last executing test programs: 16m38.426907195s ago: executing program 0 (id=17): r0 = socket$kcm(0x29, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) madvise(&(0x7f0000b44000/0x4000)=nil, 0x4000, 0x8) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000340)) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)="a6faaefe24274737bb56e5fc4b9d0682b524bf02e4f16711d0e7c26ff9d658e5b8fbcfc571f8fb3da997db784826e8730201f91a97a8bf0621830400bab405f32bae4b9eedc33349472d6b05f0890555e05ef21b67ebd49bc6c8d18c035640135bdee0fc5b68ce16036a09d43fa82a4b52d5868a4fb7caf9e18d323430a606becfc9109cb82ca27250f065b29fa6851c2d0ba324338ba5ba15274dff7c8a0dd254fd4ad3dfcce1f5a7636818311088dd5e772717d0dffcba0282ad5b8107b65faf7dd89cc41665693b851f70bba358c09b2c21b116683aa32f459b8e44e9d4394408f6dd9618bab4a005d5fa8f", 0xed}, {&(0x7f00000004c0)="c4388499be2b181929035b11d9960b7acaaee37a482f3af1a31ac9da51afe4d3b2bd99f556e2786bace6aebf1fee03eb0cc3050634c0f7e99811dca4", 0x3c}], 0x3}, 0x4001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0xe, 0xc}, {0xfff1, 0x5}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x8004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x40}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 16m37.567339292s ago: executing program 3 (id=20): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) recvmmsg$unix(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1}}], 0x1, 0x10121, 0x0) 16m35.812131639s ago: executing program 3 (id=23): unshare(0x24060400) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) close(r0) 16m35.680870393s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) io_setup(0x4005, &(0x7f00000004c0)) socket$nl_xfrm(0x10, 0x3, 0x6) 16m34.160048602s ago: executing program 0 (id=27): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x20fe, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x20000010) socket$kcm(0x2, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 16m30.625589546s ago: executing program 3 (id=30): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000140)) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x453}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 16m27.882621594s ago: executing program 3 (id=33): mknod$loop(0x0, 0x6000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000002c0)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) socket$inet6(0xa, 0x800, 0xea5c) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) fsopen(0x0, 0x1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200}) 16m25.925184137s ago: executing program 3 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16m23.928679411s ago: executing program 0 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x4a}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_io_uring_setup(0x3af6, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000000)) sync_file_range(r3, 0x8f, 0xfac, 0x5) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) syz_open_procfs(r0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r4, 0x0, 0x0, 0x33, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05789646ec16ad61df67d321d2f2000000000000006311080000000000851000000200000085000000230000209500003b0a20f1d150983fa761681a5de47e8d4e1c9a67027fe1f4c88a2e22835051935988c7e0da9ca7677e8657e56327d95ae3817cf58c80ed2701451f70779d5f383e5548fbbd09cfb40384332c2fa254bfc8367f1128393f9a0b82d4428f93b4f07550acd82e94a1c778a3f91408c93d29d97160171c6f89c9480618a7a9"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x2, 0x2, 0x1) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000680)={0x8, 0xa3, "eaf9ecf00f1fdd795e7e75737d8219202fc0b342cb43bc9b2d962f2f54e1b44667c3cb4a600e3950d94ff126c926f21c7730a3dff20bab42d307c89a13a17d7a0e44b1c685cffbb25eab473d1c58286a01a39870f998bc654e1f3acdd0779481a6a6086e3b463984fd6babef4dc6b10dd712122134dc7e4fbfa05404da8510c0531cda22cbbb21bbe690d6dc3dc448cc519cf4c584564c3eb748f0afb9a0fcc90c6d5f"}) ioctl$TCFLSH(r5, 0x5608, 0x0) 16m20.476041153s ago: executing program 0 (id=49): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 16m17.269374486s ago: executing program 0 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x4b26e94}, @in={0x2, 0x4e20, @multicast2}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x800, @loopback}]}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name, 0x10) fcntl$getown(r0, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) 16m14.514407814s ago: executing program 0 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x55ae, &(0x7f000000ac40)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) remap_file_pages(&(0x7f00007fa000/0x4000)=nil, 0x4000, 0x300000a, 0x800, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 16m10.376017478s ago: executing program 32 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 15m58.444393222s ago: executing program 33 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x55ae, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/TnvPcz3me+9yT80ffV55zIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIii6Ehi7rszul88OrLmy/f/48cTH934k/G79289dMt9m+5fcGbETTtnLetbP61p/oaNDUean94359YoSqT7JbL9b7v2W/V33njbd6vDgMsXZra1taXeMtP1ZKYxvODF/n6FPyuiKKqKDVCZ3b6a3akoGCC321g84IDeaV0U3T153qS2rqfGLUku7Cn+6PSrHuoJDJXsddVz/lpKpn9XxI7ItfMuvUTBJZrpH7/gPpUPAQB8LDNT6U3uz9Hsn7i5dnO8HmsnY+2WWDv8hdCS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPq/IBMW32ldFN09ed6ktq6nxi1JLuy5+PFSJcZLXnC8XLv2/E8iLxiH+Bsf73w9HNpYNM7A4iPG8/ylY8a8/dbk+slfnzb3iRueGdXd9X9PztiS+mNdzQtXXN9b/+x1Rfm/duD8H86c/A8AAMB/Qv6PjzOwwfL/HUunbnn9F8NW/bq14YmD9Tv+3PqdZ3YuOtVzw4/6Xp6avP3Rq4vy/6SCtyzK/2HGIf9XRBeX/wEAAOCz7L+d/5NF4wxsoPzfX2840zf7Bwdfq+v4+5zFe3710BWLz57+2/xTu3cNX3NHy/q6h64syv8zy8v/w/KnHV78XZjw6tFRNLPscwoAAAAUCv/f/fxXCyGvZ745iOf1a/95VfO+mz/45jcevOdPb779m2MHZk9at71u5sGXb6r/sPJ727uL8n+yvPxf9el8XAAAAKAMzx9dOXfe8Z5zj599oevk4d29J2c8eWZdU9/p1ktaVq/adOy1ovyfKi//jxiajwMAAABcwL13Prdi86sv9T2w/66xU3oqrmq8JHHLth1TmyZ81Hlp7+Xbtxbl/+Xl5f+R2W125UOmU2f4Vwito6Ooun9nbaZwKGq5JlcAAAAAPiEhp2/9YMWysTvH9o4/fvqxmkNvHJ79l7WdczZe013VvblzWeNlRfcLDIm91P3/w50Owvr/gvv/Fa3/zytk7vo3240BAAAA+CIqXs8fbo+feXJBqefvl7v+f0ndxBOJtrfeW/XVcwfOjVmw//vXb1pX39t7z4SXfv/DP0z/qLoo/zeXl/8r87ef5PP/AAAA4CL8rz3/b2nROAMb7Pl/TRV9DavW7Z2+esvaLQsTyw5Un3pw9d73F6z519Sbn2+que5AUf5vKS//h+2o/I/XEc7PptFRNL5/J3s3wZ+H6a6OFdqr8gqZEx/rcWPokS20j8grpK2N9fja6Cia3L/THCv8fyi0xApna7KFXbHCsVDIXg+5wp5YoSNcadtqstONF14MhewCi/awgmJUbklErMd7pXr0Fy7Yoyv35gAAAF8oITxns2xVYTOKR9n2xGAHjBzsgIrBDqgc7IBhsQPiB5Z6PVpeWAiv3975yIZNDVOSrzw897Gfvfls44R9j19W17v5w1e23Ttx5/SWqUX5f1d5+T+ciuGZTan1/1FY/599rmFu/f/yUKiNFdpDIRW/Y0AqvEcm7D4c3qM2le1xdnyuAAAAAJ9r4XuByiGeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBv9u49TqrqThD46aYfdNM0bRxFHSd21IBmpGlsDcPgKGqMRkWaWXXcZDQQaBBphPBYBVEbUGcc4md87ayZ6AgKIrvqhxhXg8FIXMSMmkQx8QH4WKPrur6jEqOJ7Kf71imqblF2IaC28/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mdwz0EvnTh4/sx/+aDhnItXVk1e8D86Rl764ZXf/OKT/7pkwe/C3J8PO2PTnAMvOHbuvCm/6Fi68vDTQ2jtKleWFC979vKvPNi6+7HP3N5//fQbbqnfVJWpNxMPfTr/lGfuXBRbfaFvCHeVhVCRDgyqSwKVmft1sb6960LYJWwJZEu01SYl0g2H+2tCWBS2BLJVrawJoS4ncPK6++69rDNxdU0IXw4hVKfbeLo6aaMmHRhQlQRq04GpFUng95sT2cCPy5MAbLf4Zsi+6Fe05mdo2Hq5Iq+/yh3WsU9Xeni9YqKheL7XjtzJncpRlX6gdbuetoLq2CkK3h6rvdt6wLutYDtf7mnL3ZHK7KFs3hKqDuXj2yaMndU+Mz5SHpqaehWraSc9z0+9NXfctqR7zOswdqBhh7wOL3l02dQ+S0ZectXGX41ad2bN/tvbzSdzNmluunhPdozqkHnN9ZjnMRrh86QHvP0K9pIa7XSFEDafc9a0r80af9bhvW5+Ys0rDzxQt+msWfN+fsb4cxdcdNK6P819sWD+3/DR8//4co635Xm5Y6sf1Cdz8/hIXUy8UZ/MzQEAAKDH6AlHTZef99rfvfa91a3TF5z2rTcPOueD3Vt/Pey+flX7v76mqfW89bu9XDD/byzt/H885V+XO9rVIYzoSizoF8IeXY8ngeUxy3f6hfClrodas4EuR6YCq0PYsytxYLaqVInesURjKvBSfSYwIhVYGwOtqcDSGLg8FbgoBlakAuNiYHUqcFQMhEn54/hKfWYcJQdqYmBMshFXxKsQ3q6PraW21YZsVQAAADtIZnZYmX8351qH7c0Qp5crarrLEK/ALpqhOlVDegabnVYVraGiuxrKu6shO+6Ojx5+Qc1l3dVccBlGWX6GG1b97b0LXjh0r9G7j99t4eDzJ/10bDjzrbuqHmte9MKbex9+05qC+X/zR8//q7fSkbKC8/8hjO76G3OXZyLt2fiY1rwMAAAAwHa48M//Zpfalwbt37DhvbJ75q5+/JFlv9y4y8mnvTfmuNd+cFhN4z0F8/8RpV3/H4+J9MrJHB6OhyEm9wuhOT+QVDu8MJCc9e6TCQAAAEBPkD0fnz0XPilzm1yinZ5PF+Zv3cb88cT/iK3m/+Pd/7P29s2/faHs/O+cM6ym3+J/e6Vj3PEnHXXzcd98e8+K/X9ZXjD/by3t+v/a/NukE2tjL67qF0LvnMADsZedgS6NMfDcEfmBzPjXxg2wMFaVuTAhW9XCWGJMDDSnAouKlXgkW2KP/EDmyco2viA7jkmZEjkBAAAA+MTFwwHxvHy8/r/l9GGn/v13Z/zj/JcfOHfl+Rf/3dCOucNPvO+pDxpmX7E4bHjj8IL5/5htu/6/ax5ccHl/e58QBleE0Cv9xYCHa5OFAWOgriyTuKc2qatXuqr5tSEM7xxYuqrnM+v/V6TXGHysJqkqBvbY9+a3BnQmltSEMDg38Pi3Fh/amZiVCmQbP7UmhH06R5tu/M7eSeOV6cav6R3CF3MC2arG9Q6hs7GqdFX/qzrzOwbpqlZUh7BrTiBb1dDqEGYHAHqq+L90fO6DM2bPmTy2vb1t+k5MxIP4NWHCpPa2pnFT28dXF+nT+FSf89Yxmlc4plLXEN+QWaNo4fKJlaWks18UbM5tK3Mgv+DKwcz9uDNU2TXOgyvz7rakh3zAfoVNhJxdqWJDLt/JQ67NrWTLk1hQf8xfFfqE3rNmtE1vOnfszJnThyR/S81+cPI3nmdKttWQ9Laq3VrfSnh5FF0uK+XjbqsBuZUMnjll2uAZs+cMmjRl7MS2iW1ntxzyVy3Dhg796rDBnYNqTv52M9IBW6s5NdLNi0sc1g4c6V4VOZV8Eh8aEhISPS2x73/Z+NDIXdeefd1PX/3ReX2+ceo9exwx/QeHXDn5weq9D1t426ADCub/0z56/h8/deIHf2Z9hmLn/xviaf7k8S2n+cfEwKJSz/83FDubn70woDEV6IiBDqf5AQAA+HyIhyPj0cx4UHrjzWvXrF/UMvv7DW+33LKqffGNN957yo/v6H/8PgPD7uuuPf4LBfP/jtK+/7/t6/93Sa//n126/vhiy/wfGEs0F1v/P73Mf3b9/45i6/+nl/nPrv+/6FNY/39WNpDaJG9b/x8AAPg8+OTW/+92ef/0DwQUZOh2ef/0DwQUZOh2Gf9SfyBgm9f/X/XA33+5qs+o2/+i5Tf1F7/6T3cf2nrEmo3T/2KfzWvH33vt6JtXFcz/Ly9t/h83WqkXdAEAAAA7z3++9OqKo8666/aWNZPXj3lj4DtPvLloQK/3K456qH348/1fv+Xcgvn/otLm/5/8+n+h2PX/jcUCrcUWBrT+HwAAAD1UsfX/7h7c0vjhqL4fPjXkN0sfuGnkTx7+2R+X7vuzE35avue8Y56bfumEgvn/itLm//Gyi/K83LE3H9Qna9qF9Jp2b9RnvzIAAAAAPUN5aGqqLDFv3sKoR378Np/KLAX6Uelc3335mrM2Pj/12MdOW/NPNccP3HXclPNXNP7D0APu2G3Exbsu3nBKwfx/dWnz/7zvZVzy6LKpfZaMvOSDqzb+atS6M2v233L+HwAAANh5Sj0uAQAAAAAAAAAAAAAAfPrO6Vh4wcNLjnn3G7f9zX6HL3pl4K13HvCHQX1evPzK+yeseP2MiV8r+P5/GN1Vrtj3/+Pv/sXvF/xZXu7Yavfr/2Xun3zCbbO7lix8uD6E/XIDk+dP3iVkfpt/YG7g3tMP7N+ZmJ8useqZo17sTHw7HThu0Bc2dSYOSwXGxEUS90wH4q8abuqbCsTlFR9LB+L2WJEOVGUCl/ZNxlGW3lYv1yXbqiy9rdbXhdAvJ5DdVnfVJW2UpQd4dSqQHeB304E4wJMygfJ0r27rk/QqBupi0ev7JL0CAOAzK+4FVoYJk9rbmuMufLzdqyL/NspbsmxeYbVlJTa/IbM02cLlEytLSfdK74tWZ6uqDNWdQxhSsLuam6Wsa5Q7ppZuNt2fFRlyd6u9lRcpl7atm66q+IhqkhE1jZvaPr6y24G3dJ/l4IpuswwpmOzkZinv2qQl1FJCX0oYUYnbpoQux/vloampVyrXX8dgQ8jT3Sui1O/r567zV+xVkJvn1kOuePNLR//k2ff/fbfH+3791JrbZnzvnRN+/dp9Bxx8+LXjmlZtKpj/N5Q2/6/OHdemzI8BdMRf1hveL4QxJY4IAAAAPv9uvfCW20+buvblCasrnnj00cnlo06r3Dz3jrlzLl5/z8LjLj1o2fbGDz3z99/7zcD9fvfMlS/+ZPie919/0/954tDH/vqPD/3wwbfrlvca/W7B/L+xtPl/PIKVORWcHO1YHX//f0G/ELp+Wr8hCSyPw/1OvxC+1JVqjSWSH9Q/PpZoTgLL4wGTA2OJMa35VfWOgRWpwEv1mcDqVGBtDGSOUtwcModyrqgP4dCu1Oj8EtNiiYZUYFQMNKYCTTHQnAr0jYERqcCrfTOB1lTgoRgIk/K31Y/6ZrYVAADAtsjMsyrz74b0PG9FRXcZyrrLUNtdhvLuMlR3l6HYKOL922OGytTFK2U5mSrTtdakainIEH8Mf5v7VZAhPJKfM12woOl4/UH2eoOy/AxXfP+ZU9YOnPrgyo1Hf7X/rf86aNeDmqfWvTvv+id/P+rsa5/7ywEF8//m0ub/tfm3Setr4/x/y+//JYEHYveuipeON8bAc0fkBzIHBtbGye7CbFWtmRKZSfvCWGJEDDSmAtNiYEQqMGZ0JrCof34gM9PONr4g2/ikTImcAAAAAHzi4gGCeJgmzv9vOPL7V73Xb/ymJXOm3ze65fGTRn79qjt/eM9+S+54Z9nAfmPe/XbB/H9EafP/2F6f3MYuir15oW8Id5Vt6U02MKguCcTjGHXx6/F714WwS84BjmyJttqkRFWq4XB/TfIN9ap0VStrkjUG4v2T191372WdiatrQvhyztGXbBtPVydt1KQDA6qSQG06MLUiCcQjP9nAj8uTAGy37FHB+ILKXOqS1bD1ckVef5+X3wRND6/gGOhW8m3tO1c7S3X6gcwx1axte9oKqmOnKHh7rPZu64nvtgbvttwdqcweyuYtoepQPr5twthZ7TPjI7nfZC2wk57n3G+plpLeAa/Djo/f2+5VpzvQnPr4aN56ua7sHxY8Gqu75NFlU/ssGXnJVRt/NWrdmTX7l9yNIuIXhX+46X9XPpmzeXe26pB5zfW4z5NWnyc98d9Ao6cthHDpdUfvveidX+/77PXPnrKm7IbRr/ztjLs3LP2HysNGrHnvicEjLyuY/7eWNv+vSN12+UPcmDP6hXBAzsZ9OG7+o/sln4M5geRTctfCQHLK/bf1RT85AQAAYEfLHu7IHi+YlLlNLghPz5ML87duY/54vGLEVvOX2u9j1qxffuLg16/d/x/PP+H1f77msCcfvO7SsjVL//vo91euumzhu48XzP/HfPT8v3eqm87/O//PTuL8/1Z91g9F904/0LFdh6ILqmOncP5/qz7r7zbn/7fK+f+edP6/8FHn/3PSzv9/6j7rT1vBXtI0O12dk+Dr7vjZH8bf+P7sxn0POvHJpw8Zf+2/Xdly150nv/zfzjl3yqvf3Fgw/59W2vzf+n9bX7Qvu/7fmGLr/00rtv5fh/X/AACAnarIQnPpeV7B6n0FGdKr9xVk6HaBwG6XGLT+3zav/zd/+J8uvOAHz7Vc8/YdYy5bteGYM155as3Kp2csO/ac895svfPO1oL5f0dp8//4cuiT23pPWf+vcXSRqi6PgWkWBgQAAOCzqNgBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5dh5z69nsXf+1f2gb8fNlN/3zL//u/z9Suvv8bX79x6C8n/eXpZavWXT3sjE1zDrzg2LnzpvyiY+nKw08PYVJXubKkeNmzl3/lwdbdj33m9v7rp99wS/2m6ky9lZnbP8/LHVv9oD6ERTmP1MXEG/Wdd7YETj7httkVnYmH60PYLzcwef7kXToTS+tDGJgbuPf0A/t3JuanS6x65qgXOxPfTgeOG/SFTZ2JwzKBsnR3r+2bdLcs3d3L+obQLyeQ7e5ZffOryrZxbCZQnm5jWV3SRgzUxaLX1CVtxEB7LDGpdwiDK0Lola7q36uTqnqlq7q7OqmqV7qqC6tDGB5CqEhX9WxVUlVFeuSPVCVVxcAe+9781oDOxOKqEAbnBh7/1uJDOxPTU4Fs4/+pKoR9Ol8y6cZ/VJk0Xplu/L9WhvDFEEJVusS7FUmJqnSJ5ytC2DUnsGUjVoQwO/D5ED99xuc+OGP2nMlj29vbpu/ERFWmrZowYVJ7W9O4qe3jq1N9KqYsJ7153scf+4a35o7rvF24fGJlKemKTLnKri4fXJl3t+Wz3vvYr9rcSrY8HwX1x/xVoU/oPWtG2/Smc8fOnDl9SPK31OwHJ397ZaLJthrSU7bVgNxKBs+cMm3wjNlzBk2aMnZi28S2s1sO+auWYUOHfnXY4M5BNSd/d8RIF3/yI92rIqeST+L9LyEh0dMS5Xmfbs2f9c/xgh39LR2tDNVdH9AF04rcLGVdo9wRgz7yY4744+ymdDuiIQUTh4IsB3efpaVgMrElS02SpWu3rmBymFtTedcmjffLQ1NTr2LboSH/bu7mfW07Nu9TmU1XahoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+swejYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASwEAAP//MTQYqg==") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) remap_file_pages(&(0x7f00007fa000/0x4000)=nil, 0x4000, 0x300000a, 0x800, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 6m30.707964643s ago: executing program 4 (id=1574): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6m28.463242224s ago: executing program 4 (id=1579): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', '', [], 0x8, "2c36ce35fe800000000000009d94165f433d388e6577f86274e326d04670000000002c00"}, 0x5ac) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e000000080003002bd8d3dce9404a64f24f8b3da970ffaca22b0db8838b847749f9267a60d34bc32122c55805a7ebd4cb01d41a9fa1f1c67d1bb3d0d0d6164afa8f40c5de271fda8ba67571ff3420d45c00f03fb0", @ANYRES32=0x0], 0x1c}}, 0x4000054) 6m27.159854306s ago: executing program 4 (id=1580): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@ipv4_delrule={0x1c, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 6m25.386385863s ago: executing program 4 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x5, 0x0, 0x0) unshare(0x26020480) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback={0x0, 0x7ffffffe}, 0x23}, 0x1c) 6m21.791387938s ago: executing program 4 (id=1589): r0 = syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000280)={r0, 0x0, 0x8, 0x1, 0xfffffffffffffff9}) r1 = openat(0xffffffffffffff9c, 0x0, 0x129242, 0x30) pwrite64(r1, &(0x7f0000000200)='a', 0x1, 0x80000000e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f0000002600)={0x2020}, 0x2020) 6m18.357785398s ago: executing program 4 (id=1595): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@ipv4_delrule={0x1c, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 6m3.048947117s ago: executing program 34 (id=1595): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@ipv4_delrule={0x1c, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 4m4.419298791s ago: executing program 7 (id=1848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd700000dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x4c}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x40080) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m3.997853745s ago: executing program 7 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) ioprio_set$pid(0x0, r0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x3) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESHEX=0x0], 0x1, 0x1aa, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) 4m1.401747919s ago: executing program 7 (id=1864): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x3a2, 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m59.78916494s ago: executing program 7 (id=1869): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x18}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400", @ANYBLOB="020029bd700000dbdf"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m58.885900999s ago: executing program 7 (id=1878): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 3m56.976027869s ago: executing program 7 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) ioprio_set$pid(0x0, r0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESHEX=0x0], 0x1, 0x1aa, &(0x7f0000000200)="$eJzsmDFv2kAUx/9ngylVJbq2SysVCTrU2KatytCBuZVaqVWibEHBQSQmRMYDsEX5EJmjfIDMKAvfIxmSTBlCtkwZHJ19jg8ISSRAQcr7DY+/3z0f795JfyRAEMSL5fzs+vQwl01z/QZZpET+Qo1rFKm+l7n5fFz/c7RnXJ30+r9Ko/sxAL7/9O9PAOiXVXji2ffDt6PPrMj/hxLppPz+Mhh0oVfdPpaEtsGwIvSGpJu8XtfX646trzWdKhcGDyYPFg/F0f4GOwxVqT8mrbc63c2K49juHMVj8xuUFfyU+pPvK5qNEc8PJhSYQHDXRTD8E/kfSEWzCUcinf99It5fneb8ypyHNa34/QqY6YbvMmNLB0OZJBbl7CRmIBi4uEwDi9HPc4nYn/x9hpzkTwnJPwpeY7vQ6nS/1BuVml2ztyyr+N34ahjfrEJgRGF8wP/SgT+9lvZPTqjVmIZ2xfNcM4x3z1Y7Bc+17nNcLfA/BflPYddM5GSC34O37CNfyKvA7sRuCYIgCIIgCIIgCIIgCIIgpuEDtOBf0CFKYynrb1B9GwAA//8V/HVi") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) 3m41.64048453s ago: executing program 35 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) ioprio_set$pid(0x0, r0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1aa, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) 10.852156203s ago: executing program 1 (id=2516): syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100135bb9b08b8106e1edb9f010203010902120021080310100904210755d10040824905"], 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="52cc552fd81e6232c77a51b1fdc31d66ab09000000000000006e3da6f36df7540000000000000007d2c940c8127b2f084a6bea"], 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000815) getgroups(0x27, &(0x7f0000002540)) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) 8.706018271s ago: executing program 2 (id=2522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x4c}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.403398351s ago: executing program 6 (id=2525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd700000dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x38}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x40080) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.090425151s ago: executing program 8 (id=2526): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8.007880024s ago: executing program 2 (id=2527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd7000"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x70}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.920088836s ago: executing program 5 (id=2528): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@fat=@errors_remount}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x22da}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@flush}, {@nodots}, {@dots}, {@nodots}, {@dots}, {}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x200}}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '@'}}]}, 0x1, 0x20e, &(0x7f0000000400)="$eJzs3T9rE2EYAPAnbdpcVKSbIAgnDjoVdXKsSAUxIFQy6CboZKZ2SV3a7+DiV/B7+QGkUxZ5Jd4lF9MkDaW5YP39lnvunve990/IJUuepHgWQz/ufIssa8TGXuzFoBE7sREjpwEAXCeDlOJnKqx7LgBAPZb4/P9V85QAgBV7++796+edzv5BnmcRZ6f9br9bHIv8y1ed/cf5HztVr7N+v7s5zj/Jp787DPNbcaPMPy365+P0dkR0t+PRgyI/zL1408n/7t+KjyteOwAAAAAAAAAAAAAAAAAAAAAArMu9yEeq+j6bEVHW99ndnc63y/o8xdlEfaCp+j3NuNssT6vyQOmkllUBAAAAAAAAAAAAAAAAAADAv+Xo+MvnD73ep8MqaEXE5JXmjDbzg0Z546UaXxzcvKL7zAs24nLd26MNbMzcw0VBo9yic6ksrnCB7dkv7jJBNFe44bUEeQ1jtRdub0rDYPa7YFQWY2737YhYPPrDg8tOfpBS6n2/f3h0HGlh4+oZ0arzgQQAAAAAAAAAAAAAAAAAAP+xiV99j329XRyztc0KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpV/f//MDh/ZWFwEhG34sLGo7G2IlvrWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi+fgcAAP//9DweRg==") (fail_nth: 1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 7.830083539s ago: executing program 6 (id=2529): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2000, 0x8000, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 7.702400333s ago: executing program 1 (id=2530): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2000, 0x8000, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 5.448404665s ago: executing program 2 (id=2531): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c646f747310000000736b3d30303030303030303030303030303030303030303030342c616c6c6f775f7574696d653d3030303030303030369f9788589eecb60d0900000030303030303030303032313333322c6e6f646f74732c6e6f646f74732c636f6465706167653d3836352c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c666c7573682c6e6f646f74732c646f74732c6e6f646f74732c64656c617865642c646f74732c666d61736b3d30303030303030303030303030303030303030313030302c646f74732c736d61636b66737472616e736d7574653d402c00"], 0x1, 0x20e, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.327181759s ago: executing program 5 (id=2532): syz_emit_ethernet(0x6e, &(0x7f0000002b40)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5ea714", 0x0, 0x33, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @remote}, [@dstopts={0x2b}]}}}}}}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/17, 0x11}, 0xb041}], 0x1, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.283532911s ago: executing program 8 (id=2533): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000340)=""/174, 0xae}], 0x2, 0x2, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.269183121s ago: executing program 1 (id=2534): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x800803, &(0x7f0000000000)=ANY=[], 0x1, 0x61d, &(0x7f00000002c0)="$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") acct(&(0x7f0000000000)='./file0/file1/../file0\x00') r0 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) set_mempolicy(0x8001, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000002180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@authinfo={0x18, 0x84, 0x6, {0x5}}], 0x18, 0x20040000}], 0x1, 0x800) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000000)=[{0x1, 0x9, 0x0, 0xfffff104}, {0x30, 0xfc, 0x0, 0x9}, {0x6, 0x0, 0xcd, 0xffff0001}]}) keyctl$chown(0x4, r1, 0x0, 0xee00) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000) io_uring_setup(0x1f9b, &(0x7f0000000380)={0x0, 0x894f, 0x800, 0x0, 0xfa, 0x0, r3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000070000000000000803000000080000000000000700000000000000000000000d0000000010005f2e30305f5f5f00"], &(0x7f0000000a00)=""/245, 0x46, 0xf5, 0x1}, 0x28) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x0, @link_local}) set_mempolicy(0x0, &(0x7f0000000240)=0x3, 0x7fff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @value64=0x8000000000000001}}) 4.955778221s ago: executing program 6 (id=2535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700ecb10000000000800000850000007500000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xf5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x874, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) syz_read_part_table(0x63b, &(0x7f0000000640)="$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") 4.276641773s ago: executing program 1 (id=2536): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.274350223s ago: executing program 2 (id=2537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x4c}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.922849304s ago: executing program 8 (id=2538): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@jqfmt_vfsv1}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (fail_nth: 1) 3.450433379s ago: executing program 5 (id=2539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd700000dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x38}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.406669041s ago: executing program 2 (id=2540): syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100135bb9b08b8106e1edb9f010203010902120021080310100904210755d10040824905"], 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="52cc552fd81e6232c77a51b1fdc31d66ab09000000000000006e3da6f36df7540000000000000007d2c940c8127b2f084a6bea"], 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000815) getgroups(0x27, &(0x7f0000002540)) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) 3.405786681s ago: executing program 1 (id=2550): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.702241043s ago: executing program 1 (id=2541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0011"], 0x34}}, 0xc000) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xfff, "b6261e55a76f3c6831cf144c49c81b3e"}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x50c, &(0x7f00000008c0)="$eJzs3V9rHGsZAPBnNtmetElMDnpxPHCOB3skCdpNYjw9wYvjEUSvDqj1vsZkE0I22ZBs2iZUTfEDCCJW8KpX3gh+AEH6EUQo6L2o+Adt9aKg7crM7qZpOmm2dDdbs78fTOadd2b2eZ9d8u68M8NsAH3rnYi4GBGP6/X6VESMNesLzSn2G1O63YP7NxfTKYl6/co/koikUZduNnnoNYebuw1FxDe/FvGd5Nm427t7awuVSnmruTxdW9+c3t7du7S6vrBSXilvzM3NXp5/f/69+ZmO5DkSER985c8/+eHPv/rBrz93/Q9X/zr5vaRZH/Ekj05rpF7M3ouWwYjY6kawHhnMMgQA4P9B6zj/0xExFWMxkB3NAQAAAGdJ/Usj8d8kot6WofY2AwAAAF4phewe2KRQat4HMBJv3S6VGvfwfiIuFCrV7dpnl6s7G0uNe2XHo1hYXq2UZ5r3Co9HMUmXZ7PywXJEPDy8XJ6LiNcj4sdj57Pl0mK1stTrkx8AAADQJ4aPjP//PVYopOP/Q/7Ts8YBAAAAnTPe6wYAAAAAXWf8DwAAAGef8T8AAACcaV//6KN0qrd+/3rp2u7OWvXapaXy9lppfWextFjd2iytVKsr2TP71k96vUq1uvmF2Ni5MV0r/220UVfd2ahdXX3qJ7ABAACAU/T6p+7+PomI/S+ez6bUuV43CjgVgy+y8Z+61w7g9A30ugFAz7zQ9z9wphR73QCg55IT1g/d+W7+it90ozUAAEA3THwy//r/wInnBvYLp9REoEuc/4P+5fo/9C/X/6F/FWMgDOShvx33CNDh5vzYh3e0ff2/Xn/hRgEAAB01kk1JoRSRnQcYiUKhVIoYzcYExWR5tVKeiYiPRcTvxoqvpcuz2Z5JJCfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOoAAADAmRZR+EuSPc0/YmLs3ZGj5wfOJQ/HsnlEXP/Zlds3Fmq1rdm0/p8H9bWfNus/34szGAAAAMBRrXF6axwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ304P7NxdZ0mnH//uWIGM+LPxhD2XwoihFx4V9JDB7aL4mIgQ7E378VEW/kxU/SZsV4sxV58c/3OP5wB+JDP7ub9j8f5v3/FeKdbJ7//3c566Fe3vH9X+Gg/xvIiZ/WjR6Unu/Ne7+cPjb+rYg3B/P7n1b8JEafjr/f6H8utpnjt7+1t3fcuvqdiInc75/kYJu0NF1b35ze3t27tLq+sFJeKW/Mzc1enn9//r35menl1Uq5+Tc3xo/e+tXj5+V/4Zj44wf55/e/77aZ/6N7N+5/vFEsHuyePIk/eTH/83/jmPiF5qf+mWY5XT/RKu83yoe9/Yvfvt0qf5iT/9LR/KfiyOefn/9km/lPfeMHf2xzUwDgFGzv7q0tVCrlrb4uvNS7kR4WvRJZvFThXLeySN/XVyHBvML3u/DK6ZF5r/NqpzB0wjYRr/W0ZwIAADrt2TEwAAAAAAAAAAAAAAAAAAAAcNq6/KSxR2mheCTmfva3E0/PBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADonP8FAAD//xbW0JA=") rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r4, &(0x7f0000000080)={{0x0, 0xd}, 0x0, 0x0, 0x2, 0xc1}, 0x80, 0x0, 0x0, 0x0) 2.700466753s ago: executing program 6 (id=2552): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) setrlimit(0xa, &(0x7f0000000000)={0x80000000, 0xffffffffffff0f53}) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0xf000) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0xffffffffffffffff}}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x2, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x1}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 2.639445945s ago: executing program 5 (id=2542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020029bd7000"], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x70}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.49596931s ago: executing program 8 (id=2543): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c00068008000100"], 0x34}}, 0x0) 1.23814712s ago: executing program 5 (id=2544): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c00068008000100"], 0x34}}, 0x0) (fail_nth: 1) 1.101434045s ago: executing program 6 (id=2545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 494.962354ms ago: executing program 5 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x3}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)={0x8c8}) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600)="d59b48a11ea78f7abb8ac61fa1680b452ec9ab79955c71d847a074adc12a3eb8408590ea3b4800a2b846f6d77e04016a979819b1d71283bcdfd97d49b2a619b988f0ea969e", 0x45) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x0, 0x8d9, 0x403, 0x9, 0xf, 0x8000}) (async) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="43823ac6aeb7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) (async) lsetxattr$security_capability(0x0, &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) (async) socket(0x10, 0x803, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xfc}}, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 396.342477ms ago: executing program 8 (id=2547): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast]}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000007f0000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040)="ba8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013fcffffffffffffff0007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c00068008000100"], 0x34}}, 0x0) 319.57556ms ago: executing program 2 (id=2548): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000340)=""/174, 0xae}], 0x2, 0x2, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 61.101628ms ago: executing program 6 (id=2549): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001ac0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffff50}, 0x80) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x4000000}}], 0x2, 0x2000c000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = syz_io_uring_setup(0x363, &(0x7f00000001c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400"], 0x60}}, 0x0) 0s ago: executing program 8 (id=2551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2c000}, 0x40884) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x4c}}, 0x4048000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): block_group 0 [ 462.517857][ T8450] EXT4-fs (loop6): get root inode failed [ 462.567890][ T8450] EXT4-fs (loop6): mount failed [ 463.902684][ T8490] loop4: detected capacity change from 0 to 256 [ 463.958456][ T8490] FAT-fs (loop4): Unrecognized mount option "nonumtail=" or missing value [ 464.393254][ T8505] tipc: Enabling of bearer rejected, failed to enable media [ 464.890631][ T8518] tipc: Enabling of bearer rejected, failed to enable media [ 465.192677][ T8532] loop5: detected capacity change from 0 to 128 [ 466.409489][ T4272] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 466.679551][ T4272] usb 3-1: Using ep0 maxpacket: 32 [ 466.839700][ T4272] usb 3-1: unable to get BOS descriptor or descriptor too short [ 466.959693][ T4272] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 466.967496][ T4272] usb 3-1: can't read configurations, error -71 [ 468.640483][ T8576] tipc: Enabling of bearer rejected, failed to enable media [ 468.789134][ T8582] loop4: detected capacity change from 0 to 256 [ 468.986216][ T8582] FAT-fs (loop4): Unrecognized mount option "nonumtail=" or missing value [ 470.104932][ T8608] block device autoloading is deprecated and will be removed. [ 470.269641][ T5355] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 470.388461][ T8610] loop4: detected capacity change from 0 to 256 [ 470.699726][ T5355] usb 6-1: Using ep0 maxpacket: 32 [ 470.819739][ T5355] usb 6-1: unable to get BOS descriptor or descriptor too short [ 470.909733][ T5355] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 470.934192][ T5355] usb 6-1: can't read configurations, error -71 [ 472.505193][ T8632] tipc: Enabling of bearer rejected, failed to enable media [ 473.735610][ T8654] loop4: detected capacity change from 0 to 32768 [ 473.789881][ T8654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.982 (8654) [ 473.805968][ T8654] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 473.814924][ T8654] BTRFS info (device loop4): turning on async discard [ 473.821844][ T8654] BTRFS info (device loop4): metadata ratio 0 [ 473.827966][ T8654] BTRFS info (device loop4): setting nodatasum [ 473.834251][ T8654] BTRFS info (device loop4): using free space tree [ 473.840839][ T8654] BTRFS info (device loop4): has skinny extents [ 474.326981][ T8654] BTRFS info (device loop4): enabling ssd optimizations [ 474.347711][ T8680] loop6: detected capacity change from 0 to 128 [ 477.180525][ T8691] loop6: detected capacity change from 0 to 256 [ 477.207896][ T8691] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 477.749129][ T8702] loop4: detected capacity change from 0 to 16 [ 479.379750][ T4297] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 479.416533][ T8703] loop5: detected capacity change from 0 to 256 [ 479.659714][ T4297] usb 3-1: Using ep0 maxpacket: 32 [ 480.099947][ T4297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.199778][ T4297] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 480.222247][ T4297] usb 3-1: can't read configurations, error -71 [ 480.594203][ T8703] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 480.888263][ T8709] tipc: Enabling of bearer rejected, failed to enable media [ 482.647114][ T8727] loop4: detected capacity change from 0 to 128 [ 482.820025][ T8727] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 482.915579][ T8727] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 484.762550][ T8745] loop4: detected capacity change from 0 to 256 [ 484.821376][ T8745] FAT-fs (loop4): Unrecognized mount option "nonumtail=" or missing value [ 485.615945][ T8750] loop6: detected capacity change from 0 to 128 [ 485.658079][ T8751] loop4: detected capacity change from 0 to 256 [ 485.877690][ T8750] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 485.877803][ T8750] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 492.894905][ T8792] loop5: detected capacity change from 0 to 512 [ 492.997154][ T8792] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 493.029640][ T8792] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 493.084264][ T8792] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1013: Invalid inode table block 1 in block_group 0 [ 493.190746][ T8792] EXT4-fs (loop5): get root inode failed [ 493.196736][ T8792] EXT4-fs (loop5): mount failed [ 493.515438][ T8795] tipc: Enabling of bearer rejected, failed to enable media [ 495.314650][ T8810] device syzkaller0 entered promiscuous mode [ 501.096898][ T8831] loop2: detected capacity change from 0 to 256 [ 501.150957][ T8831] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 501.403750][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.410766][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.479598][ T4236] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 501.759456][ T4236] usb 7-1: Using ep0 maxpacket: 32 [ 501.889705][ T4236] usb 7-1: unable to get BOS descriptor or descriptor too short [ 501.959519][ T4236] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 501.970547][ T4236] usb 7-1: can't read configurations, error -71 [ 502.128059][ T8839] loop2: detected capacity change from 0 to 256 [ 503.325895][ T8858] tipc: Enabling of bearer rejected, failed to enable media [ 503.540428][ T8867] device syzkaller0 entered promiscuous mode [ 509.550954][ T8914] tipc: Enabled bearer , priority 0 [ 509.576712][ T8913] tipc: Disabling bearer [ 509.587565][ T4272] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 509.870035][ T4272] usb 5-1: Using ep0 maxpacket: 32 [ 510.517872][ T8923] tipc: Enabling of bearer rejected, failed to enable media [ 510.589616][ T4272] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.659901][ T4272] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 510.667774][ T4272] usb 5-1: can't read configurations, error -71 [ 513.237778][ T8945] syz.5.1049 (8945) used greatest stack depth: 17080 bytes left [ 519.249814][ T8979] tipc: Enabling of bearer rejected, failed to enable media [ 519.579965][ T5346] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 519.929474][ T5346] usb 5-1: Using ep0 maxpacket: 32 [ 520.099715][ T5346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 520.199738][ T5346] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 520.380916][ T5346] usb 5-1: can't read configurations, error -71 [ 523.608910][ T9041] device syzkaller0 entered promiscuous mode [ 526.728424][ T9080] loop4: detected capacity change from 0 to 128 [ 527.823506][ T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 528.069840][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 528.149573][ T9103] loop4: detected capacity change from 0 to 2048 [ 528.989767][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.032733][ T9109] device syzkaller0 entered promiscuous mode [ 529.049576][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 529.102009][ T13] usb 3-1: can't read configurations, error -71 [ 529.187113][ T9103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.507271][ T9121] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 530.472186][ T9131] loop5: detected capacity change from 0 to 128 [ 533.817481][ T9165] device syzkaller0 entered promiscuous mode [ 534.557071][ T9174] loop5: detected capacity change from 0 to 2048 [ 534.620436][ T9174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.652624][ T9178] loop6: detected capacity change from 0 to 2048 [ 538.228050][ T9191] loop2: detected capacity change from 0 to 128 [ 540.509637][ T4634] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 540.764977][ T4634] usb 7-1: Using ep0 maxpacket: 32 [ 540.889665][ T4634] usb 7-1: unable to get BOS descriptor or descriptor too short [ 540.969825][ T4634] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 541.347408][ T4634] usb 7-1: can't read configurations, error -71 [ 541.600221][ T9250] loop5: detected capacity change from 0 to 256 [ 541.816544][ T9250] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 543.217598][ T9273] device syzkaller0 entered promiscuous mode [ 543.255815][ T9275] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1149'. [ 544.908969][ T9309] loop2: detected capacity change from 0 to 256 [ 545.145090][ T9309] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 545.902676][ T9322] loop2: detected capacity change from 0 to 256 [ 546.476027][ T9328] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1167'. [ 546.543215][ T9331] autofs4:pid:9331:autofs_fill_super: called with bogus options [ 549.885193][ T9368] device syzkaller0 entered promiscuous mode [ 549.891391][ T9371] loop2: detected capacity change from 0 to 256 [ 549.961078][ T9371] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 550.411685][ T9382] loop2: detected capacity change from 0 to 256 [ 551.701704][ T9407] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1193'. [ 555.459288][ T9458] device syzkaller0 entered promiscuous mode [ 556.448337][ T9472] device syzkaller0 entered promiscuous mode [ 558.954025][ T9523] device syzkaller0 entered promiscuous mode [ 558.961385][ T9521] loop5: detected capacity change from 0 to 2048 [ 559.173934][ T9521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.726359][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.739714][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.880367][ T9547] loop6: detected capacity change from 0 to 2048 [ 563.951563][ T9547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.015966][ T9560] loop5: detected capacity change from 0 to 256 [ 567.225975][ T9560] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 567.275702][ T9587] loop2: detected capacity change from 0 to 2048 [ 567.498352][ T9587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.441189][ T9593] loop5: detected capacity change from 0 to 256 [ 576.248642][ T9633] overlayfs: failed to clone lowerpath [ 576.498536][ T9648] loop2: detected capacity change from 0 to 256 [ 576.693854][ T9648] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 578.752490][ T9656] loop2: detected capacity change from 0 to 256 [ 578.958604][ T9662] overlayfs: failed to clone upperpath [ 580.561936][ T9691] device syzkaller0 entered promiscuous mode [ 580.937626][ T9711] loop6: detected capacity change from 0 to 256 [ 581.805011][ T9711] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 582.336236][ T9725] loop6: detected capacity change from 0 to 256 [ 584.061214][ T9737] device syzkaller0 entered promiscuous mode [ 585.142768][ T9745] device syzkaller0 entered promiscuous mode [ 585.356102][ T9751] loop5: detected capacity change from 0 to 2048 [ 585.431993][ T9753] overlayfs: failed to resolve './file1': -2 [ 585.641033][ T9751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 588.791500][ T9799] overlayfs: failed to resolve './file1': -2 [ 593.102571][ T9824] overlayfs: failed to clone lowerpath [ 593.404739][ T9833] device syzkaller0 entered promiscuous mode [ 597.856992][ T9870] device syzkaller0 entered promiscuous mode [ 599.716855][ T9896] overlayfs: failed to clone upperpath [ 601.531157][ T9904] overlayfs: failed to clone lowerpath [ 624.745738][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.752157][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.291494][T10120] device syzkaller0 entered promiscuous mode [ 631.246745][T10170] device syzkaller0 entered promiscuous mode [ 636.147257][T10216] device syzkaller0 entered promiscuous mode [ 638.332846][T10241] loop5: detected capacity change from 0 to 128 [ 644.316504][T10279] device syzkaller0 entered promiscuous mode [ 644.697695][T10295] loop5: detected capacity change from 0 to 128 [ 648.170762][T10314] loop5: detected capacity change from 0 to 32768 [ 648.264247][T10314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1455 (10314) [ 649.793984][T10314] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 649.802975][T10314] BTRFS info (device loop5): turning on async discard [ 649.810075][T10314] BTRFS info (device loop5): metadata ratio 0 [ 649.816237][T10314] BTRFS info (device loop5): setting nodatasum [ 649.822634][T10314] BTRFS info (device loop5): using free space tree [ 649.829179][T10314] BTRFS info (device loop5): has skinny extents [ 649.923615][T10329] device syzkaller0 entered promiscuous mode [ 649.968341][T10333] tipc: Enabling of bearer rejected, failed to enable media [ 650.002828][T10333] device syzkaller0 entered promiscuous mode [ 650.215633][T10314] BTRFS info (device loop5): enabling ssd optimizations [ 650.290207][T10359] loop2: detected capacity change from 0 to 128 [ 652.279889][ T26] audit: type=1800 audit(1779523404.588:422): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1455" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 652.300575][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.403139][T10400] device syzkaller0 entered promiscuous mode [ 655.434481][T10403] tipc: Enabling of bearer rejected, failed to enable media [ 660.354616][T10460] tipc: Enabling of bearer rejected, failed to enable media [ 660.372799][T10460] device syzkaller0 entered promiscuous mode [ 662.142982][T10477] loop6: detected capacity change from 0 to 2048 [ 662.290491][T10477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.621575][T10516] tipc: Enabling of bearer rejected, failed to enable media [ 666.991971][T10536] loop5: detected capacity change from 0 to 2048 [ 667.109376][T10536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 669.801870][T10578] loop6: detected capacity change from 0 to 256 [ 669.892979][T10580] tipc: Enabling of bearer rejected, failed to enable media [ 669.952627][T10578] FAT-fs (loop6): Directory bread(block 64) failed [ 669.973649][T10581] device syzkaller0 entered promiscuous mode [ 670.001692][T10578] FAT-fs (loop6): Directory bread(block 65) failed [ 670.056208][T10578] FAT-fs (loop6): Directory bread(block 66) failed [ 670.119681][T10578] FAT-fs (loop6): Directory bread(block 67) failed [ 670.159983][T10578] FAT-fs (loop6): Directory bread(block 68) failed [ 670.186537][T10578] FAT-fs (loop6): Directory bread(block 69) failed [ 670.198969][T10578] FAT-fs (loop6): Directory bread(block 70) failed [ 670.211622][T10578] FAT-fs (loop6): Directory bread(block 71) failed [ 670.218297][T10578] FAT-fs (loop6): Directory bread(block 72) failed [ 670.252152][T10578] FAT-fs (loop6): Directory bread(block 73) failed [ 672.596496][T10612] loop6: detected capacity change from 0 to 2048 [ 672.849351][T10612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.795577][T10637] tipc: Enabling of bearer rejected, failed to enable media [ 677.230002][T10641] device syzkaller0 entered promiscuous mode [ 680.553564][T10672] loop5: detected capacity change from 0 to 2048 [ 680.597841][T10672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.466747][T10703] tipc: Enabling of bearer rejected, failed to enable media [ 685.479198][T10703] device syzkaller0 entered promiscuous mode [ 685.622120][T10711] loop6: detected capacity change from 0 to 128 [ 685.640368][T10707] loop4: detected capacity change from 0 to 256 [ 685.681062][T10707] FAT-fs (loop4): Unrecognized mount option "nonumtail=" or missing value [ 685.712677][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.719040][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.228365][T10720] loop4: detected capacity change from 0 to 256 [ 689.344547][T10736] loop2: detected capacity change from 0 to 2048 [ 689.548407][T10736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.258153][T10744] loop5: detected capacity change from 0 to 2048 [ 691.273808][T10749] tipc: Enabling of bearer rejected, failed to enable media [ 691.298882][T10744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.805441][T10748] overlayfs: failed to clone lowerpath [ 693.023681][T10770] loop2: detected capacity change from 0 to 16 [ 694.716176][T10770] erofs: (device loop2): mounted with root inode @ nid 36. [ 695.140705][T10793] loop5: detected capacity change from 0 to 32768 [ 695.295248][T10793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1577 (10793) [ 695.385761][T10793] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 695.395793][T10793] BTRFS info (device loop5): turning on async discard [ 695.402760][T10793] BTRFS info (device loop5): metadata ratio 0 [ 695.408872][T10793] BTRFS info (device loop5): setting nodatasum [ 695.415100][T10793] BTRFS info (device loop5): using free space tree [ 695.421689][T10793] BTRFS info (device loop5): has skinny extents [ 696.614471][T10793] BTRFS info (device loop5): enabling ssd optimizations [ 697.319367][ T26] audit: type=1800 audit(1779523449.558:423): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1577" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 700.275625][T10845] loop4: detected capacity change from 0 to 8 [ 700.523601][T10845] SQUASHFS error: zlib decompression failed, data probably corrupt [ 700.532166][T10845] SQUASHFS error: Failed to read block 0x4de: -5 [ 700.539025][T10845] SQUASHFS error: Failed to read block 0x4e2: -5 [ 700.545736][T10845] SQUASHFS error: Failed to read block 0x9ca: -5 [ 700.552327][T10845] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 700.559050][T10845] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 700.565734][T10845] SQUASHFS error: Failed to read block 0x535f2: -5 [ 700.603419][ T26] audit: type=1800 audit(1779523452.908:424): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1585" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 704.300646][T10870] loop4: detected capacity change from 0 to 2048 [ 705.277917][T10870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 706.993966][T10886] loop2: detected capacity change from 0 to 256 [ 707.060796][T10886] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 707.804314][T10900] loop6: detected capacity change from 0 to 256 [ 708.850795][T10900] FAT-fs (loop6): Directory bread(block 64) failed [ 708.898202][T10900] FAT-fs (loop6): Directory bread(block 65) failed [ 708.968682][T10900] FAT-fs (loop6): Directory bread(block 66) failed [ 708.975351][T10900] FAT-fs (loop6): Directory bread(block 67) failed [ 708.982847][T10900] FAT-fs (loop6): Directory bread(block 68) failed [ 708.993791][T10900] FAT-fs (loop6): Directory bread(block 69) failed [ 709.004161][T10900] FAT-fs (loop6): Directory bread(block 70) failed [ 709.011586][T10900] FAT-fs (loop6): Directory bread(block 71) failed [ 709.018514][T10900] FAT-fs (loop6): Directory bread(block 72) failed [ 709.041079][T10900] FAT-fs (loop6): Directory bread(block 73) failed [ 709.091645][T10912] fuse: Bad value for 'fd' [ 714.039595][T10940] loop2: detected capacity change from 0 to 16 [ 715.618672][T10940] erofs: (device loop2): mounted with root inode @ nid 36. [ 715.733074][ T4205] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 717.591097][T10940] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 717.785765][ T26] audit: type=1800 audit(1779523470.118:425): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1606" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 720.939475][T10972] loop6: detected capacity change from 0 to 256 [ 721.022428][T10972] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 721.240379][T10980] loop5: detected capacity change from 0 to 8 [ 722.101240][T10979] SQUASHFS error: zlib decompression failed, data probably corrupt [ 722.109420][T10979] SQUASHFS error: Failed to read block 0x4de: -5 [ 722.116135][T10979] SQUASHFS error: Failed to read block 0x4e2: -5 [ 722.122669][T10979] SQUASHFS error: Failed to read block 0x9ca: -5 [ 722.129068][T10979] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 722.135740][T10979] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 722.142460][T10979] SQUASHFS error: Failed to read block 0x535f2: -5 [ 722.155072][ T26] audit: type=1800 audit(1779523474.488:426): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1618" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 724.680185][T11003] loop2: detected capacity change from 0 to 8 [ 725.603023][T10999] SQUASHFS error: zlib decompression failed, data probably corrupt [ 725.611118][T10999] SQUASHFS error: Failed to read block 0x4de: -5 [ 725.617910][T10999] SQUASHFS error: Failed to read block 0x4e2: -5 [ 725.624545][T10999] SQUASHFS error: Failed to read block 0x9ca: -5 [ 725.631021][T10999] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 725.637670][T10999] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 725.644367][T10999] SQUASHFS error: Failed to read block 0x535f2: -5 [ 725.653800][ T26] audit: type=1800 audit(1779523477.988:427): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1622" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 726.670198][ T5360] Bluetooth: hci4: command 0x0409 tx timeout [ 726.858768][T11020] loop6: detected capacity change from 0 to 16 [ 726.910786][T11020] erofs: (device loop6): mounted with root inode @ nid 36. [ 726.952112][T10998] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 727.007327][T11020] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 727.036842][ T26] audit: type=1800 audit(1779523479.368:428): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1628" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 728.536753][T11029] loop2: detected capacity change from 0 to 16 [ 728.914448][ T5346] Bluetooth: hci4: command 0x041b tx timeout [ 730.243302][T11029] erofs: (device loop2): mounted with root inode @ nid 36. [ 730.289594][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 730.321822][T11029] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 730.351032][ T26] audit: type=1800 audit(1779523482.688:429): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1629" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 730.824702][T11033] loop5: detected capacity change from 0 to 256 [ 730.908245][T11033] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 731.839495][T11045] loop2: detected capacity change from 0 to 16 [ 731.892036][T11045] erofs: (device loop2): mounted with root inode @ nid 36. [ 731.912037][T11045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1635'. [ 731.922059][T11045] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1635'. [ 731.944062][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 731.974905][T11045] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 732.003917][ T26] audit: type=1800 audit(1779523484.338:430): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1635" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 732.651834][ T5360] Bluetooth: hci4: command 0x040f tx timeout [ 733.672967][T10996] chnl_net:caif_netlink_parms(): no params data found [ 734.744524][T11080] loop5: detected capacity change from 0 to 256 [ 734.784052][ T4177] Bluetooth: hci4: command 0x0419 tx timeout [ 734.924868][ T4419] tipc: Left network mode [ 734.936590][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1644'. [ 734.945728][T11083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1644'. [ 734.968214][T11080] FAT-fs (loop5): Directory bread(block 64) failed [ 735.041552][T11080] FAT-fs (loop5): Directory bread(block 65) failed [ 735.048261][T11080] FAT-fs (loop5): Directory bread(block 66) failed [ 735.120987][T11094] loop6: detected capacity change from 0 to 8 [ 735.310584][T11080] FAT-fs (loop5): Directory bread(block 67) failed [ 735.323753][T11080] FAT-fs (loop5): Directory bread(block 68) failed [ 735.378032][T11080] FAT-fs (loop5): Directory bread(block 69) failed [ 735.466257][T11080] FAT-fs (loop5): Directory bread(block 70) failed [ 735.844486][T11094] SQUASHFS error: zlib decompression failed, data probably corrupt [ 735.852557][T11094] SQUASHFS error: Failed to read block 0x4de: -5 [ 735.859150][T11094] SQUASHFS error: Failed to read block 0x4e2: -5 [ 735.865618][T11094] SQUASHFS error: Failed to read block 0x9ca: -5 [ 735.872377][T11094] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 735.878880][T11094] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 735.908225][T11094] SQUASHFS error: Failed to read block 0x535f2: -5 [ 735.921311][ T26] audit: type=1800 audit(1779523488.258:431): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1643" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 735.946239][T11080] FAT-fs (loop5): Directory bread(block 71) failed [ 735.968171][T11080] FAT-fs (loop5): Directory bread(block 72) failed [ 735.990575][T10996] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.005592][T11080] FAT-fs (loop5): Directory bread(block 73) failed [ 736.118292][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.208886][T10996] device bridge_slave_0 entered promiscuous mode [ 738.499856][T10996] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.664595][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.673159][T10996] device bridge_slave_1 entered promiscuous mode [ 738.866177][T10996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.944637][T10996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.973461][T10996] team0: Port device team_slave_0 added [ 738.983913][T10996] team0: Port device team_slave_1 added [ 740.651096][T10996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.767941][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.080584][T10996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.174387][T10996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.199391][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.326791][T10996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.457079][T11158] loop5: detected capacity change from 0 to 8 [ 741.728672][T11158] SQUASHFS error: zlib decompression failed, data probably corrupt [ 741.737304][T11158] SQUASHFS error: Failed to read block 0x4de: -5 [ 741.745505][T11158] SQUASHFS error: Failed to read block 0x4e2: -5 [ 741.752598][T11158] SQUASHFS error: Failed to read block 0x9ca: -5 [ 741.759352][T11158] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 741.766748][T11158] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 741.800865][T11158] SQUASHFS error: Failed to read block 0x535f2: -5 [ 741.879660][ T26] audit: type=1800 audit(1779523494.148:432): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1656" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 741.968715][T10996] device hsr_slave_0 entered promiscuous mode [ 742.024432][T10996] device hsr_slave_1 entered promiscuous mode [ 742.065255][T10996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.073192][T10996] Cannot create hsr debugfs directory [ 742.477660][T11170] loop5: detected capacity change from 0 to 8 [ 743.682125][T11167] SQUASHFS error: zlib decompression failed, data probably corrupt [ 743.690453][T11167] SQUASHFS error: Failed to read block 0x4de: -5 [ 743.699458][T11167] SQUASHFS error: Failed to read block 0x4e2: -5 [ 743.706469][T11167] SQUASHFS error: Failed to read block 0x9ca: -5 [ 743.713029][T11167] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 743.719659][T11167] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 743.726284][T11167] SQUASHFS error: Failed to read block 0x535f2: -5 [ 743.989546][ T26] audit: type=1800 audit(1779523496.128:433): pid=11167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1659" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 746.936018][ T4419] device hsr_slave_0 left promiscuous mode [ 746.983266][ T4419] device hsr_slave_1 left promiscuous mode [ 747.029584][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.062968][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.072134][ T4419] device bridge_slave_1 left promiscuous mode [ 747.078395][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.087176][ T4419] device bridge_slave_0 left promiscuous mode [ 747.093522][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.114311][ T4419] bond2 (unregistering): (slave veth5): Releasing active interface [ 747.134258][ T4419] bond2 (unregistering): Released all slaves [ 747.178045][ T4419] bond1 (unregistering): (slave veth3): Releasing active interface [ 747.187524][ T4419] bond1 (unregistering): (slave veth3): the permanent HWaddr of slave - 06:50:7e:98:28:db - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 747.213172][ T4419] device dummy0 entered promiscuous mode [ 747.238816][ T4419] bond1 (unregistering): (slave dummy0): Releasing active interface [ 747.253797][ T4419] device dummy0 left promiscuous mode [ 747.262333][ T4419] bond1 (unregistering): Released all slaves [ 747.274893][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.303127][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.326295][T11216] loop2: detected capacity change from 0 to 256 [ 747.490271][T11216] FAT-fs (loop2): Directory bread(block 64) failed [ 747.525832][T11216] FAT-fs (loop2): Directory bread(block 65) failed [ 747.543329][T11216] FAT-fs (loop2): Directory bread(block 66) failed [ 747.580314][T11216] FAT-fs (loop2): Directory bread(block 67) failed [ 747.622837][T11216] FAT-fs (loop2): Directory bread(block 68) failed [ 747.658778][T11216] FAT-fs (loop2): Directory bread(block 69) failed [ 747.695810][T11216] FAT-fs (loop2): Directory bread(block 70) failed [ 747.726297][T11216] FAT-fs (loop2): Directory bread(block 71) failed [ 747.747828][T11216] FAT-fs (loop2): Directory bread(block 72) failed [ 747.785940][T11216] FAT-fs (loop2): Directory bread(block 73) failed [ 747.857909][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 748.054975][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 748.071901][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.098863][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.446407][ T4419] bond0 (unregistering): Released all slaves [ 748.930815][T10996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 748.958863][T10996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 748.981682][T10996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 749.280317][T10996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.034752][T11244] loop6: detected capacity change from 0 to 16 [ 750.043726][T11240] loop5: detected capacity change from 0 to 8 [ 752.023008][T11246] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 752.032337][T11246] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 752.042008][T11246] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 752.521502][T11244] erofs: (device loop6): mounted with root inode @ nid 36. [ 752.544604][T11244] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1674'. [ 752.598433][T10998] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 752.637681][T11244] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 752.666757][ T26] audit: type=1800 audit(1779523504.998:434): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1674" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 752.981327][T11240] SQUASHFS error: zlib decompression failed, data probably corrupt [ 752.989520][T11240] SQUASHFS error: Failed to read block 0x4de: -5 [ 753.012289][ T26] audit: type=1800 audit(1779523505.328:435): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1673" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 753.334192][T10996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.353438][T10996] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.362916][T11256] loop2: detected capacity change from 0 to 8 [ 753.406814][T10996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 753.417602][T10996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.438032][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 753.619051][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 753.627920][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 753.664747][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 753.677454][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.684636][T10249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.739052][T11255] SQUASHFS error: zlib decompression failed, data probably corrupt [ 753.747444][T11255] SQUASHFS error: Failed to read block 0x4de: -5 [ 753.763937][T11255] SQUASHFS error: Failed to read block 0x4e2: -5 [ 753.770500][T11255] SQUASHFS error: Failed to read block 0x9ca: -5 [ 753.776955][T11255] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 753.783671][T11255] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 753.791218][T11255] SQUASHFS error: Failed to read block 0x535f2: -5 [ 753.802454][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 753.809954][ T26] audit: type=1800 audit(1779523506.128:436): pid=11255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1675" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 753.832783][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 753.858064][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.865241][T10249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.889816][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 753.914438][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 753.945199][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 754.074765][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 754.085102][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 754.094249][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 754.104097][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 754.130952][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 754.150186][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 754.172165][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.204017][T11266] loop6: detected capacity change from 0 to 256 [ 754.232179][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 754.259821][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 754.301258][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 754.320760][T11266] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 755.486106][T11285] loop5: detected capacity change from 0 to 256 [ 755.597617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 755.612491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 755.655402][T10996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.247073][T11285] FAT-fs (loop5): Directory bread(block 64) failed [ 756.315587][T11302] loop6: detected capacity change from 0 to 256 [ 756.359991][T11285] FAT-fs (loop5): Directory bread(block 65) failed [ 756.400669][T11285] FAT-fs (loop5): Directory bread(block 66) failed [ 756.676644][T11285] FAT-fs (loop5): Directory bread(block 67) failed [ 757.190721][T11285] FAT-fs (loop5): Directory bread(block 68) failed [ 757.353567][T11285] FAT-fs (loop5): Directory bread(block 69) failed [ 757.409614][T11285] FAT-fs (loop5): Directory bread(block 70) failed [ 757.501860][T11285] FAT-fs (loop5): Directory bread(block 71) failed [ 757.519707][T11285] FAT-fs (loop5): Directory bread(block 72) failed [ 758.466842][T11285] FAT-fs (loop5): Directory bread(block 73) failed [ 758.639757][T11313] loop6: detected capacity change from 0 to 4096 [ 758.704397][T11321] loop2: detected capacity change from 0 to 256 [ 758.854650][T11313] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 758.930940][T11321] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 759.406817][T11333] loop2: detected capacity change from 0 to 256 [ 760.367488][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 760.503627][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 760.857634][T10996] device veth0_vlan entered promiscuous mode [ 761.294782][T11349] blktrace: Concurrent blktraces are not allowed on loop12 [ 761.756005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 761.813981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 761.890331][T10996] device veth1_vlan entered promiscuous mode [ 762.036533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 762.054798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 762.114685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 762.157725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 762.325149][T10996] device veth0_macvtap entered promiscuous mode [ 762.688033][T10996] device veth1_macvtap entered promiscuous mode [ 762.887318][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 762.991713][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 763.208319][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.270305][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.701040][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.742023][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.763865][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.786038][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.805782][T10996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.909436][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 763.942796][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 763.977739][T11382] loop2: detected capacity change from 0 to 256 [ 764.002839][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.044357][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.075102][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.116604][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.137032][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.279309][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.954058][T11382] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 764.990687][T10996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.007484][T10996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.213882][T10996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.222963][T10996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.232238][T10996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.052097][T11392] loop2: detected capacity change from 0 to 256 [ 766.721211][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 766.751411][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 767.106219][T11405] blktrace: Concurrent blktraces are not allowed on loop12 [ 768.839159][T10227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.861445][T11421] overlayfs: failed to clone lowerpath [ 768.887370][T10227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.973780][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 768.999009][T10249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.050942][T10249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.330441][T11431] blktrace: Concurrent blktraces are not allowed on loop2 [ 769.724458][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 770.376748][T11432] loop5: detected capacity change from 0 to 16 [ 770.517066][T11432] erofs: (device loop5): mounted with root inode @ nid 36. [ 770.545072][T11432] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1713'. [ 771.194640][ T26] audit: type=1800 audit(1779523523.278:437): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1713" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 771.223865][T10998] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 772.482964][T11451] loop6: detected capacity change from 0 to 256 [ 772.509017][T11445] loop5: detected capacity change from 0 to 4096 [ 772.565031][T11449] loop7: detected capacity change from 0 to 2048 [ 772.608045][T11451] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 772.749657][T11460] loop2: detected capacity change from 0 to 16 [ 775.663548][T11445] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 775.833561][T11460] erofs: (device loop2): mounted with root inode @ nid 36. [ 775.879812][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 775.975450][T11460] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 776.004170][ T26] audit: type=1800 audit(1779523528.338:438): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1719" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 776.537741][T11472] loop2: detected capacity change from 0 to 16 [ 778.614893][T11472] erofs: (device loop2): mounted with root inode @ nid 36. [ 778.646234][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 778.677303][T11472] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 778.707017][ T26] audit: type=1800 audit(1779523531.038:439): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1722" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 782.663988][T11497] loop2: detected capacity change from 0 to 16 [ 782.756418][T11498] overlayfs: failed to clone upperpath [ 782.804750][T11497] erofs: (device loop2): mounted with root inode @ nid 36. [ 782.845746][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 782.877179][T11497] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 782.911943][ T26] audit: type=1800 audit(1779523535.248:440): pid=11497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1726" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 783.481833][T11499] loop6: detected capacity change from 0 to 128 [ 783.574649][T11492] loop5: detected capacity change from 0 to 16 [ 783.794854][T11492] erofs: (device loop5): mounted with root inode @ nid 36. [ 783.905189][T11508] loop7: detected capacity change from 0 to 16 [ 783.952731][T11508] erofs: (device loop7): mounted with root inode @ nid 36. [ 783.983733][T10998] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 784.018987][T11508] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 784.049759][ T26] audit: type=1800 audit(1779523536.378:441): pid=11508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1731" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 784.713621][T10998] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 784.737150][T11494] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 784.865814][ T26] audit: type=1800 audit(1779523537.098:442): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1727" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 785.549814][T11521] loop5: detected capacity change from 0 to 8 [ 785.765977][T11522] loop2: detected capacity change from 0 to 16 [ 785.789196][T11522] erofs: (device loop2): mounted with root inode @ nid 36. [ 786.002002][T11518] SQUASHFS error: zlib decompression failed, data probably corrupt [ 786.010238][T11518] SQUASHFS error: Failed to read block 0x4de: -5 [ 786.019941][T11518] SQUASHFS error: Failed to read block 0x4e2: -5 [ 786.027176][T11518] SQUASHFS error: Failed to read block 0x9ca: -5 [ 786.033948][T11518] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 786.040599][T11518] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 786.047491][T11518] SQUASHFS error: Failed to read block 0x535f2: -5 [ 786.057075][ T26] audit: type=1800 audit(1779523538.388:443): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1732" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 786.079810][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 786.117741][T11522] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 786.405931][ T26] audit: type=1800 audit(1779523538.478:444): pid=11522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1742" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 790.297560][T11539] loop7: detected capacity change from 0 to 16 [ 790.317502][T11539] erofs: (device loop7): mounted with root inode @ nid 36. [ 791.711819][T11545] loop2: detected capacity change from 0 to 16 [ 791.812442][T11557] loop7: detected capacity change from 0 to 8 [ 791.847471][T11545] erofs: (device loop2): mounted with root inode @ nid 36. [ 791.902587][T11557] SQUASHFS error: zlib decompression failed, data probably corrupt [ 791.910887][T11557] SQUASHFS error: Failed to read block 0x4de: -5 [ 791.919085][T11557] SQUASHFS error: Failed to read block 0x4e2: -5 [ 791.926893][T11557] SQUASHFS error: Failed to read block 0x9ca: -5 [ 791.933968][T11557] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 791.941095][T11557] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 791.970798][T11557] SQUASHFS error: Failed to read block 0x535f2: -5 [ 792.011161][ T26] audit: type=1800 audit(1779523544.348:445): pid=11557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1738" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 793.740267][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 793.792139][T11545] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 793.815928][ T26] audit: type=1800 audit(1779523546.148:446): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1735" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 800.901492][T11607] loop5: detected capacity change from 0 to 16 [ 801.010731][T11611] loop2: detected capacity change from 0 to 16 [ 801.080974][T11607] erofs: (device loop5): mounted with root inode @ nid 36. [ 801.176387][T11616] loop7: detected capacity change from 0 to 256 [ 801.270801][T11608] loop6: detected capacity change from 0 to 16 [ 801.451230][T11616] FAT-fs (loop7): Unrecognized mount option "nonumtail=" or missing value [ 801.472462][T10998] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 801.506147][T11611] erofs: (device loop2): mounted with root inode @ nid 36. [ 801.519137][T11602] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 801.542581][ T26] audit: type=1800 audit(1779523553.878:447): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1751" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 801.566647][T11608] erofs: (device loop6): mounted with root inode @ nid 36. [ 801.645766][T10998] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 801.671024][T11608] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 801.694336][ T26] audit: type=1800 audit(1779523554.028:448): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1752" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 801.720077][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 801.746150][T11611] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 801.770018][ T26] audit: type=1800 audit(1779523554.108:449): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1753" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 802.089301][T11624] loop7: detected capacity change from 0 to 256 [ 803.420797][T11636] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1759'. [ 803.848622][T11645] loop6: detected capacity change from 0 to 16 [ 803.869670][T11645] erofs: (device loop6): mounted with root inode @ nid 36. [ 804.797149][T11646] loop5: detected capacity change from 0 to 16 [ 805.982434][T11647] loop7: detected capacity change from 0 to 16 [ 806.000811][T11646] erofs: (device loop5): mounted with root inode @ nid 36. [ 806.377912][T11651] loop2: detected capacity change from 0 to 16 [ 806.431208][T11651] erofs: (device loop2): mounted with root inode @ nid 36. [ 806.458449][T10998] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 806.493453][T11651] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 806.522635][ T26] audit: type=1800 audit(1779523558.858:450): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1771" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 807.275910][T11647] erofs: (device loop7): mounted with root inode @ nid 36. [ 808.592146][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.598560][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.509377][T11672] loop6: detected capacity change from 0 to 16 [ 809.528611][T11672] erofs: (device loop6): mounted with root inode @ nid 36. [ 809.560944][T10998] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 809.817891][T11672] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 809.847521][ T26] audit: type=1800 audit(1779523562.178:451): pid=11672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1764" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 810.541094][T11685] loop2: detected capacity change from 0 to 256 [ 810.549957][T11685] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 811.640022][T11690] loop5: detected capacity change from 0 to 16 [ 811.686896][T11690] erofs: (device loop5): mounted with root inode @ nid 36. [ 814.222815][T11717] loop5: detected capacity change from 0 to 8 [ 814.973386][T11718] loop7: detected capacity change from 0 to 16 [ 817.517397][T11729] loop5: detected capacity change from 0 to 16 [ 818.481612][T11729] erofs: (device loop5): mounted with root inode @ nid 36. [ 818.516145][T10998] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 818.551551][T11729] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 818.580543][ T26] audit: type=1800 audit(1779523570.918:452): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1778" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 822.319384][ T4236] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 822.579519][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 822.923657][ T4236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 822.999542][ T4236] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 823.709773][ T4236] usb 3-1: can't read configurations, error -71 [ 828.329399][ T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 828.625853][T11824] device syzkaller0 entered promiscuous mode [ 828.780651][T11828] futex_wake_op: syz.1.1801 tries to shift op by 32; fix this program [ 830.429372][ T4718] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 830.669339][ T4718] usb 3-1: Using ep0 maxpacket: 32 [ 831.399445][ T4718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 831.472350][ T4718] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 831.480380][ T4718] usb 3-1: can't read configurations, error -71 [ 831.778299][T11879] futex_wake_op: syz.6.1814 tries to shift op by 32; fix this program [ 831.851499][T11886] loop6: detected capacity change from 0 to 16 [ 831.974923][T11886] erofs: (device loop6): mounted with root inode @ nid 36. [ 832.026875][T11886] attempt to access beyond end of device [ 832.026875][T11886] loop6: rw=524288, want=12304, limit=16 [ 832.039576][T11886] attempt to access beyond end of device [ 832.039576][T11886] loop6: rw=524288, want=1072, limit=16 [ 832.054337][T11886] attempt to access beyond end of device [ 832.054337][T11886] loop6: rw=0, want=12304, limit=16 [ 832.159380][ T26] audit: type=1800 audit(1779523584.398:453): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1814" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 833.219931][T11901] fuse: Unknown parameter 'group_id00000000000000000000' [ 833.512641][T11907] overlayfs: failed to clone upperpath [ 833.925992][ T4237] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 834.205170][ T4237] usb 8-1: Using ep0 maxpacket: 32 [ 834.298977][T11918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1825'. [ 834.440940][ T4237] usb 8-1: unable to get BOS descriptor or descriptor too short [ 835.349391][ T4237] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 835.357017][ T4237] usb 8-1: can't read configurations, error -71 [ 835.487413][T11948] fuse: Unknown parameter 'group_id00000000000000000000' [ 836.659728][T11965] overlayfs: failed to clone upperpath [ 837.282855][T11984] loop2: detected capacity change from 0 to 16 [ 837.379641][T11984] erofs: (device loop2): mounted with root inode @ nid 36. [ 837.417196][T11978] attempt to access beyond end of device [ 837.417196][T11978] loop2: rw=524288, want=12304, limit=16 [ 837.432419][T11978] attempt to access beyond end of device [ 837.432419][T11978] loop2: rw=524288, want=1072, limit=16 [ 837.445115][T11978] attempt to access beyond end of device [ 837.445115][T11978] loop2: rw=0, want=12304, limit=16 [ 837.462315][T11987] futex_wake_op: syz.1.1839 tries to shift op by 32; fix this program [ 837.479751][ T26] audit: type=1800 audit(1779523589.818:454): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1840" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 839.589555][ T7] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 839.764562][T12018] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 839.879986][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 839.889392][ T4272] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 840.139474][ T4272] usb 6-1: Using ep0 maxpacket: 32 [ 840.144820][T12039] futex_wake_op: syz.7.1857 tries to shift op by 32; fix this program [ 840.169673][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 840.282204][T12043] loop7: detected capacity change from 0 to 16 [ 840.291305][ T4718] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 840.393886][T12043] erofs: (device loop7): mounted with root inode @ nid 36. [ 840.440758][T12043] attempt to access beyond end of device [ 840.440758][T12043] loop7: rw=524288, want=12304, limit=16 [ 840.452864][T12043] attempt to access beyond end of device [ 840.452864][T12043] loop7: rw=524288, want=1072, limit=16 [ 840.465998][T12043] attempt to access beyond end of device [ 840.465998][T12043] loop7: rw=0, want=12304, limit=16 [ 840.509273][ T26] audit: type=1800 audit(1779523592.808:455): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1857" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 840.699762][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 841.367213][ T7] usb 7-1: can't read configurations, error -71 [ 841.374077][ T4718] usb 3-1: Using ep0 maxpacket: 32 [ 841.538084][ T4718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 841.624271][ T4718] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 841.639851][ T4718] usb 3-1: can't read configurations, error -71 [ 842.139400][ T7] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 842.529319][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 842.529725][ T4272] usb 6-1: unable to get BOS descriptor or descriptor too short [ 842.549015][T12069] futex_wake_op: syz.2.1862 tries to shift op by 32; fix this program [ 842.669890][T12070] loop2: detected capacity change from 0 to 16 [ 842.897706][T12070] erofs: (device loop2): mounted with root inode @ nid 36. [ 842.948301][T12070] attempt to access beyond end of device [ 842.948301][T12070] loop2: rw=524288, want=12304, limit=16 [ 842.960311][T12070] attempt to access beyond end of device [ 842.960311][T12070] loop2: rw=524288, want=1072, limit=16 [ 842.973072][T12070] attempt to access beyond end of device [ 842.973072][T12070] loop2: rw=0, want=12304, limit=16 [ 843.014516][ T26] audit: type=1800 audit(1779523595.318:456): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1862" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 843.759509][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 843.769352][ T4272] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 843.840295][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 843.848085][ T7] usb 7-1: can't read configurations, error -71 [ 843.888353][ T7] usb usb7-port1: attempt power cycle [ 844.610905][ T4272] usb 6-1: can't read configurations, error -71 [ 844.710595][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1868'. [ 846.426345][T12122] overlayfs: overlapping lowerdir path [ 846.463708][T12120] overlayfs: overlapping lowerdir path [ 847.143365][T12150] futex_wake_op: syz.1.1881 tries to shift op by 32; fix this program [ 848.686452][T12144] futex_wake_op: syz.7.1884 tries to shift op by 32; fix this program [ 848.762910][T12165] loop7: detected capacity change from 0 to 16 [ 848.832654][T12165] erofs: (device loop7): mounted with root inode @ nid 36. [ 848.844085][T12165] attempt to access beyond end of device [ 848.844085][T12165] loop7: rw=524288, want=12304, limit=16 [ 848.855454][T12165] attempt to access beyond end of device [ 848.855454][T12165] loop7: rw=524288, want=1072, limit=16 [ 848.867815][T12165] attempt to access beyond end of device [ 848.867815][T12165] loop7: rw=0, want=12304, limit=16 [ 848.929431][ T26] audit: type=1800 audit(1779523601.218:457): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1884" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 849.358147][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1886'. [ 849.949799][T12206] overlayfs: overlapping lowerdir path [ 850.671098][T12225] device syzkaller0 entered promiscuous mode [ 850.849611][T12234] loop2: detected capacity change from 0 to 256 [ 850.923119][T12234] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 853.134303][ T4236] Bluetooth: hci4: command 0x0406 tx timeout [ 853.512151][T12252] loop2: detected capacity change from 0 to 256 [ 853.559694][T12257] device syzkaller0 entered promiscuous mode [ 853.568790][T12252] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 855.154457][T12268] device syzkaller0 entered promiscuous mode [ 856.297957][T12278] loop5: detected capacity change from 0 to 256 [ 856.358112][T12281] tipc: Enabled bearer , priority 0 [ 856.380858][T12278] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 856.405384][T12281] device syzkaller0 entered promiscuous mode [ 856.603375][T12288] overlayfs: failed to clone upperpath [ 856.677103][T12281] tipc: Resetting bearer [ 856.727891][T12280] tipc: Resetting bearer [ 856.950109][T12280] tipc: Disabling bearer [ 857.076792][T12298] loop5: detected capacity change from 0 to 256 [ 857.109325][T12300] device syzkaller0 entered promiscuous mode [ 857.360708][T12307] overlayfs: overlapping lowerdir path [ 858.123803][T12332] loop2: detected capacity change from 0 to 256 [ 858.220963][T12332] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 858.525007][T12343] loop2: detected capacity change from 0 to 256 [ 858.940851][T12354] device syzkaller0 entered promiscuous mode [ 859.370261][T12360] tipc: Enabled bearer , priority 0 [ 859.387962][T12360] device syzkaller0 entered promiscuous mode [ 859.441409][T12360] tipc: Resetting bearer [ 859.487817][T12359] tipc: Resetting bearer [ 859.537797][T12359] tipc: Disabling bearer [ 859.830251][T12373] device syzkaller0 entered promiscuous mode [ 861.294381][T12403] device syzkaller0 entered promiscuous mode [ 861.459468][T11804] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 861.573308][T12409] loop5: detected capacity change from 0 to 256 [ 861.625427][T12409] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 861.854039][T11804] usb 7-1: Using ep0 maxpacket: 32 [ 861.950334][T12413] loop5: detected capacity change from 0 to 256 [ 861.983043][T11804] usb 7-1: unable to get BOS descriptor or descriptor too short [ 862.059395][T11804] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 862.067207][T11804] usb 7-1: can't read configurations, error -71 [ 862.553954][T12426] tipc: Enabled bearer , priority 0 [ 862.610526][T12429] device syzkaller0 entered promiscuous mode [ 862.722952][T12426] tipc: Resetting bearer [ 862.876351][T12425] tipc: Resetting bearer [ 862.985863][T12425] tipc: Disabling bearer [ 863.438535][ T319] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.932708][ T4237] Bluetooth: hci2: command 0x0409 tx timeout [ 865.994958][T12472] loop5: detected capacity change from 0 to 256 [ 866.061833][ T319] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.138161][T12472] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 867.650533][T12486] loop5: detected capacity change from 0 to 256 [ 867.959474][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 868.088112][ T319] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.298966][ T319] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.521562][T12433] chnl_net:caif_netlink_parms(): no params data found [ 869.012279][T12433] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.019600][T12433] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.031019][T12433] device bridge_slave_0 entered promiscuous mode [ 869.043583][T12516] device syzkaller0 entered promiscuous mode [ 869.056894][T12433] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.067890][T12433] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.079593][T12433] device bridge_slave_1 entered promiscuous mode [ 869.215751][T12526] loop6: detected capacity change from 0 to 256 [ 869.238866][T12528] overlayfs: failed to clone lowerpath [ 869.286092][T12433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.326966][T12526] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 869.538651][T12433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.033318][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 870.050354][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.060591][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.667458][T12539] loop6: detected capacity change from 0 to 512 [ 871.298915][T12539] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 871.566943][T12433] team0: Port device team_slave_0 added [ 871.576615][T12433] team0: Port device team_slave_1 added [ 871.582937][T12539] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.639658][T12546] tipc: Enabled bearer , priority 0 [ 871.688976][T12433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.796222][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.967052][T12433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.058814][T12546] tipc: Disabling bearer [ 872.082939][ T26] audit: type=1107 audit(1779523624.408:458): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 872.439694][ T5458] Bluetooth: hci2: command 0x0419 tx timeout [ 872.631394][T12433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.699898][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.889547][T12568] overlayfs: overlapping lowerdir path [ 873.812292][T12433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.006374][T12574] tipc: Enabling of bearer rejected, failed to enable media [ 874.059047][T12433] device hsr_slave_0 entered promiscuous mode [ 874.127663][T12433] device hsr_slave_1 entered promiscuous mode [ 874.134821][T12433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.187085][T12433] Cannot create hsr debugfs directory [ 874.193774][T12578] tipc: Enabled bearer , priority 0 [ 874.238980][T12587] device syzkaller0 entered promiscuous mode [ 874.287930][T12578] tipc: Resetting bearer [ 874.345935][T12575] tipc: Resetting bearer [ 874.407067][T12575] tipc: Disabling bearer [ 874.420967][T12598] overlayfs: failed to clone lowerpath [ 876.194369][T12623] loop6: detected capacity change from 0 to 256 [ 877.141175][T12623] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 877.458205][ T319] device hsr_slave_0 left promiscuous mode [ 878.280162][T12647] loop6: detected capacity change from 0 to 256 [ 878.331015][T12650] overlayfs: failed to clone lowerpath [ 878.422837][ T319] device hsr_slave_1 left promiscuous mode [ 878.447855][ T319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.504477][ T319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.626083][ T319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.636785][ T319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.660261][ T319] device bridge_slave_1 left promiscuous mode [ 878.666546][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.720260][ T319] device bridge_slave_0 left promiscuous mode [ 878.726759][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.777015][ T319] device veth1_macvtap left promiscuous mode [ 878.793496][ T319] device veth0_macvtap left promiscuous mode [ 878.809793][ T319] device veth1_vlan left promiscuous mode [ 878.824376][ T319] device veth0_vlan left promiscuous mode [ 880.010028][ T319] team0 (unregistering): Port device team_slave_1 removed [ 880.027419][ T319] team0 (unregistering): Port device team_slave_0 removed [ 880.186860][ T319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.205335][ T319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.347072][ T319] bond0 (unregistering): Released all slaves [ 880.469172][T12433] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 880.667899][T12683] overlayfs: failed to clone lowerpath [ 880.717455][T12433] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 880.781743][T12433] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 880.852224][T12433] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 880.935889][T12692] loop6: detected capacity change from 0 to 512 [ 881.309754][T12692] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 881.605443][T12692] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.411198][ T26] audit: type=1107 audit(1779523634.738:459): pid=12690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 882.752706][T12433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.921892][T12433] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.059463][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 883.067425][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 883.160892][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 883.184259][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 883.192592][T12728] loop6: detected capacity change from 0 to 512 [ 883.233462][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.240625][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.267503][T12728] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 883.297859][T12728] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 883.317547][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 883.328401][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 883.347168][T12728] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2011: Invalid inode table block 1 in block_group 0 [ 883.361262][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.368353][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.372331][T12728] EXT4-fs (loop6): get root inode failed [ 883.389552][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 883.409688][T12728] EXT4-fs (loop6): mount failed [ 883.511283][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 883.527265][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 883.551387][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 883.599014][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 883.668597][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 883.888089][T12433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 883.898560][T12433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 883.922485][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 883.959130][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 884.250396][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 884.289869][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 884.342863][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 884.365050][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 884.397317][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 884.447659][T12750] tipc: Enabling of bearer rejected, failed to enable media [ 884.670253][T12750] device syzkaller0 entered promiscuous mode [ 884.942805][T10788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.951151][T10788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 885.029458][T12433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.054486][T12768] loop2: detected capacity change from 0 to 512 [ 885.124440][T12768] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 885.189075][T12768] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 885.256227][T12768] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.2017: Invalid inode table block 1 in block_group 0 [ 885.332615][T12768] EXT4-fs (loop2): get root inode failed [ 885.338349][T12768] EXT4-fs (loop2): mount failed [ 886.111271][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 886.135732][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 886.228461][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 886.248731][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 886.282372][T12433] device veth0_vlan entered promiscuous mode [ 886.292498][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 886.340021][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 886.389341][T12433] device veth1_vlan entered promiscuous mode [ 886.444245][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 886.477201][T12801] overlayfs: failed to clone lowerpath [ 886.549082][T12433] device veth0_macvtap entered promiscuous mode [ 886.567401][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 886.588813][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 886.615611][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 886.628183][T12433] device veth1_macvtap entered promiscuous mode [ 886.705138][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.732733][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.759645][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.789345][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.813629][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.847249][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.890772][T12433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.932204][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.970811][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.011469][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.069591][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.110517][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.279759][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.423557][T12433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.551263][T12810] tipc: Enabled bearer , priority 0 [ 887.558268][T12811] device syzkaller0 entered promiscuous mode [ 887.626376][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 887.652383][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 887.711836][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 887.773216][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 887.820313][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 887.873357][T12433] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.902972][T12433] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.928311][T12433] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.970868][T12433] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.028436][T12815] tipc: Resetting bearer [ 888.075804][T12815] tipc: Disabling bearer [ 888.813741][ T8993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.871536][ T8993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.144197][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 889.408186][T12856] loop6: detected capacity change from 0 to 256 [ 889.488888][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.539195][T12856] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 889.565983][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.613179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 889.873492][T12858] loop6: detected capacity change from 0 to 256 [ 890.077392][T12872] device syzkaller0 entered promiscuous mode [ 890.340579][T12879] tipc: Enabling of bearer rejected, failed to enable media [ 891.698875][T12899] loop8: detected capacity change from 0 to 512 [ 891.785235][T12899] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 892.227067][T12907] tipc: Enabled bearer , priority 0 [ 892.235021][T12907] device syzkaller0 entered promiscuous mode [ 892.241544][T12899] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 892.265746][T12899] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.2041: Invalid inode table block 1 in block_group 0 [ 892.339434][T12899] EXT4-fs (loop8): get root inode failed [ 892.345140][T12899] EXT4-fs (loop8): mount failed [ 892.378683][T12907] tipc: Resetting bearer [ 892.456511][T12903] tipc: Resetting bearer [ 892.555240][T12903] tipc: Disabling bearer [ 893.826782][T12938] loop2: detected capacity change from 0 to 256 [ 893.852986][T12938] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 896.754663][T12966] overlayfs: missing 'lowerdir' [ 901.531178][T13030] overlayfs: missing 'lowerdir' [ 902.388124][T13039] loop2: detected capacity change from 0 to 256 [ 902.498278][T13039] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 906.191029][T13089] overlayfs: missing 'lowerdir' [ 907.184771][T13091] tipc: Enabled bearer , priority 0 [ 907.217284][T13091] device syzkaller0 entered promiscuous mode [ 907.309020][T13091] tipc: Resetting bearer [ 907.365557][T13087] tipc: Resetting bearer [ 907.461090][T13087] tipc: Disabling bearer [ 908.068975][T13110] loop5: detected capacity change from 0 to 128 [ 911.057939][T13153] overlayfs: missing 'lowerdir' [ 911.851675][T13154] tipc: Started in network mode [ 911.856627][T13154] tipc: Node identity c663d23c9f91, cluster identity 4711 [ 911.867964][T13158] loop5: detected capacity change from 0 to 256 [ 911.902017][T13158] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 911.923088][T13154] tipc: Enabled bearer , priority 0 [ 912.219842][T13161] loop5: detected capacity change from 0 to 256 [ 912.259871][T13160] tipc: Disabling bearer [ 913.337106][T13186] loop6: detected capacity change from 0 to 128 [ 914.908990][T13207] loop8: detected capacity change from 0 to 128 [ 915.182787][T13213] tipc: Enabled bearer , priority 0 [ 915.207717][T13216] loop6: detected capacity change from 0 to 256 [ 915.220124][T13213] device syzkaller0 entered promiscuous mode [ 915.492886][T13213] tipc: Resetting bearer [ 915.929376][T13211] tipc: Resetting bearer [ 915.984076][T13211] tipc: Disabling bearer [ 916.249917][T13216] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 917.043660][T13249] overlayfs: missing 'lowerdir' [ 917.352937][T13264] loop2: detected capacity change from 0 to 128 [ 917.684991][T13267] tipc: Enabling of bearer rejected, failed to enable media [ 920.191123][T13314] loop8: detected capacity change from 0 to 128 [ 920.820747][T13325] tipc: Enabled bearer , priority 0 [ 920.874553][T13320] device syzkaller0 entered promiscuous mode [ 920.952285][T13320] tipc: Resetting bearer [ 920.987714][T13319] tipc: Resetting bearer [ 921.039825][T13319] tipc: Disabling bearer [ 921.465610][T13342] loop6: detected capacity change from 0 to 256 [ 921.756155][T13342] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 923.034147][T13372] overlayfs: missing 'lowerdir' [ 923.417484][T13381] tipc: Enabling of bearer rejected, failed to enable media [ 923.632247][T13385] loop5: detected capacity change from 0 to 128 [ 924.068352][T13400] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 926.073591][T13414] loop8: detected capacity change from 0 to 128 [ 928.196350][T13435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 928.205483][T13435] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 930.364415][T13455] tipc: Enabling of bearer rejected, failed to enable media [ 930.509485][T13460] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 931.484236][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.493586][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.600497][T13481] loop8: detected capacity change from 0 to 256 [ 931.671103][T13481] FAT-fs (loop8): Unrecognized mount option "shname=win95" or missing value [ 931.695066][T13484] loop2: detected capacity change from 0 to 512 [ 931.977388][T13484] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 932.179352][ T26] audit: type=1107 audit(1779523684.328:460): pid=13479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 932.400480][T13484] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 932.439382][T13484] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.2172: Invalid inode table block 1 in block_group 0 [ 932.486158][T13484] EXT4-fs (loop2): get root inode failed [ 932.493775][T13484] EXT4-fs (loop2): mount failed [ 933.704154][T13530] loop8: detected capacity change from 0 to 128 [ 933.962088][T13532] device syzkaller0 entered promiscuous mode [ 935.082131][T13539] loop5: detected capacity change from 0 to 512 [ 935.340233][T13539] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 935.684142][T13539] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.100849][T13562] loop6: detected capacity change from 0 to 256 [ 936.162730][T13562] FAT-fs (loop6): Unrecognized mount option "shname=win95" or missing value [ 936.607566][ T26] audit: type=1107 audit(1779523688.938:461): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 937.369543][ T26] audit: type=1107 audit(1779523689.358:462): pid=13535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 937.626159][ T26] audit: type=1800 audit(1779523689.438:463): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2183" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 938.070559][T13583] loop6: detected capacity change from 0 to 128 [ 939.438453][T13614] loop2: detected capacity change from 0 to 512 [ 939.522575][T13614] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 939.611531][T13614] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.587943][T13652] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 941.597044][T13652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 942.364372][T13680] loop2: detected capacity change from 0 to 128 [ 944.063654][T13708] loop2: detected capacity change from 0 to 128 [ 945.359262][T13718] overlayfs: missing 'lowerdir' [ 949.301516][T13781] loop2: detected capacity change from 0 to 128 [ 949.540616][T13783] overlayfs: missing 'lowerdir' [ 952.440937][T13823] loop2: detected capacity change from 0 to 2048 [ 952.679396][T13823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 958.620639][T13896] loop5: detected capacity change from 0 to 2048 [ 958.687914][T13905] loop2: detected capacity change from 0 to 128 [ 958.828028][T13908] overlayfs: missing 'lowerdir' [ 959.381490][T13896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 962.028660][T13937] device syzkaller0 entered promiscuous mode [ 964.387536][T13959] loop8: detected capacity change from 0 to 128 [ 964.585453][T13969] overlayfs: missing 'workdir' [ 966.028424][T13989] overlayfs: failed to resolve './file1': -2 [ 968.345629][T14010] loop8: detected capacity change from 0 to 128 [ 971.082186][T14030] loop5: detected capacity change from 0 to 128 [ 971.292163][T14033] overlayfs: missing 'workdir' [ 972.588665][T14045] overlayfs: failed to clone upperpath [ 972.847156][T14050] overlayfs: missing 'workdir' [ 974.657810][T14060] overlayfs: failed to resolve './file1': -2 [ 975.493621][T14065] loop2: detected capacity change from 0 to 128 [ 977.804348][T14092] loop2: detected capacity change from 0 to 128 [ 978.414743][T14100] loop8: detected capacity change from 0 to 128 [ 981.256816][T14117] loop6: detected capacity change from 0 to 128 [ 983.092076][T14122] loop8: detected capacity change from 0 to 2048 [ 983.213431][T14122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.723818][T14137] loop6: detected capacity change from 0 to 256 [ 983.753587][T14137] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 984.345504][T14142] loop5: detected capacity change from 0 to 128 [ 986.925702][T14159] loop6: detected capacity change from 0 to 128 [ 990.532969][T14196] device syzkaller0 entered promiscuous mode [ 991.229450][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 992.816934][T14213] overlayfs: failed to clone lowerpath [ 992.914659][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.922265][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.037225][T14230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2346'. [ 993.306394][T14242] loop6: detected capacity change from 0 to 128 [ 996.650269][T14268] loop6: detected capacity change from 0 to 128 [ 997.565642][T14282] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2359'. [ 1000.228235][T14313] loop2: detected capacity change from 0 to 128 [ 1001.557579][T14321] tipc: Enabled bearer , priority 0 [ 1001.597089][T14321] device syzkaller0 entered promiscuous mode [ 1001.676790][T14321] tipc: Resetting bearer [ 1001.928465][T14320] tipc: Resetting bearer [ 1002.220149][T14330] loop8: detected capacity change from 0 to 128 [ 1002.887782][T14320] tipc: Disabling bearer [ 1007.686766][T14358] loop6: detected capacity change from 0 to 128 [ 1007.764516][T14362] tipc: Enabled bearer , priority 0 [ 1007.821018][T14366] device syzkaller0 entered promiscuous mode [ 1007.881372][T14362] tipc: Resetting bearer [ 1008.307845][T14356] tipc: Resetting bearer [ 1008.840237][T14356] tipc: Disabling bearer [ 1010.366199][T14382] loop8: detected capacity change from 0 to 256 [ 1011.850584][T14382] FAT-fs (loop8): Unrecognized mount option "nonumtail=" or missing value [ 1012.450372][T14401] loop8: detected capacity change from 0 to 256 [ 1020.815821][T14454] loop8: detected capacity change from 0 to 128 [ 1020.962293][T14457] overlayfs: failed to clone upperpath [ 1023.954202][T14470] overlayfs: failed to clone lowerpath [ 1025.333225][T14491] loop2: detected capacity change from 0 to 128 [ 1025.577308][T14493] loop8: detected capacity change from 0 to 256 [ 1025.811246][T14493] FAT-fs (loop8): Unrecognized mount option "nonumtail=" or missing value [ 1026.667520][T14498] loop8: detected capacity change from 0 to 256 [ 1037.467633][T14575] loop6: detected capacity change from 0 to 128 [ 1038.457038][T14581] loop2: detected capacity change from 0 to 128 [ 1040.314261][T14591] loop2: detected capacity change from 0 to 256 [ 1042.176041][T14591] FAT-fs (loop2): Unrecognized mount option "nonumtail=" or missing value [ 1042.851431][T14604] loop2: detected capacity change from 0 to 256 [ 1043.014373][T14606] loop5: detected capacity change from 0 to 256 [ 1043.791295][T14606] FAT-fs (loop5): Unrecognized mount option "nonumtail=" or missing value [ 1044.348680][T14616] loop6: detected capacity change from 0 to 128 [ 1044.462029][T14617] loop5: detected capacity change from 0 to 256 [ 1046.583198][T14628] loop5: detected capacity change from 0 to 128 [ 1049.983562][T14631] chnl_net:caif_netlink_parms(): no params data found [ 1050.029907][ T4234] Bluetooth: hci1: command 0x0409 tx timeout [ 1050.248702][T14631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.261653][T14631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.276446][T14631] device bridge_slave_0 entered promiscuous mode [ 1050.292464][T14631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.309308][T14631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.327474][T14668] loop6: detected capacity change from 0 to 256 [ 1050.338772][T14631] device bridge_slave_1 entered promiscuous mode [ 1050.405437][T14631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.421076][T14668] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 1050.481192][T14631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.806048][T14631] team0: Port device team_slave_0 added [ 1050.911309][T14679] loop6: detected capacity change from 0 to 256 [ 1051.647686][T14631] team0: Port device team_slave_1 added [ 1051.870824][T14631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.900648][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.406834][T14631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.698673][T14631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.815010][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.883580][ T4718] Bluetooth: hci1: command 0x041b tx timeout [ 1052.925666][T14631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.979357][T14631] device hsr_slave_0 entered promiscuous mode [ 1053.009098][T14631] device hsr_slave_1 entered promiscuous mode [ 1053.047421][T14631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.061456][T14631] Cannot create hsr debugfs directory [ 1053.187407][T14672] loop8: detected capacity change from 0 to 32768 [ 1053.231676][T14687] loop6: detected capacity change from 0 to 256 [ 1053.308057][T14687] FAT-fs (loop6): Unrecognized mount option "nonumtail=" or missing value [ 1053.771725][T14687] loop6: detected capacity change from 0 to 256 [ 1053.804081][T14367] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop8 scanned by udevd (14367) [ 1054.367778][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.381105][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.575959][T14631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.946560][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 1056.577958][T14631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.639097][T14631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.004999][T14733] loop5: detected capacity change from 0 to 128 [ 1059.610672][ T4177] Bluetooth: hci1: command 0x0419 tx timeout [ 1059.848314][T14631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1059.901405][T14631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1059.918376][T14631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1059.944961][T14631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1060.625395][T14631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.749654][T14631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.818505][ T4234] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1060.959389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.972239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.984455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1061.004316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1061.019887][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.030848][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.043058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.054172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.069450][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 1061.089123][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.098538][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.111199][T14759] FAULT_INJECTION: forcing a failure. [ 1061.111199][T14759] name failslab, interval 1, probability 0, space 0, times 1 [ 1061.158537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.204308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.219967][ T4234] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 1061.235736][T14759] CPU: 0 PID: 14759 Comm: syz.8.2486 Not tainted syzkaller #0 [ 1061.247769][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1061.266093][T14759] Call Trace: [ 1061.273292][T14759] [ 1061.276875][T14759] dump_stack_lvl+0x188/0x250 [ 1061.285806][T14759] ? show_regs_print_info+0x20/0x20 [ 1061.293466][T14759] ? load_image+0x400/0x400 [ 1061.301453][T14759] ? __lock_acquire+0x7d10/0x7d10 [ 1061.310069][T14759] should_fail+0x38c/0x4c0 [ 1061.318645][T14759] should_failslab+0x5/0x20 [ 1061.329203][T14759] slab_pre_alloc_hook+0x51/0xc0 [ 1061.338268][T14759] __kmalloc+0x6b/0x330 [ 1061.344886][T14759] ? __se_sys_memfd_create+0x142/0x450 [ 1061.353384][T14759] ? strnlen_user+0x19b/0x250 [ 1061.363430][T14759] __se_sys_memfd_create+0x142/0x450 [ 1061.372267][T14759] ? lock_chain_count+0x20/0x20 [ 1061.379897][T14759] ? __x64_sys_memfd_create+0x60/0x60 [ 1061.386877][T14759] ? lockdep_hardirqs_on+0x94/0x140 [ 1061.393693][T14759] do_syscall_64+0x4c/0xa0 [ 1061.399113][T14759] ? clear_bhb_loop+0x30/0x80 [ 1061.405190][T14759] ? clear_bhb_loop+0x30/0x80 [ 1061.412916][T14759] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1061.423297][T14759] RIP: 0033:0x7f8dc94aee59 [ 1061.430184][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.459617][T14759] RSP: 002b:00007f8dc7707e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1061.471204][T14759] RAX: ffffffffffffffda RBX: 0000000000021136 RCX: 00007f8dc94aee59 [ 1061.482715][T14759] RDX: 00007f8dc7707ee0 RSI: 0000000000000000 RDI: 00007f8dc9544f4f [ 1061.495046][T14759] RBP: 0000200000021200 R08: 00000000ffffffff R09: 0000000000000000 [ 1061.506838][T14759] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000021180 [ 1061.518626][T14759] R13: 00007f8dc7707ee0 R14: 00007f8dc7707ea0 R15: 00002000000211c0 [ 1061.527174][T14759] [ 1061.552840][ T4234] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1061.571209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.587457][ T4234] usb 3-1: config 0 has no interface number 0 [ 1061.598609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.612137][ T4234] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1061.633060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.655964][ T4234] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1061.687274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.710413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.726858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.764152][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.812297][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.857978][T14631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.861076][ T4234] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1061.908078][T14631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1061.928271][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.954019][ T4234] usb 3-1: Product: syz [ 1061.962684][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1061.971644][ T4234] usb 3-1: Manufacturer: syz [ 1061.980570][ T4234] usb 3-1: SerialNumber: syz [ 1062.010737][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.050384][ T4234] usb 3-1: config 0 descriptor?? [ 1062.109686][T14742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1062.163889][T14742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1062.469478][T14742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1062.512630][T14742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1062.624258][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.656409][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1062.714457][T14778] loop6: detected capacity change from 0 to 4096 [ 1062.756449][T14631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.769431][ T4234] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1062.799843][ T4234] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1062.888765][ T4234] asix: probe of 3-1:0.251 failed with error -5 [ 1062.908285][T10788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1062.965356][ T4234] usb 3-1: USB disconnect, device number 20 [ 1062.978530][T10788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1063.068247][T14778] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1063.111264][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1063.148429][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1063.236365][T14631] device veth0_vlan entered promiscuous mode [ 1063.267635][T14778] ntfs3: loop6: Failed to load $Extend. [ 1063.280236][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1063.340585][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1063.453569][T14631] device veth1_vlan entered promiscuous mode [ 1063.508919][T14781] loop2: detected capacity change from 0 to 1024 [ 1063.611440][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1063.640635][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1063.734999][T14631] device veth0_macvtap entered promiscuous mode [ 1063.746423][T14779] ntfs3: Cannot use different iocharset when remounting! [ 1063.783119][T14631] device veth1_macvtap entered promiscuous mode [ 1063.883437][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.956631][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.011026][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.074393][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.094951][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.215504][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.268427][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.283348][T14774] loop8: detected capacity change from 0 to 32768 [ 1064.329907][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.394587][T14631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.433874][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.573535][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.640902][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.665367][T14774] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1064.677161][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.719759][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.759272][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.906110][T14774] dlm: no local IP address has been set [ 1064.931661][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.061897][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.121600][T14774] dlm: cannot start dlm midcomms -107 [ 1065.197588][T14631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.219598][T14774] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1065.348394][T14787] loop5: detected capacity change from 0 to 16 [ 1065.385275][T14787] erofs: (device loop5): mounted with root inode @ nid 36. [ 1065.511680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1065.622457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1065.732331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1065.850420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1065.966427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1066.033414][T14793] loop6: detected capacity change from 0 to 128 [ 1066.087141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1066.120909][T14631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.189202][T14631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.226108][T14631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.271833][T14631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.218297][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.362127][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.482516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1067.525788][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.568058][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.702244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1068.053637][T14819] loop8: detected capacity change from 0 to 21 [ 1068.064450][T14818] loop1: detected capacity change from 0 to 128 [ 1068.190676][T14819] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1069.616526][T14802] loop2: detected capacity change from 0 to 32768 [ 1071.554848][T14846] openvswitch: netlink: Actions may not be safe on all matching packets [ 1071.633187][T14850] loop6: detected capacity change from 0 to 512 [ 1071.757740][T14850] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1072.077101][T14850] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1072.212535][T14850] Quota error (device loop6): write_blk: dquota write failed [ 1072.249215][T14850] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1072.339871][T14867] FAULT_INJECTION: forcing a failure. [ 1072.339871][T14867] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1072.359698][T14850] Quota error (device loop6): write_blk: dquota write failed [ 1072.379367][T14867] CPU: 0 PID: 14867 Comm: syz.2.2513 Not tainted syzkaller #0 [ 1072.391604][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1072.410140][T14867] Call Trace: [ 1072.415594][T14867] [ 1072.420265][T14867] dump_stack_lvl+0x188/0x250 [ 1072.433461][T14867] ? show_regs_print_info+0x20/0x20 [ 1072.440478][T14867] ? load_image+0x400/0x400 [ 1072.447789][T14867] ? __lock_acquire+0x7d10/0x7d10 [ 1072.455406][T14867] should_fail+0x38c/0x4c0 [ 1072.465243][T14867] _copy_from_user+0x2e/0x170 [ 1072.475859][T14867] __copy_msghdr_from_user+0xc9/0x630 [ 1072.484677][T14867] ? verify_lock_unused+0x140/0x140 [ 1072.492419][T14867] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1072.505161][T14867] ___sys_sendmsg+0x19a/0x2e0 [ 1072.513253][T14867] ? __sys_sendmsg+0x2a0/0x2a0 [ 1072.520588][T14867] ? vfs_write+0x8b2/0xd60 [ 1072.529417][T14867] __se_sys_sendmsg+0x1af/0x290 [ 1072.538628][T14867] ? __x64_sys_sendmsg+0x80/0x80 [ 1072.550273][T14867] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1072.562798][T14867] ? lockdep_hardirqs_on+0x94/0x140 [ 1072.571378][T14867] do_syscall_64+0x4c/0xa0 [ 1072.578531][T14867] ? clear_bhb_loop+0x30/0x80 [ 1072.585970][T14867] ? clear_bhb_loop+0x30/0x80 [ 1072.593061][T14867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1072.603436][T14867] RIP: 0033:0x7f79ab23ce59 [ 1072.610663][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.646216][T14867] RSP: 002b:00007f79a9496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.658339][T14867] RAX: ffffffffffffffda RBX: 00007f79ab4b5fa0 RCX: 00007f79ab23ce59 [ 1072.669897][T14867] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1072.680855][T14850] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1072.681633][T14867] RBP: 00007f79a9496090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.681655][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.681671][T14867] R13: 00007f79ab4b6038 R14: 00007f79ab4b5fa0 R15: 00007ffe67ae65e8 [ 1072.739374][T14867] [ 1072.747419][T14850] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2509: Failed to acquire dquot type 1 [ 1072.922000][T14850] EXT4-fs (loop6): 1 truncate cleaned up [ 1072.940884][T14850] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,norecovery,quota,resuid=0x0000000000000000,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1072.964363][T14874] loop5: detected capacity change from 0 to 21 [ 1073.082130][T14878] FAULT_INJECTION: forcing a failure. [ 1073.082130][T14878] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.134944][T14878] CPU: 0 PID: 14878 Comm: syz.2.2517 Not tainted syzkaller #0 [ 1073.147349][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1073.167526][T14878] Call Trace: [ 1073.173791][T14878] [ 1073.175848][T14846] Quota error (device loop6): write_blk: dquota write failed [ 1073.180076][T14878] dump_stack_lvl+0x188/0x250 [ 1073.180121][T14878] ? show_regs_print_info+0x20/0x20 [ 1073.180145][T14878] ? load_image+0x400/0x400 [ 1073.180172][T14878] ? __might_sleep+0xf0/0xf0 [ 1073.180275][T14878] ? __lock_acquire+0x7d10/0x7d10 [ 1073.180300][T14878] ? __lock_acquire+0x7d10/0x7d10 [ 1073.180326][T14878] should_fail+0x38c/0x4c0 [ 1073.240682][T14846] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1073.245622][T14878] should_failslab+0x5/0x20 [ 1073.289780][T14878] slab_pre_alloc_hook+0x51/0xc0 [ 1073.301160][T14878] ? __sys_setsockopt+0x2bf/0x3d0 [ 1073.310109][T14846] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2509: Failed to acquire dquot type 1 [ 1073.311008][T14878] __kmalloc_track_caller+0x69/0x330 [ 1073.311043][T14878] ? __sys_setsockopt+0x2bf/0x3d0 [ 1073.347758][T14878] sctp_setsockopt+0x7d/0xf80 [ 1073.353702][T14878] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1073.363456][T14878] __sys_setsockopt+0x2bf/0x3d0 [ 1073.371579][T14878] __x64_sys_setsockopt+0xb1/0xc0 [ 1073.379656][T14878] do_syscall_64+0x4c/0xa0 [ 1073.386583][T14878] ? clear_bhb_loop+0x30/0x80 [ 1073.393110][T14878] ? clear_bhb_loop+0x30/0x80 [ 1073.401549][T14878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1073.411686][T14878] RIP: 0033:0x7f79ab23ce59 [ 1073.420103][T14878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.449993][T14878] RSP: 002b:00007f79a9496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1073.467365][T14878] RAX: ffffffffffffffda RBX: 00007f79ab4b5fa0 RCX: 00007f79ab23ce59 [ 1073.478585][T14878] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 1073.490347][T14880] loop8: detected capacity change from 0 to 128 [ 1073.491546][T14878] RBP: 00007f79a9496090 R08: 0000000000000008 R09: 0000000000000000 [ 1073.514964][T14878] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 1073.526756][T14878] R13: 00007f79ab4b6038 R14: 00007f79ab4b5fa0 R15: 00007ffe67ae65e8 [ 1073.539543][T14878] [ 1073.546814][T14874] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1073.736447][ T4634] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1073.848457][T14883] loop2: detected capacity change from 0 to 736 [ 1073.954933][T14886] loop5: detected capacity change from 0 to 128 [ 1075.239319][ T4634] usb 2-1: config 8 has too many interfaces: 33, using maximum allowed: 32 [ 1075.349608][ T4634] usb 2-1: config 8 has an invalid interface number: 33 but max is 32 [ 1075.499615][ T4634] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 33 [ 1075.599509][ T4634] usb 2-1: config 8 has no interface number 0 [ 1075.668573][ T4634] usb 2-1: too many endpoints for config 8 interface 33 altsetting 7: 85, using maximum allowed: 30 [ 1075.725670][ T4634] usb 2-1: config 8 interface 33 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 85 [ 1075.788697][ T4634] usb 2-1: config 8 interface 33 has no altsetting 0 [ 1075.993226][ T4634] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 1076.026987][T14912] FAULT_INJECTION: forcing a failure. [ 1076.026987][T14912] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.069448][ T4634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.097992][ T4634] usb 2-1: Product: syz [ 1076.126718][T14912] CPU: 0 PID: 14912 Comm: syz.5.2528 Not tainted syzkaller #0 [ 1076.140751][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1076.162213][T14912] Call Trace: [ 1076.168231][T14912] [ 1076.174617][T14912] dump_stack_lvl+0x188/0x250 [ 1076.182422][T14912] ? show_regs_print_info+0x20/0x20 [ 1076.191242][T14912] ? load_image+0x400/0x400 [ 1076.198721][T14912] ? __lock_acquire+0x7d10/0x7d10 [ 1076.209933][T14912] should_fail+0x38c/0x4c0 [ 1076.217274][T14912] should_failslab+0x5/0x20 [ 1076.226413][T14912] slab_pre_alloc_hook+0x51/0xc0 [ 1076.236539][T14912] __kmalloc+0x6b/0x330 [ 1076.244454][T14912] ? __se_sys_memfd_create+0x142/0x450 [ 1076.253419][T14912] ? strnlen_user+0x19b/0x250 [ 1076.259763][T14912] __se_sys_memfd_create+0x142/0x450 [ 1076.267731][T14912] ? lock_chain_count+0x20/0x20 [ 1076.276996][T14912] ? __x64_sys_memfd_create+0x60/0x60 [ 1076.285226][T14912] ? lockdep_hardirqs_on+0x94/0x140 [ 1076.295399][T14912] do_syscall_64+0x4c/0xa0 [ 1076.303264][T14912] ? clear_bhb_loop+0x30/0x80 [ 1076.310833][T14912] ? clear_bhb_loop+0x30/0x80 [ 1076.319379][T14912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1076.327624][T14912] RIP: 0033:0x7fb6eaa9fe59 [ 1076.337983][T14912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.370881][T14912] RSP: 002b:00007fb6e8cf8e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1076.383617][T14912] RAX: ffffffffffffffda RBX: 000000000000020e RCX: 00007fb6eaa9fe59 [ 1076.397886][T14912] RDX: 00007fb6e8cf8ee0 RSI: 0000000000000000 RDI: 00007fb6eab35f4f [ 1076.412436][T14912] RBP: 0000200000000400 R08: 00000000ffffffff R09: 0000000000000000 [ 1076.428953][T14912] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 1076.441525][T14912] R13: 00007fb6e8cf8ee0 R14: 00007fb6e8cf8ea0 R15: 00002000000002c0 [ 1076.453345][T14912] [ 1076.484276][ T4634] usb 2-1: Manufacturer: syz [ 1076.505168][ T4634] usb 2-1: SerialNumber: syz [ 1076.682918][ T4634] usb 2-1: can't set config #8, error -71 [ 1078.427258][ T4634] usb 2-1: USB disconnect, device number 6 [ 1078.707647][T14929] loop2: detected capacity change from 0 to 256 [ 1078.725611][T14928] loop1: detected capacity change from 0 to 736 [ 1078.748457][T14927] loop5: detected capacity change from 0 to 1024 [ 1078.792252][T14931] loop8: detected capacity change from 0 to 128 [ 1078.815295][T14929] FAT-fs (loop2): Unrecognized mount option "dots" or missing value [ 1079.545728][T14934] loop6: detected capacity change from 0 to 2048 [ 1079.693399][T14938] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1079.956156][T14934] loop6: p1 < > p3 p4 < > [ 1080.120862][T14934] loop6: partition table partially beyond EOD, truncated [ 1080.252018][T14934] loop6: p1 start 262144 is beyond EOD, truncated [ 1080.367022][T14946] loop8: detected capacity change from 0 to 1024 [ 1080.381930][T14934] loop6: p3 start 33554432 is beyond EOD, truncated [ 1080.496918][T14946] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 1080.626951][T14946] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1080.689088][T14946] FAULT_INJECTION: forcing a failure. [ 1080.689088][T14946] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.733689][T14946] CPU: 1 PID: 14946 Comm: syz.8.2538 Not tainted syzkaller #0 [ 1080.749444][T14946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1080.766781][T14946] Call Trace: [ 1080.773144][T14946] [ 1080.778327][T14946] dump_stack_lvl+0x188/0x250 [ 1080.784719][T14946] ? show_regs_print_info+0x20/0x20 [ 1080.791653][T14946] ? load_image+0x400/0x400 [ 1080.802933][T14946] ? __might_sleep+0xf0/0xf0 [ 1080.812208][T14946] ? __lock_acquire+0x7d10/0x7d10 [ 1080.821934][T14946] should_fail+0x38c/0x4c0 [ 1080.830618][T14946] should_failslab+0x5/0x20 [ 1080.840086][T14946] slab_pre_alloc_hook+0x51/0xc0 [ 1080.846817][T14946] ? getname_flags+0xb5/0x500 [ 1080.855844][T14946] kmem_cache_alloc+0x3d/0x290 [ 1080.867104][T14946] getname_flags+0xb5/0x500 [ 1080.877318][T14946] __se_sys_quotactl+0x1dd/0x6f0 [ 1080.886470][T14946] ? __x64_sys_quotactl+0xa0/0xa0 [ 1080.894841][T14946] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1080.913528][T14946] ? lock_chain_count+0x20/0x20 [ 1080.927402][T14946] ? vtime_user_exit+0x2c8/0x3e0 [ 1080.936734][T14946] ? lockdep_hardirqs_on+0x94/0x140 [ 1080.945050][T14946] do_syscall_64+0x4c/0xa0 [ 1080.952026][T14946] ? clear_bhb_loop+0x30/0x80 [ 1080.961544][T14946] ? clear_bhb_loop+0x30/0x80 [ 1080.975400][T14946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1080.986248][T14946] RIP: 0033:0x7f8dc94aee59 [ 1080.995678][T14946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.038852][T14946] RSP: 002b:00007f8dc7708028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1081.052523][T14946] RAX: ffffffffffffffda RBX: 00007f8dc9727fa0 RCX: 00007f8dc94aee59 [ 1081.067649][T14946] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffff80000601 [ 1081.081491][T14946] RBP: 00007f8dc7708090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.097110][T14946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.111635][T14946] R13: 00007f8dc9728038 R14: 00007f8dc9727fa0 R15: 00007ffcac6589d8 [ 1081.125155][T14946] [ 1081.222035][T14962] openvswitch: netlink: Actions may not be safe on all matching packets [ 1081.428520][T14962] loop1: detected capacity change from 0 to 512 [ 1081.477628][T14191] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1081.720079][ T26] audit: type=1800 audit(1779523833.988:464): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2552" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1081.824830][T14962] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1081.940098][T14191] usb 3-1: config 8 has too many interfaces: 33, using maximum allowed: 32 [ 1082.571328][T14191] usb 3-1: config 8 has an invalid interface number: 33 but max is 32 [ 1082.636341][T14191] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 33 [ 1082.757400][T14972] FAULT_INJECTION: forcing a failure. [ 1082.757400][T14972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.793482][T14972] CPU: 0 PID: 14972 Comm: syz.5.2544 Not tainted syzkaller #0 [ 1082.806015][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1082.824032][T14972] Call Trace: [ 1082.828971][T14972] [ 1082.829354][T14191] usb 3-1: config 8 has no interface number 0 [ 1082.835483][T14972] dump_stack_lvl+0x188/0x250 [ 1082.835528][T14972] ? show_regs_print_info+0x20/0x20 [ 1082.835552][T14972] ? load_image+0x400/0x400 [ 1082.835584][T14972] ? __lock_acquire+0x7d10/0x7d10 [ 1082.884511][T14972] should_fail+0x38c/0x4c0 [ 1082.893073][T14972] _copy_from_user+0x2e/0x170 [ 1082.900563][T14972] __copy_msghdr_from_user+0xc9/0x630 [ 1082.911632][T14972] ? verify_lock_unused+0x140/0x140 [ 1082.917702][T14972] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1082.926113][T14972] ___sys_sendmsg+0x19a/0x2e0 [ 1082.933683][T14972] ? __sys_sendmsg+0x2a0/0x2a0 [ 1082.940658][T14972] ? vfs_write+0x8b2/0xd60 [ 1082.943273][T14191] usb 3-1: too many endpoints for config 8 interface 33 altsetting 7: 85, using maximum allowed: 30 [ 1082.948413][T14972] __se_sys_sendmsg+0x1af/0x290 [ 1082.972843][T14972] ? __x64_sys_sendmsg+0x80/0x80 [ 1082.979410][T14972] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1082.989665][T14972] ? lockdep_hardirqs_on+0x94/0x140 [ 1082.997119][T14972] do_syscall_64+0x4c/0xa0 [ 1083.004062][T14972] ? clear_bhb_loop+0x30/0x80 [ 1083.010059][T14972] ? clear_bhb_loop+0x30/0x80 [ 1083.020114][T14972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1083.030331][T14972] RIP: 0033:0x7fb6eaa9fe59 [ 1083.040690][T14972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.079664][T14972] RSP: 002b:00007fb6e8cf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.097096][T14972] RAX: ffffffffffffffda RBX: 00007fb6ead18fa0 RCX: 00007fb6eaa9fe59 [ 1083.110446][T14972] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1083.122030][T14972] RBP: 00007fb6e8cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.133017][T14972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.151802][T14972] R13: 00007fb6ead19038 R14: 00007fb6ead18fa0 R15: 00007fff5a579018 [ 1083.166862][T14972] [ 1083.189292][T14191] usb 3-1: config 8 interface 33 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 85 [ 1083.219091][T14962] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1083.257291][T14962] Quota error (device loop1): write_blk: dquota write failed [ 1083.271263][T14962] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1083.285019][T14962] Quota error (device loop1): write_blk: dquota write failed [ 1083.357157][T14962] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1083.438226][T14746] udevd[14746]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1083.448066][T14962] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2541: Failed to acquire dquot type 1 [ 1083.479701][T14191] usb 3-1: config 8 interface 33 has no altsetting 0 [ 1083.599872][T14191] usb 3-1: string descriptor 0 read error: -71 [ 1083.615514][T14962] EXT4-fs (loop1): 1 truncate cleaned up [ 1083.649370][T14962] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,norecovery,quota,resuid=0x0000000000000000,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1083.680004][T14191] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 1083.728634][T14993] loop2: detected capacity change from 0 to 128 [ 1083.933897][T14996] loop6: detected capacity change from 0 to 512 [ 1083.971474][T14191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.149415][T14962] Quota error (device loop1): write_blk: dquota write failed [ 1084.207868][T14996] [ 1084.215666][T14996] ====================================================== [ 1084.227328][T14996] WARNING: possible circular locking dependency detected [ 1084.245343][T14996] syzkaller #0 Not tainted [ 1084.251488][T14996] ------------------------------------------------------ [ 1084.261341][T14996] syz.6.2549/14996 is trying to acquire lock: [ 1084.269792][T14996] ffff8880674dec58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 1084.290754][T14996] [ 1084.290754][T14996] but task is already holding lock: [ 1084.306907][T14996] ffff88804bc76e70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 1084.316673][T14962] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1084.323901][T14996] [ 1084.323901][T14996] which lock already depends on the new lock. [ 1084.323901][T14996] [ 1084.323915][T14996] [ 1084.323915][T14996] the existing dependency chain (in reverse order) is: [ 1084.323923][T14996] [ 1084.323923][T14996] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1084.323959][T14996] down_write+0x38/0x60 [ 1084.370742][T14191] usb 3-1: can't set config #8, error -71 [ 1084.383732][T14996] ext4_destroy_inline_data+0x24/0xe0 [ 1084.383768][T14996] ext4_writepages+0x670/0x2df0 [ 1084.383800][T14996] do_writepages+0x476/0x6e0 [ 1084.383903][T14996] filemap_fdatawrite_wbc+0x1eb/0x240 [ 1084.383941][T14996] file_write_and_wait_range+0x14d/0x220 [ 1084.383965][T14996] ext4_sync_file+0x1ff/0xae0 [ 1084.384015][T14996] ext4_buffered_write_iter+0x338/0x3b0 [ 1084.384051][T14996] ext4_file_write_iter+0x74d/0x1700 [ 1084.526781][T14996] do_iter_readv_writev+0x47e/0x5f0 [ 1084.536079][T14996] do_iter_write+0x205/0x7b0 [ 1084.548297][T14996] do_pwritev+0x240/0x3a0 [ 1084.548407][T14191] usb 3-1: USB disconnect, device number 21 [ 1084.559204][T14996] do_syscall_64+0x4c/0xa0 [ 1084.559242][T14996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1084.559420][T14996] [ 1084.559420][T14996] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 1084.604269][T14996] __lock_acquire+0x2c42/0x7d10 [ 1084.615197][T14996] lock_acquire+0x19e/0x400 [ 1084.624218][T14996] percpu_down_read+0x46/0x1b0 [ 1084.632139][T14996] ext4_writepages+0x20f/0x2df0 [ 1084.641555][T14996] do_writepages+0x476/0x6e0 [ 1084.649517][T14996] __writeback_single_inode+0x153/0xda0 [ 1084.653964][T14962] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2541: Failed to acquire dquot type 1 [ 1084.660017][T14996] writeback_single_inode+0x3cb/0x8e0 [ 1084.660053][T14996] write_inode_now+0x23b/0x2c0 [ 1084.660070][T14996] iput+0x5ab/0x8a0 [ 1084.660118][T14996] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 1084.729912][T14996] ext4_xattr_block_set+0x4fd/0x2d20 [ 1084.743059][T14996] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 1084.754825][T14996] __ext4_expand_extra_isize+0x301/0x3e0 [ 1084.766123][T14996] __ext4_mark_inode_dirty+0x469/0x700 [ 1084.777708][T14996] ext4_evict_inode+0xa8d/0x1090 [ 1084.790510][T14996] evict+0x4c9/0x8d0 [ 1084.800340][T14996] ext4_orphan_cleanup+0xad2/0x1320 [ 1084.813665][T14996] ext4_fill_super+0x8d6e/0x94f0 [ 1084.826669][T14996] mount_bdev+0x287/0x3c0 [ 1084.834500][T14996] legacy_get_tree+0xe6/0x180 [ 1084.844766][T14996] vfs_get_tree+0x88/0x270 [ 1084.858479][T14996] do_new_mount+0x24a/0xa40 [ 1084.870839][T14996] __se_sys_mount+0x2e3/0x3d0 [ 1084.880129][T14996] do_syscall_64+0x4c/0xa0 [ 1084.888912][T14996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1084.901225][T14996] [ 1084.901225][T14996] other info that might help us debug this: [ 1084.901225][T14996] [ 1084.915429][T14996] Possible unsafe locking scenario: [ 1084.915429][T14996] [ 1084.934445][T14996] CPU0 CPU1 [ 1084.947998][T14996] ---- ---- [ 1084.955575][T14996] lock(&ei->xattr_sem); [ 1084.961467][T14996] lock(&sbi->s_writepages_rwsem); [ 1084.978048][T14996] lock(&ei->xattr_sem); [ 1084.999296][T14996] lock(&sbi->s_writepages_rwsem); [ 1085.008766][T14996] [ 1085.008766][T14996] *** DEADLOCK *** [ 1085.008766][T14996] [ 1085.024907][T14996] 3 locks held by syz.6.2549/14996: [ 1085.032879][T14996] #0: ffff8880674dc0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 1085.054605][T14996] #1: ffff8880674dc650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 1085.077601][T14996] #2: ffff88804bc76e70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 1085.095506][T14996] [ 1085.095506][T14996] stack backtrace: [ 1085.108379][T14996] CPU: 0 PID: 14996 Comm: syz.6.2549 Not tainted syzkaller #0 [ 1085.123185][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.143151][T14996] Call Trace: [ 1085.150101][T14996] [ 1085.154142][T14996] dump_stack_lvl+0x188/0x250 [ 1085.166868][T14996] ? load_image+0x400/0x400 [ 1085.175996][T14996] ? show_regs_print_info+0x20/0x20 [ 1085.185146][T14996] ? print_circular_bug+0x12b/0x1a0 [ 1085.195926][T14996] check_noncircular+0x296/0x330 [ 1085.202701][T14996] ? look_up_lock_class+0x71/0x110 [ 1085.212554][T14996] ? add_chain_block+0x940/0x940 [ 1085.224976][T14996] ? lockdep_lock+0xf1/0x1f0 [ 1085.234010][T14996] ? mark_lock+0x94/0x320 [ 1085.243839][T14996] __lock_acquire+0x2c42/0x7d10 [ 1085.253123][T14996] ? mark_lock+0x94/0x320 [ 1085.258669][T14996] ? verify_lock_unused+0x140/0x140 [ 1085.267709][T14996] ? verify_lock_unused+0x140/0x140 [ 1085.278760][T14996] ? __lock_acquire+0x13bc/0x7d10 [ 1085.295935][T14996] ? 0xffffffffa006a000 [ 1085.301343][T14996] lock_acquire+0x19e/0x400 [ 1085.308739][T14996] ? ext4_writepages+0x20f/0x2df0 [ 1085.317022][T14996] ? check_noncircular+0x189/0x330 [ 1085.328557][T14996] ? __might_sleep+0xf0/0xf0 [ 1085.335995][T14996] ? read_lock_is_recursive+0x10/0x10 [ 1085.348150][T14996] ? mark_lock+0x94/0x320 [ 1085.359250][T14996] ? __lock_acquire+0x13bc/0x7d10 [ 1085.368685][T14996] percpu_down_read+0x46/0x1b0 [ 1085.379323][T14996] ? ext4_writepages+0x20f/0x2df0 [ 1085.391317][T14996] ext4_writepages+0x20f/0x2df0 [ 1085.399814][T14996] ? rcu_is_watching+0x11/0xa0 [ 1085.407317][T14996] ? lock_release+0xb5/0x8a0 [ 1085.416400][T14996] ? rcu_lock_release+0x5/0x20 [ 1085.424435][T14996] ? verify_lock_unused+0x140/0x140 [ 1085.433407][T14996] ? mark_lock+0x94/0x320 [ 1085.439241][T14996] ? ext4_readpage+0x2e0/0x2e0 [ 1085.446402][T14996] ? __lock_acquire+0x13bc/0x7d10 [ 1085.452740][T14996] ? rcu_lock_release+0x5/0x20 [ 1085.459914][T14996] ? __lock_acquire+0x7d10/0x7d10 [ 1085.469339][T14996] ? do_raw_spin_lock+0x128/0x2f0 [ 1085.478063][T14996] ? do_raw_spin_unlock+0x11d/0x230 [ 1085.487397][T14996] ? ext4_readpage+0x2e0/0x2e0 [ 1085.496827][T14996] do_writepages+0x476/0x6e0 [ 1085.508482][T14996] ? __writepage+0x130/0x130 [ 1085.519140][T14996] ? writeback_single_inode+0x3c0/0x8e0 [ 1085.530215][T14996] ? __lock_acquire+0x7d10/0x7d10 [ 1085.539522][T14996] ? do_raw_spin_lock+0x128/0x2f0 [ 1085.547616][T14996] __writeback_single_inode+0x153/0xda0 [ 1085.559591][T14996] writeback_single_inode+0x3cb/0x8e0 [ 1085.568906][T14996] ? write_inode_now+0x2c0/0x2c0 [ 1085.575491][T14996] write_inode_now+0x23b/0x2c0 [ 1085.581911][T14996] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 1085.593369][T14996] ? do_raw_spin_unlock+0x11d/0x230 [ 1085.603793][T14996] iput+0x5ab/0x8a0 [ 1085.610053][T14996] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 1085.620784][T14996] ? ext4_xattr_ibody_set+0x330/0x330 [ 1085.629798][T14996] ? rcu_is_watching+0x11/0xa0 [ 1085.639596][T14996] ? kmem_cache_free+0x14c/0x210 [ 1085.657843][T14996] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 1085.671599][T14996] ext4_xattr_block_set+0x4fd/0x2d20 [ 1085.686990][T14996] ? ext4_get_inode_loc+0x120/0x120 [ 1085.695240][T14996] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 1085.705853][T14996] ? ext4_xattr_block_find+0x500/0x500 [ 1085.716426][T14996] ? ext4_xattr_block_find+0x433/0x500 [ 1085.725209][T14996] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 1085.734722][T14996] __ext4_expand_extra_isize+0x301/0x3e0 [ 1085.744856][T14996] __ext4_mark_inode_dirty+0x469/0x700 [ 1085.755616][T14996] ext4_evict_inode+0xa8d/0x1090 [ 1085.763110][T14996] ? _raw_spin_unlock+0x24/0x40 [ 1085.772924][T14996] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1085.783205][T14996] ? do_raw_spin_unlock+0x11d/0x230 [ 1085.791417][T14996] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1085.798158][T14996] evict+0x4c9/0x8d0 [ 1085.805611][T14996] ? proc_nr_inodes+0x320/0x320 [ 1085.812145][T14996] ? do_raw_spin_unlock+0x11d/0x230 [ 1085.826073][T14996] ? _raw_spin_unlock+0x24/0x40 [ 1085.837075][T14996] ? iput+0x706/0x8a0 [ 1085.843879][T14996] ext4_orphan_cleanup+0xad2/0x1320 [ 1085.854008][T14996] ? ext4_orphan_del+0xbf0/0xbf0 [ 1085.862959][T14996] ? errseq_check_and_advance+0x62/0x120 [ 1085.872347][T14996] ext4_fill_super+0x8d6e/0x94f0 [ 1085.883490][T14996] ? format_decode+0x898/0x1300 [ 1085.890480][T14996] ? ext4_mount+0x40/0x40 [ 1085.896898][T14996] ? set_blocksize+0x1f3/0x370 [ 1085.903498][T14996] ? sb_set_blocksize+0xa5/0xe0 [ 1085.913358][T14996] mount_bdev+0x287/0x3c0 [ 1085.926004][T14996] ? ext4_mount+0x40/0x40 [ 1085.935605][T14996] legacy_get_tree+0xe6/0x180 [ 1085.940994][T14996] ? ext4_errno_to_code+0x160/0x160 [ 1085.952758][T14996] vfs_get_tree+0x88/0x270 [ 1085.959503][T14996] do_new_mount+0x24a/0xa40 [ 1085.966849][T14996] __se_sys_mount+0x2e3/0x3d0 [ 1085.972351][T14996] ? __x64_sys_mount+0xc0/0xc0 [ 1085.978965][T14996] ? lockdep_hardirqs_on+0x94/0x140 [ 1085.987685][T14996] ? __x64_sys_mount+0x1c/0xc0 [ 1085.994623][T14996] do_syscall_64+0x4c/0xa0 [ 1086.003244][T14996] ? clear_bhb_loop+0x30/0x80 [ 1086.011543][T14996] ? clear_bhb_loop+0x30/0x80 [ 1086.019476][T14996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1086.028518][T14996] RIP: 0033:0x7f84c36760ca [ 1086.035418][T14996] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.070232][T14996] RSP: 002b:00007f84c18cde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1086.084354][T14996] RAX: ffffffffffffffda RBX: 00007f84c18cdee0 RCX: 00007f84c36760ca [ 1086.099126][T14996] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f84c18cdea0 [ 1086.109774][T14996] RBP: 0000200000000180 R08: 00007f84c18cdee0 R09: 0000000000000000 [ 1086.124288][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1086.145408][T14996] R13: 00007f84c18cdea0 R14: 000000000000047a R15: 000000000000002c [ 1086.158204][T14996] [ 1086.317355][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.2549: iget: bad extra_isize 90 (inode size 256) [ 1086.345253][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.357717][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2549: error while reading EA inode 11 err=-117 [ 1086.385419][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.398475][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.2549: iget: bad extra_isize 90 (inode size 256) [ 1086.437530][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.476762][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2549: error while reading EA inode 11 err=-117 [ 1086.522598][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.532275][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.2549: iget: bad extra_isize 90 (inode size 256) [ 1086.579260][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.596842][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2549: error while reading EA inode 18 err=-117 [ 1086.638196][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.692812][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.2549: iget: bad extra_isize 90 (inode size 256) [ 1086.726878][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.748168][T14996] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2549: error while reading EA inode 18 err=-117 [ 1086.773031][T14996] EXT4-fs (loop6): Remounting filesystem read-only [ 1086.795507][T14996] EXT4-fs (loop6): 1 orphan inode deleted [ 1086.806809][T14996] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,min_batch_time=0x0000000000000008,dioread_lock,. Quota mode: none.