.1432': attribute type 10 has an invalid length. [ 825.726488][ T9558] usb 5-1: USB disconnect, device number 7 [ 825.811971][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.847226][T11242] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 825.880617][T11244] netlink: 'syz.0.1432': attribute type 10 has an invalid length. [ 825.897276][T11244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1432'. [ 825.907300][T11244] device batadv0 entered promiscuous mode [ 825.918587][T11244] bond0: (slave batadv0): Releasing backup interface [ 825.948172][T11244] bridge0: port 3(batadv0) entered blocking state [ 825.977112][T11244] bridge0: port 3(batadv0) entered disabled state [ 826.018172][T10307] udevd[10307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.196318][ T75] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 826.206758][ T75] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 826.681545][T11259] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 826.688476][T11259] PKCS7: Only support pkcs7_signedData type [ 826.710507][T11259] tmpfs: Bad value for 'mpol' [ 827.029406][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1435'. [ 827.062982][T11263] xt_hashlimit: max too large, truncated to 1048576 [ 827.802506][T11246] loop2: detected capacity change from 0 to 32768 [ 827.911210][T11246] XFS (loop2): Mounting V5 Filesystem [ 828.037469][T11246] XFS (loop2): Ending clean mount [ 828.221085][T11246] syz.2.1434 (11246) used greatest stack depth: 19440 bytes left [ 828.265206][T11295] loop6: detected capacity change from 0 to 1024 [ 828.445514][ T8812] XFS (loop2): Unmounting Filesystem [ 828.598986][T11273] loop4: detected capacity change from 0 to 32768 [ 828.646186][T11301] hsr0: VLAN not yet supported [ 828.668364][T11273] [ 828.668364][T11273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 828.668364][T11273] [ 828.755973][T11273] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 828.755973][T11273] [ 828.909278][T11273] ERROR: (device loop4): jfs_unlink: [ 828.909278][T11273] [ 829.025667][T11278] loop0: detected capacity change from 0 to 32768 [ 829.060020][T10409] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 829.060020][T10409] [ 829.100695][T11278] XFS: noikeep mount option is deprecated. [ 829.122646][ T9141] ERROR: (device loop4): diWrite: ixpxd invalid [ 829.122646][ T9141] [ 829.136621][ T9141] ERROR: (device loop4): txCommit: [ 829.136621][ T9141] [ 829.176488][ T9141] jfs_write_inode: jfs_commit_inode failed! [ 829.204323][T10409] [ 829.204323][T10409] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 829.204323][T10409] [ 829.224054][T11278] XFS (loop0): Mounting V5 Filesystem [ 829.257617][T10409] [ 829.257617][T10409] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 829.257617][T10409] [ 829.387925][T11278] XFS (loop0): Ending clean mount [ 829.419618][T11278] XFS (loop0): Quotacheck needed: Please wait. [ 829.559724][T11278] XFS (loop0): Quotacheck: Done. [ 829.697557][ T8837] XFS (loop0): Unmounting Filesystem [ 829.900509][T11324] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1450'. [ 829.958059][T11324] net_ratelimit: 10 callbacks suppressed [ 829.958078][T11324] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 830.062115][T11327] xt_hashlimit: max too large, truncated to 1048576 [ 830.738826][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 830.745255][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 830.925192][T11308] loop6: detected capacity change from 0 to 32768 [ 831.023131][T11333] loop4: detected capacity change from 0 to 512 [ 831.081865][T11333] EXT4-fs: Ignoring removed mblk_io_submit option [ 831.123895][T11333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 831.156903][T11333] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 831.245440][T11308] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 831.310712][T11308] JBD2: Ignoring recovery information on journal [ 831.312580][T11333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 831.416556][T11333] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 831.572466][T11308] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 831.734613][T11346] xt_hashlimit: max too large, truncated to 1048576 [ 832.478945][T10409] EXT4-fs (loop4): unmounting filesystem. [ 832.599697][T11352] loop0: detected capacity change from 0 to 512 [ 832.664287][ T5284] ocfs2: Unmounting device (7,6) on (node local) [ 832.685505][T11352] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 832.779716][T11352] EXT4-fs (loop0): 1 truncate cleaned up [ 832.785465][T11352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 833.062416][ T8837] EXT4-fs (loop0): unmounting filesystem. [ 833.447087][T11372] loop6: detected capacity change from 0 to 256 [ 833.486992][T11348] loop2: detected capacity change from 0 to 32768 [ 833.511858][T11372] exfat: Deprecated parameter 'namecase' [ 833.547908][T11372] exfat: Deprecated parameter 'namecase' [ 833.576060][T11348] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 833.588619][T11372] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 833.624606][T11348] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 833.679303][T11348] BTRFS info (device loop2): setting nodatasum [ 833.699925][T11348] BTRFS info (device loop2): force zlib compression, level 3 [ 833.743043][T11348] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 833.784841][T11348] BTRFS info (device loop2): use lzo compression, level 0 [ 833.835914][T11348] BTRFS info (device loop2): turning on flush-on-commit [ 833.846857][T11348] BTRFS info (device loop2): enabling auto defrag [ 833.879960][T11348] BTRFS info (device loop2): max_inline at 4096 [ 833.922901][T11348] BTRFS info (device loop2): using free space tree [ 834.151855][T11348] BTRFS info (device loop2): enabling ssd optimizations [ 834.186850][T11368] loop0: detected capacity change from 0 to 32768 [ 834.229536][T11368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1461 (11368) [ 834.269813][T11361] loop4: detected capacity change from 0 to 32768 [ 834.369276][T11368] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 834.420295][ T8812] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 834.442671][T11368] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 834.511406][T11368] BTRFS info (device loop0): using free space tree [ 834.739839][T11368] BTRFS info (device loop0): enabling ssd optimizations [ 835.576745][T11368] BTRFS info (device loop0): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 835.825650][ T5332] Process accounting resumed [ 835.875212][ T8837] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 835.880552][T11397] loop6: detected capacity change from 0 to 32768 [ 835.991576][T11439] Process accounting resumed [ 836.098580][T11420] loop4: detected capacity change from 0 to 32768 [ 837.464180][T11459] loop0: detected capacity change from 0 to 1024 [ 837.863764][T11462] loop4: detected capacity change from 0 to 4096 [ 838.083175][T11446] loop2: detected capacity change from 0 to 40427 [ 838.122244][T11446] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 838.139823][T11446] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 838.201994][T11446] F2FS-fs (loop2): invalid crc value [ 838.262595][T11446] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 838.279007][ T4362] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 838.528085][ T4362] usb 1-1: Using ep0 maxpacket: 16 [ 838.535671][ T4362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.604359][ T4362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.667604][ T4362] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 838.677752][T11446] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 838.709925][T11446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 838.720909][ T4362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.776465][ T4362] usb 1-1: config 0 descriptor?? [ 838.884932][T11451] loop6: detected capacity change from 0 to 32768 [ 839.108390][T11451] XFS (loop6): Mounting V5 Filesystem [ 839.130528][ T8812] syz-executor: attempt to access beyond end of device [ 839.130528][ T8812] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 839.270553][ T4362] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0 [ 839.295089][ T4362] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0 [ 839.303751][T11451] XFS (loop6): Ending clean mount [ 839.333483][ T4362] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0 [ 839.383976][ T4362] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0 [ 839.446760][ T4362] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0 [ 839.490111][ T4362] corsair 0003:1B1C:1B02.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 839.599175][ T4362] corsair 0003:1B1C:1B02.0008: Failed to get K90 initial state (error -71). [ 839.681235][ T4362] usb 1-1: USB disconnect, device number 7 [ 839.855212][ T5284] XFS (loop6): Unmounting Filesystem [ 841.070077][T11503] fido_id[11503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 841.185883][T11510] loop0: detected capacity change from 0 to 512 [ 841.345227][T11510] EXT4-fs (loop0): 1 truncate cleaned up [ 841.350952][T11510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 841.427012][T11510] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.1488: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 841.484643][T11517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1482'. [ 841.538734][T11517] netlink: 'syz.2.1482': attribute type 3 has an invalid length. [ 841.769007][ T8837] EXT4-fs (loop0): unmounting filesystem. [ 844.425543][T11537] loop2: detected capacity change from 0 to 128 [ 844.541508][T11537] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 844.641926][T11537] hpfs: filesystem error: improperly stopped [ 844.686078][T11537] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 844.729219][T11537] hpfs: You really don't want any checks? You are crazy... [ 844.766402][T11537] hpfs: Code page index out of array [ 844.783857][T11537] hpfs: code page support is disabled [ 844.816948][T11537] hpfs: hpfs_map_4sectors(): unaligned read [ 844.857590][T11537] hpfs: hpfs_map_4sectors(): unaligned read [ 844.885502][T11537] hpfs: filesystem error: unable to find root dir [ 845.009050][T11537] hpfs: hpfs_map_4sectors(): unaligned read [ 845.346699][T11548] loop4: detected capacity change from 0 to 1024 [ 846.403014][T11548] EXT4-fs: Ignoring removed bh option [ 846.519871][T11548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 846.669935][T11535] loop6: detected capacity change from 0 to 40427 [ 846.688670][T10409] EXT4-fs (loop4): unmounting filesystem. [ 846.727458][T11535] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 846.789168][T11535] F2FS-fs (loop6): invalid crc value [ 846.856458][T11535] F2FS-fs (loop6): Found nat_bits in checkpoint [ 847.093426][T11535] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 847.718450][T11571] xt_hashlimit: max too large, truncated to 1048576 [ 849.260847][T11563] loop4: detected capacity change from 0 to 32768 [ 849.362127][T11563] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 849.416827][T11563] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 849.477480][T11563] BTRFS info (device loop4): using free space tree [ 849.903724][T11563] BTRFS info (device loop4): enabling ssd optimizations [ 850.086135][T11578] loop6: detected capacity change from 0 to 32768 [ 850.100048][T10409] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 850.227323][T11574] loop0: detected capacity change from 0 to 40427 [ 850.257857][T11574] F2FS-fs (loop0): Found nat_bits in checkpoint [ 850.282374][T11578] XFS (loop6): Mounting V5 Filesystem [ 850.616852][T11574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 851.132550][T11608] loop2: detected capacity change from 0 to 32768 [ 851.165771][T10173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (10173) [ 851.192717][T11578] XFS (loop6): Ending clean mount [ 851.456481][T11608] XFS (loop2): Mounting V5 Filesystem [ 851.636080][ T5284] XFS (loop6): Unmounting Filesystem [ 851.664047][T11608] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 851.800031][T11608] XFS (loop2): Starting recovery (logdev: internal) [ 851.803390][ T26] audit: type=1326 audit(1781355256.415:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad2db9ce59 code=0x0 [ 851.913962][T11608] XFS (loop2): Ending recovery (logdev: internal) [ 852.101697][ T26] audit: type=1800 audit(1781355256.692:50): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1504" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 853.736290][ T8812] XFS (loop2): Unmounting Filesystem [ 854.120315][T11658] loop0: detected capacity change from 0 to 32768 [ 854.154029][T11658] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1508 (11658) [ 854.253786][T11658] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 854.292389][T11658] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 854.340702][T11658] BTRFS info (device loop0): using free space tree [ 854.619207][T11658] BTRFS info (device loop0): enabling ssd optimizations [ 855.029365][ T8837] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 855.040031][T11697] loop2: detected capacity change from 0 to 512 [ 855.096147][T11697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 855.231433][T11697] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 855.268848][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.310497][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.636053][T11697] EXT4-fs (loop2): 1 truncate cleaned up [ 855.641819][T11697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 855.733302][T11697] EXT4-fs error (device loop2) in ext4_setattr:5695: error 28 [ 855.809881][T11713] random: crng reseeded on system resumption [ 855.949816][ T8812] EXT4-fs (loop2): unmounting filesystem. [ 856.073232][T11720] loop6: detected capacity change from 0 to 512 [ 856.304872][T11720] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 856.427786][T11729] netlink: 'syz.3.1520': attribute type 10 has an invalid length. [ 856.499881][T11729] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.516701][T11729] bond0: (slave team0): Enslaving as an active interface with an up link [ 856.644796][T11720] ext4 filesystem being mounted at /248/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.930951][T11726] loop2: detected capacity change from 0 to 512 [ 857.085462][T11726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 857.326615][ T8812] EXT4-fs (loop2): unmounting filesystem. [ 857.397601][ T5284] EXT4-fs (loop6): unmounting filesystem. [ 857.833545][T11710] loop4: detected capacity change from 0 to 32768 [ 857.883069][T11710] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.1512 (11710) [ 857.953960][T11710] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 858.010007][T11710] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 858.036390][T11710] BTRFS info (device loop4): using free space tree [ 858.036821][T11633] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 858.287099][T11633] usb 1-1: config 0 has no interfaces? [ 858.292756][T11633] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 858.302364][T11633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.319770][T11633] usb 1-1: config 0 descriptor?? [ 858.330246][T11710] BTRFS info (device loop4): enabling ssd optimizations [ 858.579449][T11633] usb 1-1: USB disconnect, device number 8 [ 858.605482][T10409] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 858.682489][T11747] loop2: detected capacity change from 0 to 32768 [ 858.768408][T11747] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1526 (11747) [ 858.934372][T11749] loop6: detected capacity change from 0 to 32768 [ 859.161886][T11749] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1527 (11749) [ 859.195340][T11747] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 859.259286][T11747] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 859.302490][T11747] BTRFS info (device loop2): using free space tree [ 859.345971][T11749] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 859.400595][T11749] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 859.449413][T11797] loop0: detected capacity change from 0 to 128 [ 859.457354][T11749] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 859.467898][T11749] BTRFS info (device loop6): use zstd compression, level 3 [ 859.475228][T11749] BTRFS info (device loop6): using free space tree [ 859.538632][T11797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 859.585932][T11797] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.606803][T11747] BTRFS info (device loop2): enabling ssd optimizations [ 859.679273][T11749] BTRFS info (device loop6): enabling ssd optimizations [ 859.865382][ T8837] EXT4-fs (loop0): unmounting filesystem. [ 859.952207][ T5284] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 860.028531][ T8812] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 860.148330][T11707] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 860.359642][T11707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.394787][T11707] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 860.456367][T11839] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 860.522005][T11707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.742227][T11707] usb 5-1: config 0 descriptor?? [ 861.033941][T11707] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 861.665544][T10173] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (10173) [ 861.739125][T11858] usb 5-1: USB disconnect, device number 8 [ 861.774053][T11839] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.782288][T11839] bond0: (slave team0): Enslaving as an active interface with an up link [ 862.228153][T11858] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 862.433973][T11858] usb 5-1: Using ep0 maxpacket: 16 [ 862.444289][T11858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.463754][T11858] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 862.474105][T11858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.490711][T11858] usb 5-1: config 0 descriptor?? [ 862.505015][T11858] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 862.513156][T11858] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 862.723917][T11858] usb 5-1: USB disconnect, device number 9 [ 863.427255][T11904] loop6: detected capacity change from 0 to 64 [ 863.459911][T11906] loop0: detected capacity change from 0 to 1024 [ 863.498219][T11906] hfsplus: invalid length 2325 has been corrected to 255 [ 863.670845][T11906] hfsplus: invalid length 2325 has been corrected to 255 [ 864.176392][T11906] hfsplus: invalid length 2325 has been corrected to 255 [ 865.013414][T11929] xt_hashlimit: max too large, truncated to 1048576 [ 866.289992][ T4327] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 866.488455][ T4327] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 866.528279][ T4327] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 866.577868][ T4327] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.625496][T11919] loop4: detected capacity change from 0 to 40427 [ 866.646837][ T4327] usb 7-1: config 0 interface 0 has no altsetting 0 [ 866.670022][T11919] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 866.677841][ T4327] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 866.689719][T11935] loop2: detected capacity change from 0 to 32768 [ 866.697808][T11936] loop0: detected capacity change from 0 to 32768 [ 866.729747][T11936] (syz.0.1542,11936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 866.743947][T11919] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 866.753744][ T4327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.793867][T11936] (syz.0.1542,11936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 866.798339][T11919] F2FS-fs (loop4): invalid crc value [ 866.827894][ T4327] usb 7-1: config 0 descriptor?? [ 866.835166][T11940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 866.851726][T11935] XFS (loop2): Mounting V5 Filesystem [ 866.886124][T11936] JBD2: Ignoring recovery information on journal [ 866.895244][T11919] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 867.030986][T11935] XFS (loop2): Ending clean mount [ 867.041325][T11936] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 867.248157][ T8812] XFS (loop2): Unmounting Filesystem [ 867.306459][ T4327] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 867.323484][ T4327] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 867.341119][ T4327] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 867.348255][ T4327] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 867.356679][T11919] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 867.367653][T11919] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 867.423415][ T4327] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 867.470750][ T4327] samsung 0003:0419:0001.0009: unknown main item tag 0x0 [ 867.478016][ T4327] samsung 0003:0419:0001.0009: unbalanced collection at end of report description [ 867.543216][ T4327] samsung 0003:0419:0001.0009: parse failed [ 867.573327][ T4327] samsung: probe of 0003:0419:0001.0009 failed with error -22 [ 867.605940][ T4327] usb 7-1: USB disconnect, device number 5 [ 867.676145][T10409] syz-executor: attempt to access beyond end of device [ 867.676145][T10409] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 867.751665][ T8837] ocfs2: Unmounting device (7,0) on (node local) [ 868.669406][T11990] loop4: detected capacity change from 0 to 4096 [ 868.849872][T11990] ntfs3: loop4: failed to convert "0000" to iso8859-1 [ 869.112405][T11990] ntfs3: loop4: failed to convert name for inode 1e. [ 869.344849][ T4327] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 869.580084][ T4327] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 869.643561][ T4327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.888125][ T4327] usb 7-1: config 0 descriptor?? [ 870.197973][ T4327] gspca_main: spca508-2.14.0 probing 8086:0110 [ 870.915708][ T4327] gspca_spca508: reg_read err -110 [ 870.921585][ T4327] gspca_spca508: reg_read err -32 [ 871.055194][ T4327] gspca_spca508: reg_read err -32 [ 871.185216][ T4327] gspca_spca508: reg_read err -32 [ 871.310825][ T4327] gspca_spca508: reg_read err -32 [ 871.430796][ T4327] gspca_spca508: reg write: error -32 [ 871.574171][ T4327] spca508: probe of 7-1:0.0 failed with error -32 [ 872.202183][T12019] xt_hashlimit: max too large, truncated to 1048576 [ 872.755323][ T4325] usb 7-1: USB disconnect, device number 6 [ 872.980343][T12031] tipc: Enabling of bearer rejected, failed to enable media [ 873.244894][T12036] loop2: detected capacity change from 0 to 512 [ 873.330474][T12036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 873.359743][T12036] ext4 filesystem being mounted at /103/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.544504][ T8812] EXT4-fs (loop2): unmounting filesystem. [ 873.881318][T12022] loop4: detected capacity change from 0 to 40427 [ 873.935228][T12022] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 874.018221][T12030] loop6: detected capacity change from 0 to 32768 [ 874.486652][T12056] xt_hashlimit: max too large, truncated to 1048576 [ 874.489015][T12055] netlink: 'syz.2.1573': attribute type 10 has an invalid length. [ 874.509888][T12022] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 874.577405][T12022] F2FS-fs (loop4): Found nat_bits in checkpoint [ 874.577499][T12055] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.592209][T12055] bond0: (slave team0): Enslaving as an active interface with an up link [ 874.684345][T12030] overlayfs: upper fs needs to support d_type. [ 874.769476][T12030] overlayfs: upper fs does not support tmpfile. [ 874.881265][T12022] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 874.888392][T12022] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 874.900145][T12030] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 874.963949][T12030] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 874.963949][T12030] [ 875.039441][T12030] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 875.068981][T12030] overlayfs: failed to verify upper root origin [ 875.151302][T10409] syz-executor: attempt to access beyond end of device [ 875.151302][T10409] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 875.152107][T12044] loop0: detected capacity change from 0 to 32768 [ 875.248189][ T6354] read_mapping_page failed! [ 875.252817][ T6354] ERROR: (device loop6): txCommit: [ 875.252817][ T6354] [ 875.275276][ T6354] jfs_write_inode: jfs_commit_inode failed! [ 875.322261][T12044] JBD2: Ignoring recovery information on journal [ 875.575821][T12044] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 876.044998][ T8837] ocfs2: Unmounting device (7,0) on (node local) [ 877.164862][T12084] loop6: detected capacity change from 0 to 32768 [ 877.268394][T12084] XFS (loop6): Mounting V5 Filesystem [ 877.394691][T12084] XFS (loop6): Ending clean mount [ 877.560243][T12137] xt_hashlimit: max too large, truncated to 1048576 [ 877.703086][ T5284] XFS (loop6): Unmounting Filesystem [ 878.041496][T12107] loop0: detected capacity change from 0 to 40427 [ 878.134216][T12107] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 878.169623][T12107] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 878.224096][T12107] F2FS-fs (loop0): invalid crc value [ 878.366891][T12107] F2FS-fs (loop0): Found nat_bits in checkpoint [ 878.539591][T12107] F2FS-fs (loop0): recover fsync data on readonly fs [ 878.556118][T12148] loop6: detected capacity change from 0 to 128 [ 878.575115][T12107] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 878.582403][T12107] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 878.686210][T12139] loop4: detected capacity change from 0 to 40427 [ 878.743283][T12139] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 878.779449][ T9558] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 878.793959][T12139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 878.835994][T12139] F2FS-fs (loop4): invalid crc value [ 878.918175][T12139] F2FS-fs (loop4): Found nat_bits in checkpoint [ 878.986983][ T9558] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.015592][ T9558] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.071030][ T9558] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 879.103705][ T9558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 879.151881][ T9558] usb 3-1: SerialNumber: syz [ 879.200673][T12139] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 879.223915][T12139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 879.415971][ T9558] usb 3-1: 0:2 : does not exist [ 879.491234][ T9558] usb 3-1: USB disconnect, device number 9 [ 879.639815][T10409] syz-executor: attempt to access beyond end of device [ 879.639815][T10409] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 879.842335][T10173] udevd[10173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.330225][ T9558] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 880.546711][ T9558] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.581102][ T9558] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.606939][ T9558] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 880.638308][ T9558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.672139][ T9558] usb 1-1: Product: syz [ 880.677228][ T9558] usb 1-1: Manufacturer: syz [ 880.681878][ T9558] usb 1-1: SerialNumber: syz [ 880.696687][T11858] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 880.935510][T11858] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 880.950039][ T9558] usb 1-1: 0:2 : does not exist [ 880.955135][ T9558] usb 1-1: unit 9 not found! [ 880.971173][T11858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.988142][T11858] usb 7-1: Product: syz [ 880.999738][T11858] usb 7-1: Manufacturer: syz [ 881.003849][ T9558] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 881.025933][T11858] usb 7-1: SerialNumber: syz [ 881.035286][ T9558] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 881.039945][T11858] usb 7-1: config 0 descriptor?? [ 881.058801][ T9558] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 881.069449][T11858] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 881.110540][ T9558] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 881.154872][ T9558] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 881.186609][ T9558] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 881.213847][ T9558] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 881.240786][ T9558] usb 1-1: 4:0: cannot get min/max values for control 10 (id 4) [ 881.312247][ T9558] usb 1-1: USB disconnect, device number 9 [ 881.469626][T12205] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 881.732782][T11858] gspca_sunplus: reg_w_riv err -71 [ 881.738307][T11858] sunplus: probe of 7-1:0.0 failed with error -71 [ 881.801623][T11858] usb 7-1: USB disconnect, device number 7 [ 881.907511][T12212] loop0: detected capacity change from 0 to 4096 [ 881.920431][ T9558] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 882.134132][ T9558] usb 5-1: Using ep0 maxpacket: 16 [ 882.141560][ T9558] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 882.172550][ T9558] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 882.230521][ T9558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 882.256627][ T9558] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 882.265800][ T9558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.340914][ T9558] usb 5-1: config 0 descriptor?? [ 882.583213][ T9558] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 882.806408][T11707] usb 5-1: USB disconnect, device number 10 [ 882.819127][ T3624] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 884.130217][ T4325] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 884.623028][ T4325] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 884.665094][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.726082][ T4325] usb 3-1: config 0 descriptor?? [ 884.894206][ T4325] gspca_main: spca508-2.14.0 probing 8086:0110 [ 885.022793][T12260] netlink: 'syz.4.1624': attribute type 10 has an invalid length. [ 885.080589][T12260] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.103934][T12260] bond0: (slave team0): Enslaving as an active interface with an up link [ 885.462895][ T4325] gspca_spca508: reg_read err -110 [ 887.169327][ T4325] gspca_spca508: reg_read err -32 [ 887.261940][ T4325] gspca_spca508: reg_read err -32 [ 887.271681][ T4325] gspca_spca508: reg_read err -32 [ 887.282810][ T4325] gspca_spca508: reg_read err -32 [ 887.291051][ T4325] gspca_spca508: reg write: error -32 [ 887.297654][ T4325] spca508: probe of 3-1:0.0 failed with error -32 [ 887.475720][T11633] usb 3-1: USB disconnect, device number 10 [ 888.142451][T12266] loop4: detected capacity change from 0 to 32768 [ 888.291969][T12266] JBD2: Ignoring recovery information on journal [ 888.449807][T12274] loop2: detected capacity change from 0 to 32768 [ 888.592999][T12274] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 888.624459][T12274] XFS (loop2): Mounting V5 Filesystem [ 888.651037][T12266] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 888.734297][T12315] loop0: detected capacity change from 0 to 1024 [ 888.791167][T12274] XFS (loop2): Ending clean mount [ 888.799122][T12274] XFS (loop2): Quotacheck needed: Please wait. [ 888.842010][ T4325] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 888.968205][T12274] XFS (loop2): Quotacheck: Done. [ 889.058639][ T4325] usb 7-1: Using ep0 maxpacket: 8 [ 889.072902][ T4325] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 889.108099][ T4325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.120965][T10409] ocfs2: Unmounting device (7,4) on (node local) [ 889.152396][ T6364] hfsplus: b-tree write err: -5, ino 25 [ 889.173303][ T6364] hfsplus: b-tree write err: -5, ino 4 [ 889.201947][ T4325] pvrusb2: Hardware description: Terratec Grabster AV400 [ 889.209828][ T6364] hfsplus: b-tree write err: -5, ino 2 [ 889.240251][ T4325] pvrusb2: ********** [ 889.246008][ T6364] hfsplus: b-tree write err: -5, ino 20 [ 889.251112][ T4325] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 889.273055][ T4325] pvrusb2: Important functionality might not be entirely working. [ 889.296955][ T4325] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 889.344500][ T4325] pvrusb2: ********** [ 889.368627][ T8812] XFS (loop2): Unmounting Filesystem [ 889.970060][T11707] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 890.262304][T11707] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 890.421941][T11707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.705942][T11707] usb 5-1: config 0 descriptor?? [ 890.943046][T11707] gspca_main: spca508-2.14.0 probing 8086:0110 [ 891.148712][ T2311] pvrusb2: Invalid write control endpoint [ 891.637143][T11707] gspca_spca508: reg_read err -110 [ 891.643490][T11707] gspca_spca508: reg_read err -32 [ 891.787228][T11707] gspca_spca508: reg_read err -32 [ 891.980351][T11707] gspca_spca508: reg_read err -32 [ 892.150777][T11707] gspca_spca508: reg_read err -32 [ 892.326170][T11707] gspca_spca508: reg write: error -32 [ 892.397928][ T4325] usb 7-1: USB disconnect, device number 8 [ 892.462435][T11707] spca508: probe of 5-1:0.0 failed with error -32 [ 892.679021][ T2311] pvrusb2: Invalid write control endpoint [ 892.685283][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 892.795443][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 892.813719][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 893.017543][ T2311] pvrusb2: Device being rendered inoperable [ 893.047550][T12346] xt_hashlimit: max too large, truncated to 1048576 [ 893.085296][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 893.104766][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 893.235548][ T2311] pvrusb2: Attached sub-driver cx25840 [ 893.269523][T11707] usb 5-1: USB disconnect, device number 11 [ 893.305695][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 893.316433][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 893.851490][T12361] xt_hashlimit: max too large, truncated to 1048576 [ 895.842756][T12411] xt_hashlimit: max too large, truncated to 1048576 [ 896.773387][T12435] xt_hashlimit: max too large, truncated to 1048576 [ 896.905026][T12410] loop6: detected capacity change from 0 to 32768 [ 896.974160][T12410] [ 896.974160][T12410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 896.974160][T12410] [ 897.060429][T12410] ERROR: (device loop6): diWrite: ixpxd invalid [ 897.060429][T12410] [ 897.099361][T12410] ERROR: (device loop6): txCommit: [ 897.099361][T12410] [ 897.123126][T12443] [ 897.123126][T12443] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 897.123126][T12443] [ 897.179381][T12410] ERROR: (device loop6): diWrite: ixpxd invalid [ 897.179381][T12410] [ 897.199783][T12443] [ 897.199783][T12443] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 897.199783][T12443] [ 897.222354][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 897.228786][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.234265][T12410] ERROR: (device loop6): txCommit: [ 897.234265][T12410] [ 897.267442][T12410] [ 897.267442][T12410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 897.267442][T12410] [ 897.327698][T12410] [ 897.327698][T12410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 897.327698][T12410] [ 897.408880][T12410] [ 897.408880][T12410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 897.408880][T12410] [ 897.570531][ T5284] [ 897.570531][ T5284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 897.570531][ T5284] [ 897.606522][ T5284] [ 897.606522][ T5284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 897.606522][ T5284] [ 898.125276][T12465] loop6: detected capacity change from 0 to 1024 [ 898.193682][T12465] EXT4-fs: Ignoring removed oldalloc option [ 898.218807][T12465] EXT4-fs: Ignoring removed orlov option [ 898.277757][T12465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 898.584821][ T5284] EXT4-fs (loop6): unmounting filesystem. [ 898.625255][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 898.829021][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 898.837322][ T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 898.892335][ T14] usb 1-1: config 0 has no interface number 0 [ 898.948649][ T14] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 898.993206][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.001297][ T14] usb 1-1: Product: syz [ 899.049953][ T14] usb 1-1: Manufacturer: syz [ 899.055279][ T14] usb 1-1: SerialNumber: syz [ 899.137089][ T14] usb 1-1: config 0 descriptor?? [ 899.168668][ T14] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 899.189884][ T14] usb 1-1: selecting invalid altsetting 1 [ 899.228660][ T14] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 899.312732][ T14] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 899.344721][ T14] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 899.374489][ T14] usb 1-1: media controller created [ 899.430505][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1684'. [ 899.445057][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.616649][ T14] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 899.644036][ T14] zl10353_read_register: readreg error (reg=127, ret==-71) [ 899.666933][ T14] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 899.842381][ T14] usb 1-1: USB disconnect, device number 10 [ 899.968626][T12476] loop2: detected capacity change from 0 to 32768 [ 901.110883][T12476] XFS (loop2): Mounting V5 Filesystem [ 901.280083][T12476] XFS (loop2): Ending clean mount [ 901.348945][T12476] XFS (loop2): Quotacheck needed: Please wait. [ 901.737603][T12476] XFS (loop2): Quotacheck: Done. [ 902.386170][ T8812] XFS (loop2): Unmounting Filesystem [ 903.252967][T12558] xt_hashlimit: max too large, truncated to 1048576 [ 904.768446][T12561] loop6: detected capacity change from 0 to 4096 [ 904.882955][T12561] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 906.228293][T12584] loop9: detected capacity change from 0 to 4096 [ 906.262733][ C1] I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 906.306004][ C1] I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 906.315538][ C1] buffer_io_error: 6 callbacks suppressed [ 906.315553][ C1] Buffer I/O error on dev loop9, logical block 496, async page read [ 906.443743][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 906.453566][ C1] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 906.463708][ C1] I/O error, dev loop9, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 64 prio class 2 [ 906.526990][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 906.536264][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 906.829224][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 906.864528][T12576] loop2: detected capacity change from 0 to 32768 [ 906.919892][T12576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1704 (12576) [ 906.976043][T12576] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 907.028801][T12576] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 907.050249][T12576] BTRFS info (device loop2): using free space tree [ 907.354628][T12576] BTRFS info (device loop2): enabling ssd optimizations [ 907.760974][ T8812] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 909.337150][T12653] loop6: detected capacity change from 0 to 512 [ 909.466158][T12653] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 909.553718][T12653] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 909.839557][T12664] xt_hashlimit: max too large, truncated to 1048576 [ 910.770378][ T5284] EXT4-fs (loop6): unmounting filesystem. [ 911.062117][T12676] IPVS: dh: FWM 3 0x00000003 - no destination available [ 911.592791][T12693] loop6: detected capacity change from 0 to 16 [ 911.668526][T12693] erofs: (device loop6): mounted with root inode @ nid 36. [ 911.824264][T12699] tipc: Started in network mode [ 911.843628][T12699] tipc: Node identity ac14142f, cluster identity 4711 [ 911.897559][T12699] tipc: New replicast peer: 0.0.0.0 [ 911.938835][T12699] tipc: Enabled bearer , priority 10 [ 912.081906][T12680] loop4: detected capacity change from 0 to 32768 [ 912.140464][T12680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1727 (12680) [ 912.246395][T12680] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 912.312189][T12680] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 912.354733][T12680] BTRFS info (device loop4): force zlib compression, level 3 [ 912.389822][T12680] BTRFS info (device loop4): disabling free space tree [ 912.419760][T12680] BTRFS info (device loop4): enabling ssd optimizations [ 912.453963][T12680] BTRFS info (device loop4): allowing degraded mounts [ 912.483192][T12680] BTRFS info (device loop4): trying to use backup root at mount time [ 912.540844][T12680] BTRFS info (device loop4): enabling free space tree [ 912.562781][T12680] BTRFS info (device loop4): using free space tree [ 913.625583][ T7] tipc: Node number set to 2886997039 [ 914.034501][T12680] BTRFS info (device loop4): checking UUID tree [ 914.313690][T10409] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 915.034250][T12718] loop6: detected capacity change from 0 to 32768 [ 915.108061][T12718] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1739 (12718) [ 915.316931][T12718] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 915.349576][T12718] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 915.420244][T12718] BTRFS info (device loop6): turning on sync discard [ 915.466922][T12718] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 915.557570][T12718] BTRFS info (device loop6): use zstd compression, level 3 [ 915.575166][T12718] BTRFS info (device loop6): turning on async discard [ 915.604844][T12718] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 915.638141][T12718] BTRFS info (device loop6): trying to use backup root at mount time [ 915.693604][T12718] BTRFS info (device loop6): enabling auto defrag [ 915.754807][T12718] BTRFS info (device loop6): using free space tree [ 915.843939][T12718] BTRFS error (device loop6): open_ctree failed: -12 [ 917.586561][T10173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (10173) [ 917.829238][T12789] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1741'. [ 917.862278][T12789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.917659][T12818] loop4: detected capacity change from 0 to 2048 [ 917.990697][T11626] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 917.999939][T12818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 918.041969][T12818] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 918.208414][T11626] usb 1-1: Using ep0 maxpacket: 32 [ 918.215482][T11626] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.272311][T11626] usb 1-1: config 0 has no interfaces? [ 918.277918][T11626] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 918.337215][T11626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.382038][T11626] usb 1-1: config 0 descriptor?? [ 918.398189][T12831] loop2: detected capacity change from 0 to 1024 [ 918.461662][T12831] EXT4-fs: Ignoring removed orlov option [ 918.478315][T12831] EXT4-fs: Ignoring removed orlov option [ 918.564688][T11633] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 918.587342][T10409] EXT4-fs (loop4): unmounting filesystem. [ 918.609607][ T4327] usb 1-1: USB disconnect, device number 11 [ 918.633678][T12831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 918.944917][T11633] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.336451][T11633] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.433314][T11633] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 919.484856][T11633] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.525830][T11633] usb 7-1: config 0 descriptor?? [ 919.552671][ T8812] EXT4-fs (loop2): unmounting filesystem. [ 919.994106][T11633] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 920.017474][T11633] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 920.276765][T11633] cp2112 0003:10C4:EA90.000A: error requesting version [ 920.299921][T11633] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 920.361349][T11633] usb 7-1: USB disconnect, device number 9 [ 920.536140][ T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 920.617467][T12870] fido_id[12870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 920.749263][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.775366][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.785866][ T4327] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 920.824721][ T14] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 920.866593][ T14] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 920.913065][ T14] usb 5-1: Manufacturer: syz [ 920.941176][ T14] usb 5-1: config 0 descriptor?? [ 921.012682][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.116066][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.403577][ T4327] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 921.610837][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.674765][ T4327] usb 3-1: config 0 descriptor?? [ 921.919288][ T14] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input13 [ 922.026868][ T14] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input14 [ 922.088450][ T14] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input15 [ 922.151663][ T14] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input16 [ 922.165354][ T4327] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 922.194091][ T4327] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input17 [ 922.214491][ T14] uclogic 0003:256C:006D.000B: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 922.261920][ T14] usb 5-1: USB disconnect, device number 12 [ 922.510440][ T4327] keytouch 0003:0926:3333.000C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 922.596314][ T4327] usb 3-1: USB disconnect, device number 11 [ 922.625081][ T7] keytouch 0003:0926:3333.000C: usb_submit_urb(ctrl) failed: -19 [ 922.653047][T12909] loop6: detected capacity change from 0 to 1024 [ 922.790025][T12909] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 922.848952][T12901] fido_id[12901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 922.875179][T12909] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.022938][T12912] fido_id[12912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 923.024088][T12909] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.1777: lblock 0 mapped to illegal pblock 0 (length 6) [ 923.274577][T12909] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 923.314248][T12909] EXT4-fs (loop6): This should not happen!! Data will be lost [ 923.314248][T12909] [ 923.565719][ T9140] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:32: lblock 8 mapped to illegal pblock 8 (length 8) [ 923.641986][ T9140] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 923.676603][ T9140] EXT4-fs (loop6): This should not happen!! Data will be lost [ 923.676603][ T9140] [ 923.712709][ T5284] EXT4-fs (loop6): unmounting filesystem. [ 924.432666][T12955] tipc: Cannot configure node identity twice [ 924.718486][T12934] loop4: detected capacity change from 0 to 40427 [ 924.744101][T12934] F2FS-fs (loop4): invalid crc value [ 924.848602][T12934] F2FS-fs (loop4): Found nat_bits in checkpoint [ 924.986366][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 925.040964][T12934] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 925.102516][T12973] loop6: detected capacity change from 0 to 512 [ 925.119290][T12934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 925.197289][T12973] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 925.257237][T12973] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1793: bg 0: block 255: padding at end of block bitmap is not set [ 925.279877][T12973] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 925.289453][T12973] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1793: invalid indirect mapped block 1 (level 1) [ 925.304568][T12973] EXT4-fs (loop6): 1 truncate cleaned up [ 925.314744][T12973] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 925.506896][T10409] syz-executor: attempt to access beyond end of device [ 925.506896][T10409] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 925.597752][ T5284] EXT4-fs (loop6): unmounting filesystem. [ 925.614875][ T48] Bluetooth: hci2: sending frame failed (-49) [ 925.625871][ T4277] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 925.906657][T12987] device syzkaller1 entered promiscuous mode [ 926.434020][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1803'. [ 927.498233][T13015] loop2: detected capacity change from 0 to 32768 [ 927.523986][T11624] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 927.581293][T13035] xt_hashlimit: max too large, truncated to 1048576 [ 927.717317][T13015] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 927.742438][T11624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.774787][T13015] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 927.785684][T11624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.795550][T13015] BTRFS info (device loop2): turning on sync discard [ 927.795620][T13015] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 927.795759][T13015] BTRFS info (device loop2): use zstd compression, level 3 [ 927.795842][T13015] BTRFS info (device loop2): turning on async discard [ 927.795865][T13015] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 927.860828][T11624] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.877627][T11624] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.906060][T13038] xt_hashlimit: max too large, truncated to 1048576 [ 927.942980][T11624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.962544][T11624] usb 1-1: config 0 descriptor?? [ 928.079330][T13015] BTRFS info (device loop2): trying to use backup root at mount time [ 928.099146][T13015] BTRFS info (device loop2): enabling auto defrag [ 928.116818][T13015] BTRFS info (device loop2): using free space tree [ 928.343113][ T6364] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 928.391488][T13015] BTRFS error (device loop2): failed to load root extent [ 928.420745][T11624] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 928.451443][T13015] BTRFS warning (device loop2): try to load backup roots slot 1 [ 928.465397][T11624] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 928.498419][ T75] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 928.536622][T13015] BTRFS warning (device loop2): couldn't read tree root [ 928.557982][T13015] BTRFS warning (device loop2): try to load backup roots slot 2 [ 928.599268][T13015] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 928.649517][T13015] BTRFS warning (device loop2): couldn't read tree root [ 928.700420][T13015] BTRFS warning (device loop2): try to load backup roots slot 3 [ 928.766277][T13015] BTRFS info (device loop2): enabling ssd optimizations [ 928.777642][T13015] BTRFS info (device loop2): rebuilding free space tree [ 929.019033][T13015] BTRFS info (device loop2): checking UUID tree [ 929.285621][ T8812] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 929.335203][T11633] usb 1-1: USB disconnect, device number 12 [ 929.520816][T12904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (12904) [ 929.961153][T13073] loop4: detected capacity change from 0 to 32768 [ 930.008822][T13073] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 930.417223][T12899] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 930.469026][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 930.674704][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 930.693236][ T22] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 930.732180][T13109] syz.0.1822 sent an empty control message without MSG_MORE. [ 930.740604][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.740631][ T22] usb 3-1: Product: syz [ 930.740646][ T22] usb 3-1: Manufacturer: syz [ 930.740661][ T22] usb 3-1: SerialNumber: syz [ 930.764030][ T22] usb 3-1: config 0 descriptor?? [ 931.022192][ T22] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 012 [ 931.745030][T13100] loop4: detected capacity change from 0 to 32768 [ 931.893408][T13100] XFS (loop4): Mounting V5 Filesystem [ 931.940123][T13100] XFS (loop4): Ending clean mount [ 931.969875][ T22] usb 3-1: USB disconnect, device number 12 [ 932.139558][T10409] XFS (loop4): Unmounting Filesystem [ 932.321196][ T4325] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 932.551274][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.581135][ T4325] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 932.617101][ T4325] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 932.664825][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.700394][ T4325] usb 1-1: Product: syz [ 932.704653][ T4325] usb 1-1: Manufacturer: syz [ 932.709306][ T4325] usb 1-1: SerialNumber: syz [ 932.983680][T13158] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 933.708451][T13158] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 933.816310][T11626] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 933.870180][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 933.886737][T13183] loop4: detected capacity change from 0 to 32768 [ 933.946341][ T4325] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 933.953418][ T4325] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 933.978555][ T4325] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 934.018184][T13183] XFS (loop4): Mounting V5 Filesystem [ 934.045945][T11626] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.065059][T11626] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.087369][T11626] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 934.099698][ T14] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 934.108506][T11626] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 934.119063][T11626] usb 7-1: SerialNumber: syz [ 934.147076][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.163756][ T4325] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 934.241352][ T14] usb 3-1: config 0 descriptor?? [ 934.252057][T13183] XFS (loop4): Ending clean mount [ 934.371865][T11626] usb 7-1: 0:2 : does not exist [ 934.462265][T11626] usb 7-1: USB disconnect, device number 10 [ 934.514251][ T4325] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 934.581979][ T4325] usb 1-1: USB disconnect, device number 13 [ 934.659512][ T4325] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 934.745741][T10409] XFS (loop4): Unmounting Filesystem [ 934.759372][T12899] udevd[12899]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.505867][ T4325] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 936.284136][ T14] usb 3-1: Cannot set autoneg [ 936.318354][ T14] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 936.363445][ T14] usb 3-1: USB disconnect, device number 13 [ 936.401180][T13235] overlayfs: failed to clone upperpath [ 936.417403][ T4325] usb 7-1: config index 0 descriptor too short (expected 7768, got 18) [ 936.437658][ T4325] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.466864][ T4325] usb 7-1: config 0 has no interfaces? [ 936.475115][ T4325] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 936.488015][ T4325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.511166][ T4325] usb 7-1: config 0 descriptor?? [ 936.758691][T11626] usb 7-1: USB disconnect, device number 11 [ 938.453690][T13262] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1849'. [ 938.474201][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 938.808717][T13270] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 940.098681][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 940.306429][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 940.319741][ T14] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 940.342462][ T14] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 940.402021][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 940.428695][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 940.455357][ T14] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 940.496063][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 940.531298][ T14] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 940.542601][T11626] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 940.576238][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.622536][ T14] usb 3-1: config 0 descriptor?? [ 940.748989][T11626] usb 5-1: Using ep0 maxpacket: 16 [ 940.758058][T11626] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.812320][T11626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.836376][T11626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 940.860622][ T14] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 940.867589][T11626] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 940.918616][T11626] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.977972][T11626] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 940.988191][T11626] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 940.996543][T11626] usb 5-1: Manufacturer: syz [ 941.014027][T11626] usb 5-1: config 0 descriptor?? [ 941.120051][ T14] usb 3-1: USB disconnect, device number 14 [ 941.129007][ T14] usblp0: removed [ 941.479484][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 941.495790][T11626] rc_core: IR keymap rc-hauppauge not found [ 941.501763][T11626] Registered IR keymap rc-empty [ 941.512705][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 941.522081][T13342] device erspan0 entered promiscuous mode [ 941.529658][T13342] device macvtap1 entered promiscuous mode [ 941.559362][T13343] device erspan0 left promiscuous mode [ 941.565187][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 941.584687][T13343] device macvtap1 left promiscuous mode [ 941.615664][T11626] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 941.674767][T11626] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 941.765496][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 941.819239][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.843969][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.853851][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 941.873787][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.892257][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.907731][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 941.917607][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.939981][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 941.948520][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.962617][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.973841][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 941.983187][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 941.996156][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 942.016542][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.028966][T13349] netlink: 'syz.6.1876': attribute type 3 has an invalid length. [ 942.069920][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.102624][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.145714][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.189089][T11626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.233890][T11626] mceusb 5-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 942.242759][T11626] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 942.317815][T11626] usb 5-1: USB disconnect, device number 13 [ 944.070479][T13399] device batadv_slave_0 entered promiscuous mode [ 944.450613][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'. [ 944.654252][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1893'. [ 944.659466][ T4325] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 944.700417][T13410] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.709979][T13410] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.719025][T13410] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.727922][T13410] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.752388][T13410] device vxlan0 entered promiscuous mode [ 944.787391][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 944.875486][ T4325] usb 7-1: Using ep0 maxpacket: 32 [ 944.884642][ T4325] usb 7-1: config 0 has no interfaces? [ 944.908004][ T4325] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 944.917204][ T4325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.983963][ T4325] usb 7-1: config 0 descriptor?? [ 945.456111][T11626] usb 7-1: USB disconnect, device number 12 [ 945.713747][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 946.161838][T13454] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2760729302 (11042917208 ns) > initial count (10977373528 ns). Using initial count to start timer. [ 948.050494][T13481] overlayfs: failed to clone lowerpath [ 948.582897][T13498] xt_hashlimit: max too large, truncated to 1048576 [ 952.107184][T13509] loop4: detected capacity change from 0 to 40427 [ 952.586948][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1926'. [ 954.863270][T13578] loop4: detected capacity change from 0 to 512 [ 954.921775][T13578] EXT4-fs: Ignoring removed mblk_io_submit option [ 954.972751][T13578] EXT4-fs: inline encryption not supported [ 955.009296][T13578] EXT4-fs: Ignoring removed mblk_io_submit option [ 955.063227][T13578] EXT4-fs (loop4): Test dummy encryption mode enabled [ 955.117836][T13578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 955.221813][T13578] EXT4-fs (loop4): 1 truncate cleaned up [ 955.315150][T13578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 955.422921][T13578] EXT4-fs (loop4): unmounting filesystem. [ 956.008240][T13605] loop4: detected capacity change from 0 to 512 [ 956.072004][T13605] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1941: inode has both inline data and extents flags [ 956.086732][T13605] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1941: couldn't read orphan inode 15 (err -117) [ 956.111299][ T26] audit: type=1326 audit(1781355352.714:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed89b9ce59 code=0x0 [ 956.152989][T13605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 956.452293][T10409] EXT4-fs (loop4): unmounting filesystem. [ 958.429407][T13650] fuse: Bad value for 'fd' [ 958.559482][T13642] loop4: detected capacity change from 0 to 8192 [ 959.281752][T13664] xt_hashlimit: max too large, truncated to 1048576 [ 961.090690][T11624] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 961.357203][T11624] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 961.381919][T11624] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.442901][T11624] usb 1-1: config 0 has no interfaces? [ 961.468920][T11624] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 961.513635][T11624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.567437][T11624] usb 1-1: config 0 descriptor?? [ 961.874122][T13701] fuse: Bad value for 'fd' [ 963.170510][ T22] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 963.395281][T13725] loop6: detected capacity change from 0 to 256 [ 963.457791][T13725] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 963.580871][ T22] usb 7-1: unable to get BOS descriptor or descriptor too short [ 963.642325][ T22] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 963.688721][ T22] usb 7-1: can't read configurations, error -71 [ 963.760104][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 963.766547][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 963.886116][ T4325] usb 1-1: USB disconnect, device number 14 [ 964.402804][T13760] xt_hashlimit: max too large, truncated to 1048576 [ 969.391318][T13901] xt_hashlimit: max too large, truncated to 1048576 [ 969.811790][T13906] xt_hashlimit: max too large, truncated to 1048576 [ 971.487555][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2016'. [ 971.670505][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 972.195596][T13937] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 972.224515][T13937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 972.605042][ T4327] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 972.824204][ T4327] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0 [ 972.881411][ T4327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 972.962076][ T4327] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 973.044925][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 973.081217][ T4327] usb 5-1: Product: syz [ 973.098938][ T4327] usb 5-1: Manufacturer: syz [ 973.139644][ T4327] usb 5-1: SerialNumber: syz [ 973.162316][ T4327] usb 5-1: config 0 descriptor?? [ 973.213685][ T4327] usb 5-1: selecting invalid altsetting 0 [ 974.296961][ T14] usb 5-1: USB disconnect, device number 14 [ 974.671045][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 974.680949][T12907] udevd[12907]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.715598][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 974.810585][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 975.168336][T13986] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.2035'. [ 976.726806][ T26] audit: type=1800 audit(1781355371.742:52): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2045" name="/" dev="fuse" ino=4 res=0 errno=0 [ 978.621177][T14071] xt_hashlimit: max too large, truncated to 1048576 [ 981.900246][T14144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2080'. [ 984.419723][T14174] xt_hashlimit: max too large, truncated to 1048576 [ 984.937429][T14177] bond0: (slave team0): Releasing backup interface [ 985.218599][T14177] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 985.252604][T14177] team0 (unregistering): Port device team_slave_0 removed [ 985.366188][T14177] team0 (unregistering): Failed to send options change via netlink (err -105) [ 985.441430][T14177] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 985.517237][T14177] team0 (unregistering): Port device team_slave_1 removed [ 988.976512][T14312] xt_hashlimit: max too large, truncated to 1048576 [ 991.041140][T14345] overlayfs: failed to resolve './file0': -2 [ 991.235329][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 993.261153][T14374] kvm: pic: single mode not supported [ 993.261564][T14374] kvm: pic: level sensitive irq not supported [ 993.275835][T14374] kvm: pic: non byte write [ 993.610603][T14382] loop4: detected capacity change from 0 to 1024 [ 993.680200][T14382] EXT4-fs: Ignoring removed oldalloc option [ 993.712376][T14382] EXT4-fs: Ignoring removed oldalloc option [ 993.756291][T14382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 993.867485][T14382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 994.224276][T10409] EXT4-fs (loop4): unmounting filesystem. [ 996.966593][T14429] xt_hashlimit: max too large, truncated to 1048576 [ 998.100956][T14457] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 999.152584][T14462] overlayfs: failed to clone upperpath [ 1001.372570][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2167'. [ 1001.748451][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'. [ 1002.724789][T14512] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1002.771936][T11707] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1003.020648][T11707] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1003.034817][T11707] usb 1-1: config 0 has no interface number 0 [ 1003.047617][T11707] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1003.076257][T11707] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1003.105953][T11707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.125036][T11707] usb 1-1: Product: syz [ 1003.139050][T11707] usb 1-1: Manufacturer: syz [ 1003.146470][T11707] usb 1-1: SerialNumber: syz [ 1003.168035][T11707] usb 1-1: config 0 descriptor?? [ 1003.384991][T14526] overlayfs: failed to clone lowerpath [ 1004.069539][T11707] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1005.016205][T14551] xt_hashlimit: max too large, truncated to 1048576 [ 1005.144640][T14557] validate_nla: 42 callbacks suppressed [ 1005.144658][T14557] netlink: 'syz.2.2186': attribute type 4 has an invalid length. [ 1005.485821][T11707] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1006.293431][T11707] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1006.305309][T11707] CoreChips: probe of 1-1:0.41 failed with error -71 [ 1006.328641][T11707] usb 1-1: USB disconnect, device number 15 [ 1010.352014][T14611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.359474][T14611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.534451][T14634] loop4: detected capacity change from 0 to 32768 [ 1010.567548][T14634] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2206 (14634) [ 1010.636166][T14634] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1010.651183][T14634] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1010.660669][T14634] BTRFS info (device loop4): using free space tree [ 1010.798603][T14634] BTRFS info (device loop4): enabling ssd optimizations [ 1010.957147][ T26] audit: type=1800 audit(1781355403.343:53): pid=14634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2206" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1011.347168][T14611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.370178][T14658] fuse: Bad value for 'fd' [ 1011.431355][T14611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.449140][T10409] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1012.346384][T14611] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.355491][T14611] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.365336][T14611] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.380252][T14611] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.593316][T14668] tipc: Started in network mode [ 1012.598903][T14668] tipc: Node identity 3a74f669cb9d, cluster identity 4711 [ 1012.613842][T14668] tipc: Enabled bearer , priority 0 [ 1012.630002][T14662] device syzkaller0 entered promiscuous mode [ 1012.658847][T14659] tipc: Resetting bearer [ 1012.730829][T14659] tipc: Disabling bearer [ 1030.871599][ T4327] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1030.894535][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1030.900923][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1031.165382][ T4327] usb 1-1: Using ep0 maxpacket: 16 [ 1031.277897][ T4327] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1031.344008][ T4327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.122585][ T4327] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.152598][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.171355][ T4327] usb 1-1: Product: syz [ 1032.175561][ T4327] usb 1-1: Manufacturer: syz [ 1032.180175][ T4327] usb 1-1: SerialNumber: syz [ 1032.348767][T14828] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2245'. [ 1032.500453][ T4327] usb 1-1: 0:2 : does not exist [ 1032.520086][ T4327] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1032.619488][ T4327] usb 1-1: USB disconnect, device number 16 [ 1035.721357][T12904] udevd[12904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.186942][T14895] overlayfs: failed to clone lowerpath [ 1045.744914][T14939] xt_hashlimit: max too large, truncated to 1048576 [ 1045.861652][T14935] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.870496][T14935] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.879674][T14935] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.888493][T14935] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.314674][T14935] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1051.856953][ T26] audit: type=1326 audit(1781355441.102:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.2.2280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed89b9ce59 code=0x0 [ 1052.165198][T11637] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1053.098777][T11637] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.246410][T11637] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1053.633882][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.938589][T11637] usb 5-1: config 0 descriptor?? [ 1054.042048][T11637] pwc: Askey VC010 type 2 USB webcam detected. [ 1054.403302][T11637] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1054.467009][T11637] pwc: recv_control_msg error -32 req 02 val 2700 [ 1054.531719][T11637] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1054.572139][T11637] pwc: recv_control_msg error -32 req 04 val 1000 [ 1054.614672][T11637] pwc: recv_control_msg error -32 req 04 val 1300 [ 1054.637097][T11637] pwc: recv_control_msg error -32 req 04 val 1400 [ 1054.667309][T11637] pwc: recv_control_msg error -32 req 02 val 2000 [ 1054.901777][T11637] pwc: recv_control_msg error -32 req 04 val 1500 [ 1054.914414][T11637] pwc: recv_control_msg error -32 req 02 val 2500 [ 1054.949258][T11637] pwc: recv_control_msg error -32 req 02 val 2400 [ 1054.979338][T11637] pwc: recv_control_msg error -32 req 02 val 2600 [ 1056.048600][T11637] pwc: recv_control_msg error -71 req 02 val 2800 [ 1056.096531][T11637] pwc: recv_control_msg error -71 req 04 val 1100 [ 1056.144617][T11637] pwc: recv_control_msg error -71 req 04 val 1200 [ 1056.198541][T11637] pwc: Registered as video103. [ 1056.230274][T11637] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 1056.335619][T11637] usb 5-1: USB disconnect, device number 15 [ 1056.920926][T15025] No such timeout policy "syz0" [ 1057.290191][T15029] tipc: Enabled bearer , priority 0 [ 1057.330032][T15029] device syzkaller0 entered promiscuous mode [ 1057.482237][T15029] tipc: Resetting bearer [ 1057.535469][T15028] tipc: Resetting bearer [ 1057.712819][T15028] tipc: Disabling bearer [ 1058.097084][T15037] lo speed is unknown, defaulting to 1000 [ 1058.126232][T15037] lo speed is unknown, defaulting to 1000 [ 1058.172633][T15037] lo speed is unknown, defaulting to 1000 [ 1058.848844][T15037] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1059.010006][T15037] lo speed is unknown, defaulting to 1000 [ 1059.059994][T15037] lo speed is unknown, defaulting to 1000 [ 1059.091445][T15037] lo speed is unknown, defaulting to 1000 [ 1060.100083][T15037] lo speed is unknown, defaulting to 1000 [ 1060.132021][T15037] lo speed is unknown, defaulting to 1000 [ 1060.473330][T11632] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1060.517470][T15054] device syzkaller0 entered promiscuous mode [ 1060.702773][T11632] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.738643][T11632] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.772066][T11632] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.817269][T11632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.863262][T11632] usb 1-1: SerialNumber: syz [ 1061.133299][T11632] usb 1-1: 0:2 : does not exist [ 1061.166706][T15066] overlayfs: failed to clone lowerpath [ 1062.168596][T11632] usb 1-1: USB disconnect, device number 17 [ 1062.920715][T12904] udevd[12904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1070.334848][T15161] ntfs3: loop4: try to read out of volume at offset 0x0 [ 1078.717394][T15236] device syzkaller0 entered promiscuous mode [ 1082.562004][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 1082.777201][T15266] device team1 entered promiscuous mode [ 1082.793545][T15266] 8021q: adding VLAN 0 to HW filter on device team1 [ 1082.825996][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 1082.851290][T15268] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1083.058736][T15268] device team2 entered promiscuous mode [ 1083.064853][T15268] 8021q: adding VLAN 0 to HW filter on device team2 [ 1088.872707][T15315] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 1097.235695][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1097.242233][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1097.748556][T15391] xt_hashlimit: max too large, truncated to 1048576 [ 1099.031237][T15407] tipc: Started in network mode [ 1099.069306][T15407] tipc: Node identity 080211000001, cluster identity 4711 [ 1099.109727][T15407] tipc: Enabled bearer , priority 0 [ 1099.381453][T15411] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1100.171219][T15409] tipc: Resetting bearer [ 1100.345411][ T4327] tipc: Node number set to 134418688 [ 1105.997949][T15460] xt_hashlimit: max too large, truncated to 1048576 [ 1111.617080][T15506] siw: device registration error -23 [ 1111.970334][T15513] xt_hashlimit: max too large, truncated to 1048576 [ 1121.201275][T15594] netlink: 'syz.0.2424': attribute type 10 has an invalid length. [ 1121.411810][T15594] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1121.444100][T15597] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1121.849021][T15597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.942274][T15597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.058212][T15597] bond0 (unregistering): (slave team0): Releasing backup interface [ 1124.110397][T15597] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1124.135847][T15597] bond0 (unregistering): Released all slaves [ 1124.189767][ T4286] bond0 speed is unknown, defaulting to 1000 [ 1129.332934][T15654] xt_hashlimit: max too large, truncated to 1048576 [ 1136.284284][T15711] ceph: No mds server is up or the cluster is laggy [ 1136.294328][T11632] libceph: connect (1)[c::]:6789 error -101 [ 1136.337779][T11632] libceph: mon0 (1)[c::]:6789 connect error [ 1138.683434][ T6342] [ 1138.685853][ T6342] ============================================ [ 1138.692008][ T6342] WARNING: possible recursive locking detected [ 1138.698175][ T6342] syzkaller #0 Not tainted [ 1138.702600][ T6342] -------------------------------------------- [ 1138.708748][ T6342] kworker/u4:18/6342 is trying to acquire lock: [ 1138.714987][ T6342] ffffe8ffffd48898 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x62b/0xaa0 [ 1138.724214][ T6342] [ 1138.724214][ T6342] but task is already holding lock: [ 1138.731573][ T6342] ffffe8ffffc488e8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 1138.740802][ T6342] [ 1138.740802][ T6342] other info that might help us debug this: [ 1138.748867][ T6342] Possible unsafe locking scenario: [ 1138.748867][ T6342] [ 1138.756327][ T6342] CPU0 [ 1138.759606][ T6342] ---- [ 1138.762893][ T6342] lock(&pd_list->lock); [ 1138.767241][ T6342] lock(&pd_list->lock); [ 1138.771589][ T6342] [ 1138.771589][ T6342] *** DEADLOCK *** [ 1138.771589][ T6342] [ 1138.779733][ T6342] May be due to missing lock nesting notation [ 1138.779733][ T6342] [ 1138.788047][ T6342] 3 locks held by kworker/u4:18/6342: [ 1138.793426][ T6342] #0: ffff88801b28b138 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1138.804758][ T6342] #1: ffffc90004bcfd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1138.816004][ T6342] #2: ffffe8ffffc488e8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 1138.825680][ T6342] [ 1138.825680][ T6342] stack backtrace: [ 1138.831577][ T6342] CPU: 1 PID: 6342 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1138.839204][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1138.849283][ T6342] Workqueue: pencrypt_parallel padata_parallel_worker [ 1138.856072][ T6342] Call Trace: [ 1138.859372][ T6342] [ 1138.862311][ T6342] dump_stack_lvl+0x188/0x24e [ 1138.866993][ T6342] ? show_regs_print_info+0x12/0x12 [ 1138.872204][ T6342] ? load_image+0x400/0x400 [ 1138.876723][ T6342] __lock_acquire+0x123e/0x7d10 [ 1138.881596][ T6342] ? verify_lock_unused+0x140/0x140 [ 1138.886812][ T6342] ? __queue_work+0xbc1/0xfb0 [ 1138.891511][ T6342] ? mark_lock+0x94/0x320 [ 1138.895863][ T6342] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1138.901865][ T6342] lock_acquire+0x1bb/0x4a0 [ 1138.906397][ T6342] ? padata_do_serial+0x62b/0xaa0 [ 1138.911433][ T6342] ? queue_work_on+0x196/0x1f0 [ 1138.916209][ T6342] ? read_lock_is_recursive+0x10/0x10 [ 1138.921591][ T6342] ? wq_worker_last_func+0x40/0x40 [ 1138.926717][ T6342] ? __rwlock_init+0x140/0x140 [ 1138.931477][ T6342] ? _find_next_bit+0x87/0x130 [ 1138.936251][ T6342] _raw_spin_lock+0x2a/0x40 [ 1138.940758][ T6342] ? padata_do_serial+0x62b/0xaa0 [ 1138.945788][ T6342] padata_do_serial+0x62b/0xaa0 [ 1138.950640][ T6342] ? padata_parallel_worker+0x40/0x1c0 [ 1138.956095][ T6342] padata_parallel_worker+0x6b/0x1c0 [ 1138.961391][ T6342] ? process_one_work+0x7b0/0x1160 [ 1138.966507][ T6342] process_one_work+0x8a2/0x1160 [ 1138.971451][ T6342] ? worker_detach_from_pool+0x240/0x240 [ 1138.977100][ T6342] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1138.982136][ T6342] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1138.987686][ T6342] ? kthread_data+0x4b/0xc0 [ 1138.992205][ T6342] worker_thread+0xaa2/0x1270 [ 1138.996896][ T6342] kthread+0x29d/0x330 [ 1139.000970][ T6342] ? worker_clr_flags+0x1a0/0x1a0 [ 1139.006005][ T6342] ? kthread_blkcg+0xd0/0xd0 [ 1139.010604][ T6342] ret_from_fork+0x1f/0x30 [ 1139.015050][ T6342]