last executing test programs: 7m11.888266406s ago: executing program 32 (id=1646): r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000400)={[{@dots}, {@nodots}, {@nodots}, {@fat=@showexec}, {@dots}, {@dots}, {}, {@dots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@check_strict}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@dots}, {@fat=@nocase}]}, 0x1, 0x206, &(0x7f0000000600)="$eJzs3T9uE00YB+B38zn+8wmJdEhISIMooIqAE4QiSAhXQS6gQ4IKV0nj0JhjcAWOwj04AErlBg0yu4mNvTgmwl4RnqfJu/ubyc7srtduPM5R+nLrY3S7RewcxEFMitiLnSqJzwEAXCuTnONrLjU9FgBgO9Z4//+25SEBABv24uWr50/6/cOjlLoRZx9Gg9Gg/FvmT5/1Dx+mH/Zmvc5Go8F/F/mjtPjZYZrvxv9V/rjsny7idkQM2vHgXpmnlIqISD/378SbDc8dAAAAAAAAAAAAAAAAAAAAAACacifSudr1ffb3F/NelZdbc+sDLazf04rbrWpztjxQHm9jUgAAAAAAAAAAAAAAAAAAAPCXOTl9/+71cPj2eFZ0ImJ+T6umza+LovrHazVuvtiJq3XvVdNc1aYdETVRUZ2izU6wV39x1ymi9SeGkW82d3FTbTS+5Hr9XtFbeXpznhb1r4JWFKtvgOmNs/ro94+uOvhJzrvDT3ePT04jz0XFUuPZM6Kz5WcSAAAAAAAAAAAAAAAAAAD8q+a+9b2k28SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKABs9//nxbLe1YW44i4EZc2Pj/WbnQbnSsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/cAAAD//wX8HVk=") setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) syz_open_dev$vcsu(&(0x7f0000000340), 0xffffffff, 0x208200) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m58.782231835s ago: executing program 33 (id=2076): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000001340)="89d87df03855", 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 5m42.700070274s ago: executing program 5 (id=2314): r0 = syz_io_uring_setup(0xbfe, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4be, 0x43, 0x0, 0x0) 5m42.271211423s ago: executing program 5 (id=2317): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 5m42.026175676s ago: executing program 5 (id=2319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0) 5m41.767763753s ago: executing program 5 (id=2320): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x5, 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5m40.97158311s ago: executing program 5 (id=2330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000000c0)="f4", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) accept(r0, 0x0, 0x0) 5m40.09836982s ago: executing program 5 (id=2338): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x1, 0x1}) r0 = syz_io_uring_setup(0x2e97, &(0x7f0000000380)={0x0, 0x100, 0x13090, 0x1000004, 0x1c7}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x497c, 0x0, 0x0, 0x0, 0x0) 5m39.760781999s ago: executing program 34 (id=2338): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x1, 0x1}) r0 = syz_io_uring_setup(0x2e97, &(0x7f0000000380)={0x0, 0x100, 0x13090, 0x1000004, 0x1c7}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x497c, 0x0, 0x0, 0x0, 0x0) 5m11.841193979s ago: executing program 3 (id=2546): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 5m11.587150263s ago: executing program 3 (id=2550): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 5m11.464231662s ago: executing program 3 (id=2553): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x1, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x400, 0x2, 0x1, 0x0, @adapter={0x9, 0x7, 0x4, 0x8, 0x3}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5m11.124725618s ago: executing program 3 (id=2555): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 5m9.104792322s ago: executing program 3 (id=2566): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') 5m5.867302404s ago: executing program 3 (id=2583): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00') 5m5.085987764s ago: executing program 35 (id=2583): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00') 2m11.762163816s ago: executing program 6 (id=3715): socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, &(0x7f0000000280)=0x800) 2m11.505419204s ago: executing program 6 (id=3718): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}, 0xee37}], 0x1, 0x22, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m11.246683735s ago: executing program 6 (id=3723): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setresuid(0x0, 0xee00, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) 2m11.028098874s ago: executing program 6 (id=3726): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000002c0)={[{@utf8no}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@errors_continue}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 2m10.664967042s ago: executing program 6 (id=3729): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x20000, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000ac0)=ANY=[], 0xdf5, 0x0) removexattr(&(0x7f0000006100)='./file1\x00', &(0x7f0000006140)=@known='trusted.overlay.upper\x00') 2m10.067923633s ago: executing program 6 (id=3739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) 2m9.595837382s ago: executing program 36 (id=3739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) 2m9.580953566s ago: executing program 7 (id=3742): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x1}) 2m9.404438397s ago: executing program 7 (id=3744): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="8995b3", 0x3, 0x4c041, 0x0, 0x0) 2m7.629059682s ago: executing program 7 (id=3755): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016", 0x36, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 2m7.362175733s ago: executing program 7 (id=3758): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f0000000380)=ANY=[@ANYBLOB='utf8=0,time_offset=0x000000000000030a,shortname=mixed,utf8=1,uni_xlate=0,check=strict,quiet,shortname=lower,shortname=mixed,errors=continue,shortname=lower,nonumtail,\x00'], 0x0, 0x2c4, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a2300e, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 2m7.067871651s ago: executing program 7 (id=3760): syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000240)) 2m6.668211752s ago: executing program 7 (id=3764): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x8, 0x101}) 2m6.203898967s ago: executing program 37 (id=3764): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x8, 0x101}) 1m16.077648939s ago: executing program 4 (id=4053): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1m14.951808103s ago: executing program 4 (id=4060): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r5}) 1m14.492225769s ago: executing program 4 (id=4063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xf9, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0x6000, 0x8, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x7abd969528e04080, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x104000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x7}, {0x1, 0x0, 0x8, 0x0, 0x3, 0x5, 0x1, 0xff, 0x44, 0x3, 0x1, 0xfc}, {0x2000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xed, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0x9, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x8}, {0x4, 0xd}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x200008, 0x2000, 0xe6e70c00, [0x3, 0x403, 0x4, 0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000001140)) 1m13.914704476s ago: executing program 4 (id=4065): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m13.55558174s ago: executing program 4 (id=4068): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m13.190586267s ago: executing program 4 (id=4071): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02", 0xd}], 0x1) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 57.668017607s ago: executing program 38 (id=4071): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02", 0xd}], 0x1) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 5.082149309s ago: executing program 0 (id=4426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) syz_emit_ethernet(0x0, 0x0, 0x0) 4.632568103s ago: executing program 0 (id=4430): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mprotect(&(0x7f000006a000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4.310440519s ago: executing program 0 (id=4434): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x40002102) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 3.778118907s ago: executing program 1 (id=4436): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 3.509339274s ago: executing program 1 (id=4440): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.483433734s ago: executing program 2 (id=4441): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d40800450000"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.416917447s ago: executing program 9 (id=4442): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.081279687s ago: executing program 9 (id=4443): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x3, 0x0, 0x9, 0x82, 0x80000000, 0x5}, &(0x7f00000002c0)=0x9c) 2.973718912s ago: executing program 9 (id=4444): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 2.663556989s ago: executing program 9 (id=4445): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000001a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$eJzs3cFqE1EUxvFjU5s0pU0EERTUg250M7TxATRIC2JAqY2oC2FqJxoyJmUmVCJisxG3Pkdx6U5QX6AbcePeXREEN12II52ZtJM2bdM2TWL7/0GZO3Pux71N0nISSLLy4N3zUsE1CmZVBhIqAyJ1WRVJr41CJ8LjgD8ekqi6XB35/f38vYePbmdzuclp1anszLWMqo5d/PTi1ftLX6oj9z+MfYzLcvrxyq/Mj+Wh5bMrf2eeFV0tulquVNXU2Uqlas7als4V3ZKhete2TNfSYtm1nKZ6wa7Mz9fULM+NJucdy3XVLNe0ZNW0WtGqU1PzqVksq2EYOpqU422wjTn5pelpM7tt2Yt1dEc4dMOtLjpOtt66mF/qwp4AAECf2bn/D3r97fr/je5wL/3/md37f5Fo/58IF6H/74B609ku/T+OBMfJmsnw77cZ/T8AAAAAAAAAAAAAAAAAAAAAAP+DVc9LeZ6XWjuGl/zzuIgkgreA++c93iYOSfT+9yI/6/d/eL4pdr1H20WHRd64lxCx3y7kF/LBMahnC1IUWywZl5T88R8PoWA8dSs3Oa6+tHy2F8P84kI+JvFGviHdKn/h1ESQ1+b8SUlG189ISk63Xj/TMj8kVy5H8oak5OsTqYgtc/7jeiP/ekL15p3cpvywPw8AAAAAgKPA0HVbnr/7dX9CQrbWg3zk9QHP8xZ3en1g0/PrQTnXzkdUAgAAAACAA3NrL0umbVvOPgZxETlAvPMDzxPp/TZi0h+3RvPghoj0wTa6NUiISHBF9xP/uR5vK+W1MWcw/AaO/rh9dh/0+j8TAAAAgE7baPr3EPr25hB3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8dPu54E15m8pNQo7xCPLxbr+CwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB95F8AAAD//6loFW8=") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 2.40811172s ago: executing program 1 (id=4447): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10080208, 0x59, 0x48e, 0x8, 0x7fff, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="c25fe92f8abc969bed99d08f79b0419fc38464bde58fcd9ff2c66ee27597c3302dd9e543b48869a354ccac79c0a5f4c87c5051767e7b9494776086c67bdc10c1fc971bebab8cc66ad73bb04cfbda45ea7a49bcaf3178fa928268b9695b66e8368e4cc9c370a8cef624d1cf11171d4dc8f3ecf4189c03e9b21b40188b0110deca65acdc619e3c4a2c8b27755043cc59f366954e4b4dbc4b0c2f9753ad4ede00020b236bbd1890422f79da954873348832de23b031c13ecb9a793569982fdb7e7fe342f24564ad61a14215255ace0f509d958e05877fe4ed09519d85992b0cd58af95dfc3b4454869373ea7d8b53f1105d942e4b718f90d42354e7808098cb01e7189bbe69a0429bfb14ef0621b933ec890c020cdf916271d8d2cc5c8ba1c038fb4c272acfeb7c28d8bfdd9c2505bd2e9fd4b65769d28be67d983f08a094a42b3556e02bbfdc8474d4217fafa45d511601dff25446492cc6dce7f2e51de49de941b0e6572c50142c63bc132927a3f3a617172e8cca42435ddce7a39bed678dedaf79c33db5d28b6a27a83f55bcb7d3219e2dfbb632b5bf23adc6619f18fa6d3738dcb3bed93f9a4f28001781e2c101bd193b6394520a6525c3c1af17c5490e3498e14dbc2b3250be1af54d57047ded6efb0f934496612544922e0be0d7da4f9622756b6fff60a6de549a379ed4e2804ca8dd78e053e66ca2b04f0a780d655cd152133c6e6e002b0717541b96bc6a817cf847423038733367710ea72f195d59a18a5dd74c01a7fa7a88444a18c00bceeeac0482f2476eb38f6114c971d0eef126d2b19a1aa5ec61d61610c590ae30fcb13c8967c55a41cfd5138d98282be1b32dd961c821de02e0c8b475b8825ecd263cacc514a33cbc1db31f2a2af59fbe6624d4f1fc714053abe7b2a8941d5b925c556a00ca39bb306720e2872e06d098c8951e3649e762be7c2afae976ad9bf33f58b1819862f052392dd190ba80dd49a9384c65042604fbd85c4a9591c12fe296d62785d565592e1b02da5a0dd858145bb7d3a8ebf4e3d3ac51d0baa35b24a43343fcb7c3b7bdbcacb20eeceee5ecb2e28258cb4936f9e4289b1c8ae453ec42ed8faf75c46d2fadcbc5804cbeb4c598e9005f3b398794e6d5d4aa873301fd29aef63619635fcbe59503cc26cae343cce058e70a00bd379cf547024b9155c5c2fe4eba01fd0ba936c1852afe9046297a32e3c9d747d1659cddcaea0394b9e15ece3c3adb6da8b24174b99a80d243231e062188d4efe48fb8e4f673fcc650fb5cec06f88b486643cc392980f1b134b1ffbe91ab4b2b891540a53c416136d26421afca75108a8f318e845812edce949138dc800897d9c5b3047f9de9e4bae123d0f0c14f7af2cf684859b443ed307e28bcd0454febc38b38e49943ab19b0ca902c36f9e4ce5e1eaaa3f65a173159bc5592db6c1faf769df6570bd4b3256dd1a6ee6ffcbdbb5f9b405f09ec5dcba2a99cfa768670fd31ef9f806be5bacea3c231b206e410f27fd0e9b92b6802b5680bdc4dbfd06ca18863c071c3ea9e03c49ec5c318883660eb54a3a33fa5960dc49fba22935062f76f6b0cd43dd8d945944db0aaf62b2a0c07804598044fd89133ad173bff589a12276e50acbcfdfde498924ff20cb3260bc637524248450a3d6e973eec83bfb792a5ee52a4a2503a45825f65aeb0fa1a131085cbe516b8c9da8a62b4174f892b3e316992115639ceca6f2d62b77489451c3b1581d0b89ec713da59a08af5c4b34ceb3222142f0b5dd70b8c1185123a4619247fbca0057bcbda20806359c254302db6c1dd26cdf1438edff4af95ea8dedb81266f03084dd646ea54a1b4f26bb62c2e1649719bb5481ef8dd28c0500000000000000bb834540c8a7fcd78c69d98cfce662a3950bfc22a6118caf0f90bb88305945206c24d1d68de9b151a84670547f96e538cc3f5b307a60b0e1a8b143c627659f19d79abe2597fa5ae59aab556664939c671a6daed60c9330d7c6323671fe71f354e6b08823c7c8dc5e2f4af4be26c8fdd4478a4a919c9233593d3b3ec0b49e4f25132acc4eca8bacda98927ad262e57622a8af00bb5e936bc08254896499e7e4aa06caf1b9a00e924c69d8fd5e3500cace65c72c9a8e64d5b68c91ed50fcb22ffe5b3eaffc0e0cbc8bcf16be8571a33abf61dc47dd02ac84a213243764babde850627fdfde1222702c8c15f324c77ec56b6fcd6dc11f50c91b0b11763554914aacf0cdfe41b26eb68f5d781f89cfd19c6fb7fe2e5ff19238290e864ea8eb1a900599ef222e7c62671f8a7bb06bfece509d2c40d8f7445e8fa0c0a4042cb41bd74442b99d27d224fcaa582f2240f816051f84bd548dc95a2b0ceb7ebc48e6357c56938270633e176f7e96969ed8fa61316518d04e8ce8668ea077b88155a97b6ca114ed2058553c4c56ec8d9e353020aa2462ec0312e3183c56d1c3bd86d9e32a0f27f78892ee0baba6c0dbef9c8c0837916604c8d652335d84581cfe08246d530d16abd2690825a2c2394c4880f5ea05d4a1ac78f47f6e716a3cca31d296f76e1fd519a6216764619cf29c4f76962450f9a79b4eaa4d3f8528a1155b1060dcff96240d95819c78f05310d0c4c22187b35fdcfb2bd64d3e7f3ba197be39ae4e8d3c7533ca087f71f691eb63b67c5facf7b7d38b33b00d7011fc0a1769687d65be802209a5469c8f7adec77c07c60e18b2f0ff963a8cb4a4b02f7bf63b69a48334c0a3cafe1d34c532b876c50ab82f48d812618fa51675cbc77f0e521fcf3140819d89e9a6dc759ab736e6e80c00ec8eb439e16f1d9bb8061ef4082f54c59ad03982be21119b0c3dfdd602272a211a764a447cd5ce94251fe371d8f74ded0d805c1d41ef27909f2e918dcf4dda25d122419b97613d6efb3c7edffe770dfd1e440f19fe6dfa43802b490afcb79c93b70c1a17cfd6d404b5d325e4f17c01e95d7acf57c49854efb8e08bee019f7390112bab655d50a723e5722e7de5fe20c07550860f9d8bf83ae209c94f515f1d30dde80eee19bc10ccb5041409b522c8713a47fc5936b36946d37d9d9d11fd3c31e642d02d4d90cbc49665aa86f03db25b5858c5a2befed8edfa6a340da89b800a3a40f3ecbfd129efb06cee403ec46df6d3c04e720284bd2178dcea52fbbebd1d9d81ddaede61e1ea3a043a78dbea14c01cc3d2f6f27e96efbfb5b076232a704cdc9ff0be4013aedaf6384ae954be6f105696cdddc7ec390dac959d790877cf474e3ee574ee907b0ff62dce094550a283a13ec45588b8b992ab48926b6d9cad3d1ec96972060280de5bbc821acdba3d7677e11b410f5768c3106079e6c0e0188ef1940b365b8d6fa6221665e40a00a898fe6538c2102fb9af48883468c92e7e16ab7b2527bb158077a9547406198231b4284c07e308c0dd783016a006a605985e968a41a4f4855db68559a53fb36c0e9d0de6d9f43be212673d87b9bb57b400d4e20cb8a19de9d4252b7aa6d5a566d52e59c87d681f8adaa961a6fed9a3f541cda3ca7721fd3534ca928ad8f46965273a825c0100b784a87d79b5e301f5e2b122d9ceb3d28d2d0a4b9470e52b6d5f9414d0116093893e30e2a028f0c1ae5f769e592fa92e6d6d03aed87314abcb27460087d0dc6e5e946cf1a9ae63b5f151518f125578a5c5a6537298c93c9a9ac262470d584b2793179d8c1c59938441f7db57ecc1269816ddec8de2f3d252dd0dcd250e4eb24d25821e0ed5b3a33432e5257abb4000d0234e9eb5ebc76833e0d62b9d5bba942395b65800a3f25e71bdb616e9c14264d6b9ddc4924b55fb9182a7eff5d865e1053c497416971147a6de27fd1fc8b94b3644e205f7d96c049fb977757525681c552c9524b72ff5c9f835c397b21767b7972430568fad75b0b4fc6b677b14a024aed4667b08483028e9f2a6960e7d53894f9083483fe3243bd33fa83e0a7b9e7171d0651a05b6c97e8dc7ee6acf55c3fd2064b22ee04f8f692e861c56495ea7a1abb22b8f7c8ac3c50f6a8945e481657fbad03f7fa7f5e4273fa005126d52e54b6a235c961328494060c50b0e3ee7fe168b3a41f294c46742e843b10732eeba9fed8550eb99227f6ddacaac551c64f3c3a0dda192153ba4bce885d569c6b87f968988dde04afd7e32d6d08d144a66c42d9a251595b3bc260c2c2bfa2c8dcadc83732e21a0d5f3c43bbb719a35e18ae49b3c93acf0962cfcf652a786c0fc84007b5c66fe924e800ed4cecd378e20f04a90d76aac0dcd0ba4fbe37a6777bfff1e4bc05701a886a64e7b56ba95cafd0555441933321d0161ee6fdc560043a4f45647c531a2ea86c69ddf92883f7c211633400e5ba58b457f5c9e23f49c1dc397d32b1daa3f5b8f874d690c24c7e9f914d6c99fe1e7f5220663b82f7492c3c7408365363e79bdf95cd9e61c215128eb3c06b7d8972da72b830d75aec05920df4f48919fc96b2493bcb528f147b94f606297e80d5b88ffc40d372b380211acdded406222354a923cc39f59ae3ad7647b1b30245b30dc5079133a18cd9832d422a2b1ecc0b2c3a2b10d50aa4e230752194ff1759a511baf82c8c51718c83fbf442f3d31c1beb1bac54acf312837cc007b3c85d09faa04b47e16e841b4a5f9d4eadb856d258ec3adb1c06a16b8999150380163f5049d1c94f3dca1dffefda98ba363e65b8162a848b413a9954e0354200c5d408d8ca7379ac4f2cb3c990afdb4a18a32896da47f5cba3a4954d4e78b4e342a4f6a4f4d01ce0905370265788b42fe9939859e055df03e522f4dabd60aa0411bcad2f6ba87b8a11e97ad25c4605ba48aad77883eb1325df4019a3c9c2a2875a24d69f652f84c732226e3af0e9e03ae0804439b38ea058988d34696c247f52e426cfb3262b5f18820eadef9b34d44b660679b48b7c6ef78c3549bded8a771bc20b93c2602a55767184f38eeff2b3a41d3efdffaeb3cb4d20236a0e2c51e5c2337f3de0f6351c6f66906b8b7fea093b9fbd20f597d8b4fb2fc48be1241b9433aae081f933a23766ad7cd9642b3c61f1b1585d624263df187b8185d5198338a1587fe23ee2d533e74b10afb3cd5c450a50cd99df38b3a861ad2c79a0ad1981da5ec1a0af41ab14d685f362ccf3b5f4a4e52750fc151f6877557818dbcfa42884753de52b9d0235f512cc20ba3ab1aaf9598628f0498a40e7f3ffe2a3564418171d8cbbbd32dc9f7b2ba92258ed8baedc048cd6a1435ae88d3c18b330876f8971885d1a324832e0c0ced4003bb28860f35b2a8a33aac1faf4e610707004bdc3980bc183f33765ff1738638025b37f986c005b15906922738141c414180a74f8c9dd9bcfc3a83ea01c2092d6fa2f371fb496499151359f58d8a95c3b4f38e621bafea202d3f35cd0562ed1516574416dbe5ec9ac9d256dcd584ba821bba4a06df6e0c8a20283fd6bfba4cd03126915877ba52b9c0e2a0e8188844e2333309d6408c2add7947f840b99c03147c3f03a682f82a5a3f99b7c7630dd275eec6608c974cb1487aacdde5ea6417367f8b6585e5eb2eae5fb56119d772fac2110ff8cc260cd525ef373b3368004b7b97343219e30ca4613860538a8332fb0f660c1a27ee1810b21db81504b78d0bc3f1ab93b9f631510a70a982736c5e3b3aebd9c6c8c72a00849e5dc164c1cde6072ccc60a681c32d34a07de5a9bde57420759f85606e280d6ea7abfede9a5b3a00f0501eabfe95a11c5735248874899550c431eae8a03eb65fcc77c94b7eae7574bc6841d3197c168568e5052546c8b788f3effeb5d3fb9e28c1cc78ae44eed4f2701be68447b25eeb850b64f4a8c1f0ecb2f644ed7cafad30c8233366df828ffd9931d39c903b5e3a37f6d347f2b6e5c126bef846e131014aed7abc2e313ada69b7a28c80a7add2876ca1e9cf6da27c748817bff09b6dea519c8d089f8d897df6fee6d3497133e673187b71c14e3bc8e58668cd4fbfcf26af555212a1f2e36828dea26b6575418e1f746fae9c790e0e9980ecee1c01490fa3c340cce1c5992146de97f4755e5f8d8f893702cfe400cb1044910de1185a8ee908ce47dc5b77789aaf4d597320b7f67882dd5a86b25ce76d086748b5c383674441db63309461c9980becb7f91e52e659997897789ae0b57c7407457a54d69456b9de44f798cc00b9e42be88476d8acf82f53f3b0c260301572186a7322206f5b2508f665b6b1ef5f8fa5674037e048c3442219c1f1754544f02893ef4b7a5b8c796cc4d8aadfcbfb186ad4d42ccdccca1d435792b2ecbcf62402a86ceeb438f3b0ac77a989ba72ad9a197036aaee26ab333d752127d26bb02907bc14d59b115fba11bb2b5e514f4424890e5048e92966480d1a75aec55857ee3f2e03b2268909cc5255990191458d24e572d4082ff86e59245aa454c05b3256d6641a8234857dc7c46a6ad02f7c634576abf1eebdbbc7495c58cb0f5687dfa7ca75478b316a133097e11114be1fd8199c203fe6148ed7eec44ed08fcf9bb572d1b57e241fd785b75bdd594680efe249d4aec73e820b35d49e8702dc0ded75596a8b57ad834654a32e328e0cfd60206590c36808c33dc7904a906aee4b01b390798e087eed3f153a0e6e976f66e902ad31fbad6c6200c4717f920ba06168bfea1720a8d0caf68d9695f19b8086de2d110a86f01f4d9fbdff14a11f6b79a725a3df07ece5571fefcf67a355a3b7cf05e1fda44c4f34d648558e59aee1441375021dcfef82493317e0053b4baf892f10fa7bbfd6b184aef6aab621c23b7d06cea5e4d50e42f38195fb61c4e72dd1b65a182a1fd54d68a79ef83886b8a5981402cb13c66ac1146c11195bfd4bae777e6581122fea891a50df83df345b2022579fc407b82189f5b85118bba51469b116794d664713deb1ae60bcb92bc2591291337357b6c721cc6b13031b7ae27954a79dc3b2ddac0ea3fbc932fdb5e5eaf36a6988ae4687ec6f087ea2f37b25ccb8e40da04772ad5a6547d98ed286097725e35d0af2ac508300b8b9a2b6762ad7a11b4dead39c96807dc225e18945b4fbb09c51457b7ea8108ea8c5c5f57a57d15bd936cb0b1f3ecc2e1a6412e82895cae9fbbf2e75edf0c7abc050b51a66038dac3f2ce0d7f1fbbd4e13515a3897ed386c7f5312a2e8ae8ae9775ea32160aa7dae2aa0e7151a7ffc689eb5d27182ebb99981e062d53ef5715fc762afb364e509f5dd398bda630f53eb7bb41f34d0ab1107cf6da5b016e11113231d31d87835ed66b07c8537dcc05181641176725ffad4c5e36c50b180c948632e75252724fbf1d675d7aa1e48a484dd94b56f5ce6893900344e6738fa69dd79b72c60130fc9a30acb8405a8ed2d9c7a47f642f1c30af4676e56df55c697cc32eafe346c2ccd8a66072c31b9baead28e358d572ab85337c51775b7762a491ac6d16653141752b15cd101e209e4866c4d55380f566069a3d30f69af59139d2b0c445572817f98fbb3eba8f12a225952c76f32cf47250765f66c2a43007fc2c6b3dcaae64cd318731699905e999307fb2aa776734441cb2424d4ce80ef0100d71c586d1d76c626a3899f63dd06228e2947a71df0086145291d6adf565bcae55887025bba5a8080344018c9e96487c766c009cdd3529ab4b3f33455605b451eb3d3175f733a5a8dcb8a20fc976f87ce32ef0126aeacdfc99406d841ea708809b9f0efae116ca79501b866b561972384842e583b0b956f2fecfaaa908bbeca772254cb5fb1e8052dbc0be1bbbc2669a4497b92a7b7602e85df1b9a7a83e780dbb73ea139a8d20c32a8df62db28952239ed1590036409f902451cc65ab02890d0f674ccf82c8a7b2c2288e0afb122076e0372e6d328f98af7bddf10f69b9d7aa5590b8112e94671fda9814356fedf96ff3f89d9be332c00cfc90f68de0cdc42a396a4ef6c6cee9c1226fd5a9fd99f2dce2ff1806b55450b900f9e48cdd8caf6ea3aea975c37570ceff169494ab6485687336cd85d935148b8ecb4942b6cd11311b1de1eadef33fd1763de931c6b7bdb42875288e9d1f52614274d6a82d2d565f82dfa52b1da1391e9bf723f631b4d7fdcf434a50ee2e218b89cd1250b6678783497a74b8a1384cb5c959c7730c7687f1bf8876642d211e2d9f3a078316d3df0b10877f1b8cedb5c205b54f24499cc8c04b84bf411958f5c4633dc2eca1422fe00b3a541f11774d29d0c10a0cb029e552d4a3d6b0fe9f095709490debf0577bad4a0ed711b3f54c6145ec50c42af56874c338f98d93ca19aa9c2c1f6fbcc2829b0c610f02dd24b7eb22b9a114ae7f063aff1ecddffc3cc583fe635670af8ed3d58da7447f3edd5de0744fb473af8fa2349b2aa1d67a35d5f72e65d948d4b360a1d3b1016bea9676abbcf8544f2c4ffd90f3c585592f130ff213c37ac140b6d7cb25ee0bfa65f971bc99dc7b04789f5648f40d51742b93b58bb07295196bfe633d863f6905f6862624df9b49b0e70ed40dff4a1751fdcae387e4fcaf2d78b0d8633ef0fe7d97c2c9fae64139c0fa1f40c22a1099ea064aea5f1273495ddb522d545f5a7f9057e3d245efe9a92906137a6832e0ce04d8686a3be98b7a12c89cd157881169d1df8ef1e517b754c9be66e1c034f3295287b6edaa530f83f8f2a2f313e8bd5c941ab49d44289259c1e90ef6117c656145436cc4dc3cef1f4c27378c15923bee50a8a3ef87ac8c7e5192d005b40cbc0476fec78cd9be654f1e3d8729f7d5433bc06ae145a09f32ab4926de13549a714ce4aebaa3633cb376450cf07a36fb32cc5c1818d43261f97d686b3383baca4de4b15eb6b282b68e69488127fdf9e79d7314f9ac62b4a24507408df166e67453c5424b1b01a4f018ddf08e084fff1bd134e6453dac69b5ce3e65d53664f0e8577f9b8cfa240c6fbce956fe506ed3a1cf3ba79b3f59864636698b12b35feca799ab5dbe797f6c12f24a5f808da6c3e2a7a96f3d152e3395b0fe7699409e90effe8586f2fdac811f1f4a7bad8d620247b41ea6304d78f36fa233dd95cb634e9897fe75ed1088f071fb7f0b0418fef15bd08472cc8086a5ad46ebdf760c9a50b978fcdcffa20af8c0ba686ea90e7d4fb2e3cdc87c4b38d2b60f297a13960bfd30ded0cf9a848be1dcaea2581bb9692fc5a9741a095695c62cedd824b4132b6945c912c888ed9cd295b87a1cf74f0911620ebd139ebc9726c26b0208d8235c99148973fd4acf93811a7b9ddbf3eea33a9775bfbfd8b1b6ce9d44680a408b9933b4a12a63f9552fb02d209f7f1cacf19adee451d5950ea6cde8dac161e6449952d0f343674b50bb09f8eb5fd57975e0d62c109fa1e3d4ae4ef75cb3316e648b961dfa09973a209d033034de772761b3cd81ee6c1d59cce892d248e0349aee5f8c12e1ae24f12aac8b66a9000f2fb31fb29908384669bf6668ea1b14851e8e8121e219e55ceb36cc70211759a47c47641272234adc5be19722a0258426d59adea242ec36557f69e59bd24a082c1d06b9e4aa9d62eb8437d8b47426708b6711dae59526fec776de32c2a54c3a0f5c4028bda53419bb6c7875495f141a0cfcfcf315dd7685bbeb1b86558c11894f8ff22b31ec5059eede907030c3b5c4b4aa07433dabe45a6e6a7c14f382038964fabab2947680fd427cdd9781b99a890ab2a067bbd8c3a5b09c47816d4c42234289e44e70f044084d03be055d5f002bddc6d05c5539e152dabce5799e67d55d3139be53a77742d05ec4d68a52d16eaab3ad9c529c250179f9078dd9585fbbafee84f9b1f15b5e9939644aa0f2c1d02412b28f9fc75c3465e6cfd92b796b247aa502c55263d98b791272096a62212f8de2e50ae84410f7ba4dca0872a631faa121b437ad1656619276a2e85d553e1627ade77045428c9913500c0d285abff32184a4560326b619a9bb580d73d019811bb01bf690e226a201095d67614603c772b31b7a4cb5f9ab3ef1f713ee4c64b58b9ce58bef6c00bd2ff4735a724cd1661de06e133708e72ffe63c4f04241d16a384d781624085d8949862019a03d4a23b78049cbb1c9ca95e7346d337e53c84e4afb75e67d530a7441531ca73f2fd8ecdc1fcc6a1ae3cae9913b9c73b406e2cfef9dbcc2e2185891b6c9a3f496a77370edb760af27317076e71ef7be4bb233112d86232e5c92f49eb5d48a1f54a9de11a5ad88a365bbd7fbe649bb7e2812d61e65e9099e5b605de312b3431f1c9aa70f96b55498d86a228d15140ab2ab44ff222f3c1003c3bff8048683914f73c3fe3e1557510732ee5ab4ef7d1f62761265c47840032587e5309b7694e2247da4f76335980770191305717e6ceaf48a116b87ee585dea2c8fa22ff0ae6becafb0967cd198939f709a0973a8a42c4c1ee67341f174f238f8dc3fd5e77531f7c2e78e1b69949da0d3d93c6734a60e95530f415420b47d4cd18f304041c24ff3990a75419ddafda12869b364531fe38cda02d5ada186271fa7c6d81557fbb7a167361a7c34ea587f67689955e423974b8640420c7b9057c86b0ff526377366892b97f46663b77a71af5ce70cdbb9929f7cb3a9f9ff6c8de4f89f9d2ad6933f351c9ff8235f9f976d45d2b32e31e789cd61ee0941b34441b734fd6bac762c91d41afb009f00b435c2052f0e913deade323235942250d7d6e0ce9f22c0abbf463aebd146e0798b0555896160b9bdf89e5c86aec475561aa2efb42a0acfbf48756daacc0c0ca9929ffb0072e14496a396b931edd6be1ab918e8e20d331cd3a4b15496ced994d695daf55fbef5e9913f72b5d7dc78a9cb758b2e830a7b4d60921d7fdb66c6c4173c2eca02cb2a6f4238d63e4ffdb000ee7366ed1d2916d358d67a65c9bb68f38e1fa95e188ee6c6891cfbf9f348a042b9bd007c87b4e1e2dc043d4778d063f98cc55c19922595dc5a94b6d4dce3e64f61e99df7d4a9c1285fe860d1bf55a07609bbd698d8b3893e666316e34bff6fd7b11c6289759e6469f7e5ec1064e56ee70923f378e8b56442bb6deadd865e1c2e2533d28254f9cdc465b80a32dc104739dfd97b3cac968b090a673d7e5db1ffacd9832960c5e744836cf107aae73dae6b3abab37b49e6b72fd3ca0b10a299fe3b38c9a663bb087777d837e31a7d201bfc156bc05bc74cc22289e31727670c9351e4d9bb62ea904a6c7e7363f05acf4fae31c2f59441887bf9ba5b86a78146eeb51c65264b49b4fb2b1dae1585fed67a91a97202e77716acbf877512894c3d0d5a687048923a5864de4bcb14cee1715419d7475dd445b42c2698eaa99046ba3484ae0a122da8c275d7aeaa984fef5235742a6f9ac651881e243843753ad48503420c30db7e5fa0d8d13a1e047e29566b94b2198bc9e21ee4489d9f216250a6e1da8760fc5e78eddbabc611e706758ac48fd5afa571ef3bf6a97e085786f6760a36a65dbe73cc49c151ac399c4a0e45d54f4c60e06f337915766ae6be7998f08f61bf7c61f868a5832d4c65ae261ba3390eff7e8bbb82b999b552a67a254001526cc3ec5c8eeafa0d6dd1d02df308bdfd0cdcfa3f44c45b4a08651ccfea9f2f44a5c8d4a2a9ce4c583b322fb921639d539857ac6026ce3af991c", 0x2000, &(0x7f0000004440)={&(0x7f0000004300)={0x50, 0x0, 0x8, {0x7, 0x29, 0x4, 0xb069a97334577756, 0x2, 0x2, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x1, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r1) 2.275561114s ago: executing program 2 (id=4448): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x57}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r1, 0x0, &(0x7f0000000440)="d9", 0x1, 0xe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x70e}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x57, 0x280000000}) 2.264249917s ago: executing program 1 (id=4449): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.242863815s ago: executing program 8 (id=4450): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="04010000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000fd01000000002b0000002001000000000000000000000000000000000000000000000000000000000000020000000000000000000100000000000000001000000000ffffffffffffffff000000000000000000000000080000000000000000000000000020000000000007000000000000000000000000000000000004c06dbc0c0309ba240000000000000000000a000200340000000000000014000e"], 0x104}}, 0x0) 2.192097398s ago: executing program 0 (id=4451): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r0, 0xffffffffffffffff, 0x0) 2.014345538s ago: executing program 2 (id=4452): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 2.007891078s ago: executing program 1 (id=4453): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 2.007213527s ago: executing program 8 (id=4454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x11}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [@routing={0x2b, 0x0, 0x0, 0xf}], "a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b6d13be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead3073a62774b9b019415b5b64589f48f36b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff7042904274a863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e304be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce42649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de1414bd037504d5f36622337b86566e0104119a19cf01f5e95a201ca3966af2829241e2e7887d2821d651bb1f90d5ec1858da6d58595213ffa32f04266197f11b022f0f36a26c5c1512a"}}}}}}, 0xfce) 1.798636295s ago: executing program 1 (id=4455): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000640)) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x7f0d, 0x10, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x20a0, 0x20000000, 0x0, 0x0, 0x0) 1.744210144s ago: executing program 2 (id=4456): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') fcntl$setstatus(r1, 0x4, 0x40800) close(0x3) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0x4bdd, 0x1000, 0x1, 0x3c3, 0x0, r1}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0xd853, 0x29, 0x0, 0x0) 1.743794225s ago: executing program 0 (id=4457): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 1.582736897s ago: executing program 8 (id=4458): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x2, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x28e4000000000000, 0x8, 0x123, 0x3, 0x1000, 0x0, 0x0, r2, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008ec0)="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", 0x2000, &(0x7f000000b340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x130, 0x0, 0x1, {0x3, 0x70e1, 0x0, '\x00', {0x1, 0xb, 0x4, 0x4, 0x0, r2, 0x1000, '\x00', 0xce, 0x9, 0xfffffffffffffffd, 0x8000000000000000, {0x0, 0x9}, {0xdd65}, {0x720, 0x1}, {0x3ff, 0x8}, 0x3, 0x9, 0x401, 0x7}}}}) 1.303767537s ago: executing program 8 (id=4459): ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.235943983s ago: executing program 9 (id=4460): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="81"], 0x650) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.176392011s ago: executing program 2 (id=4461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) sendfile(r0, r0, 0x0, 0x7f03) 937.150164ms ago: executing program 8 (id=4462): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x40000036, r2, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000340), 0x0, 0x0, 0x0) 544.890753ms ago: executing program 0 (id=4463): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 449.303442ms ago: executing program 9 (id=4464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r1, &(0x7f0000000100)={r1, r1, 0x1}) 219.856294ms ago: executing program 8 (id=4465): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x21) 0s ago: executing program 2 (id=4466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 7ffe2d72fee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 562.961132][T13786] RAX: 0000000000000000 RBX: 00007f117ce32050 RCX: 00007f117cd9d9d7 [ 562.961153][T13786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2d72ffa0 [ 562.961167][T13786] RBP: 00007ffe2d72ffa0 R08: 00007ffe2d730fa0 R09: 00000000ffffffff [ 562.961184][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2d731030 [ 562.961198][T13786] R13: 00007f117ce32050 R14: 0000000000089476 R15: 00007ffe2d731070 [ 562.961234][T13786] [ 563.282269][T13786] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 563.421458][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.429687][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.612923][ T6002] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 563.797383][ T6002] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.811463][ T6002] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 563.823718][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 563.836599][ T6002] usb 5-1: Product: syz [ 563.870833][ T6002] usb 5-1: Manufacturer: syz [ 563.898923][ T6002] usb 5-1: SerialNumber: syz [ 563.941599][ T6002] usb 5-1: config 0 descriptor?? [ 563.966295][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3356'. [ 563.977849][ T6002] gspca_main: conex-2.14.0 probing 0572:0041 [ 564.087561][T16229] loop7: detected capacity change from 0 to 40427 [ 564.128632][T16229] F2FS-fs (loop7): invalid crc value [ 564.481251][T16229] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 564.490817][T16264] loop8: detected capacity change from 0 to 128 [ 564.520677][T16229] F2FS-fs (loop7): Start checkpoint disabled! [ 564.561694][T16264] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 564.605523][T16229] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 564.660115][T16229] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 564.690448][T16264] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 564.886600][ T30] audit: type=1800 audit(1773742613.185:168): pid=16229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3350" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 564.943992][T16280] netlink: 'syz.0.3363': attribute type 1 has an invalid length. [ 565.024034][T16229] syz.7.3350: attempt to access beyond end of device [ 565.024034][T16229] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 565.067661][T16229] syz.7.3350: attempt to access beyond end of device [ 565.067661][T16229] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 565.170675][T13786] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 565.258469][ T96] kworker/u8:5: attempt to access beyond end of device [ 565.258469][ T96] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 565.273733][ T6922] usb 5-1: USB disconnect, device number 28 [ 565.301660][ T96] CPU: 1 UID: 0 PID: 96 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.301693][ T96] Tainted: [L]=SOFTLOCKUP [ 565.301701][ T96] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.301714][ T96] Workqueue: writeback wb_workfn (flush-7:7) [ 565.301742][ T96] Call Trace: [ 565.301749][ T96] [ 565.301757][ T96] dump_stack_lvl+0xe8/0x150 [ 565.301789][ T96] f2fs_handle_critical_error+0x37c/0x540 [ 565.301820][ T96] f2fs_write_end_io+0x1274/0x1740 [ 565.301868][ T96] __submit_merged_bio+0x256/0x700 [ 565.301898][ T96] __submit_merged_write_cond+0x3c9/0x4e0 [ 565.301931][ T96] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 565.301976][ T96] f2fs_write_data_pages+0x287e/0x34f0 [ 565.302036][ T96] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 565.302087][ T96] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 565.302136][ T96] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 565.302183][ T96] ? __lock_acquire+0x6b5/0x2cf0 [ 565.302225][ T96] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 565.302249][ T96] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 565.302278][ T96] do_writepages+0x32e/0x550 [ 565.302308][ T96] ? reacquire_held_locks+0x104/0x190 [ 565.302328][ T96] ? writeback_sb_inodes+0x477/0x1a20 [ 565.302358][ T96] __writeback_single_inode+0x133/0x11a0 [ 565.302392][ T96] ? do_raw_spin_unlock+0xf5/0x210 [ 565.302422][ T96] writeback_sb_inodes+0x992/0x1a20 [ 565.302469][ T96] ? __lock_acquire+0x6b5/0x2cf0 [ 565.302502][ T96] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 565.302525][ T96] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.302593][ T96] ? rcu_is_watching+0x15/0xb0 [ 565.302629][ T96] wb_writeback+0x456/0xb70 [ 565.302661][ T96] ? queue_io+0x251/0x4a0 [ 565.302699][ T96] ? __pfx_wb_writeback+0x10/0x10 [ 565.302725][ T96] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.302785][ T96] wb_workfn+0x414/0xf50 [ 565.302813][ T96] ? look_up_lock_class+0x57/0x110 [ 565.302895][ T96] ? __pfx_wb_workfn+0x10/0x10 [ 565.302924][ T96] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.302979][ T96] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 565.303057][ T96] ? process_one_work+0x8bb/0x1780 [ 565.303090][ T96] process_one_work+0x9ab/0x1780 [ 565.303151][ T96] ? __pfx_process_one_work+0x10/0x10 [ 565.303183][ T96] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.303233][ T96] worker_thread+0xba8/0x11e0 [ 565.303267][ T96] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 565.303294][ T96] ? __kthread_parkme+0x7a/0x1f0 [ 565.303318][ T96] ? __kthread_parkme+0x19c/0x1f0 [ 565.303366][ T96] kthread+0x388/0x470 [ 565.303394][ T96] ? __pfx_worker_thread+0x10/0x10 [ 565.303414][ T96] ? __pfx_kthread+0x10/0x10 [ 565.303442][ T96] ret_from_fork+0x51e/0xb90 [ 565.303494][ T96] ? __pfx_ret_from_fork+0x10/0x10 [ 565.303534][ T96] ? __switch_to+0xc7d/0x1450 [ 565.303568][ T96] ? __pfx_kthread+0x10/0x10 [ 565.303613][ T96] ret_from_fork_asm+0x1a/0x30 [ 565.303675][ T96] [ 565.725437][ T96] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 565.845465][T16296] fuse: fd is not a fuse device [ 566.203257][T16307] evm: overlay not supported [ 566.226606][T16309] overlayfs: failed to clone upperpath [ 567.282644][ T30] audit: type=1800 audit(1773742615.555:169): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3383" name="file1" dev="overlay" ino=759 res=0 errno=0 [ 567.620050][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3385'. [ 567.755061][ T13] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.766258][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3385'. [ 567.787572][ T13] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.812298][ T13] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.844276][ T13] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.096187][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 568.172813][ T6922] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 568.344738][ T6922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.374904][ T6922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.398754][ T6922] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 568.420121][ T6922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.453615][ T6922] usb 5-1: config 0 descriptor?? [ 568.895631][ T6922] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.919504][ T6922] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.946257][ T6922] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 568.966301][ T6922] isku 0003:1E7D:319C.0017: unknown main item tag 0x1 [ 568.987056][ T6922] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 569.007246][ T6922] isku 0003:1E7D:319C.0017: unknown main item tag 0x0 [ 569.021169][ T6922] isku 0003:1E7D:319C.0017: item fetching failed at offset 6/7 [ 569.045527][ T6922] isku 0003:1E7D:319C.0017: parse failed [ 569.067901][ T6922] isku 0003:1E7D:319C.0017: probe with driver isku failed with error -22 [ 570.389167][T16399] fuse: fd is not a fuse device [ 570.610960][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 570.977296][ T7411] usb 5-1: USB disconnect, device number 29 [ 572.533208][ T7411] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 572.805252][ T7411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 572.831878][ T7411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.858251][ T7411] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 572.887360][ T7411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.915097][ T7411] usb 7-1: config 0 descriptor?? [ 572.933542][ T7411] hub 7-1:0.0: USB hub found [ 573.150106][ T7411] hub 7-1:0.0: 1 port detected [ 573.444306][ T5933] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 573.648559][ T5933] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 573.676667][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.699325][ T5933] usb 8-1: Product: syz [ 573.714111][ T5933] usb 8-1: Manufacturer: syz [ 573.728386][ T5933] usb 8-1: SerialNumber: syz [ 573.760058][ T5933] usb 8-1: config 0 descriptor?? [ 573.781756][ T5933] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 573.821409][ T6928] hub 7-1:0.0: activate --> -90 [ 573.977576][T16483] netlink: 212344 bytes leftover after parsing attributes in process `syz.8.3426'. [ 574.223224][ T6928] usb 7-1: USB disconnect, device number 10 [ 574.229477][ T7411] usb 7-1-port1: config error [ 574.742565][ T6002] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 574.925124][ T6002] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.958305][ T6002] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.984144][T16508] loop6: detected capacity change from 0 to 512 [ 575.008242][ T6002] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.042530][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.047329][T16508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 575.062110][ T6002] usb 5-1: Product: syz [ 575.072256][ T6002] usb 5-1: Manufacturer: syz [ 575.081608][ T6002] usb 5-1: SerialNumber: syz [ 575.092130][T16508] System zones: 1-12 [ 575.106863][T16508] EXT4-fs error (device loop6): ext4_iget_extra_inode:5028: inode #15: comm syz.6.3431: corrupted in-inode xattr: e_value size too large [ 575.137529][ T6002] usb 5-1: 0:2 : does not exist [ 575.144468][T16508] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 575.145052][T16508] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3431: couldn't read orphan inode 15 (err -117) [ 575.154333][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 575.154362][ C0] EXT4-fs (loop6): initial error at time 1773742623: ext4_iget_extra_inode:5028: inode 15 [ 575.154400][ C0] EXT4-fs (loop6): last error at time 1773742623: ext4_iget_extra_inode:5028: inode 15 [ 575.227802][ T5933] gspca_sunplus: reg_w_riv err -71 [ 575.235793][ T5933] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 575.277225][ T5933] usb 8-1: USB disconnect, device number 8 [ 575.318144][T16508] loop6: lost filesystem error report for type 5 error -117 [ 575.328054][ T6002] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 575.457134][T16508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.643105][ T6002] usb 5-1: USB disconnect, device number 30 [ 575.728043][T12660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.815915][T15791] udevd[15791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.993920][T16539] loop6: detected capacity change from 0 to 512 [ 576.033563][T16539] EXT4-fs: inline encryption not supported [ 576.068671][T16539] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 576.131680][T16539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 576.162703][T16539] System zones: 1-12 [ 576.191362][T16542] netlink: 186628 bytes leftover after parsing attributes in process `syz.4.3441'. [ 576.228624][T16539] EXT4-fs (loop6): 1 truncate cleaned up [ 576.270062][T16539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.485173][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 576.496652][T16557] syz_tun: refused to change device tx_queue_len [ 576.517152][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 576.542802][T16557] syz_tun: refused to change device tx_queue_len [ 576.648886][T12660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.663051][ T6904] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 576.741726][T16562] team0: Port device bond0 removed [ 576.761834][T16562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.855117][ T6904] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.885368][ T6904] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.915762][ T6904] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.937297][ T6904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.207802][ T6904] usb 5-1: GET_CAPABILITIES returned 0 [ 577.219046][ T6904] usbtmc 5-1:16.0: can't read capabilities [ 577.837903][ T6922] usb 5-1: USB disconnect, device number 31 [ 578.357645][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'. [ 579.468032][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3475'. [ 579.488334][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3475'. [ 579.697019][T16634] binder: 16633:16634 ioctl c0306201 0 returned -14 [ 579.777520][T16636] gretap0: entered promiscuous mode [ 579.786603][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3477'. [ 579.799135][T16636] gretap0: left promiscuous mode [ 581.523669][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 581.674992][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 582.066276][T16688] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3498'. [ 582.437855][T16692] loop4: detected capacity change from 0 to 32768 [ 582.445390][T16692] btrfs: Deprecated parameter 'usebackuproot' [ 582.451523][T16692] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 582.473397][T16692] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3499 (16692) [ 582.494375][T16692] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 582.504666][T16692] BTRFS info (device loop4): using crc32c checksum algorithm [ 582.657384][ T173] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 582.674038][T16692] BTRFS error (device loop4): failed to load root extent [ 582.681192][T16692] BTRFS warning (device loop4): try to load backup roots slot 1 [ 582.690421][ T173] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 582.704710][T16692] BTRFS warning (device loop4): couldn't read tree root [ 582.711750][T16692] BTRFS warning (device loop4): try to load backup roots slot 2 [ 582.719889][ T3527] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 582.751544][T16692] BTRFS warning (device loop4): couldn't read tree root [ 582.758714][T16692] BTRFS warning (device loop4): try to load backup roots slot 3 [ 582.788581][T16692] BTRFS info (device loop4): rebuilding free space tree [ 582.878836][T16692] BTRFS info (device loop4): checking UUID tree [ 582.886204][T16692] BTRFS info (device loop4): enabling ssd optimizations [ 582.893286][T16692] BTRFS info (device loop4): turning on async discard [ 582.900118][T16692] BTRFS info (device loop4): enabling free space tree [ 582.907274][T16692] BTRFS info (device loop4): force clearing of disk cache [ 582.914724][T16692] BTRFS info (device loop4): trying to use backup root at mount time [ 582.922880][T16692] BTRFS info (device loop4): force zlib compression, level 3 [ 583.507565][ T5853] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 583.814200][T16697] loop6: detected capacity change from 0 to 32768 [ 583.943580][T16697] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 584.361279][T16697] XFS (loop6): Starting recovery (logdev: internal) [ 584.622077][T16697] XFS (loop6): Ending recovery (logdev: internal) [ 584.761001][T16697] XFS (loop6): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 584.820840][T16697] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 584.874120][T16697] XFS (loop6): Unmount and run xfs_repair [ 584.900916][T16697] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 584.927347][T16697] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 584.947877][T16697] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 584.957745][T16697] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 584.978677][T16697] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 584.988054][T16697] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 585.020342][T16697] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 585.029706][T16697] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 585.039020][T16697] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 585.060648][T16697] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74 [ 585.122555][T16697] XFS (loop6): page discard on page ffffea0000dd0b00, inode 0x1d06, pos 325632. [ 585.554538][T16697] XFS (loop6): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 585.599947][T16697] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 585.628773][T16697] XFS (loop6): Unmount and run xfs_repair [ 585.651128][T16697] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 585.675478][T16697] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 585.701650][T16697] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 585.725590][T16697] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 585.749009][T16697] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 585.772339][T16697] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 585.801891][T16697] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 585.822138][T16697] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 585.842601][T16697] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 585.888301][T16697] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74 [ 586.021940][T16697] XFS (loop6): page discard on page ffffea0000472640, inode 0x1d06, pos 2048. [ 586.080329][ T6904] loop6: writeback error on inode 7430, offset 0, sector 14980 [ 586.305595][T12660] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 586.340859][T12660] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 586.870522][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3518'. [ 586.891026][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3518'. [ 586.904140][T16775] netlink: 'syz.6.3518': attribute type 6 has an invalid length. [ 586.967504][T10136] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.977285][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3518'. [ 586.988355][T10136] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.004638][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3518'. [ 587.024067][T10136] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.033469][T16775] netlink: 'syz.6.3518': attribute type 6 has an invalid length. [ 587.054755][T10136] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.309497][T16781] loop5: detected capacity change from 0 to 7 [ 587.339077][T16781] Dev loop5: unable to read RDB block 7 [ 587.359397][T16781] loop5: unable to read partition table [ 587.375256][T16781] loop5: partition table beyond EOD, truncated [ 587.396470][T16781] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 587.886169][T16799] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3529'. [ 588.191843][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3532'. [ 588.307511][T16805] team1: entered promiscuous mode [ 588.334330][T16805] team1: entered allmulticast mode [ 588.368807][T16805] 8021q: adding VLAN 0 to HW filter on device team1 [ 589.647443][T16832] netlink: 344 bytes leftover after parsing attributes in process `syz.0.3543'. [ 589.668108][T16809] loop6: detected capacity change from 0 to 32768 [ 589.711457][T16809] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 589.812624][T16809] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 590.000399][T16841] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.3546'. [ 590.086455][T16809] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 590.120697][ T6904] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 590.132997][ T6904] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 590.189370][ T6904] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 590.207332][ T6904] gfs2: fsid=syz:syz.0: jid=0: Done [ 590.216181][T16809] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 590.518698][T16809] gfs2: fsid=syz:syz.0: found 1 quota changes [ 590.648756][T12660] syz-executor: attempt to access beyond end of device [ 590.648756][T12660] loop6: rw=8400897, sector=68719479080, nr_sectors = 8 limit=32768 [ 590.679204][T12660] Buffer I/O error on dev loop6, logical block 8589934885, lost async page write [ 590.699131][ T7411] kernel read not supported for file bpf-prog (pid: 7411 comm: kworker/0:18) [ 590.711875][T12660] syz-executor: attempt to access beyond end of device [ 590.711875][T12660] loop6: rw=8400897, sector=68719479336, nr_sectors = 8 limit=32768 [ 590.729219][T12660] Buffer I/O error on dev loop6, logical block 8589934917, lost async page write [ 590.743330][T12660] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 590.757627][T12660] CPU: 1 UID: 0 PID: 12660 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 590.757660][T12660] Tainted: [L]=SOFTLOCKUP [ 590.757668][T12660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.757681][T12660] Call Trace: [ 590.757689][T12660] [ 590.757699][T12660] dump_stack_lvl+0xe8/0x150 [ 590.757737][T12660] gfs2_withdraw+0xc3/0x1b0 [ 590.757764][T12660] gfs2_ail1_flush+0x990/0xfd0 [ 590.757791][T12660] ? rcu_is_watching+0x15/0xb0 [ 590.757838][T12660] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 590.757882][T12660] empty_ail1_list+0x1b3/0x330 [ 590.757917][T12660] ? __pfx_empty_ail1_list+0x10/0x10 [ 590.758006][T12660] ? do_raw_spin_unlock+0xf5/0x210 [ 590.758042][T12660] gfs2_log_flush+0x1e20/0x2510 [ 590.758087][T12660] ? __pfx_gfs2_log_flush+0x10/0x10 [ 590.758120][T12660] ? call_rcu+0x644/0x890 [ 590.758143][T12660] ? lockdep_hardirqs_on+0x7a/0x110 [ 590.758174][T12660] gfs2_kill_sb+0x5c/0x430 [ 590.758206][T12660] deactivate_locked_super+0xbc/0x130 [ 590.758243][T12660] cleanup_mnt+0x437/0x4d0 [ 590.758265][T12660] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.758293][T12660] task_work_run+0x1d9/0x270 [ 590.758327][T12660] ? __pfx_task_work_run+0x10/0x10 [ 590.758369][T12660] exit_to_user_mode_loop+0xed/0x480 [ 590.758401][T12660] ? rcu_is_watching+0x15/0xb0 [ 590.758429][T12660] do_syscall_64+0x32d/0xf80 [ 590.758454][T12660] ? trace_irq_disable+0x3b/0x150 [ 590.758481][T12660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.758505][T12660] ? clear_bhb_loop+0x40/0x90 [ 590.758533][T12660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.758556][T12660] RIP: 0033:0x7fe9df39d9d7 [ 590.758578][T12660] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 590.758598][T12660] RSP: 002b:00007ffc92b22448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 590.758621][T12660] RAX: 0000000000000000 RBX: 00007fe9df432050 RCX: 00007fe9df39d9d7 [ 590.758636][T12660] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc92b22500 [ 590.758651][T12660] RBP: 00007ffc92b22500 R08: 00007ffc92b23500 R09: 00000000ffffffff [ 590.758667][T12660] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc92b23590 [ 590.758681][T12660] R13: 00007fe9df432050 R14: 00000000000900f9 R15: 00007ffc92b235d0 [ 590.758718][T12660] [ 590.758727][T12660] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 591.010627][ T6904] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 591.098770][T12660] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 591.108753][T12660] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 591.127059][T12660] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 591.212634][ T6904] usb 8-1: Using ep0 maxpacket: 32 [ 591.226559][ T6904] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 591.236271][ T6904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.246606][ T6904] usb 8-1: Product: syz [ 591.250948][ T6904] usb 8-1: Manufacturer: syz [ 591.256256][ T6904] usb 8-1: SerialNumber: syz [ 591.275682][ T6904] usb 8-1: config 0 descriptor?? [ 591.522643][ T6904] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 009 [ 591.534469][ T6002] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 591.702505][ T6002] usb 9-1: Using ep0 maxpacket: 32 [ 591.713787][ T6002] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 591.728386][ T6002] usb 9-1: config 0 has no interface number 0 [ 591.747297][ T6002] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 591.767548][ T6002] usb 9-1: config 0 interface 89 has no altsetting 0 [ 591.779035][ T6002] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 591.792703][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.802708][ T6002] usb 9-1: Product: syz [ 591.807003][ T6922] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 591.811336][ T6002] usb 9-1: Manufacturer: syz [ 591.827015][ T6002] usb 9-1: SerialNumber: syz [ 591.842378][ T6002] usb 9-1: config 0 descriptor?? [ 591.862769][ T6002] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 591.882893][ T6002] em28xx 9-1:0.89: Video interface 89 found: [ 591.972588][ T6922] usb 5-1: Using ep0 maxpacket: 32 [ 591.979761][ T6922] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 591.991386][ T6922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.006662][ T6922] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 592.019598][ T6922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.029164][ T6922] usb 5-1: Product: syz [ 592.035639][ T6922] usb 5-1: Manufacturer: syz [ 592.040492][ T6922] usb 5-1: SerialNumber: syz [ 592.054334][ T6922] usb 5-1: config 0 descriptor?? [ 592.071067][ T6922] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 592.396143][ T7411] usb 8-1: USB disconnect, device number 9 [ 592.476456][ T6002] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 592.912629][ T6002] em28xx 9-1:0.89: AC97 command still being executed: not handled properly! [ 593.102663][ T6002] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 593.130383][ T6002] em28xx 9-1:0.89: board has no eeprom [ 593.192548][ T6002] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 593.208048][ T6002] em28xx 9-1:0.89: analog set to bulk mode. [ 593.226235][ T6904] em28xx 9-1:0.89: Registering V4L2 extension [ 593.266521][ T6002] usb 9-1: USB disconnect, device number 4 [ 593.274096][T16884] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 593.298462][ T6002] em28xx 9-1:0.89: Disconnecting em28xx [ 593.334878][T16884] kvm: Disabled LAPIC found during irq injection [ 593.342287][ T6904] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 593.358498][ T6904] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 593.366312][ T6904] em28xx 9-1:0.89: No AC97 audio processor [ 593.381770][ T6904] usb 9-1: Decoder not found [ 593.387169][ T6904] em28xx 9-1:0.89: failed to create media graph [ 593.393892][ T6904] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 593.408393][ T6904] em28xx 9-1:0.89: Registering snapshot button... [ 593.446384][ T6904] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input37 [ 593.511651][ T6922] gspca_sunplus: reg_w_1 err -71 [ 593.518942][ T6922] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 593.533632][ T6904] em28xx 9-1:0.89: Remote control support is not available for this card. [ 593.546036][ T6002] em28xx 9-1:0.89: Closing input extension [ 593.554541][ T6002] em28xx 9-1:0.89: Deregistering snapshot button [ 593.565454][ T6922] usb 5-1: USB disconnect, device number 32 [ 593.892928][ T6002] em28xx 9-1:0.89: Freeing device [ 594.305016][T16907] netlink: 'syz.4.3572': attribute type 1 has an invalid length. [ 594.440583][T16907] bond0: entered promiscuous mode [ 594.453154][T16907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.513493][T16895] loop7: detected capacity change from 0 to 32768 [ 594.531260][T16916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.538451][T16895] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3567 (16895) [ 594.570083][T16895] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 594.582103][T16895] BTRFS info (device loop7): using crc32c checksum algorithm [ 594.599228][T16916] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 594.652922][T16916] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 594.686618][T16895] BTRFS info (device loop7): enabling ssd optimizations [ 594.694039][T16895] BTRFS info (device loop7): turning on async discard [ 594.701112][T16895] BTRFS info (device loop7): enabling free space tree [ 594.774622][T16916] bond0: (slave wireguard0): making interface the new active one [ 594.798816][T16916] wireguard0: entered promiscuous mode [ 594.832211][T16916] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 595.064865][ T6002] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 595.178723][T13058] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 595.275692][ T6002] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.319936][ T6002] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.372541][ T6002] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 595.393149][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 595.416010][ T6002] usb 9-1: SerialNumber: syz [ 595.741814][ T6002] usb 9-1: 0:2 : does not exist [ 596.089358][ T6002] usb 9-1: USB disconnect, device number 5 [ 596.149590][ T5933] gfs2: fsid=syz:syz.0: file system withdrawn [ 596.242344][T15793] udevd[15793]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.054286][T16970] netlink: 'syz.0.3585': attribute type 10 has an invalid length. [ 597.495057][T16981] fuse: Bad value for 'fd' [ 597.984526][T16995] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3596'. [ 597.995981][T16995] netlink: Unknown conntrack attr (type=47, max=9) [ 598.242802][ T6002] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 598.258585][T17002] fuse: fd is not a fuse device [ 598.424932][ T6002] usb 9-1: Using ep0 maxpacket: 32 [ 598.461983][ T6002] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 598.513511][ T6002] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 598.542587][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 598.567472][ T6002] usb 9-1: Product: syz [ 598.578963][ T6002] usb 9-1: Manufacturer: syz [ 598.588458][ T6002] usb 9-1: SerialNumber: syz [ 598.625464][ T6002] usb 9-1: config 0 descriptor?? [ 598.641578][T16996] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 598.824220][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3602'. [ 599.044561][T17010] loop7: detected capacity change from 0 to 128 [ 599.109952][T17010] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 599.137049][T17010] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 599.421704][T17021] loop6: detected capacity change from 0 to 1024 [ 599.454180][T13058] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.464626][T17021] EXT4-fs: inline encryption not supported [ 599.556458][T17021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.881393][T17021] EXT4-fs warning (device loop6): ext4_rename_delete:3729: inode #18: comm syz.6.3606: Deleting old file: nlink 3, error=-2 [ 600.011665][T12660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.031351][ T6002] usb 9-1: USB disconnect, device number 6 [ 601.612130][T17064] loop6: detected capacity change from 0 to 2640 [ 601.638820][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.675182][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.703214][T17069] loop4: detected capacity change from 0 to 128 [ 601.718585][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.786256][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.829532][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.890646][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.922865][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.952616][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.981846][T17064] ldm_validate_partition_table(): Disk read failed. [ 602.012637][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 602.042677][T17064] Buffer I/O error on dev loop6, logical block 0, async page read [ 602.078778][T17064] Dev loop6: unable to read RDB block 0 [ 602.102730][T17064] loop6: unable to read partition table [ 602.119024][T17064] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 602.524346][T17058] loop6: detected capacity change from 0 to 32768 [ 602.616861][T17058] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 602.689705][T17058] XFS (loop6): Ending clean mount [ 602.770265][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3628'. [ 603.148339][T12660] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 603.306736][T17097] overlayfs: failed to clone upperpath [ 603.768256][T17074] loop8: detected capacity change from 0 to 32768 [ 603.844812][T17074] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 603.923982][T17074] XFS (loop8): Ending clean mount [ 604.650040][T13786] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 605.032520][ T7411] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 605.212683][ T7411] usb 7-1: Using ep0 maxpacket: 16 [ 605.262855][ T7411] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.286207][ T7411] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.324876][ T7411] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 605.364680][ T7411] usb 7-1: config 0 interface 0 has no altsetting 0 [ 605.398664][ T7411] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 605.426922][ T7411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.517201][ T7411] usb 7-1: config 0 descriptor?? [ 605.606550][T17135] nbd4: detected capacity change from 0 to 63 [ 605.663730][T17138] block nbd4: NBD_DISCONNECT [ 605.748722][T17138] block nbd4: Disconnected due to user request. [ 605.763144][T17138] block nbd4: shutting down sockets [ 605.764054][ T5933] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 605.790238][T17125] overlayfs: failed to resolve './file0': -2 [ 605.800898][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.837509][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.851258][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.860941][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.872560][T15791] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.920356][T15791] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.962547][ T5933] usb 8-1: Using ep0 maxpacket: 16 [ 605.980874][T17127] loop6: detected capacity change from 0 to 512 [ 605.985036][ T5933] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.001939][T15791] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 606.016879][T17127] EXT4-fs: Ignoring removed orlov option [ 606.046276][T15791] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 606.071974][ T5933] usb 8-1: config 0 interface 0 has no altsetting 0 [ 606.079784][T17127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 606.110991][ T5933] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 606.123630][T15791] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 606.155224][T17127] EXT4-fs (loop6): orphan cleanup on readonly fs [ 606.174375][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.195224][T15791] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 606.208701][ T5933] usb 8-1: config 0 descriptor?? [ 606.289443][T15791] ldm_validate_partition_table(): Disk read failed. [ 606.349144][T15791] Dev nbd4: unable to read RDB block 0 [ 606.406794][T15791] nbd4: unable to read partition table [ 606.538974][T17127] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3639: bg 0: block 248: padding at end of block bitmap is not set [ 606.639466][T17127] loop6: lost filesystem error report for type 5 error -117 [ 606.645094][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 606.659036][ C1] EXT4-fs (loop6): last error at time 1773742654: ext4_validate_block_bitmap:441 [ 606.733848][ T5933] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 606.755800][T17127] Quota error (device loop6): write_blk: dquota write failed [ 606.802136][T17127] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 606.889015][T17127] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3639: Failed to acquire dquot type 1 [ 606.953240][T17127] loop6: lost filesystem error report for type 5 error -117 [ 607.086705][ T6912] usb 8-1: USB disconnect, device number 10 [ 607.105859][T17127] EXT4-fs (loop6): 1 truncate cleaned up [ 607.174569][T15791] buffer_io_error: 75 callbacks suppressed [ 607.174589][T15791] Buffer I/O error on dev nbd4, logical block 0, async page read [ 607.224251][T17127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 607.284874][T15791] Buffer I/O error on dev nbd4, logical block 1, async page read [ 607.332322][T15791] Buffer I/O error on dev nbd4, logical block 2, async page read [ 607.361382][T15791] Buffer I/O error on dev nbd4, logical block 3, async page read [ 607.396961][T15791] Buffer I/O error on dev nbd4, logical block 0, async page read [ 607.412290][T17154] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20001 [ 607.422405][ T5933] IPVS: starting estimator thread 0... [ 607.430771][T15791] Buffer I/O error on dev nbd4, logical block 1, async page read [ 607.446278][T17154] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 607.455153][T15791] Buffer I/O error on dev nbd4, logical block 2, async page read [ 607.469537][T15791] Buffer I/O error on dev nbd4, logical block 3, async page read [ 607.489945][T15791] Buffer I/O error on dev nbd4, logical block 0, async page read [ 607.508814][T15791] Buffer I/O error on dev nbd4, logical block 1, async page read [ 607.530865][T15791] ldm_validate_partition_table(): Disk read failed. [ 607.542585][T17156] IPVS: using max 26 ests per chain, 62400 per kthread [ 607.567170][T15791] Dev nbd4: unable to read RDB block 0 [ 607.592327][T15791] nbd4: unable to read partition table [ 607.666296][T17145] loop4: detected capacity change from 0 to 131072 [ 607.675854][ T7411] hid (null): unknown global tag 0x6b [ 607.695240][ T7411] hid (null): invalid report_size 28539 [ 607.701233][ T7411] hid (null): unknown global tag 0xe [ 607.739871][T17152] fido_id[17152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 607.814770][ T7411] usb 7-1: USB disconnect, device number 11 [ 607.844857][T17145] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 608.029199][T17145] XFS (loop4): Starting recovery (logdev: internal) [ 608.086963][T17145] XFS (loop4): Ending recovery (logdev: internal) [ 608.102548][ T6922] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 608.195042][ T5853] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 608.267046][T12660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.303128][ T6922] usb 8-1: Using ep0 maxpacket: 32 [ 608.326672][ T6922] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 608.426422][ T6922] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 608.440397][ T6922] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 608.482541][ T6922] usb 8-1: Product: syz [ 608.496858][ T6922] usb 8-1: Manufacturer: syz [ 608.522551][ T6922] usb 8-1: SerialNumber: syz [ 608.570316][ T6922] usb 8-1: config 0 descriptor?? [ 608.594562][T17166] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 608.931945][ T6922] usb 8-1: USB disconnect, device number 11 [ 609.387422][T17197] loop6: detected capacity change from 0 to 512 [ 609.410347][T17197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 609.466735][T17197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.510104][T17197] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.819299][T12660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.075884][T17219] netlink: 'syz.4.3670': attribute type 1 has an invalid length. [ 610.374177][T17225] gretap0: entered allmulticast mode [ 610.456288][T17225] bond1: (slave gretap0): making interface the new active one [ 610.574841][T17225] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 610.987877][T17213] loop8: detected capacity change from 0 to 32768 [ 611.079591][T17213] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3669 (17213) [ 611.135831][T17213] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.170630][T17213] BTRFS info (device loop8): using crc32c checksum algorithm [ 611.324378][ T6922] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 611.496082][T17213] BTRFS info (device loop8): enabling ssd optimizations [ 611.532647][ T6922] usb 7-1: Using ep0 maxpacket: 32 [ 611.549900][ T6922] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 611.561384][T17213] BTRFS info (device loop8): turning on flush-on-commit [ 611.590819][ T6922] usb 7-1: config 0 has no interface number 0 [ 611.600694][T17213] BTRFS info (device loop8): enabling free space tree [ 611.618478][ T6922] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 611.640785][T17213] BTRFS info (device loop8): enabling auto defrag [ 611.671069][T17213] BTRFS info (device loop8): use lzo compression, level 1 [ 611.690692][ T6922] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 611.708608][T17213] BTRFS info (device loop8): max_inline set to 4096 [ 611.728661][ T6922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.744373][ T6922] usb 7-1: Product: syz [ 611.751653][ T6922] usb 7-1: Manufacturer: syz [ 611.760967][ T6922] usb 7-1: SerialNumber: syz [ 611.788348][ T6922] usb 7-1: config 0 descriptor?? [ 611.809578][T17238] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 612.066739][T17238] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 612.359013][T13786] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 612.546220][ T30] audit: type=1800 audit(1773742660.845:170): pid=17264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3680" name="bus" dev="tmpfs" ino=1376 res=0 errno=0 [ 613.126870][ T6922] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 613.159662][ T6922] asix 7-1:0.188: probe with driver asix failed with error -32 [ 613.193748][ T6922] usb 7-1: USB disconnect, device number 12 [ 613.921885][T17295] overlayfs: failed to clone upperpath [ 614.692140][T17315] loop7: detected capacity change from 0 to 1024 [ 614.758470][T17315] EXT4-fs: Ignoring removed bh option [ 614.798220][T17315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.257318][T13058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.661958][T17330] loop6: detected capacity change from 0 to 512 [ 615.719925][T17330] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 615.767739][T17330] EXT4-fs (loop6): 1 truncate cleaned up [ 615.812130][T17330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.926559][ T30] audit: type=1800 audit(1773742664.215:171): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3705" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 616.177616][T12660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.442563][ T6928] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 616.602178][T17350] loop6: detected capacity change from 0 to 1024 [ 616.632771][ T6928] usb 8-1: Using ep0 maxpacket: 32 [ 616.641238][ T6928] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 616.675931][T17350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.678325][ T6928] usb 8-1: config 0 has no interface number 0 [ 616.706953][ T6928] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 616.719929][ T6928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.728144][ T6928] usb 8-1: Product: syz [ 616.732544][ T6928] usb 8-1: Manufacturer: syz [ 616.737214][ T6928] usb 8-1: SerialNumber: syz [ 616.745161][ T6928] usb 8-1: config 0 descriptor?? [ 616.829846][T12660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.165146][ T6928] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 617.195544][ T6928] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 617.231885][T17366] overlayfs: failed to clone upperpath [ 617.363964][T17368] loop8: detected capacity change from 0 to 4096 [ 617.419685][T17374] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.443510][ T30] audit: type=1800 audit(1773742665.745:172): pid=17368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3721" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 617.604767][T17377] loop6: detected capacity change from 0 to 128 [ 617.664491][T17381] loop4: detected capacity change from 0 to 128 [ 617.681198][T17377] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 617.725132][T17381] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 617.837113][ T6928] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 617.863140][ T6928] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 617.891199][ T6928] usb 8-1: USB disconnect, device number 12 [ 617.928014][T17385] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3727'. [ 618.647231][T17403] loop4: detected capacity change from 0 to 4096 [ 618.882838][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.898899][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.229216][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.304141][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.475820][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 619.511150][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 619.524852][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 619.542272][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 619.550393][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 619.688785][T17428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3747'. [ 619.774538][T17419] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.785649][T17419] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.090151][T17431] overlayfs: upper fs does not support file handles, falling back to index=off. [ 620.106450][T17419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.246963][T17419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.349106][T17434] IPv4: Oversized IP packet from 172.20.20.24 [ 620.363408][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 620.372332][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 620.671328][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 620.975534][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.993020][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.069273][T10136] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.084617][T10136] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.094227][T10136] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.112623][T10136] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.141867][T10136] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.158293][T10136] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.177899][T10136] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.197966][T10136] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.267511][T17455] loop7: detected capacity change from 0 to 128 [ 621.293631][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.310032][T17455] FAT-fs (loop7): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 621.316029][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.690325][ T5863] Bluetooth: hci4: command tx timeout [ 621.867868][T17459] loop4: detected capacity change from 0 to 256 [ 621.974473][T17459] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 622.373927][ T58] bridge_slave_1: left allmulticast mode [ 622.379646][ T58] bridge_slave_1: left promiscuous mode [ 622.387061][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.423881][ T58] bridge_slave_0: left allmulticast mode [ 622.454383][ T58] bridge_slave_0: left promiscuous mode [ 622.472801][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.509988][T17471] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3766'. [ 622.791468][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 622.815234][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 622.849368][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 622.863070][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 622.874082][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 622.876078][T17483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 623.031830][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3773'. [ 623.280231][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.291986][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.302753][ T58] bond0 (unregistering): Released all slaves [ 623.317241][ T58] bond1 (unregistering): Released all slaves [ 623.722700][ T5863] Bluetooth: hci4: command tx timeout [ 623.786139][T17495] loop8: detected capacity change from 0 to 4096 [ 624.286143][T17423] chnl_net:caif_netlink_parms(): no params data found [ 624.375119][ T167] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.389097][ T167] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 624.417595][ T167] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.436849][ T167] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 624.457312][ T167] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.478489][ T167] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 624.622607][ T167] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.637381][ T167] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 624.893565][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.900048][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.009251][ T5863] Bluetooth: hci3: command tx timeout [ 625.169705][T17423] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.190315][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.213407][T17423] bridge_slave_0: entered allmulticast mode [ 625.242589][T17423] bridge_slave_0: entered promiscuous mode [ 625.403254][T17423] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.425879][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.455660][T17423] bridge_slave_1: entered allmulticast mode [ 625.489040][T17423] bridge_slave_1: entered promiscuous mode [ 625.696618][T17536] overlayfs: failed to clone upperpath [ 625.748960][ T58] hsr_slave_0: left promiscuous mode [ 625.771368][ T58] hsr_slave_1: left promiscuous mode [ 625.792730][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.805406][ T5863] Bluetooth: hci4: command tx timeout [ 625.826169][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.846275][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.866471][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.889672][ T58] veth1_macvtap: left promiscuous mode [ 625.895450][ T58] veth0_macvtap: left promiscuous mode [ 625.901182][ T58] veth1_vlan: left promiscuous mode [ 625.906732][ T58] veth0_vlan: left promiscuous mode [ 626.618073][T17545] loop8: detected capacity change from 0 to 512 [ 626.629344][ T58] team0 (unregistering): Port device team_slave_1 removed [ 626.641190][T17545] EXT4-fs (loop8): Test dummy encryption mode enabled [ 626.670325][T17545] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 626.700325][ T58] team0 (unregistering): Port device team_slave_0 removed [ 626.702304][T17545] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3788: bad orphan inode 131083 [ 626.729558][T17545] loop8: lost filesystem error report for type 5 error -117 [ 626.777178][T17545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.013888][T13786] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.087847][ T5863] Bluetooth: hci3: command tx timeout [ 627.124232][ T30] audit: type=1326 audit(1773742675.425:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.151077][ T30] audit: type=1326 audit(1773742675.445:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.206322][ T30] audit: type=1326 audit(1773742675.445:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.239096][ T30] audit: type=1326 audit(1773742675.445:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.263488][ T30] audit: type=1326 audit(1773742675.445:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.287083][ T30] audit: type=1326 audit(1773742675.445:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.310586][ T30] audit: type=1326 audit(1773742675.445:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.337760][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.355706][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.415874][ T30] audit: type=1326 audit(1773742675.445:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.451902][ T30] audit: type=1326 audit(1773742675.445:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.476429][ T30] audit: type=1326 audit(1773742675.445:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.0.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 627.517414][T17423] team0: Port device team_slave_0 added [ 627.562363][T17423] team0: Port device team_slave_1 added [ 627.614852][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.623137][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.650374][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.688801][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.696836][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.723361][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.883477][ T5863] Bluetooth: hci4: command tx timeout [ 628.001237][T17423] hsr_slave_0: entered promiscuous mode [ 628.012134][T17423] hsr_slave_1: entered promiscuous mode [ 628.019677][T17423] debugfs: 'hsr0' already exists in 'hsr' [ 628.025690][T17423] Cannot create hsr debugfs directory [ 628.227407][T17480] chnl_net:caif_netlink_parms(): no params data found [ 628.258867][T17570] fuse: fd is not a fuse device [ 628.454888][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804680dc00: rx timeout, send abort [ 628.464097][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804680dc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 629.162986][ T5863] Bluetooth: hci3: command tx timeout [ 629.182694][T17480] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.193454][T17480] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.200893][T17480] bridge_slave_0: entered allmulticast mode [ 629.209719][T17480] bridge_slave_0: entered promiscuous mode [ 629.369467][T17480] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.371742][T17592] loop8: detected capacity change from 0 to 32768 [ 629.395227][T17480] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.425141][T17592] [ 629.425141][T17592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 629.425141][T17592] [ 629.432699][T17480] bridge_slave_1: entered allmulticast mode [ 629.481671][T17480] bridge_slave_1: entered promiscuous mode [ 629.885197][ T12] [ 629.885197][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 629.885197][ T12] [ 629.934276][ T12] [ 629.934276][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 629.934276][ T12] [ 629.949034][T17480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.989405][ T12] [ 629.989405][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 629.989405][ T12] [ 630.053412][ T119] [ 630.053412][ T119] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 630.053412][ T119] [ 630.101294][T13786] [ 630.101294][T13786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 630.101294][T13786] [ 630.127169][T13786] [ 630.127169][T13786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 630.127169][T13786] [ 630.191801][T17480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.453860][T17480] team0: Port device team_slave_0 added [ 630.496419][T17480] team0: Port device team_slave_1 added [ 631.077611][T17480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.106568][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.182614][T17480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.245210][ T5863] Bluetooth: hci3: command tx timeout [ 631.290483][T17480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.298029][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.325146][T17480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.651351][T17423] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 631.730315][T17480] hsr_slave_0: entered promiscuous mode [ 631.745644][T17480] hsr_slave_1: entered promiscuous mode [ 631.764742][T17480] debugfs: 'hsr0' already exists in 'hsr' [ 631.788151][T17480] Cannot create hsr debugfs directory [ 631.830606][T17423] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 631.926162][T17423] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 631.962096][T17653] loop4: detected capacity change from 0 to 256 [ 632.056127][T17653] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 632.265079][T17423] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 632.444407][T17674] fuse: fd is not a fuse device [ 632.557585][ T58] bridge_slave_1: left allmulticast mode [ 632.565706][ T58] bridge_slave_1: left promiscuous mode [ 632.571701][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.586598][ T58] bridge_slave_0: left allmulticast mode [ 632.593201][ T58] bridge_slave_0: left promiscuous mode [ 632.599217][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.921144][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.937097][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.946999][ T58] bond0 (unregistering): Released all slaves [ 633.546453][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'. [ 634.109828][ T58] hsr_slave_0: left promiscuous mode [ 634.159194][ T58] hsr_slave_1: left promiscuous mode [ 634.202299][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.256525][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.065916][ T58] team0 (unregistering): Port device team_slave_1 removed [ 635.088918][ T58] team0 (unregistering): Port device team_slave_0 removed [ 635.970138][T17423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.074211][T17736] xt_hashlimit: size too large, truncated to 1048576 [ 636.117253][T17741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3844'. [ 636.509931][T17741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3844'. [ 636.669885][T17423] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.759735][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.767028][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.798611][T17749] loop4: detected capacity change from 0 to 128 [ 636.841566][T17749] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 636.926355][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.933622][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.256369][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'. [ 637.329901][T17759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.077102][T17480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.121307][T17480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.170037][T17480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.230141][T17480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.276712][T17423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.788102][T17480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.880031][T17805] overlayfs: failed to clone upperpath [ 638.929458][T17480] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.957746][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.965155][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.028937][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.036235][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.610606][T17814] overlayfs: failed to resolve './file0': -2 [ 639.746064][T17423] veth0_vlan: entered promiscuous mode [ 639.837586][T17423] veth1_vlan: entered promiscuous mode [ 640.056772][T17423] veth0_macvtap: entered promiscuous mode [ 640.091289][T17423] veth1_macvtap: entered promiscuous mode [ 640.221509][T17423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.319492][T17480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.382222][T17423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.509822][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.539749][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.580916][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.602921][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.161022][T10136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.183942][T17480] veth0_vlan: entered promiscuous mode [ 641.196000][T10136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.344314][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.366624][T17480] veth1_vlan: entered promiscuous mode [ 641.384224][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.616456][T17480] veth0_macvtap: entered promiscuous mode [ 641.691064][T17480] veth1_macvtap: entered promiscuous mode [ 641.904804][T17480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.976393][T17480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.117206][T10136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.385867][T10136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.788457][T10136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.814326][T10136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.286980][T17899] netlink: 'syz.4.3874': attribute type 10 has an invalid length. [ 644.385750][T17902] netlink: 'syz.4.3874': attribute type 10 has an invalid length. [ 650.190437][T17899] team0: Port device dummy0 added [ 650.225749][T17902] team0: Port device dummy0 removed [ 650.748301][T10136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.788145][T10136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.944278][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.970458][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.053730][ T7406] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 651.226479][ T7406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.263375][ T7406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.296680][ T7406] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 651.333053][ T7406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.342781][T17962] pim6reg1: entered allmulticast mode [ 651.415559][ T7406] usb 5-1: config 0 descriptor?? [ 652.055195][ T7406] hid-led 0003:27B8:01ED.001A: probe with driver hid-led failed with error -71 [ 652.094994][ T7406] usb 5-1: USB disconnect, device number 33 [ 653.253248][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'. [ 653.340574][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.353505][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'. [ 653.384626][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.424185][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.469809][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.114090][T18133] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 658.121579][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 658.121599][ T30] audit: type=1326 audit(1773742706.415:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.4.3947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1120f9c799 code=0x0 [ 659.263912][T18186] loop4: detected capacity change from 0 to 8192 [ 659.462002][T18186] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 659.479506][T18186] FAT-fs (loop4): Filesystem has been set read-only [ 660.422997][ T6904] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 660.595321][ T6904] usb 9-1: unable to get BOS descriptor or descriptor too short [ 660.632240][ T6904] usb 9-1: not running at top speed; connect to a high speed hub [ 660.672029][ T6904] usb 9-1: config 15 has an invalid interface number: 131 but max is 0 [ 660.690703][ T6904] usb 9-1: config 15 has no interface number 0 [ 660.716748][ T6904] usb 9-1: config 15 interface 131 has no altsetting 0 [ 660.740697][ T6904] usb 9-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=ea.30 [ 660.766058][ T6904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.791576][ T6904] usb 9-1: Product: syz [ 660.806713][ T6904] usb 9-1: Manufacturer: syz [ 660.828304][ T6904] usb 9-1: SerialNumber: syz [ 661.101348][ T6904] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 661.134117][ T6904] gspca_mr97310a: reg write [21] error -22 [ 661.166039][ T6904] mr97310a 9-1:15.131: probe with driver mr97310a failed with error -22 [ 661.228282][ T6904] usb 9-1: USB disconnect, device number 7 [ 661.545230][T18237] loop1: detected capacity change from 0 to 32768 [ 661.552664][ T6900] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 661.609199][T18237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3972 (18237) [ 661.725230][T18237] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 661.752588][ T6900] usb 5-1: Using ep0 maxpacket: 16 [ 661.759625][T18237] BTRFS info (device loop1): using crc32c checksum algorithm [ 661.785684][ T6900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 661.821518][ T6900] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 661.850020][ T6900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.900928][ T6900] usb 5-1: Product: syz [ 661.929248][ T6900] usb 5-1: Manufacturer: syz [ 661.945672][ T6900] usb 5-1: SerialNumber: syz [ 661.999865][ T6900] usb 5-1: config 0 descriptor?? [ 662.030636][ T6900] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 662.045019][T18237] BTRFS info (device loop1): enabling ssd optimizations [ 662.048670][ T6900] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 662.080344][T18237] BTRFS info (device loop1): turning on flush-on-commit [ 662.106710][T18237] BTRFS info (device loop1): enabling free space tree [ 662.127437][T18237] BTRFS info (device loop1): enabling auto defrag [ 662.153888][ T7411] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 662.171093][T18237] BTRFS info (device loop1): use lzo compression, level 1 [ 662.190438][T18237] BTRFS info (device loop1): max_inline set to 4096 [ 662.324625][ T7411] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.351849][ T7411] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.374881][ T7411] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 662.392668][ T7411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.449705][ T7411] usb 10-1: config 0 descriptor?? [ 662.638353][ T6900] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 662.715248][T18294] netlink: 'syz.8.3983': attribute type 1 has an invalid length. [ 662.906944][T18300] bond1: (slave veth5): Enslaving as an active interface with a down link [ 663.109613][ T7411] usb 10-1: string descriptor 0 read error: -22 [ 663.119050][T17480] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 663.373388][ T6900] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 663.381684][ T7411] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71 [ 663.412238][ T6900] em28xx 5-1:0.0: board has no eeprom [ 663.423669][ T7411] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 663.478080][ T7411] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71 [ 663.501510][ T7411] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 663.533756][ T6900] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 663.545600][ T7411] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 663.555171][ T6900] em28xx 5-1:0.0: dvb set to bulk mode. [ 663.568606][ T7406] em28xx 5-1:0.0: Binding DVB extension [ 663.587544][T18315] tipc: Failed to remove unknown binding: 66,1,1/0:361461719/361461721 [ 663.650894][ T7411] usb 10-1: USB disconnect, device number 2 [ 663.657117][ T6900] usb 5-1: USB disconnect, device number 34 [ 663.704902][ T6900] em28xx 5-1:0.0: Disconnecting em28xx [ 664.007493][ T7406] em28xx 5-1:0.0: Registering input extension [ 664.058362][ T6900] em28xx 5-1:0.0: Closing input extension [ 664.810612][ T6900] em28xx 5-1:0.0: Freeing device [ 665.460812][T18368] netlink: 'syz.8.4003': attribute type 1 has an invalid length. [ 665.625021][T18368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.743690][ T6900] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 665.815422][T18374] bond2: (slave dummy0): making interface the new active one [ 665.858247][T18374] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 665.906185][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4006'. [ 665.922556][ T6900] usb 2-1: Using ep0 maxpacket: 32 [ 665.933688][ T6900] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 665.947755][ T6900] usb 2-1: config 0 has no interface number 0 [ 665.962596][ T6900] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 665.988960][ T6900] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 666.000064][ T6900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.010436][ T6900] usb 2-1: Product: syz [ 666.014947][ T6900] usb 2-1: Manufacturer: syz [ 666.019662][ T6900] usb 2-1: SerialNumber: syz [ 666.035553][ T6900] usb 2-1: config 0 descriptor?? [ 666.055268][ T6900] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 666.065589][ T6900] em28xx 2-1:0.132: Video interface 132 found: [ 666.421996][T18396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.466067][ T6900] em28xx 2-1:0.132: chip ID is em2874 [ 666.933363][T18410] loop2: detected capacity change from 0 to 7 [ 666.941319][T18410] loop2: [ 666.944499][T18410] loop2: partition table partially beyond EOD, truncated [ 667.078473][ T6900] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 667.135018][ T6900] em28xx 2-1:0.132: board has no eeprom [ 667.214245][ T6900] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 667.251218][ T6900] em28xx 2-1:0.132: analog set to bulk mode. [ 667.273194][ T7411] em28xx 2-1:0.132: Registering V4L2 extension [ 667.394330][ T6900] usb 2-1: USB disconnect, device number 16 [ 667.429277][ T6900] em28xx 2-1:0.132: Disconnecting em28xx [ 667.518631][ T5863] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 667.728649][ T7411] usb 2-1: Decoder not found [ 667.746631][ T7411] em28xx 2-1:0.132: failed to create media graph [ 667.770313][ T7411] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 667.807420][ T7411] em28xx 2-1:0.132: Remote control support is not available for this card. [ 667.836831][ T6900] em28xx 2-1:0.132: Closing input extension [ 667.976270][T18442] fuse: Bad value for 'fd' [ 667.997000][ T6900] em28xx 2-1:0.132: Freeing device [ 668.179075][T18425] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 668.221276][T18427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.266161][T18427] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 668.516463][T18427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.540635][T18427] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 668.610232][T18427] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 668.624533][T18427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 668.637634][T18427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 668.650066][T18427] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 668.674012][T18427] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 668.785042][T18427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.803612][T18427] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 668.886547][T18427] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 669.179764][T18475] xt_connbytes: Forcing CT accounting to be enabled [ 669.962596][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 670.090220][T18500] fuse: fd is not a fuse device [ 670.522521][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 670.683066][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout [ 670.824609][T18511] fuse: fd is not a fuse device [ 670.843565][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 671.919179][T18525] loop9: detected capacity change from 0 to 32768 [ 671.944812][T18525] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4043 (18525) [ 672.043410][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 672.090656][T18525] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 672.152727][T18525] BTRFS info (device loop9): using blake2b checksum algorithm [ 672.394699][T18525] BTRFS info (device loop9): enabling ssd optimizations [ 672.447188][T18525] BTRFS info (device loop9): turning on async discard [ 672.497154][T18525] BTRFS info (device loop9): enabling free space tree [ 672.555655][T18525] BTRFS info (device loop9): use zstd compression, level 3 [ 672.602493][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 672.612793][T18569] batadv_slave_1: entered promiscuous mode [ 672.745336][ T30] audit: type=1800 audit(1773742721.035:185): pid=18525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4043" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 672.770260][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout [ 672.922799][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 672.948377][T18568] batadv_slave_1: left promiscuous mode [ 673.346866][T17423] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 674.686056][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 674.842621][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout [ 675.002755][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 675.818884][ T30] audit: type=1326 audit(1773742724.115:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18641 comm="syz.8.4076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f117cd9c799 code=0x0 [ 676.050347][T18635] loop1: detected capacity change from 0 to 32768 [ 676.075401][T18635] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4072 (18635) [ 676.090790][ T7411] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 676.137933][T18635] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 676.149173][T18635] BTRFS info (device loop1): using sha256 checksum algorithm [ 676.234225][T18635] BTRFS info (device loop1): enabling ssd optimizations [ 676.253915][T18635] BTRFS info (device loop1): turning on async discard [ 676.264691][ T7411] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.272117][T18635] BTRFS info (device loop1): enabling free space tree [ 676.281195][ T7411] usb 10-1: config 0 has no interfaces? [ 676.294612][T18635] BTRFS info (device loop1): enabling auto defrag [ 676.299328][ T7411] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 676.311106][T18635] BTRFS info (device loop1): max_inline set to 4096 [ 676.322522][ T7411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 676.342456][ T7411] usb 10-1: SerialNumber: syz [ 676.356454][ T7411] usb 10-1: config 0 descriptor?? [ 676.489892][ T30] audit: type=1800 audit(1773742724.785:187): pid=18635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4072" name="file1" dev="loop1" ino=263 res=0 errno=0 [ 676.597264][ T6904] usb 10-1: USB disconnect, device number 3 [ 676.719630][T17480] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 677.444742][T18684] loop1: detected capacity change from 0 to 512 [ 677.529829][T18684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.600471][T18684] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.102782][ T6924] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 678.252692][ T6924] usb 2-1: Using ep0 maxpacket: 8 [ 678.269801][ T6924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 678.290955][ T6924] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 678.314086][ T6924] usb 2-1: config 0 has no interface number 0 [ 678.338813][ T6924] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 678.374162][ T6924] usb 2-1: config 0 interface 88 has no altsetting 0 [ 678.401224][ T6924] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 678.418800][ T6924] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 678.439131][ T6924] usb 2-1: Product: syz [ 678.452223][ T6924] usb 2-1: Manufacturer: syz [ 678.462486][ T6924] usb 2-1: SerialNumber: syz [ 678.491621][ T6924] usb 2-1: config 0 descriptor?? [ 678.528586][T18709] loop9: detected capacity change from 0 to 256 [ 678.781912][ T6924] usb 2-1: USB disconnect, device number 17 [ 679.433954][T17480] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.933420][T18745] overlayfs: failed to clone upperpath [ 679.984089][T18748] loop1: detected capacity change from 0 to 256 [ 680.059287][T18748] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 680.186008][T18748] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 680.666813][T18759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 680.848939][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 680.858171][T18762] netlink: 'syz.1.4106': attribute type 12 has an invalid length. [ 680.901154][ T1025] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.913341][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 680.943291][ T1025] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.955158][T18762] netlink: 'syz.1.4106': attribute type 12 has an invalid length. [ 680.979413][ T1025] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.031313][ T1025] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.776244][T18785] loop8: detected capacity change from 0 to 131072 [ 682.790117][T18785] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 682.798344][T18785] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 682.809065][T18785] F2FS-fs (loop8): invalid crc value [ 682.909868][T18785] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 682.932629][T18785] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 682.939858][T18785] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 683.557572][T18801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 683.625383][T18801] block device autoloading is deprecated and will be removed. [ 684.041248][T18812] loop9: detected capacity change from 0 to 32768 [ 684.089473][T18822] all (unregistering): Released all slaves [ 684.090785][T18812] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 684.124758][T18832] netlink: 'syz.0.4124': attribute type 10 has an invalid length. [ 684.272012][T18812] XFS (loop9): Ending clean mount [ 684.397484][T18836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.644426][T17423] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 685.232334][T18849] overlayfs: failed to clone upperpath [ 685.378806][T18858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4122'. [ 685.625121][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880691d1800: rx timeout, send abort [ 685.995861][T18871] overlayfs: failed to get inode (-116) [ 686.290505][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.297287][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.145986][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.164775][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.180916][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 691.210374][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 691.221173][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 693.034730][T18904] vlan1: entered allmulticast mode [ 693.039979][T18904] veth0_vlan: entered allmulticast mode [ 693.127645][T18905] vlan1: left allmulticast mode [ 693.139754][T18905] veth0_vlan: left allmulticast mode [ 693.221100][T18911] xt_hashlimit: size too large, truncated to 1048576 [ 693.412622][ T5852] Bluetooth: hci4: command tx timeout [ 693.634534][ T167] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.222100][ T167] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.250173][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.273466][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.296128][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 694.324795][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 694.340301][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.550380][ T167] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.801517][ T167] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.042054][T18894] chnl_net:caif_netlink_parms(): no params data found [ 695.449892][T18979] loop8: detected capacity change from 0 to 16 [ 695.490472][T18979] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 695.524778][ T5852] Bluetooth: hci4: command tx timeout [ 696.443038][ T5852] Bluetooth: hci1: command tx timeout [ 696.822336][T18894] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.839464][T18894] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.859173][T18894] bridge_slave_0: entered allmulticast mode [ 696.876287][T18894] bridge_slave_0: entered promiscuous mode [ 697.013967][T18894] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.031684][T18894] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.046648][T18894] bridge_slave_1: entered allmulticast mode [ 697.088715][T18894] bridge_slave_1: entered promiscuous mode [ 697.374988][T19022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4173'. [ 697.521235][T18894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.535402][T19020] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.543223][T19020] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.559954][T19030] netlink: 'syz.0.4174': attribute type 10 has an invalid length. [ 697.566835][ T5852] Bluetooth: hci4: command tx timeout [ 697.574162][T19020] bridge0: entered allmulticast mode [ 697.745737][T19024] bridge_slave_1: left allmulticast mode [ 697.762985][T19024] bridge_slave_1: left promiscuous mode [ 697.780132][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.844386][T19024] bridge_slave_0: left allmulticast mode [ 697.850278][T19024] bridge_slave_0: left promiscuous mode [ 697.857443][T19024] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.078744][ T167] bridge_slave_1: left allmulticast mode [ 698.084801][ T167] bridge_slave_1: left promiscuous mode [ 698.090642][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.101881][ T167] bridge_slave_0: left allmulticast mode [ 698.112604][ T167] bridge_slave_0: left promiscuous mode [ 698.126078][ T167] bridge0: port 1(bridge_slave_0) entered disabled state syzkaller syzkaller login: [ 698.447081][ T167] bond1 (unregistering): (slave gretap0): Releasing active interface [ 698.522557][ T5852] Bluetooth: hci1: command tx timeout [ 698.572111][ T167] bond0 (unregistering): (slave wireguard0): Releasing backup interface [ 698.590860][ T167] wireguard0: left promiscuous mode [ 698.619356][ T167] bond0 (unregistering): Released all slaves [ 698.647694][ T167] bond1 (unregistering): Released all slaves [ 698.676971][T18894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.789751][T18938] chnl_net:caif_netlink_parms(): no params data found [ 698.999886][T18894] team0: Port device team_slave_0 added [ 699.099402][T18894] team0: Port device team_slave_1 added [ 699.421273][T18894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.428355][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.455946][T18894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.494646][ T5852] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 699.517753][T18697] libceph: connect (1)[c::]:6789 error -101 [ 699.541955][T18697] libceph: mon0 (1)[c::]:6789 connect error [ 699.559023][T19072] ceph: No mds server is up or the cluster is laggy [ 699.593272][T18894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.645484][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.673416][ T5852] Bluetooth: hci4: command tx timeout [ 699.721264][T18894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.769269][T18938] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.779332][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.787809][T18938] bridge_slave_0: entered allmulticast mode [ 699.820863][T18938] bridge_slave_0: entered promiscuous mode [ 699.966380][T18938] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.995764][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.039537][T18938] bridge_slave_1: entered allmulticast mode [ 700.066696][T18938] bridge_slave_1: entered promiscuous mode [ 700.296067][ T167] hsr_slave_0: left promiscuous mode [ 700.334204][ T167] hsr_slave_1: left promiscuous mode [ 700.368317][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.511162][T19106] fuse: Bad value for 'fd' [ 700.602611][ T5852] Bluetooth: hci1: command tx timeout [ 701.239772][ T167] team0 (unregistering): Port device team_slave_1 removed [ 701.295160][ T167] team0 (unregistering): Port device team_slave_0 removed [ 701.871810][T18938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.191363][T18938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.452333][T18894] hsr_slave_0: entered promiscuous mode [ 702.478089][T18894] hsr_slave_1: entered promiscuous mode [ 702.526022][T18938] team0: Port device team_slave_0 added [ 702.556479][T18938] team0: Port device team_slave_1 added [ 702.695113][ T5852] Bluetooth: hci1: command tx timeout [ 702.754460][T18938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.788829][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.905438][T18938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.019258][T18938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.041131][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.115110][T18938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.504307][T18938] hsr_slave_0: entered promiscuous mode [ 703.554375][T18938] hsr_slave_1: entered promiscuous mode [ 703.566216][T18938] debugfs: 'hsr0' already exists in 'hsr' [ 703.579583][T18938] Cannot create hsr debugfs directory [ 704.121720][T19160] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 704.990435][T18894] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.038771][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4213'. [ 705.424894][T18894] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.674929][T18894] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.842886][T18894] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.071149][T18894] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 707.150337][T18894] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 707.237131][T18894] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 707.541033][T18938] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.645018][T18894] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 708.110073][T18938] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.711613][T18938] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.065136][T18938] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.577110][T18894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.629522][T18894] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.727710][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.734983][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.854276][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.863221][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.912577][T18938] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 710.973891][T18938] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 711.020464][T18938] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 711.107832][T18938] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 711.498855][T18894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.128819][T18938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.149312][T18894] veth0_vlan: entered promiscuous mode [ 712.254248][T19136] Set syz1 is full, maxelem 65536 reached [ 712.317834][T18894] veth1_vlan: entered promiscuous mode [ 712.400004][T18938] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.536049][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.543320][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.739827][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.747123][T10136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.894074][T18894] veth0_macvtap: entered promiscuous mode [ 712.936865][T19274] loop8: detected capacity change from 0 to 512 [ 712.951564][T18894] veth1_macvtap: entered promiscuous mode [ 713.187667][T19274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 713.241469][T19274] ext4 filesystem being mounted at /332/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 713.280640][T18894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.408807][T18894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.471649][ T167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.501285][ T167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.544192][ T167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.575478][ T167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.637599][T13786] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 713.698876][T19290] fuse: Bad value for 'fd' [ 714.101912][T10136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.137605][T10136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.248603][T10136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.284036][T18697] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 714.297702][T10136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.346669][T18938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.379465][T19302] veth4: entered promiscuous mode [ 714.390265][T19302] veth4: entered allmulticast mode [ 714.463353][T18697] usb 9-1: Using ep0 maxpacket: 32 [ 714.480341][T18697] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 714.514508][T18697] usb 9-1: config 0 has no interface number 0 [ 714.540746][T18697] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 714.571555][T18697] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.607195][T18697] usb 9-1: Product: syz [ 714.625592][T18697] usb 9-1: Manufacturer: syz [ 714.644165][T18697] usb 9-1: SerialNumber: syz [ 714.651959][T18697] usb 9-1: config 0 descriptor?? [ 715.096245][T18697] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 715.121702][T18697] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 715.510714][T18938] veth0_vlan: entered promiscuous mode [ 715.581389][T18938] veth1_vlan: entered promiscuous mode [ 715.623106][T19316] kvm: pic: single mode not supported [ 715.623485][T19316] kvm: pic: non byte read [ 715.646511][T19316] kvm: pic: non byte read [ 715.667342][T19316] kvm: pic: non byte read [ 715.684666][T19316] kvm: pic: non byte read [ 715.696349][T19316] kvm: pic: single mode not supported [ 715.696621][T19316] kvm: pic: level sensitive irq not supported [ 715.708657][T19316] kvm: pic: non byte read [ 715.739890][T18938] veth0_macvtap: entered promiscuous mode [ 715.761247][T19316] kvm: pic: non byte read [ 715.774006][T19316] kvm: pic: non byte read [ 715.800296][T19316] kvm: pic: non byte read [ 715.853184][T18938] veth1_macvtap: entered promiscuous mode [ 715.863824][T19316] kvm: pic: non byte read [ 716.005089][T18938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.048071][T18938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.098985][T10136] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.118476][T10136] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.175742][T10136] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.208096][T18697] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 716.221954][T10136] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.276035][T18697] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 716.315518][T18697] usb 9-1: USB disconnect, device number 8 [ 717.490264][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.519142][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.754332][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.781810][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.624609][T19373] fuse: fd is not a fuse device [ 718.824644][ T30] audit: type=1326 audit(1773742767.115:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 718.871662][ T30] audit: type=1326 audit(1773742767.115:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 718.920273][ T30] audit: type=1326 audit(1773742767.125:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 718.972700][ T30] audit: type=1326 audit(1773742767.125:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 719.028033][ T30] audit: type=1326 audit(1773742767.125:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 719.090658][ T30] audit: type=1326 audit(1773742767.165:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 719.148256][ T30] audit: type=1326 audit(1773742767.165:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 719.176115][ T30] audit: type=1326 audit(1773742767.165:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 719.202357][ T30] audit: type=1326 audit(1773742767.195:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 719.227719][ T30] audit: type=1326 audit(1773742767.195:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42519c799 code=0x7ffc0000 [ 719.680236][T19390] loop8: detected capacity change from 0 to 2048 [ 719.741176][T19390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.814908][T19390] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 719.864891][T13786] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.011710][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4265'. [ 720.145299][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4266'. [ 722.931962][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.950363][T19468] bridge_slave_1: left allmulticast mode [ 722.950747][T19451] loop8: detected capacity change from 0 to 32768 [ 722.968030][T19468] bridge_slave_1: left promiscuous mode [ 722.982771][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.999525][T19451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4284 (19451) [ 723.084961][T19451] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 723.126090][T19451] BTRFS info (device loop8): using crc32c checksum algorithm [ 723.234373][ T3527] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 723.262938][T19451] BTRFS warning (device loop8): couldn't read tree root [ 723.292238][T19451] BTRFS warning (device loop8): try to load backup roots slot 1 [ 723.333378][ T3487] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 723.419005][T19451] BTRFS warning (device loop8): couldn't read tree root [ 723.452942][T19451] BTRFS warning (device loop8): try to load backup roots slot 2 [ 723.489667][ T3487] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 723.534043][T19451] BTRFS warning (device loop8): couldn't read tree root [ 723.546895][T19451] BTRFS warning (device loop8): try to load backup roots slot 3 [ 723.628828][T19451] BTRFS info (device loop8): checking UUID tree [ 723.655199][T19451] BTRFS info (device loop8): setting nodatasum [ 723.696389][T19451] BTRFS info (device loop8): enabling ssd optimizations [ 723.747307][T19451] BTRFS info (device loop8): turning on flush-on-commit [ 723.786637][T19451] BTRFS info (device loop8): turning on async discard [ 723.844886][T19451] BTRFS info (device loop8): enabling free space tree [ 723.889974][T19451] BTRFS info (device loop8): trying to use backup root at mount time [ 723.933535][T19451] BTRFS info (device loop8): max_inline set to 0 [ 723.959934][T19491] loop2: detected capacity change from 0 to 7 [ 723.997048][T18945] Dev loop2: unable to read RDB block 7 [ 724.025879][T18945] loop2: AHDI p1 p2 p3 [ 724.049912][T18945] loop2: partition table partially beyond EOD, truncated [ 724.084141][T18945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 724.114848][T18945] loop2: p3 start 335544320 is beyond EOD, truncated [ 724.166208][T19491] Dev loop2: unable to read RDB block 7 [ 724.193455][T19491] loop2: AHDI p1 p2 p3 [ 724.209887][T19491] loop2: partition table partially beyond EOD, truncated [ 724.251150][T19491] loop2: p1 start 1818582900 is beyond EOD, truncated [ 724.291686][T19491] loop2: p3 start 335544320 is beyond EOD, truncated [ 724.597083][T19507] loop5: detected capacity change from 0 to 7 [ 724.625370][T19507] loop5: [ 724.628689][T19507] loop5: partition table partially beyond EOD, truncated [ 725.001254][T19496] BTRFS info (device loop8 state M): max_inline set to 0 [ 725.021360][T19516] netlink: 'syz.2.4302': attribute type 1 has an invalid length. [ 725.062075][T19516] veth1_to_team: entered promiscuous mode [ 725.068321][T19516] veth1_to_team: entered allmulticast mode [ 725.086893][ T6908] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 725.151401][T13786] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 725.264283][ T6908] usb 10-1: Using ep0 maxpacket: 8 [ 725.294259][ T6908] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.324462][ T6908] usb 10-1: config 0 has no interfaces? [ 725.340435][ T6908] usb 10-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=a1.8c [ 725.404677][ T6908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.442228][ T6908] usb 10-1: config 0 descriptor?? [ 725.931225][ T6908] usb 10-1: USB disconnect, device number 4 [ 726.068928][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4309'. [ 726.558809][T19547] overlayfs: failed to clone upperpath [ 726.956876][T19554] kvm: pic: non byte write [ 728.094052][T19600] fuse: fd is not a fuse device [ 728.118527][T19600] overlayfs: failed to clone upperpath [ 728.717299][T19621] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4330'. [ 728.961812][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 728.961833][ T30] audit: type=1326 audit(1773742777.255:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.9.4331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d1e59c799 code=0x0 [ 729.126847][T19625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 730.185731][T19679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 730.370525][T19686] fuse: Bad value for 'fd' [ 730.851803][T19699] binder: 19698:19699 ioctl c0306201 200000000040 returned -11 [ 730.906742][T19701] binder: 19698:19701 ioctl c0306201 200000000640 returned -22 [ 732.708953][T19703] loop9: detected capacity change from 0 to 32768 [ 732.781994][T19703] JBD2: Ignoring recovery information on journal [ 732.854640][T19703] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 733.656288][T18938] ocfs2: Unmounting device (7,9) on (node local) [ 734.685722][T19756] overlayfs: invalid origin (0000) [ 734.694681][T19756] overlayfs: failed to get inode (-116) [ 734.700628][T19756] overlayfs: invalid origin (0000) [ 734.707487][T19756] overlayfs: failed to get inode (-116) [ 734.967157][T19761] loop2: detected capacity change from 0 to 2048 [ 735.020819][T19761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.118328][T19761] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 735.261940][T18894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.430365][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4375'. [ 735.771580][T19780] netlink: 'syz.9.4377': attribute type 10 has an invalid length. [ 737.282111][T19780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 738.520546][ T30] audit: type=1326 audit(1773742786.815:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.1.4385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a8c39c799 code=0x0 [ 738.632790][ T6904] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 738.812502][ T6904] usb 10-1: Using ep0 maxpacket: 32 [ 738.846588][ T6904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.864882][ T6904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.904658][ T6904] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 738.918270][ T6904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.934669][ T6904] usb 10-1: config 0 descriptor?? [ 738.953721][ T6904] hub 10-1:0.0: USB hub found [ 739.160929][ T6904] hub 10-1:0.0: 1 port detected [ 739.773003][ T6904] hub 10-1:0.0: activate --> -90 [ 739.984282][T17847] usb 10-1: USB disconnect, device number 5 [ 740.334212][ T30] audit: type=1326 audit(1773742788.635:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.8.4396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f117cd9c799 code=0x0 [ 740.824259][ T3574] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.876076][ T3574] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.901778][ T3574] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.930330][ T3574] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.959028][T19839] fuse: Bad value for 'fd' [ 740.984867][T19840] netlink: 7 bytes leftover after parsing attributes in process `syz.9.4400'. [ 742.296437][T19882] fuse: fd is not a fuse device [ 742.481984][ T30] audit: type=1800 audit(1773742790.775:214): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4420" name="nullb0" dev="tmpfs" ino=2833 res=0 errno=0 [ 742.951117][T19895] netlink: 'syz.8.4422': attribute type 16 has an invalid length. [ 742.990254][T19895] netlink: 'syz.8.4422': attribute type 17 has an invalid length. [ 743.584424][T19895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.613975][T19895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 744.901279][ T5852] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 745.274810][T19944] loop2: detected capacity change from 0 to 7 [ 745.289039][T19944] Dev loop2: unable to read RDB block 7 [ 745.305039][T19944] loop2: AHDI p1 p2 p3 [ 745.315941][T19944] loop2: partition table partially beyond EOD, truncated [ 745.355596][T19944] loop2: p1 start 1818582900 is beyond EOD, truncated [ 745.372888][T19944] loop2: p3 start 335544320 is beyond EOD, truncated [ 745.887002][T19951] loop9: detected capacity change from 0 to 128 [ 745.903387][T19951] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 745.937556][T19951] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 746.217827][T19955] fuse: Bad value for 'fd' [ 747.743847][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.752722][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.790512][T19989] loop2: detected capacity change from 0 to 40427 [ 747.820053][T19989] F2FS-fs (loop2): invalid crc value [ 747.922299][T19989] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 747.937214][T19989] F2FS-fs (loop2): Start checkpoint disabled! [ 747.992624][T19989] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 748.000785][T19989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 748.059989][ T30] audit: type=1800 audit(1773742796.355:215): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4461" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 748.062159][T19989] syz.2.4461: attempt to access beyond end of device [ 748.062159][T19989] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 748.098620][T19989] syz.2.4461: attempt to access beyond end of device [ 748.098620][T19989] loop2: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 748.117668][T19989] syz.2.4461: attempt to access beyond end of device [ 748.117668][T19989] loop2: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 748.133854][T19989] syz.2.4461: attempt to access beyond end of device [ 748.133854][T19989] loop2: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 748.150126][T19989] syz.2.4461: attempt to access beyond end of device [ 748.150126][T19989] loop2: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 748.166051][T19989] syz.2.4461: attempt to access beyond end of device [ 748.166051][T19989] loop2: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 748.185965][T19989] syz.2.4461: attempt to access beyond end of device [ 748.185965][T19989] loop2: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 748.202032][T19989] syz.2.4461: attempt to access beyond end of device [ 748.202032][T19989] loop2: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 748.218472][T19989] syz.2.4461: attempt to access beyond end of device [ 748.218472][T19989] loop2: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 748.234641][T19989] syz.2.4461: attempt to access beyond end of device [ 748.234641][T19989] loop2: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 748.286652][ T30] audit: type=1800 audit(1773742796.355:216): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4461" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 748.620919][T19998] [ 748.623332][T19998] ====================================================== [ 748.624439][T10136] CPU: 1 UID: 0 PID: 10136 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.624541][T10136] Tainted: [L]=SOFTLOCKUP [ 748.624565][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.624609][T10136] Workqueue: writeback wb_workfn (flush-7:2) [ 748.624701][T10136] Call Trace: [ 748.624723][T10136] [ 748.624747][T10136] dump_stack_lvl+0xe8/0x150 [ 748.624859][T10136] f2fs_handle_critical_error+0x37c/0x540 [ 748.624963][T10136] f2fs_write_end_io+0x1274/0x1740 [ 748.625065][T10136] __submit_merged_bio+0x256/0x700 [ 748.625143][T10136] __submit_merged_write_cond+0x3c9/0x4e0 [ 748.625222][T10136] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 748.625322][T10136] ? folio_clear_dirty_for_io+0x570/0x710 [ 748.625402][T10136] f2fs_write_data_pages+0x287e/0x34f0 [ 748.625482][T10136] ? mlock_drain_local+0x79/0x480 [ 748.625593][T10136] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 748.625744][T10136] ? lock_release+0x4b/0x3d0 [ 748.625829][T10136] ? trace_lock_elapsed_time_end+0xf3/0xbf0 [ 748.625908][T10136] ? up_write+0x1ab/0x410 [ 748.625975][T10136] ? restore_priority+0x1af/0x480 [ 748.626044][T10136] ? trace_f2fs_writepages+0x81/0x230 [ 748.626122][T10136] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 748.626219][T10136] do_writepages+0x32e/0x550 [ 748.626320][T10136] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.626406][T10136] __writeback_single_inode+0x133/0x11a0 [ 748.626485][T10136] ? do_raw_spin_unlock+0xf5/0x210 [ 748.626555][T10136] writeback_sb_inodes+0x992/0x1a20 [ 748.626656][T10136] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 748.626732][T10136] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.626851][T10136] ? rcu_is_watching+0x15/0xb0 [ 748.626921][T10136] wb_writeback+0x456/0xb70 [ 748.626997][T10136] ? queue_io+0x251/0x4a0 [ 748.627077][T10136] ? __pfx_wb_writeback+0x10/0x10 [ 748.627143][T10136] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.627222][T10136] ? rcu_is_watching+0x15/0xb0 [ 748.627298][T10136] wb_workfn+0x414/0xf50 [ 748.627354][T10136] ? lock_acquire+0x57/0x2e0 [ 748.627454][T10136] ? __pfx_wb_workfn+0x10/0x10 [ 748.627511][T10136] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.627588][T10136] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.627677][T10136] ? lock_acquire+0x57/0x2e0 [ 748.627768][T10136] ? trace_sched_exit_tp+0x3a/0x150 [ 748.627849][T10136] ? rcu_is_watching+0x15/0xb0 [ 748.627904][T10136] ? lock_acquire+0x57/0x2e0 [ 748.627982][T10136] ? rcu_is_watching+0x15/0xb0 [ 748.628039][T10136] ? process_one_work+0x8bb/0x1780 [ 748.628140][T10136] process_one_work+0x9ab/0x1780 [ 748.628240][T10136] ? __pfx_process_one_work+0x10/0x10 [ 748.628324][T10136] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.628410][T10136] worker_thread+0xba8/0x11e0 [ 748.628488][T10136] kthread+0x388/0x470 [ 748.628553][T10136] ? __pfx_worker_thread+0x10/0x10 [ 748.628605][T10136] ? __pfx_kthread+0x10/0x10 [ 748.628662][T10136] ret_from_fork+0x51e/0xb90 [ 748.628747][T10136] ? __pfx_ret_from_fork+0x10/0x10 [ 748.628816][T10136] ? __switch_to+0xc7d/0x1450 [ 748.628885][T10136] ? __pfx_kthread+0x10/0x10 [ 748.628947][T10136] ret_from_fork_asm+0x1a/0x30 [ 748.629035][T10136] [ 748.932280][T19998] WARNING: possible circular locking dependency detected [ 748.939346][T19998] syzkaller #0 Tainted: G L [ 748.945348][T19998] ------------------------------------------------------ [ 748.952383][T19998] syz.0.4463/19998 is trying to acquire lock: [ 748.958501][T19998] ffff88801b099c38 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 748.968198][T19998] [ 748.968198][T19998] but task is already holding lock: [ 748.975582][T19998] ffff88801c2b5180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x272/0x8d0 [ 748.985533][T19998] [ 748.985533][T19998] which lock already depends on the new lock. [ 748.985533][T19998] [ 748.995976][T19998] [ 748.995976][T19998] the existing dependency chain (in reverse order) is: [ 749.005008][T19998] [ 749.005008][T19998] -> #5 (&root->kernfs_rwsem){++++}-{4:4}: [ 749.013046][T19998] down_write+0x96/0x200 [ 749.017848][T19998] kernfs_add_one+0x41/0x5c0 [ 749.022997][T19998] kernfs_create_dir_ns+0xde/0x130 [ 749.028675][T19998] sysfs_create_dir_ns+0x12f/0x2a0 [ 749.034345][T19998] kobject_add_internal+0x62b/0xd00 [ 749.040095][T19998] kobject_init_and_add+0x12b/0x1a0 [ 749.045844][T19998] btrfs_sysfs_add_qgroups+0x116/0x2e0 [ 749.051848][T19998] btrfs_quota_enable+0x282/0x2850 [ 749.057678][T19998] btrfs_ioctl_quota_ctl+0x183/0x1c0 [ 749.063520][T19998] __se_sys_ioctl+0xfc/0x170 [ 749.068672][T19998] do_syscall_64+0x14d/0xf80 [ 749.073816][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.080267][T19998] [ 749.080267][T19998] -> #4 (&fs_info->qgroup_ioctl_lock){+.+.}-{4:4}: [ 749.088983][T19998] __mutex_lock+0x19e/0x1420 [ 749.094121][T19998] btrfs_quota_enable+0x2c6/0x2850 [ 749.099776][T19998] btrfs_ioctl_quota_ctl+0x183/0x1c0 [ 749.105613][T19998] __se_sys_ioctl+0xfc/0x170 [ 749.110746][T19998] do_syscall_64+0x14d/0xf80 [ 749.115882][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.122341][T19998] [ 749.122341][T19998] -> #3 (btrfs_trans_num_extwriters){++++}-{0:0}: [ 749.130974][T19998] join_transaction+0x1a4/0xd60 [ 749.136385][T19998] start_transaction+0xafa/0x1790 [ 749.141972][T19998] btrfs_rebuild_free_space_tree+0xbb/0x6e0 [ 749.148550][T19998] btrfs_start_pre_rw_mount+0x1529/0x1f20 [ 749.154823][T19998] open_ctree+0x2e04/0x4220 [ 749.159898][T19998] btrfs_get_tree+0x1061/0x1910 [ 749.165293][T19998] vfs_get_tree+0x92/0x2a0 [ 749.170250][T19998] do_new_mount+0x341/0xd30 [ 749.175297][T19998] __se_sys_mount+0x31d/0x420 [ 749.180524][T19998] do_syscall_64+0x14d/0xf80 [ 749.185657][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.192107][T19998] [ 749.192107][T19998] -> #2 (btrfs_trans_num_writers){++++}-{0:0}: [ 749.200493][T19998] lock_release+0x199/0x3d0 [ 749.205569][T19998] sb_end_intwrite+0x26/0x1c0 [ 749.210806][T19998] __btrfs_end_transaction+0x248/0x640 [ 749.216819][T19998] btrfs_dirty_inode+0x14c/0x190 [ 749.222313][T19998] file_update_time_flags+0x2cf/0x4a0 [ 749.228229][T19998] btrfs_page_mkwrite+0x607/0x1a00 [ 749.233886][T19998] do_page_mkwrite+0x14d/0x310 [ 749.239206][T19998] do_wp_page+0x19ba/0x4c20 [ 749.244359][T19998] handle_mm_fault+0x151d/0x3170 [ 749.249856][T19998] do_user_addr_fault+0xa73/0x1340 [ 749.255524][T19998] exc_page_fault+0x6a/0xc0 [ 749.260591][T19998] asm_exc_page_fault+0x26/0x30 [ 749.266075][T19998] [ 749.266075][T19998] -> #1 (sb_pagefaults#5){.+.+}-{0:0}: [ 749.273755][T19998] btrfs_page_mkwrite+0x351/0x1a00 [ 749.279419][T19998] do_page_mkwrite+0x14d/0x310 [ 749.284733][T19998] do_wp_page+0x19ba/0x4c20 [ 749.289784][T19998] handle_mm_fault+0x151d/0x3170 [ 749.295359][T19998] do_user_addr_fault+0x75b/0x1340 [ 749.301018][T19998] exc_page_fault+0x6a/0xc0 [ 749.306060][T19998] asm_exc_page_fault+0x26/0x30 [ 749.311448][T19998] rep_movs_alternative+0x33/0x90 [ 749.317017][T19998] _copy_to_user+0x8a/0xb0 [ 749.321975][T19998] __se_sys_copy_file_range+0x3d7/0x480 [ 749.328068][T19998] do_syscall_64+0x14d/0xf80 [ 749.333204][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.339632][T19998] [ 749.339632][T19998] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 749.347213][T19998] __lock_acquire+0x15a5/0x2cf0 [ 749.352621][T19998] lock_acquire+0xf0/0x2e0 [ 749.357621][T19998] down_read_killable+0x50/0x340 [ 749.363110][T19998] mmap_read_lock_killable+0x1d/0x70 [ 749.368929][T19998] lock_mm_and_find_vma+0x2d7/0x340 [ 749.374682][T19998] do_user_addr_fault+0x330/0x1340 [ 749.380427][T19998] exc_page_fault+0x6a/0xc0 [ 749.385472][T19998] asm_exc_page_fault+0x26/0x30 [ 749.390874][T19998] filldir+0x2b5/0x690 [ 749.395483][T19998] kernfs_fop_readdir+0x57b/0x8d0 [ 749.401046][T19998] iterate_dir+0x399/0x570 [ 749.405998][T19998] __se_sys_getdents+0xf1/0x270 [ 749.411387][T19998] do_syscall_64+0x14d/0xf80 [ 749.416605][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.423061][T19998] [ 749.423061][T19998] other info that might help us debug this: [ 749.423061][T19998] [ 749.433312][T19998] Chain exists of: [ 749.433312][T19998] &mm->mmap_lock --> &fs_info->qgroup_ioctl_lock --> &root->kernfs_rwsem [ 749.433312][T19998] [ 749.447679][T19998] Possible unsafe locking scenario: [ 749.447679][T19998] [ 749.455174][T19998] CPU0 CPU1 [ 749.460574][T19998] ---- ---- [ 749.465989][T19998] rlock(&root->kernfs_rwsem); [ 749.470898][T19998] lock(&fs_info->qgroup_ioctl_lock); [ 749.478919][T19998] lock(&root->kernfs_rwsem); [ 749.486226][T19998] rlock(&mm->mmap_lock); [ 749.490667][T19998] [ 749.490667][T19998] *** DEADLOCK *** [ 749.490667][T19998] [ 749.498828][T19998] 3 locks held by syz.0.4463/19998: [ 749.504052][T19998] #0: ffff88807cd9b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 749.513149][T19998] #1: ffff88803eaf36e0 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x292/0x570 [ 749.523283][T19998] #2: ffff88801c2b5180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x272/0x8d0 [ 749.533599][T19998] [ 749.533599][T19998] stack backtrace: [ 749.539509][T19998] CPU: 0 UID: 0 PID: 19998 Comm: syz.0.4463 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.539536][T19998] Tainted: [L]=SOFTLOCKUP [ 749.539543][T19998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.539555][T19998] Call Trace: [ 749.539562][T19998] [ 749.539571][T19998] dump_stack_lvl+0xe8/0x150 [ 749.539601][T19998] print_circular_bug+0x2e1/0x300 [ 749.539624][T19998] check_noncircular+0x12e/0x150 [ 749.539647][T19998] __lock_acquire+0x15a5/0x2cf0 [ 749.539677][T19998] ? try_to_wake_up+0x7fc/0x1390 [ 749.539705][T19998] ? wake_up_q+0x99/0xd0 [ 749.539724][T19998] lock_acquire+0xf0/0x2e0 [ 749.539751][T19998] ? mmap_read_lock_killable+0x1d/0x70 [ 749.539772][T19998] ? mmap_read_lock_killable+0x1d/0x70 [ 749.539788][T19998] down_read_killable+0x50/0x340 [ 749.539814][T19998] ? mmap_read_lock_killable+0x1d/0x70 [ 749.539833][T19998] mmap_read_lock_killable+0x1d/0x70 [ 749.539856][T19998] lock_mm_and_find_vma+0x2d7/0x340 [ 749.539884][T19998] ? do_user_addr_fault+0x2c9/0x1340 [ 749.539913][T19998] do_user_addr_fault+0x330/0x1340 [ 749.539942][T19998] ? rcu_is_watching+0x15/0xb0 [ 749.539961][T19998] ? trace_page_fault_kernel+0x84/0x210 [ 749.539990][T19998] exc_page_fault+0x6a/0xc0 [ 749.540011][T19998] asm_exc_page_fault+0x26/0x30 [ 749.540028][T19998] RIP: 0010:filldir+0x2b5/0x690 [ 749.540050][T19998] Code: 87 73 02 00 00 0f 01 cb 0f ae e8 48 8b 44 24 50 49 89 44 24 08 48 8b 4c 24 08 48 8b 44 24 58 48 89 01 48 8b 04 24 8b 54 24 1c <66> 89 41 10 80 e2 0f 41 89 c7 42 88 54 39 ff 49 63 ee c6 44 29 12 [ 749.540067][T19998] RSP: 0018:ffffc90005337c40 EFLAGS: 00050283 [ 749.540084][T19998] RAX: 0000000000000020 RBX: ffffc90005337e38 RCX: 0000200000001ff0 [ 749.540097][T19998] RDX: 0000000000000004 RSI: 0000200000001fd8 RDI: 0000200000002010 [ 749.540111][T19998] RBP: 00007ffffffff000 R08: ffff88807e0d1e87 R09: 1ffff1100fc1a3d0 [ 749.540124][T19998] R10: dffffc0000000000 R11: ffffed100fc1a3d1 R12: 0000200000001fd8 [ 749.540138][T19998] R13: ffffffff8bcbd9c0 R14: 0000000000000006 R15: 0000200000002010 [ 749.540162][T19998] ? __pfx_filldir+0x10/0x10 [ 749.540182][T19998] kernfs_fop_readdir+0x57b/0x8d0 [ 749.540207][T19998] iterate_dir+0x399/0x570 [ 749.540228][T19998] __se_sys_getdents+0xf1/0x270 [ 749.540249][T19998] ? __pfx___se_sys_getdents+0x10/0x10 [ 749.540268][T19998] ? __pfx_filldir+0x10/0x10 [ 749.540287][T19998] ? rcu_is_watching+0x15/0xb0 [ 749.540310][T19998] do_syscall_64+0x14d/0xf80 [ 749.540331][T19998] ? trace_irq_disable+0x3b/0x150 [ 749.540355][T19998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.540373][T19998] ? clear_bhb_loop+0x40/0x90 [ 749.540393][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.540411][T19998] RIP: 0033:0x7fc42519c799 [ 749.540427][T19998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.540443][T19998] RSP: 002b:00007fc426143028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 749.540461][T19998] RAX: ffffffffffffffda RBX: 00007fc425415fa0 RCX: 00007fc42519c799 [ 749.540475][T19998] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 749.540487][T19998] RBP: 00007fc425232c99 R08: 0000000000000000 R09: 0000000000000000 [ 749.540498][T19998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.540509][T19998] R13: 00007fc425416038 R14: 00007fc425415fa0 R15: 00007ffedeceed98 [ 749.540530][T19998] [ 749.549920][T10136] F2FS-fs (loop2): Stopped filesystem due to reason: 3