last executing test programs: 16m50.466515068s ago: executing program 3 (id=22): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) close(0x4) 16m48.637699941s ago: executing program 3 (id=26): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x4}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) r1 = io_uring_setup(0x1cd8, &(0x7f0000000240)={0x0, 0xd498, 0x1000, 0x8000002, 0xa6}) close_range(r1, 0xffffffffffffffff, 0x0) 16m46.56112348s ago: executing program 3 (id=31): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000005f304433b3c4d403b4c4ddca0e3cf4c122da00a646d2f5d832c05d66d0c0e7f6a1e88d3116c882674e74c604eab452ac64e43e8effe88a272982ecf2ef60b197aa20a77eb246d253986c65bb78cb8bd43cee3440b80f4fc8720bf57f597c50f8b2373f9a67f3e6511c9bcadd35d5cb65433d9e4a97b8a71c5fb1f84d973937eb4ce52122c6d0441ffca0a1bb962430859b3ebbb7782a4e014285611f3adb985f54b120b42a6b64a654918151ae42fa286de83507118c213a27209c9905c676164775c1aa94f5d41ad4a1660f0f3b24109bd9f70bb1ec61eb2516a8fbbf1d"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m45.41439939s ago: executing program 3 (id=34): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(0x0, 0x182) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r1, r0, 0x0, 0x80000000) 16m44.657599314s ago: executing program 3 (id=37): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x230) socket(0x1d, 0x2, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) 16m44.260079055s ago: executing program 3 (id=39): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x1002, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 16m43.338350385s ago: executing program 32 (id=39): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x1002, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 15m9.479065s ago: executing program 5 (id=235): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) 15m8.267911053s ago: executing program 5 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0x0, 0x0, 0x36, 0x7}, 0x9c) 15m7.740190317s ago: executing program 5 (id=241): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m6.569657113s ago: executing program 5 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) 15m5.480979843s ago: executing program 5 (id=247): openat$sndseq(0xffffffffffffff9c, 0x0, 0x882) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 15m0.643172507s ago: executing program 1 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r4}, 0x38) 15m0.345171211s ago: executing program 5 (id=255): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 14m59.362519045s ago: executing program 1 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) r3 = add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, 0x0, 0x0) 14m57.912345303s ago: executing program 1 (id=258): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x0, 0x1c, 0x0, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000280), &(0x7f0000000180)=@udp6=r4, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000900), &(0x7f0000000200)=@udp6=r4}, 0x20) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m57.095004629s ago: executing program 1 (id=260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x1ff, 0x80000001, 0x0, 0x0, 0x9, 0x9}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_BUFCONFIG(r4, 0x8020640d, &(0x7f0000000180)={0x1, 0x3, 0x80007, 0x3}) 14m55.768168048s ago: executing program 1 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 14m55.31215071s ago: executing program 1 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 14m44.989142636s ago: executing program 33 (id=255): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 14m39.779507562s ago: executing program 34 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 5m5.588040369s ago: executing program 6 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'}) 5m5.397253848s ago: executing program 6 (id=1426): openat$iommufd(0xffffffffffffff9c, 0x0, 0x50800, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) socket$inet(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x40004, &(0x7f0000000600)={[], [{@subj_type={'subj_type', 0x3d, ',$'}}, {@uid_eq}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x3}}, {@uid_lt}]}, 0x0, 0x236, &(0x7f0000000880)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x10a) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000240)={0x2, 0xd}) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f00000003c0)='./control\x00') 5m4.366986299s ago: executing program 6 (id=1429): creat(&(0x7f00000001c0)='./file0\x00', 0x78) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x3, 0x8695c3813aa3cd9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002400)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x18, 0x0, 0x3, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0x0, r2) 5m2.628123195s ago: executing program 7 (id=1433): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x2, 0x5, 0xfffffffffffffce3, 0x0}) 5m2.242816608s ago: executing program 7 (id=1438): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5m1.188009182s ago: executing program 6 (id=1441): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5m0.507331896s ago: executing program 6 (id=1446): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 5m0.302663684s ago: executing program 7 (id=1447): setreuid(0xee00, 0x0) r0 = getuid() setuid(r0) r1 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000440)={{0x1, r0, 0x0, 0x0, 0x140, 0x0, 0x4}, 0x0, 0x20d, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x800}) shmat(r1, &(0x7f00005ef000/0x4000)=nil, 0x1000) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000004c0)=""/4096) 5m0.087782519s ago: executing program 7 (id=1450): syz_mount_image$ocfs2(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x10cc8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x445e, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x5, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x202]}) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100}) 4m59.908274411s ago: executing program 6 (id=1451): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x4001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4m59.011465172s ago: executing program 35 (id=1451): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x4001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4m57.451766316s ago: executing program 7 (id=1461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1, 0x25, 0x4, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x26, &(0x7f0000000040)={@remote, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x3, 0x0, 0x2}}, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "7606b5442892adc8"}}}}, 0x0) 4m53.420216408s ago: executing program 7 (id=1467): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000200), &(0x7f0000000580)=[r3], &(0x7f0000000040)}) 4m52.918207525s ago: executing program 36 (id=1467): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000200), &(0x7f0000000580)=[r3], &(0x7f0000000040)}) 59.836469772s ago: executing program 9 (id=2002): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000900)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=0x60f, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_dest={0x18, 0x114, 0x2, {0x5, 0x3}}], 0x18}, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/uts\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x80000, &(0x7f00000002c0)={[{@nodiscard}]}, 0x1, 0x50b, &(0x7f00000003c0)="$eJzs3c9vI1cdAPCvJ7HjZNMmLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacJKpGeuSFTiBEf+AM574s4FwY3LckDiRwTaICHhyuNJ1snam2iT2FH8+UjWvDdv1t/v2+y8t/OS+AUwsm5GxF5EFCLiw4iYyc7nsle813m1r3u8/2D5YP/Bci5arQ/+mUvb2+ei68+03cjesxgRP/hOxI9zT8dt7OyuL1Wrla2sPtesbc41dnbvrNWWViurlY1yeXFhcf6du2+XL6yvr9UKWenLj/6w942fttOazs509+MidbqeP4rTNh4R37uMYEMwlvWnMOxEeC5JRLwcEa+n9/9MjKVfTQDgOmu1ZqI1010HAK67JF0DyyWlbC1gOpKkVOqs4b0SU0m13mjevl/f3ljprJXNRj65v1atzGdrhbORz7XrC2n5Sb18on43Il6KiF9MTKb10nK9ujLM//gAwAi7cWL+/89EZ/4HAK654rATAAAG7rT5f2JAeQAAg+P5HwBGj/kfAEZPZ/6fHHYaAMAAef4HgNFj/geAkfL999+PQtdHbK98tLO9Xv/ozkqlsV6qbS+Xlutbm6XVen01/cye2mnvV63XNxfeiu2PZ7+52WjONXZ279Xq2xvNe+nnet+r5NOr9i61TwDAs7302sM/59oz8ruT6Su69nLIDzUz4LIlw04AGJqxYScADI3dvmB0neMZ3/IAXBM9tug9ptjrF4RarVbr8lICLtmtL1j/h1HVtf7vp4BhxFj/h9Fl/R9GV6uVO+ue/3HWCwGAq80aP9Dn+/8vZ8ffZt8c+NHKySs+vcysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Go73P+3lO0FPh1JUipFvBARs5HP3V+rVuYj4sWI+NNEfqJdXxhyzgDAeSV/y2X7f92aeXP6WNOrN46KhYj4ya8++OXHS83m1h8jCrl/TRyeb36anS8PPnsA4HSH83R67HqQf7z/YPnwNch8/v7tiCh24h/sF+LgKP54jKfHYuQjYurfuazeketauziPvU8i4vO9+p+L6XQNpLPz6cn47dgvDDR+cix+krb9LD22/y4+dwG5wKh52B5/3ut1/yVxMz32vv+L6Qh1ftn4136r5YN0DHwS/3D8G+sz/t08a4y3fv/dTmny6bZPIr44HnEY+6Br/DmMn+sT/80zxv/Ll159vV9b69cRt6J3/O5Yc83a5lxjZ/fOWm1ptbJa2SiXFxcW59+5+3Z5Ll2jnjs2G/y/1VX5x7u3X+wXv93/qT7xi6f0/6tn7P9v/vfhD7/yjPhff6NX/CReeUb8fCTxtTPGX5r6XbFfWzv+Sp/+n/b1v33G+I/+uvvUtuEAwPA0dnbXl6rVypbCOQpjcSXSuP6F9j/ZK5BGz8K3BhWrEL2bfv5G554+0dRqPVesfiPGRay6AVfB0U0fEf8ddjIAAAAAAAAAAAAAAEBPg/iNpWH3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOvrswAAAP//gLPMTg==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x18, 0xd28, 0x0, 0xffffffffffff8001}) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) 56.855884732s ago: executing program 9 (id=2009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000780)=0x6, 0x0, 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r8 = msgget(0x1, 0x2b0) msgrcv(r8, 0x0, 0x0, 0x2, 0x2000) msgsnd(r8, &(0x7f0000000280)={0x2}, 0x8, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x60, r6, 0x1, 0x70bd2b, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0x0, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x0, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x0, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xaaaf}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x1000001}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c}]}]}, 0xffffffffffffff89}}, 0x44040) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, 0x0, 0x0) 52.462262746s ago: executing program 9 (id=2013): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000060a0404000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000034000701ffffffff02000000017c0000140008"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0x24004000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x94, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x80, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in=@empty}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="13ffffdf00008d2ced459fa8656bcd00000000f3ff000000000000004000"/41], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) 51.223854223s ago: executing program 2 (id=2017): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000500)=ANY=[@ANYBLOB="0001", @ANYRES32]) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000000000009417374c0753eeae96bd9e18f9587e932f070752c2c50eea5fdca27e4863715d8e194873c541b0cfaea02c6bfa194501071d4daab110115d45b1fb417134001299a8eea3e6c57e9cca3eff66b32eb46b34bf7683c2bf618a43b96a14413bffde2aeff86dd0ff627558a3e618e1f38aa82dd6270e530a6fc479c1f067314eba672d45b696d9b7ac3a0480090ddbcbd1bde3e96fb9047af9d5e71e594155e16bc0168ebd006dca90ab4f621a074a1dab8a6add5cd62575f63973bb1b78e96290a65c8ba2f2f07d997759dfc5f8c19f037675b5c5b60b1abd0000000002e0d0d3a9e66b0c9cae1036f660906723dc54b4a07d12529aacb1"], 0xc, 0xfffffffffffffffe) r4 = add_key(&(0x7f00000002c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000500)=@v1={0x1000000, [{0xa6b5, 0xa}]}, 0xc, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802eff"], 0x20}], 0x1}, 0x300) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 50.094793542s ago: executing program 2 (id=2018): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa9, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc0430846", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) connect$qrtr(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3a, 0x1, 0x0, 0x3, 0x0) close_range(r0, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 46.733558289s ago: executing program 2 (id=2024): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x141000, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000340), &(0x7f0000000580)=@v3={0x3000000, [{0xef, 0x1}, {0xf, 0x9}], r0}, 0x18, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x4148a060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50) getrlimit(0xe, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,umask=00000000000000000005676,keep_last_dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp865,dmask=00000000000000000000001,discard,uid=', @ANYRESHEX=0xee00, @ANYBLOB="969043c7ff1774ebb8582e00"], 0x80, 0x1500, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 45.794659292s ago: executing program 9 (id=2025): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x40482, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x4000, 0x0, 0x2100000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0000000400000008000000010000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000400000000201a196af8e5abfc9875ceb6413aa6d78c2b6d921895650c999e578570176cf718da1e336428cd2a903831fe406e6916b62f9edddee3087f8cec204741b46041329cef561b1f0d0aebfb6e4be9da2682c546a4c26ab79afadd0e6410b8e21ec27e9b0aabcf7275fe38754a784c50879d30137364927b7a5f78a5c8449536d30bd4a2f21804fa77356af5e0dfddeba4d2804144109235a8a62db749a3ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000300)=0xc82, 0x4) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x20) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000140)='net/hci\x00') syz_open_procfs$namespace(r5, &(0x7f0000000280)='ns/cgroup\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(0x0, 0x1, 0x136, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 44.645047604s ago: executing program 2 (id=2027): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8000000000088}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bind$alg(r1, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 44.382343532s ago: executing program 9 (id=2028): openat$iommufd(0xffffffffffffff9c, 0x0, 0x50800, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) socket$inet(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x40004, &(0x7f0000000600)={[], [{@subj_type={'subj_type', 0x3d, ',$'}}, {@uid_eq}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x3}}, {@uid_lt}]}, 0x0, 0x236, &(0x7f0000000880)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x10a) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000240)={0x2, 0xd}) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f00000003c0)='./control\x00') 43.116014538s ago: executing program 2 (id=2029): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102390, 0x18ff6, 0x0) r1 = gettid() sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004000000030000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000005096d773e931d6fd50f43030094b380e000000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') chdir(&(0x7f0000000540)='./file0\x00') 41.442484876s ago: executing program 2 (id=2032): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 41.37967667s ago: executing program 9 (id=2033): semget$private(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000005a80)={0x2, 0x0, {&(0x7f00000003c0)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) mkdir(0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) chdir(0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)='usrquota') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 25.468069066s ago: executing program 37 (id=2032): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 25.274035827s ago: executing program 38 (id=2033): semget$private(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000005a80)={0x2, 0x0, {&(0x7f00000003c0)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) mkdir(0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) chdir(0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)='usrquota') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 13.569947788s ago: executing program 8 (id=2064): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) renameat2(0xffffffffffffff9c, 0x0, r5, &(0x7f0000000000)='./file0\x00', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x800, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) 10.351925845s ago: executing program 8 (id=2067): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x8, 0x218}, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000"], 0xf0}}, 0x40000) r0 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x7) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xd5, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9.233941331s ago: executing program 8 (id=2069): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[], 0x94, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@v3={0x3000000, [{0x0, 0x7}, {0x415050c5, 0x3}]}, 0x18, 0x2) pipe2$9p(&(0x7f0000001900), 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_DISCARDURB(r7, 0x550b, 0x0) 7.862631626s ago: executing program 8 (id=2070): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xf3cb}, &(0x7f0000000240)=0x8) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r3, 0x0, 0x0) close(r3) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x123) fallocate(r6, 0x0, 0x0, 0x2000402) lseek(r6, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000280)={r2, 0xb, 0x30}, &(0x7f0000000340)=0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_open(0x0, 0x840, 0x100, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f00000001c0)=0x1f2) 7.731227377s ago: executing program 4 (id=2072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB="040000001000"/15, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f00000002c0), 0x0}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.924157736s ago: executing program 4 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000019080)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ftruncate(r5, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000080)=0x7) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="141144e50000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000034000000030a01080000000000000000050000000900010073797a3000940000000900030073"], 0x7c}}, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x10}}]}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@getqdisc={0x24, 0x26, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x4, 0xfff2}, {0xe, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffff7f, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xb}}]}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000080) sendmsg$kcm(r2, 0x0, 0x40000) 5.037510172s ago: executing program 8 (id=2075): r0 = semget$private(0x0, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000005a80)={0x2, 0x0, {&(0x7f00000003c0)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x1e, 0x1, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0x1e76, 0xf728, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x4) semop(r0, &(0x7f0000000580), 0x0) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x43) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x1) 4.123562689s ago: executing program 0 (id=2076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) mount(0x0, 0x0, 0x0, 0x208000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback={0xffffffffffff0000}}, {0xa, 0x0, 0xfffffffe, @empty}, r7}}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, r9, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x4}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x34}}, 0x400c890) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) 2.9614656s ago: executing program 8 (id=2077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x462000, 0x0) statx(r5, &(0x7f0000002140)='./bus\x00', 0x400, 0x1, &(0x7f0000002180)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r6, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000020c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') 2.006733119s ago: executing program 0 (id=2078): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2000a080, 0x0, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400), 0x0) sendmmsg$unix(r2, &(0x7f000000a480)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000004380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x30, 0x4000000}}], 0x2, 0x40) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000000010001", 0x7) 1.953384406s ago: executing program 4 (id=2079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r5, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 781.221211ms ago: executing program 4 (id=2080): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006175b0e5e545035cd99bd828cca6bb36dd022f6ca4c89c0b417f2efa71b11a52b60f44cfb264eece7be06658b8dc1c2c2956c3ca9589bc2de81d092ae4e3ea3be4dbc731aaad5bb4cb1d35f7c7ef5f9fe193ebd9ef25d88ae463b0680f308c072a6d8f217c257e47f2a97be725099dc8159ed7675a1791779766473b94f6e8efa5e1ce9c8f31978d6acff66852ff9ebe40e6a19c026a17d889279cd5df427693c34751649704c2d1142b8c3eb067895380ef96865b83b16f29f0ed42de4b4ca4b05cc9e55c0a4cd68d19df126316fe5d194fbf3e022b5dcc2bfc53c3f0ba24"], 0x1, 0x22d, &(0x7f0000000000)="$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") 600.250212ms ago: executing program 4 (id=2081): syz_usb_connect(0x2, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="120120021bd459088904b5e02aae0102030109022600010701e00509040000029722185c090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 518.888528ms ago: executing program 0 (id=2082): syz_read_part_table(0x105e, &(0x7f0000001080)="$eJzsz7GNwkAUBNBZn32+k2MaoBIqQCQUQU4BCImcDsipgjpogDKM1giJCoDgveyPNLPa8FElJdcx6euxH/KTpB+SVbOoSTuWKfqbjqRJcpyX/E/VS5Kmu21+k3TPxW12r/NVn7aWq9N4mD0eW6bL+vze3wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAd7oHAAD//z3XC6A=") 240.872608ms ago: executing program 0 (id=2083): prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000a20000/0x2000)=nil) 115.62495ms ago: executing program 0 (id=2084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8}, 0x94) 81.725777ms ago: executing program 0 (id=2085): socket$inet(0x2, 0x80000, 0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 0s ago: executing program 4 (id=2086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r8, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a, r9}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r10, 0x5}, &(0x7f0000000100)=0x8) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x60401) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7) ioctl$BLKTRACESTART(r11, 0x1274, 0x0) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r13, 0xb}}, 0x48) kernel console output (not intermixed with test programs): f2fs_sync_node_pages+0x10/0x10 [ 812.605785][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 812.605868][ T12] ? rcu_is_watching+0x15/0xb0 [ 812.605894][ T12] ? blk_start_plug+0x52/0x1b0 [ 812.605939][ T12] f2fs_write_node_pages+0x303/0x6e0 [ 812.605983][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 812.606032][ T12] ? unwind_next_frame+0xa5/0x2390 [ 812.606066][ T12] ? unwind_next_frame+0x19ae/0x2390 [ 812.606097][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 812.606132][ T12] do_writepages+0x32b/0x550 [ 812.606176][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 812.606200][ T12] ? writeback_sb_inodes+0x384/0x1010 [ 812.606253][ T12] __writeback_single_inode+0x145/0xff0 [ 812.606288][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 812.606326][ T12] writeback_sb_inodes+0x6c7/0x1010 [ 812.606399][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 812.606496][ T12] ? rcu_is_watching+0x15/0xb0 [ 812.606536][ T12] wb_writeback+0x43b/0xaf0 [ 812.606582][ T12] ? queue_io+0x2f1/0x590 [ 812.606619][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 812.606666][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.606706][ T12] wb_workfn+0x409/0xef0 [ 812.606757][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 812.606792][ T12] ? __lock_acquire+0xab9/0xd20 [ 812.606846][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 812.606881][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.606912][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 812.606935][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 812.606963][ T12] process_scheduled_works+0xade/0x17b0 [ 812.607034][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.607087][ T12] worker_thread+0x8a0/0xda0 [ 812.607155][ T12] kthread+0x711/0x8a0 [ 812.607192][ T12] ? __pfx_worker_thread+0x10/0x10 [ 812.607217][ T12] ? __pfx_kthread+0x10/0x10 [ 812.607261][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.607291][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.607323][ T12] ? __pfx_kthread+0x10/0x10 [ 812.607357][ T12] ret_from_fork+0x3f9/0x770 [ 812.607387][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 812.607423][ T12] ? __switch_to_asm+0x39/0x70 [ 812.607449][ T12] ? __switch_to_asm+0x33/0x70 [ 812.607474][ T12] ? __pfx_kthread+0x10/0x10 [ 812.607503][ T12] ret_from_fork_asm+0x1a/0x30 [ 812.607552][ T12] [ 812.607870][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 813.010417][ T5947] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 813.040997][ T5947] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 813.118987][T12549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 813.142604][ T5947] usbhid 8-1:0.0: can't add hid device: -71 [ 813.156590][ T5947] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 813.212348][ T5947] usb 8-1: USB disconnect, device number 4 [ 813.311981][T12548] bond2: (slave veth3): Enslaving as an active interface with a down link [ 813.419913][T12548] vlan3: entered allmulticast mode [ 813.454791][T12548] veth1: entered allmulticast mode [ 813.481383][T12548] veth1: entered promiscuous mode [ 813.503160][T12548] veth1: left promiscuous mode [ 813.549411][T12548] bond2: (slave vlan3): making interface the new active one [ 813.596523][T12548] veth1: entered promiscuous mode [ 813.620837][T12548] vlan3: entered promiscuous mode [ 813.641983][T12548] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 813.927025][T12562] loop7: detected capacity change from 0 to 2048 [ 813.983007][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.989750][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.009618][T12562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.051931][T12562] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.321311][T11385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.414053][T12574] overlayfs: failed to clone lowerpath [ 814.510756][T12575] overlayfs: failed to clone upperpath [ 815.464127][T12587] loop6: detected capacity change from 0 to 4096 [ 815.529466][T12587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.642108][T12587] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 815.682560][T12595] overlayfs: failed to clone upperpath [ 815.844253][T12596] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 816.107569][T10843] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 816.170524][T10843] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 817.021300][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.339412][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.597684][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.781095][T12618] loop0: detected capacity change from 0 to 512 [ 817.833936][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.868683][T12618] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 817.906579][T12618] System zones: 0-2, 18-18, 34-35 [ 817.929335][T12618] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #4: comm syz.0.1454: iget: bad i_size value: 5910974510929920 [ 818.045749][T12618] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1454: Bad quota inode: 4, type: 1 [ 818.085868][T12618] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 818.156284][T12610] loop7: detected capacity change from 0 to 32768 [ 818.164001][T12618] EXT4-fs (loop0): mount failed [ 818.361423][T12610] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 818.668738][ T13] bridge_slave_1: left allmulticast mode [ 818.674460][ T13] bridge_slave_1: left promiscuous mode [ 818.732915][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.741267][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 818.780402][ C0] I/O error, dev loop7, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.806254][T12610] loop7: detected capacity change from 32768 to 0 [ 818.816691][ C0] I/O error, dev loop7, sector 352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.829801][ T13] bridge_slave_0: left allmulticast mode [ 818.836098][T12634] (syz.7.1450,12634,0):ocfs2_read_virt_blocks:1029 ERROR: status = -5 [ 818.855717][ T13] bridge_slave_0: left promiscuous mode [ 818.865948][T12634] (syz.7.1450,12634,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 818.897090][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.917099][T12634] (syz.7.1450,12634,0):ocfs2_find_entry_el:728 ERROR: reading directory 66, offset 0 [ 818.967260][T11385] syz-executor: attempt to access beyond end of device [ 818.967260][T11385] loop7: rw=0, sector=17057, nr_sectors = 1 limit=0 [ 818.994183][T11385] (syz-executor,11385,0):ocfs2_read_locked_inode:597 ERROR: status = -5 [ 819.010493][T11385] syz-executor: attempt to access beyond end of device [ 819.010493][T11385] loop7: rw=0, sector=17057, nr_sectors = 1 limit=0 [ 819.033942][T11385] (syz-executor,11385,0):ocfs2_read_locked_inode:597 ERROR: status = -5 [ 819.152664][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 819.168525][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 819.696783][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 819.709026][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 819.716997][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.882401][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.893963][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.904485][ T13] bond0 (unregistering): Released all slaves [ 821.094443][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 821.102742][ T13] vlan2: entered promiscuous mode [ 821.113125][ T13] bond1 (unregistering): (slave vlan2): Releasing active interface [ 821.125616][ T13] bond1 (unregistering): Released all slaves [ 821.294127][T12626] jbd2/loop7-75: attempt to access beyond end of device [ 821.294127][T12626] loop7: rw=38913, sector=640, nr_sectors = 1 limit=0 [ 821.318167][T12626] Buffer I/O error on dev loop7, logical block 640, lost sync page write [ 821.338235][T12626] JBD2: I/O error when updating journal superblock for loop7-75. [ 821.351710][T12626] Aborting journal on device loop7-75. [ 821.362478][T12626] jbd2/loop7-75: attempt to access beyond end of device [ 821.362478][T12626] loop7: rw=38913, sector=640, nr_sectors = 1 limit=0 [ 821.391822][T12626] Buffer I/O error on dev loop7, logical block 640, lost sync page write [ 821.408577][T12626] JBD2: I/O error when updating journal superblock for loop7-75. [ 821.419835][T11385] syz-executor: attempt to access beyond end of device [ 821.419835][T11385] loop7: rw=0, sector=71, nr_sectors = 1 limit=0 [ 821.436288][T11385] (syz-executor,11385,0):ocfs2_assign_bh:2417 ERROR: status = -5 [ 821.444378][T11385] (syz-executor,11385,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5 [ 821.456325][T11385] (syz-executor,11385,0):ocfs2_shutdown_local_alloc:412 ERROR: status = -5 [ 821.465349][T11385] syz-executor: attempt to access beyond end of device [ 821.465349][T11385] loop7: rw=1, sector=17024, nr_sectors = 1 limit=0 [ 821.493443][T11385] Buffer I/O error on dev loop7, logical block 17024, lost sync page write [ 821.512925][T11385] (syz-executor,11385,0):ocfs2_write_block:78 ERROR: status = -5 [ 821.522978][T11385] (syz-executor,11385,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 821.539726][T11385] (syz-executor,11385,0):ocfs2_put_slot:517 ERROR: status = -5 [ 821.554697][T11385] (syz-executor,11385,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 821.667226][T11385] (syz-executor,11385,1):ocfs2_journal_shutdown:1107 ERROR: status = -5 [ 821.695971][T11385] ocfs2: Unmounting device (7,7) on (node local) [ 821.815300][T12671] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1464'. [ 822.177584][ T5871] Bluetooth: hci1: command tx timeout [ 823.122889][T12643] lo speed is unknown, defaulting to 1000 [ 823.396129][ T13] hsr_slave_0: left promiscuous mode [ 823.405560][ T13] hsr_slave_1: left promiscuous mode [ 823.411846][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.435328][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.455845][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.463303][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.521134][ T13] veth0_macvtap: left allmulticast mode [ 823.535062][ T13] veth1_macvtap: left promiscuous mode [ 823.540681][ T13] veth0_macvtap: left promiscuous mode [ 823.555324][ T13] veth1_vlan: left promiscuous mode [ 823.560736][ T13] veth0_vlan: left promiscuous mode [ 824.222432][ T5871] Bluetooth: hci1: command tx timeout [ 824.236845][T10342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 824.253564][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 824.268291][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 824.293567][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 824.308590][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 825.287191][ T13] team0 (unregistering): Port device team_slave_1 removed [ 825.392545][ T13] team0 (unregistering): Port device team_slave_0 removed [ 826.304685][ T51] Bluetooth: hci1: command tx timeout [ 826.378867][ T51] Bluetooth: hci4: command tx timeout [ 826.534328][T12695] lo speed is unknown, defaulting to 1000 [ 826.823585][T12643] chnl_net:caif_netlink_parms(): no params data found [ 827.202911][T12734] netlink: 'syz.4.1482': attribute type 2 has an invalid length. [ 827.376585][T12742] loop0: detected capacity change from 0 to 1024 [ 827.456748][T12742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.529558][T12742] EXT4-fs (loop0): shut down requested (0) [ 828.168634][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.238594][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.353159][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.365936][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.373847][T12643] bridge_slave_0: entered allmulticast mode [ 828.380207][ T51] Bluetooth: hci1: command tx timeout [ 828.391309][T12643] bridge_slave_0: entered promiscuous mode [ 828.440812][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.453344][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.461183][ T51] Bluetooth: hci4: command tx timeout [ 828.468891][T12643] bridge_slave_1: entered allmulticast mode [ 828.477101][T12643] bridge_slave_1: entered promiscuous mode [ 828.777908][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.524053][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.931558][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.013452][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 830.047944][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.251729][T12695] chnl_net:caif_netlink_parms(): no params data found [ 830.294030][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 830.317203][ T6332] vlan3: left promiscuous mode [ 830.550501][ T51] Bluetooth: hci4: command tx timeout [ 830.573282][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.609131][T12798] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 830.623906][T12798] macvlan2: entered allmulticast mode [ 830.634517][T12798] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 830.681852][T12643] team0: Port device team_slave_0 added [ 830.722065][T12643] team0: Port device team_slave_1 added [ 830.979041][T12820] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 831.004485][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.026701][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.059773][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.127040][T12820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.155960][T12695] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.193896][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.216835][T12695] bridge_slave_0: entered allmulticast mode [ 831.236315][T12695] bridge_slave_0: entered promiscuous mode [ 831.349572][T12821] bond2: (slave veth3): Enslaving as an active interface with a down link [ 831.362083][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.377692][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.440216][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.467592][T12820] vlan2: entered allmulticast mode [ 831.477386][T12820] veth1: entered allmulticast mode [ 831.486750][T12820] veth1: entered promiscuous mode [ 831.492626][T12820] veth1: left promiscuous mode [ 831.510536][T12820] bond2: (slave vlan2): making interface the new active one [ 831.548083][T12820] veth1: entered promiscuous mode [ 831.563219][T12820] vlan2: entered promiscuous mode [ 831.580844][T12820] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 831.593193][T12695] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.618644][T12695] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.633837][T12695] bridge_slave_1: entered allmulticast mode [ 831.642265][T12695] bridge_slave_1: entered promiscuous mode [ 831.929540][T12643] hsr_slave_0: entered promiscuous mode [ 831.955545][T12643] hsr_slave_1: entered promiscuous mode [ 831.962286][T12643] debugfs: 'hsr0' already exists in 'hsr' [ 831.981705][T12643] Cannot create hsr debugfs directory [ 831.992339][T12695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.018073][T12695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.256779][ T13] bridge_slave_1: left allmulticast mode [ 832.262496][ T13] bridge_slave_1: left promiscuous mode [ 832.287697][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.319041][ T13] bridge_slave_0: left allmulticast mode [ 832.332167][ T13] bridge_slave_0: left promiscuous mode [ 832.348581][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.616268][ T51] Bluetooth: hci4: command tx timeout [ 833.057635][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.068914][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.080992][ T13] bond0 (unregistering): Released all slaves [ 833.098913][T12695] team0: Port device team_slave_0 added [ 833.160974][ T13] tipc: Left network mode [ 833.161557][T12856] syz_tun: entered allmulticast mode [ 833.260086][T12858] dvmrp1: entered allmulticast mode [ 833.267899][T12695] team0: Port device team_slave_1 added [ 833.312929][T12854] syz_tun: left allmulticast mode [ 833.361377][T12695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.371903][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.404153][T12695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.447216][T12695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.456108][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.483324][T12695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.682356][T12695] hsr_slave_0: entered promiscuous mode [ 833.689561][T12695] hsr_slave_1: entered promiscuous mode [ 833.696101][T12695] debugfs: 'hsr0' already exists in 'hsr' [ 833.701889][T12695] Cannot create hsr debugfs directory [ 833.886923][ T13] hsr_slave_0: left promiscuous mode [ 833.894500][ T13] hsr_slave_1: left promiscuous mode [ 833.900648][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.909048][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.918012][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.927566][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.958692][T12867] overlayfs: failed to clone upperpath [ 833.969922][ T13] team0: left allmulticast mode [ 833.975365][ T13] team_slave_0: left allmulticast mode [ 833.980870][ T13] team_slave_1: left allmulticast mode [ 833.987538][ T13] team0: left promiscuous mode [ 833.993414][ T13] team_slave_0: left promiscuous mode [ 833.999404][ T13] team_slave_1: left promiscuous mode [ 834.005513][ T13] veth1_macvtap: left promiscuous mode [ 834.012695][ T13] veth0_macvtap: left promiscuous mode [ 834.018981][ T13] veth1_vlan: left promiscuous mode [ 834.025558][ T13] veth0_vlan: left promiscuous mode [ 835.083190][ T13] team0 (unregistering): Port device team_slave_1 removed [ 835.149520][ T13] team0 (unregistering): Port device team_slave_0 removed [ 836.070840][T12894] lo speed is unknown, defaulting to 1000 [ 836.232852][T12643] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 836.273392][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1529'. [ 836.277359][T12643] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 836.309583][T12643] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 836.394960][T12643] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 836.429958][T12908] macvlan2: entered promiscuous mode [ 836.445191][T12908] macvlan2: entered allmulticast mode [ 836.456957][T12908] bond3: entered promiscuous mode [ 836.466607][T12908] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 836.481784][T12908] bond3: left promiscuous mode [ 836.966381][T12695] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 837.010672][T12695] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 837.035492][T12695] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 837.058991][T12695] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 837.167800][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 837.239488][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.325716][T12643] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.382381][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.389673][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.612317][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.619589][ T6331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.722398][T12956] Invalid ELF header magic: != ELF [ 837.786648][T12695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.946005][T12695] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.002285][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.009621][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.061383][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.068642][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.511161][T12643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.840274][T12695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.390438][T12643] veth0_vlan: entered promiscuous mode [ 839.420777][T12643] veth1_vlan: entered promiscuous mode [ 839.515862][T12695] veth0_vlan: entered promiscuous mode [ 839.523063][T12643] veth0_macvtap: entered promiscuous mode [ 839.559768][T12643] veth1_macvtap: entered promiscuous mode [ 839.589223][T12695] veth1_vlan: entered promiscuous mode [ 839.653052][T12643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.702343][T12643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.763933][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.806646][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.822044][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.861664][T12695] veth0_macvtap: entered promiscuous mode [ 839.880887][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.915505][T12695] veth1_macvtap: entered promiscuous mode [ 840.017409][T12695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.112112][T12695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.246388][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.255799][T13021] overlayfs: failed to clone upperpath [ 840.274643][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.311270][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.347441][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.392247][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.433363][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.702450][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.724824][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.944443][T13036] overlayfs: failed to clone upperpath [ 841.019505][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.058404][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.161995][ T7049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.197983][ T7049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.299065][T13042] loop8: detected capacity change from 0 to 512 [ 841.434509][T13042] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.543222][T13042] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.650043][ T30] audit: type=1800 audit(1754621471.885:64): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1453" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 841.692544][T13054] netlink: 'syz.2.1553': attribute type 1 has an invalid length. [ 841.814576][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.825091][T13058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 841.834413][T13056] bond3: entered promiscuous mode [ 841.902959][T13056] bond3: entered allmulticast mode [ 841.919820][T13056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.043832][T13054] ip6gretap1: entered promiscuous mode [ 842.063770][ T3485] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 842.081192][T13054] ip6gretap1: entered allmulticast mode [ 842.162521][T13054] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 842.227800][ T7049] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 842.274484][T13066] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 842.361379][T13071] overlayfs: failed to clone upperpath [ 842.915047][ T6332] vlan2: left promiscuous mode [ 843.089647][T13093] overlayfs: failed to clone upperpath [ 843.447992][ T30] audit: type=1800 audit(1754621473.675:65): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1571" name="nullb0" dev="tmpfs" ino=941 res=0 errno=0 [ 844.494114][T13137] overlayfs: failed to clone upperpath [ 848.586534][T13202] fuse: Bad value for 'fd' [ 849.853363][T13212] loop8: detected capacity change from 0 to 4096 [ 849.935232][T13212] NILFS (loop8): invalid segment: Checksum error in segment payload [ 849.946255][T13212] NILFS (loop8): trying rollback from an earlier position [ 850.005496][T13212] NILFS (loop8): recovery complete [ 850.027414][T13213] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.143110][T13212] overlayfs: upper fs does not support tmpfile. [ 850.165761][T13212] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 850.172930][T13212] overlayfs: failed to set xattr on upper [ 850.178688][T13212] overlayfs: ...falling back to redirect_dir=nofollow. [ 850.189516][T13212] overlayfs: ...falling back to index=off. [ 850.195899][T13212] overlayfs: ...falling back to uuid=null. [ 852.201976][T13241] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1609'. [ 852.211612][T13241] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1609'. [ 853.367184][T13248] overlayfs: failed to resolve './file0': -2 [ 855.591902][T13280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 855.599770][T13280] IPv6: NLM_F_CREATE should be set when creating new route [ 855.642873][T13280] lo: entered allmulticast mode [ 855.653436][T13280] tunl0: entered allmulticast mode [ 855.718616][T13280] gre0: entered allmulticast mode [ 855.795592][T13288] overlayfs: failed to clone upperpath [ 855.923760][T13280] gretap0: entered allmulticast mode [ 855.972936][T13280] erspan0: entered allmulticast mode [ 856.082527][T13293] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 856.094659][T13293] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 856.659991][T13280] ip_vti0: entered allmulticast mode [ 856.768744][T13280] ip6_vti0: entered allmulticast mode [ 856.822920][T13280] sit0: entered allmulticast mode [ 856.873112][T13280] ip6tnl0: entered allmulticast mode [ 857.044540][T13280] ip6gre0: entered allmulticast mode [ 857.131931][T13280] syz_tun: entered allmulticast mode [ 857.155784][T13280] ip6gretap0: entered allmulticast mode [ 857.704587][T13280] bridge0: entered allmulticast mode [ 857.758997][T13280] bond0: entered allmulticast mode [ 857.809537][T13280] dummy0: entered allmulticast mode [ 857.823014][T13280] tipc: Resetting bearer [ 857.840888][T13280] team0: entered allmulticast mode [ 857.893029][T13280] nlmon0: entered allmulticast mode [ 857.918883][T13280] caif0: entered allmulticast mode [ 857.946816][T13280] veth0: entered allmulticast mode [ 858.096671][T13280] wg0: entered allmulticast mode [ 858.178933][T13280] wg1: entered allmulticast mode [ 858.240273][T13280] wg2: entered allmulticast mode [ 858.277870][T13280] veth0_to_bridge: entered allmulticast mode [ 858.348420][T13280] bridge_slave_0: entered allmulticast mode [ 858.374242][T13280] veth1_to_bridge: entered allmulticast mode [ 858.407514][T13280] bridge_slave_1: entered allmulticast mode [ 858.461661][T13280] veth0_to_bond: entered allmulticast mode [ 858.490602][T13280] bond_slave_0: entered allmulticast mode [ 858.540306][T13280] veth1_to_bond: entered allmulticast mode [ 858.600719][T13280] bond_slave_1: entered allmulticast mode [ 858.689167][T13280] veth0_to_team: entered allmulticast mode [ 858.691245][T13315] [U] v3f"S/4:XTzWtlW= [ 858.724110][T13280] team_slave_0: entered allmulticast mode [ 858.755969][T13280] veth1_to_team: entered allmulticast mode [ 858.761311][T13315] [U] J"e:" [ 858.818543][T13280] team_slave_1: entered allmulticast mode [ 858.841894][T13280] veth0_to_batadv: entered allmulticast mode [ 858.878300][T13280] batadv_slave_0: entered allmulticast mode [ 858.915691][T13280] veth1_to_batadv: entered allmulticast mode [ 858.953985][T13280] batadv_slave_1: entered allmulticast mode [ 859.045498][T13280] xfrm0: entered allmulticast mode [ 859.072046][T13280] veth0_to_hsr: entered allmulticast mode [ 859.279194][T13280] hsr_slave_0: entered allmulticast mode [ 859.384035][T13328] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1636'. [ 860.080486][T13280] veth1_to_hsr: entered allmulticast mode [ 860.113773][T13280] hsr_slave_1: entered allmulticast mode [ 860.371741][T13280] hsr0: entered allmulticast mode [ 860.386114][T13280] veth1_vlan: entered allmulticast mode [ 860.533472][T13334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 860.546438][T13334] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 861.112498][T13280] veth0_vlan: entered allmulticast mode [ 861.206871][T13280] vlan0: entered allmulticast mode [ 861.217997][T13280] vlan1: entered allmulticast mode [ 861.236297][T13280] macvlan0: entered allmulticast mode [ 861.315122][T13280] macvlan1: entered allmulticast mode [ 861.348365][T13280] ipvlan0: entered allmulticast mode [ 861.355762][T13280] ipvlan1: entered allmulticast mode [ 861.377668][T13280] veth1_macvtap: entered allmulticast mode [ 861.416161][T13280] veth0_macvtap: entered allmulticast mode [ 861.499800][T13280] macvtap0: entered allmulticast mode [ 861.562203][T13280] macsec0: entered allmulticast mode [ 861.582957][T13280] geneve0: entered allmulticast mode [ 861.623605][T13280] geneve1: entered allmulticast mode [ 861.684150][T13280] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 861.738793][T13280] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 861.774984][T13280] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 861.820779][T13280] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 861.875680][T13280] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 861.923024][T13280] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 861.956459][T13280] hsr1: entered allmulticast mode [ 861.969654][T13280] L: entered allmulticast mode [ 861.977373][T13280] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 861.985940][T13280] ip6tnl1: entered allmulticast mode [ 861.996167][T13280] bond1: entered allmulticast mode [ 862.920444][T13280] erspan0.1: entered allmulticast mode [ 863.317584][T13280] geneve2: left promiscuous mode [ 863.356710][T13280] syztnl1: entered allmulticast mode [ 863.420399][T13280] ip6tnl2: entered allmulticast mode [ 863.452993][T13280] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 863.482613][T13280] bond2: entered allmulticast mode [ 863.522299][T13280] veth2: entered allmulticast mode [ 863.640612][T13280] veth3: entered allmulticast mode [ 863.657902][T13280] bond3: entered allmulticast mode [ 863.741004][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.763636][T13358] loop0: detected capacity change from 0 to 4096 [ 863.786338][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.810553][T13358] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 863.831504][T13358] ntfs3(loop0): $Volume is corrupted. [ 863.887753][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.917347][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.311486][T12351] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 864.537989][T12351] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.995495][T12351] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 865.020496][T12351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.046921][T12351] usb 10-1: config 0 descriptor?? [ 865.127315][T12351] pwc: Askey VC010 type 2 USB webcam detected. [ 865.535499][T12351] pwc: recv_control_msg error -32 req 02 val 2b00 [ 865.601234][T12351] pwc: recv_control_msg error -32 req 02 val 2700 [ 865.631459][T12351] pwc: recv_control_msg error -32 req 02 val 2c00 [ 866.329457][T12351] pwc: recv_control_msg error -32 req 04 val 1000 [ 866.592513][T12351] pwc: recv_control_msg error -32 req 04 val 1300 [ 866.881856][T12351] pwc: recv_control_msg error -32 req 04 val 1400 [ 866.913913][T12351] pwc: recv_control_msg error -32 req 02 val 2000 [ 866.942568][T12351] pwc: recv_control_msg error -32 req 02 val 2100 [ 867.167482][T12351] pwc: recv_control_msg error -71 req 02 val 2500 [ 867.244686][T12351] pwc: recv_control_msg error -71 req 02 val 2400 [ 867.315688][T12351] pwc: recv_control_msg error -71 req 02 val 2600 [ 867.690664][T12351] pwc: recv_control_msg error -71 req 02 val 2900 [ 867.862490][T12351] pwc: recv_control_msg error -71 req 02 val 2800 [ 867.900496][T12351] pwc: recv_control_msg error -71 req 04 val 1100 [ 867.930378][T12351] pwc: recv_control_msg error -71 req 04 val 1200 [ 868.086039][T12351] pwc: Registered as video103. [ 868.125144][T12351] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input11 [ 868.247815][T12351] usb 10-1: USB disconnect, device number 2 [ 869.832059][T13449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 869.844201][T13449] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 872.305923][T13488] loop8: detected capacity change from 0 to 128 [ 874.883219][T13516] loop8: detected capacity change from 0 to 40427 [ 874.946500][T13516] F2FS-fs (loop8): invalid crc value [ 875.048013][T13516] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 875.058656][T13516] F2FS-fs (loop8): Start checkpoint disabled! [ 875.069271][T13516] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 875.267656][ T6332] kworker/u8:10: attempt to access beyond end of device [ 875.267656][ T6332] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 875.416820][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.423262][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.471460][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: kworker/u8:10 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 875.471491][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.471506][ T6332] Workqueue: writeback wb_workfn (flush-7:8) [ 875.471542][ T6332] Call Trace: [ 875.471551][ T6332] [ 875.471562][ T6332] dump_stack_lvl+0x189/0x250 [ 875.471597][ T6332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.471623][ T6332] ? __pfx_queue_work_on+0x10/0x10 [ 875.471645][ T6332] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 875.471676][ T6332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 875.471721][ T6332] f2fs_handle_critical_error+0x37c/0x540 [ 875.471765][ T6332] f2fs_write_end_io+0x886/0xb60 [ 875.471813][ T6332] __submit_merged_bio+0x27a/0x6a0 [ 875.471855][ T6332] __submit_merged_write_cond+0x255/0x530 [ 875.471895][ T6332] f2fs_write_data_pages+0x261d/0x3000 [ 875.471979][ T6332] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 875.472095][ T6332] ? kvm_sched_clock_read+0x11/0x20 [ 875.472158][ T6332] ? rcu_is_watching+0x15/0xb0 [ 875.472206][ T6332] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 875.472244][ T6332] do_writepages+0x32b/0x550 [ 875.472284][ T6332] ? reacquire_held_locks+0x127/0x1d0 [ 875.472306][ T6332] ? writeback_sb_inodes+0x384/0x1010 [ 875.472349][ T6332] __writeback_single_inode+0x145/0xff0 [ 875.472379][ T6332] ? do_raw_spin_unlock+0x122/0x240 [ 875.472415][ T6332] writeback_sb_inodes+0x6c7/0x1010 [ 875.472443][ T6332] ? preempt_schedule+0xae/0xc0 [ 875.472481][ T6332] ? preempt_schedule+0xae/0xc0 [ 875.472534][ T6332] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 875.472621][ T6332] ? rcu_is_watching+0x15/0xb0 [ 875.472658][ T6332] wb_writeback+0x43b/0xaf0 [ 875.472719][ T6332] ? queue_io+0x2f1/0x590 [ 875.472753][ T6332] ? __pfx_wb_writeback+0x10/0x10 [ 875.472795][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.472832][ T6332] wb_workfn+0x409/0xef0 [ 875.472878][ T6332] ? __pfx_wb_workfn+0x10/0x10 [ 875.472908][ T6332] ? __lock_acquire+0xab9/0xd20 [ 875.472957][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 875.472990][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.473017][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 875.473038][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 875.473064][ T6332] process_scheduled_works+0xade/0x17b0 [ 875.473137][ T6332] ? __pfx_process_scheduled_works+0x10/0x10 [ 875.473184][ T6332] worker_thread+0x8a0/0xda0 [ 875.473213][ T6332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 875.473254][ T6332] ? __kthread_parkme+0x7b/0x200 [ 875.473295][ T6332] kthread+0x711/0x8a0 [ 875.473328][ T6332] ? __pfx_worker_thread+0x10/0x10 [ 875.473351][ T6332] ? __pfx_kthread+0x10/0x10 [ 875.473383][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.473410][ T6332] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.473439][ T6332] ? __pfx_kthread+0x10/0x10 [ 875.473470][ T6332] ret_from_fork+0x3f9/0x770 [ 875.473497][ T6332] ? __pfx_ret_from_fork+0x10/0x10 [ 875.473531][ T6332] ? __switch_to_asm+0x39/0x70 [ 875.473558][ T6332] ? __switch_to_asm+0x33/0x70 [ 875.473586][ T6332] ? __pfx_kthread+0x10/0x10 [ 875.473617][ T6332] ret_from_fork_asm+0x1a/0x30 [ 875.473670][ T6332] [ 875.473680][ T6332] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 875.627623][ T30] audit: type=1326 audit(1754621761.867:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5a58ebe9 code=0x7ffc0000 [ 875.837285][T13531] team0: left allmulticast mode [ 875.842604][T13531] team_slave_0: left allmulticast mode [ 875.848142][T13531] team_slave_1: left allmulticast mode [ 875.854064][ T30] audit: type=1326 audit(1754621762.077:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5a58ebe9 code=0x7ffc0000 [ 875.883204][T13531] team0: left promiscuous mode [ 875.888220][T13531] team_slave_0: left promiscuous mode [ 875.894482][T13531] team_slave_1: left promiscuous mode [ 875.904431][ T30] audit: type=1326 audit(1754621762.077:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5a58ebe9 code=0x7ffc0000 [ 875.915364][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: kworker/u8:10 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 875.915400][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.915418][ T6332] Workqueue: writeback wb_workfn (flush-7:8) [ 875.915456][ T6332] Call Trace: [ 875.915465][ T6332] [ 875.915476][ T6332] dump_stack_lvl+0x189/0x250 [ 875.915514][ T6332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.915547][ T6332] ? __pfx_queue_work_on+0x10/0x10 [ 875.915571][ T6332] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 875.915605][ T6332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 875.915655][ T6332] f2fs_handle_critical_error+0x37c/0x540 [ 875.915704][ T6332] f2fs_write_end_io+0x886/0xb60 [ 875.915758][ T6332] __submit_merged_bio+0x27a/0x6a0 [ 875.915816][ T6332] __submit_merged_write_cond+0x255/0x530 [ 875.915863][ T6332] f2fs_write_data_pages+0x261d/0x3000 [ 875.915953][ T6332] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 875.916070][ T6332] ? kvm_sched_clock_read+0x11/0x20 [ 875.916141][ T6332] ? rcu_is_watching+0x15/0xb0 [ 875.916193][ T6332] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 875.916234][ T6332] do_writepages+0x32b/0x550 [ 875.916276][ T6332] ? reacquire_held_locks+0x127/0x1d0 [ 875.916301][ T6332] ? writeback_sb_inodes+0x384/0x1010 [ 875.916347][ T6332] __writeback_single_inode+0x145/0xff0 [ 875.916380][ T6332] ? do_raw_spin_unlock+0x122/0x240 [ 875.916420][ T6332] writeback_sb_inodes+0x6c7/0x1010 [ 875.916451][ T6332] ? preempt_schedule+0xae/0xc0 [ 875.916492][ T6332] ? preempt_schedule+0xae/0xc0 [ 875.916549][ T6332] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 875.916646][ T6332] ? rcu_is_watching+0x15/0xb0 [ 875.916686][ T6332] wb_writeback+0x43b/0xaf0 [ 875.916732][ T6332] ? queue_io+0x2f1/0x590 [ 875.916778][ T6332] ? __pfx_wb_writeback+0x10/0x10 [ 875.916824][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.916863][ T6332] wb_workfn+0x409/0xef0 [ 875.916915][ T6332] ? __pfx_wb_workfn+0x10/0x10 [ 875.916951][ T6332] ? __lock_acquire+0xab9/0xd20 [ 875.917005][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 875.917039][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.917068][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 875.917093][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 875.917121][ T6332] process_scheduled_works+0xade/0x17b0 [ 875.917195][ T6332] ? __pfx_process_scheduled_works+0x10/0x10 [ 875.917248][ T6332] worker_thread+0x8a0/0xda0 [ 875.917278][ T6332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 875.917323][ T6332] ? __kthread_parkme+0x7b/0x200 [ 875.917368][ T6332] kthread+0x711/0x8a0 [ 875.917405][ T6332] ? __pfx_worker_thread+0x10/0x10 [ 875.917430][ T6332] ? __pfx_kthread+0x10/0x10 [ 875.917464][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.917496][ T6332] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.917526][ T6332] ? __pfx_kthread+0x10/0x10 [ 875.917560][ T6332] ret_from_fork+0x3f9/0x770 [ 875.917590][ T6332] ? __pfx_ret_from_fork+0x10/0x10 [ 875.917626][ T6332] ? __switch_to_asm+0x39/0x70 [ 875.917658][ T6332] ? __switch_to_asm+0x33/0x70 [ 875.917687][ T6332] ? __pfx_kthread+0x10/0x10 [ 875.917722][ T6332] ret_from_fork_asm+0x1a/0x30 [ 875.917786][ T6332] [ 875.917796][ T6332] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 875.931141][T13531] bridge0: port 4(team0) entered disabled state [ 876.287668][ T30] audit: type=1326 audit(1754621762.077:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d5a58ebe9 code=0x7ffc0000 [ 876.349467][ T30] audit: type=1326 audit(1754621762.077:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5a58ebe9 code=0x7ffc0000 [ 876.404040][T13531] bond0: (slave dummy0): Releasing backup interface [ 876.434059][ T30] audit: type=1326 audit(1754621762.077:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d5a58ebe9 code=0x7ffc0000 [ 876.471398][T13531] bridge_slave_0: left allmulticast mode [ 876.539060][T13531] bridge_slave_0: left promiscuous mode [ 876.559236][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.629690][T13531] bridge_slave_1: left allmulticast mode [ 876.635682][T13531] bridge_slave_1: left promiscuous mode [ 876.642061][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.687357][T13531] bond0: (slave bond_slave_0): Releasing backup interface [ 876.711738][T13531] bond0: (slave bond_slave_1): Releasing backup interface [ 876.821032][T13531] team0: Port device team_slave_0 removed [ 876.940334][T13531] team0: Port device team_slave_1 removed [ 876.968068][T13531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.987208][T13531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.999507][T13531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.028033][T13531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.218361][T13531] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 877.849064][T13531] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 877.909043][T13531] bridge0: port 3(netdevsim0) entered disabled state [ 877.962567][T13531] bond2: (slave veth3): Releasing active interface [ 877.979455][T13531] bond2: (slave veth3): the permanent HWaddr of slave - 7a:e9:f2:af:cb:88 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 878.120674][T13531] vlan3: entered promiscuous mode [ 878.339635][T13531] bond2: (slave vlan3): Releasing active interface [ 878.346470][T13531] vlan3: left promiscuous mode [ 878.380323][T13531] veth1: left promiscuous mode [ 878.432464][T13531] bond3: (slave ip6gretap1): Removing an active aggregator [ 878.485574][T13531] bond3: (slave ip6gretap1): Releasing backup interface [ 878.525143][T13531] ip6gretap1: left promiscuous mode [ 878.868927][T13531] ip6gretap1: left allmulticast mode [ 880.066402][ T5947] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 880.075252][T13566] loop8: detected capacity change from 0 to 1024 [ 880.109173][ T5947] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 880.207627][T13566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 880.319837][T13566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 880.459527][T13566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.960939][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.909658][T13594] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 884.830123][ T30] audit: type=1326 audit(1754621771.078:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13615 comm="syz.0.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f570138ebe9 code=0x0 [ 889.939128][T13660] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1722'. [ 890.498242][T13662] loop8: detected capacity change from 0 to 256 [ 890.505763][T13662] vfat: Unknown parameter 'chehk' [ 890.767569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.724465][T13662] lo speed is unknown, defaulting to 1000 [ 891.807720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.847244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.888327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.397874][T13700] loop0: detected capacity change from 0 to 40427 [ 894.429469][T13700] F2FS-fs (loop0): invalid crc value [ 894.515627][T13700] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 894.525307][T13700] F2FS-fs (loop0): Start checkpoint disabled! [ 894.623460][T13700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 894.927148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.103160][ T3485] kworker/u8:8: attempt to access beyond end of device [ 895.103160][ T3485] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 895.153297][ T3485] CPU: 1 UID: 0 PID: 3485 Comm: kworker/u8:8 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 895.153330][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 895.153346][ T3485] Workqueue: writeback wb_workfn (flush-7:0) [ 895.153382][ T3485] Call Trace: [ 895.153390][ T3485] [ 895.153400][ T3485] dump_stack_lvl+0x189/0x250 [ 895.153436][ T3485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.153464][ T3485] ? __pfx_queue_work_on+0x10/0x10 [ 895.153487][ T3485] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 895.153517][ T3485] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 895.153564][ T3485] f2fs_handle_critical_error+0x37c/0x540 [ 895.153607][ T3485] f2fs_write_end_io+0x886/0xb60 [ 895.153655][ T3485] __submit_merged_bio+0x27a/0x6a0 [ 895.153697][ T3485] __submit_merged_write_cond+0x255/0x530 [ 895.153740][ T3485] f2fs_write_data_pages+0x261d/0x3000 [ 895.153832][ T3485] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 895.153887][ T3485] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 895.153963][ T3485] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 895.154015][ T3485] ? trace_f2fs_writepages+0x7f/0x200 [ 895.154050][ T3485] ? f2fs_write_node_pages+0x478/0x6e0 [ 895.154089][ T3485] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 895.154117][ T3485] ? lock_list_lru_of_memcg+0x238/0x4c0 [ 895.154163][ T3485] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 895.154201][ T3485] do_writepages+0x32b/0x550 [ 895.154240][ T3485] ? reacquire_held_locks+0x127/0x1d0 [ 895.154263][ T3485] ? writeback_sb_inodes+0x384/0x1010 [ 895.154306][ T3485] __writeback_single_inode+0x145/0xff0 [ 895.154337][ T3485] ? do_raw_spin_unlock+0x122/0x240 [ 895.154373][ T3485] writeback_sb_inodes+0x6c7/0x1010 [ 895.154442][ T3485] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 895.154533][ T3485] ? rcu_is_watching+0x15/0xb0 [ 895.154571][ T3485] wb_writeback+0x43b/0xaf0 [ 895.154612][ T3485] ? queue_io+0x2f1/0x590 [ 895.154647][ T3485] ? __pfx_wb_writeback+0x10/0x10 [ 895.154690][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.154727][ T3485] wb_workfn+0x409/0xef0 [ 895.154780][ T3485] ? __pfx_wb_workfn+0x10/0x10 [ 895.154813][ T3485] ? __lock_acquire+0xab9/0xd20 [ 895.154863][ T3485] ? process_scheduled_works+0x9ef/0x17b0 [ 895.154896][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.154923][ T3485] ? process_scheduled_works+0x9ef/0x17b0 [ 895.154945][ T3485] ? process_scheduled_works+0x9ef/0x17b0 [ 895.154971][ T3485] process_scheduled_works+0xade/0x17b0 [ 895.155037][ T3485] ? __pfx_process_scheduled_works+0x10/0x10 [ 895.155087][ T3485] worker_thread+0x8a0/0xda0 [ 895.155116][ T3485] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 895.155158][ T3485] ? __kthread_parkme+0x7b/0x200 [ 895.155198][ T3485] kthread+0x711/0x8a0 [ 895.155232][ T3485] ? __pfx_worker_thread+0x10/0x10 [ 895.155255][ T3485] ? __pfx_kthread+0x10/0x10 [ 895.155292][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.155320][ T3485] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.155349][ T3485] ? __pfx_kthread+0x10/0x10 [ 895.155380][ T3485] ret_from_fork+0x3f9/0x770 [ 895.155409][ T3485] ? __pfx_ret_from_fork+0x10/0x10 [ 895.155442][ T3485] ? __switch_to_asm+0x39/0x70 [ 895.155470][ T3485] ? __switch_to_asm+0x33/0x70 [ 895.155498][ T3485] ? __pfx_kthread+0x10/0x10 [ 895.155529][ T3485] ret_from_fork_asm+0x1a/0x30 [ 895.155584][ T3485] [ 895.480951][ T3485] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 895.496826][ T3485] CPU: 0 UID: 0 PID: 3485 Comm: kworker/u8:8 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 895.496865][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 895.496881][ T3485] Workqueue: writeback wb_workfn (flush-7:0) [ 895.496916][ T3485] Call Trace: [ 895.496925][ T3485] [ 895.496937][ T3485] dump_stack_lvl+0x189/0x250 [ 895.496973][ T3485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.497001][ T3485] ? __pfx_queue_work_on+0x10/0x10 [ 895.497024][ T3485] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 895.497056][ T3485] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 895.497103][ T3485] f2fs_handle_critical_error+0x37c/0x540 [ 895.497146][ T3485] f2fs_write_end_io+0x886/0xb60 [ 895.497195][ T3485] __submit_merged_bio+0x27a/0x6a0 [ 895.497237][ T3485] __submit_merged_write_cond+0x255/0x530 [ 895.497280][ T3485] f2fs_write_data_pages+0x261d/0x3000 [ 895.497364][ T3485] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 895.497421][ T3485] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 895.497497][ T3485] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 895.497557][ T3485] ? trace_f2fs_writepages+0x7f/0x200 [ 895.497593][ T3485] ? f2fs_write_node_pages+0x478/0x6e0 [ 895.497633][ T3485] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 895.497661][ T3485] ? lock_list_lru_of_memcg+0x238/0x4c0 [ 895.497709][ T3485] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 895.497747][ T3485] do_writepages+0x32b/0x550 [ 895.497787][ T3485] ? reacquire_held_locks+0x127/0x1d0 [ 895.497811][ T3485] ? writeback_sb_inodes+0x384/0x1010 [ 895.497855][ T3485] __writeback_single_inode+0x145/0xff0 [ 895.497887][ T3485] ? do_raw_spin_unlock+0x122/0x240 [ 895.497923][ T3485] writeback_sb_inodes+0x6c7/0x1010 [ 895.497992][ T3485] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 895.498084][ T3485] ? rcu_is_watching+0x15/0xb0 [ 895.498122][ T3485] wb_writeback+0x43b/0xaf0 [ 895.498165][ T3485] ? queue_io+0x2f1/0x590 [ 895.498200][ T3485] ? __pfx_wb_writeback+0x10/0x10 [ 895.498244][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.498280][ T3485] wb_workfn+0x409/0xef0 [ 895.498322][ T3485] ? __pfx_wb_workfn+0x10/0x10 [ 895.498351][ T3485] ? __lock_acquire+0xab9/0xd20 [ 895.498397][ T3485] ? process_scheduled_works+0x9ef/0x17b0 [ 895.498428][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.498454][ T3485] ? process_scheduled_works+0x9ef/0x17b0 [ 895.498476][ T3485] ? process_scheduled_works+0x9ef/0x17b0 [ 895.498499][ T3485] process_scheduled_works+0xade/0x17b0 [ 895.498567][ T3485] ? __pfx_process_scheduled_works+0x10/0x10 [ 895.498617][ T3485] worker_thread+0x8a0/0xda0 [ 895.498646][ T3485] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 895.498688][ T3485] ? __kthread_parkme+0x7b/0x200 [ 895.498729][ T3485] kthread+0x711/0x8a0 [ 895.498763][ T3485] ? __pfx_worker_thread+0x10/0x10 [ 895.498787][ T3485] ? __pfx_kthread+0x10/0x10 [ 895.498820][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.498848][ T3485] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.498877][ T3485] ? __pfx_kthread+0x10/0x10 [ 895.498908][ T3485] ret_from_fork+0x3f9/0x770 [ 895.498937][ T3485] ? __pfx_ret_from_fork+0x10/0x10 [ 895.498972][ T3485] ? __switch_to_asm+0x39/0x70 [ 895.499000][ T3485] ? __switch_to_asm+0x33/0x70 [ 895.499028][ T3485] ? __pfx_kthread+0x10/0x10 [ 895.499059][ T3485] ret_from_fork_asm+0x1a/0x30 [ 895.499113][ T3485] [ 895.499123][ T3485] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 895.934069][T13719] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 895.941464][ T5850] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 895.966880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.006757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.046673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.164323][ T5947] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 898.337275][ T5947] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.493274][ T5947] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.715790][ T5947] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 898.760426][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.805152][ T5947] usb 9-1: Product: syz [ 898.815309][ T5947] usb 9-1: Manufacturer: syz [ 898.826593][ T5947] usb 9-1: SerialNumber: syz [ 899.087022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.816268][ T5947] cdc_ncm 9-1:1.0: bind() failure [ 899.850535][ T5947] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 899.868303][ T5947] cdc_ncm 9-1:1.1: bind() failure [ 899.936576][ T5947] usb 9-1: USB disconnect, device number 2 [ 900.126311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.307389][T13769] /dev/nullb0: Can't lookup blockdev [ 901.176276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.206100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.002237][T13791] loop9: detected capacity change from 0 to 128 [ 903.245956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.285789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.832467][T13791] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 904.875834][T13791] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 905.325694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.308629][ T30] audit: type=1800 audit(1754621792.530:73): pid=13791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1752" name="bus" dev="loop9" ino=12 res=0 errno=0 [ 906.365602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.805109][T12695] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 907.415591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.445319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.485171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.525114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.601633][T13923] loop8: detected capacity change from 0 to 32768 [ 911.564948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.414332][T13928] loop9: detected capacity change from 0 to 256 [ 912.427400][T13928] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 912.438154][T13928] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 912.476404][T13928] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 912.491914][T13923] [ 912.491914][T13923] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 912.491914][T13923] [ 912.614810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.644742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.684576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.724367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.784609][T12643] [ 915.784609][T12643] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 915.784609][T12643] [ 915.832378][T13949] netlink: 'syz.9.1774': attribute type 10 has an invalid length. [ 915.882019][T13949] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.947559][T13949] bond0: (slave team0): Enslaving as an active interface with an up link [ 916.267224][T12643] [ 916.267224][T12643] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 916.267224][T12643] [ 916.774317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.804210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.822825][T13963] loop8: detected capacity change from 0 to 256 [ 917.912739][T13963] exfat: Deprecated parameter 'namecase' [ 918.040586][T13963] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 918.844041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.335864][T13969] loop0: detected capacity change from 0 to 32768 [ 919.343036][T13969] XFS: noikeep mount option is deprecated. [ 919.348938][T13969] XFS: ikeep mount option is deprecated. [ 919.618652][T13969] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 919.883944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.961427][T13969] XFS (loop0): Ending clean mount [ 920.923751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.963655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.159971][ T5860] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 922.572059][T14004] loop9: detected capacity change from 0 to 512 [ 922.625628][T14004] EXT4-fs: Ignoring removed nobh option [ 922.778400][T14004] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1784: iget: bad i_size value: 38620345925642 [ 922.843605][T14004] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1784: couldn't read orphan inode 15 (err -117) [ 923.003581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.824020][T14004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.929615][T14014] loop8: detected capacity change from 0 to 4096 [ 924.053395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.083281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.813081][T14008] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 926.123182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.163008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.202846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.628435][T14038] tipc: Enabled bearer , priority 0 [ 928.923704][T13734] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1524 with error 28 [ 928.936856][T13734] EXT4-fs (loop9): This should not happen!! Data will be lost [ 928.936856][T13734] [ 928.948401][T13734] EXT4-fs (loop9): Total free blocks count 0 [ 928.955850][T13734] EXT4-fs (loop9): Free/Dirty block details [ 928.961844][T13734] EXT4-fs (loop9): free_blocks=0 [ 929.242838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.282661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.348612][T13734] EXT4-fs (loop9): dirty_blocks=1524 [ 930.354271][T13734] EXT4-fs (loop9): Block reservation details [ 930.360441][T13734] EXT4-fs (loop9): i_reserved_data_blocks=1524 [ 930.422976][T12695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.332492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.362428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.412285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.442165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.482024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.302087][ T5972] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 936.521887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.220567][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.227133][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.561746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.635568][ T5972] usb 10-1: Using ep0 maxpacket: 8 [ 938.061664][ T5972] usb 10-1: device descriptor read/all, error -71 [ 938.601688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.948586][T14123] binder: BINDER_SET_CONTEXT_MGR already set [ 938.955166][T14123] binder: 14116:14123 ioctl 4018620d 200000000040 returned -16 [ 939.539207][ T5972] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 939.620091][T14119] tipc: Enabled bearer , priority 0 [ 939.641546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.697731][T14125] syzkaller0: entered promiscuous mode [ 939.741469][T14125] syzkaller0: entered allmulticast mode [ 939.751587][ T5972] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.787352][ T5972] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 939.804695][T14119] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 939.818487][ T5972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.390087][ T5972] usb 10-1: config 0 descriptor?? [ 940.416673][ T5972] pwc: Askey VC010 type 2 USB webcam detected. [ 940.478397][T14132] tipc: Resetting bearer [ 940.514878][T14118] tipc: Resetting bearer [ 940.615485][T14135] overlayfs: failed to clone lowerpath [ 940.681621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.696732][T14136] overlayfs: failed to clone upperpath [ 940.958487][T14118] tipc: Disabling bearer [ 941.068625][ T5972] pwc: recv_control_msg error -32 req 02 val 2b00 [ 941.080750][ T5972] pwc: recv_control_msg error -32 req 02 val 2700 [ 941.101530][ T5972] pwc: recv_control_msg error -32 req 02 val 2c00 [ 941.130718][ T5972] pwc: recv_control_msg error -32 req 04 val 1000 [ 941.144403][ T5972] pwc: recv_control_msg error -32 req 04 val 1300 [ 941.162224][ T5972] pwc: recv_control_msg error -32 req 04 val 1400 [ 941.393662][ T5972] pwc: recv_control_msg error -32 req 02 val 2000 [ 941.412406][ T5972] pwc: recv_control_msg error -32 req 02 val 2100 [ 941.420322][ T5972] pwc: recv_control_msg error -32 req 04 val 1500 [ 941.435118][ T5972] pwc: recv_control_msg error -32 req 02 val 2500 [ 941.731418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.396495][ T5972] pwc: recv_control_msg error -32 req 02 val 2600 [ 942.439956][ T5972] pwc: recv_control_msg error -32 req 02 val 2900 [ 942.523869][ T5972] pwc: recv_control_msg error -32 req 02 val 2800 [ 942.771158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.801946][ T5972] pwc: recv_control_msg error -71 req 04 val 1200 [ 942.950722][ T5972] pwc: Registered as video103. [ 943.014906][ T5972] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input14 [ 943.105663][ T5972] usb 10-1: USB disconnect, device number 4 [ 943.801049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.328800][T14173] binder: 14171:14173 ioctl c0306201 200000000280 returned -11 [ 944.460946][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 944.840884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.890710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.264613][T14194] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1824'. [ 946.920747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.960514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.000472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.160281][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 950.040231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.666183][ T5985] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 951.080106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.561889][ T5985] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.589895][ T5985] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 951.599002][ T5985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.790794][ T5985] usb 9-1: config 0 descriptor?? [ 952.012531][ T5985] pwc: Askey VC010 type 2 USB webcam detected. [ 952.120130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.543850][ T5985] pwc: recv_control_msg error -32 req 02 val 2b00 [ 952.586405][ T5985] pwc: recv_control_msg error -32 req 02 val 2700 [ 952.605259][ T5985] pwc: recv_control_msg error -32 req 02 val 2c00 [ 952.629414][ T5985] pwc: recv_control_msg error -32 req 04 val 1000 [ 952.659728][ T5985] pwc: recv_control_msg error -32 req 04 val 1300 [ 952.692251][ T5985] pwc: recv_control_msg error -32 req 04 val 1400 [ 952.745339][ T5985] pwc: recv_control_msg error -32 req 02 val 2000 [ 952.781405][ T5985] pwc: recv_control_msg error -32 req 02 val 2100 [ 952.819816][ T5985] pwc: recv_control_msg error -32 req 04 val 1500 [ 952.870448][ T5985] pwc: recv_control_msg error -32 req 02 val 2500 [ 952.903862][ T5985] pwc: recv_control_msg error -32 req 02 val 2400 [ 952.925947][ T5985] pwc: recv_control_msg error -32 req 02 val 2600 [ 953.090500][ T5985] pwc: recv_control_msg error -32 req 02 val 2900 [ 953.098189][ T5985] pwc: recv_control_msg error -32 req 02 val 2800 [ 953.107315][ T5985] pwc: recv_control_msg error -32 req 04 val 1100 [ 953.159844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.199812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.050374][ T5985] pwc: Registered as video103. [ 955.057640][ T5985] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input15 [ 955.236534][ T5985] usb 9-1: USB disconnect, device number 3 [ 955.242801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.279518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.586115][T14275] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1840'. [ 956.595802][T14275] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1840'. [ 956.605280][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1840'. [ 957.331798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.180218][T14284] loop9: detected capacity change from 0 to 131072 [ 958.359253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.429577][T14284] F2FS-fs (loop9): Invalid log sectors per block(570425347) log sectorsize(9) [ 958.438535][T14284] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 958.450349][T14284] F2FS-fs (loop9): invalid crc value [ 958.608717][T14284] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 958.668737][T14284] F2FS-fs (loop9): Bad quota inode 2:50331648 [ 958.675412][T14284] F2FS-fs (loop9): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 958.687729][T14284] F2FS-fs (loop9): Cannot turn on quotas: error -22 [ 958.694410][T14284] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 958.730951][T14284] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 958.738355][T14284] F2FS-fs (loop9): Mounted with checkpoint version = 753bd00b [ 959.399146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.130322][T14284] syz.9.1843 (14284): drop_caches: 2 [ 960.138219][T14284] syz.9.1843 (14284): drop_caches: 2 [ 960.439189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.479006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.518943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.568618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.598419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.648405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.688246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.728151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.757951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.883125][T14361] loop8: detected capacity change from 0 to 4096 [ 969.308679][T14368] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 969.339838][ T30] audit: type=1800 audit(1754621855.578:74): pid=14361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1854" name="file1" dev="loop8" ino=33 res=0 errno=0 [ 969.797920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.408968][T14381] overlayfs: failed to clone upperpath [ 970.847636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.887631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.917474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.957336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.065413][ T5985] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 974.643019][ T5985] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 974.673014][ T5985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.705122][ T5985] usb 9-1: Product: syz [ 974.733080][ T5985] usb 9-1: Manufacturer: syz [ 974.752768][ T5985] usb 9-1: SerialNumber: syz [ 974.786357][ T5985] usb 9-1: config 0 descriptor?? [ 974.997339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.037109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.087148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.116815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.096770][T12351] usb 9-1: USB disconnect, device number 4 [ 979.156677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.196617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.218683][T10957] udevd[10957]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.236438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.286340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.554105][T14466] loop8: detected capacity change from 0 to 40427 [ 982.626022][T14466] F2FS-fs (loop8): invalid crc value [ 982.683663][T14466] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 982.694516][T14466] F2FS-fs (loop8): Start checkpoint disabled! [ 982.704504][T14466] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 982.973604][T14478] syz.8.1877: attempt to access beyond end of device [ 982.973604][T14478] loop8: rw=2049, sector=77824, nr_sectors = 800 limit=40427 [ 983.052083][T14478] syz.8.1877: attempt to access beyond end of device [ 983.052083][T14478] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 983.071143][T14478] syz.8.1877: attempt to access beyond end of device [ 983.071143][T14478] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 983.091111][ T30] audit: type=1800 audit(1754621869.100:75): pid=14478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1877" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 983.316180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.470866][T14475] overlayfs: missing 'lowerdir' [ 984.356131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.476554][T14239] kworker/u8:13: attempt to access beyond end of device [ 984.476554][T14239] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 984.927076][T14239] CPU: 1 UID: 0 PID: 14239 Comm: kworker/u8:13 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 984.927112][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.927126][T14239] Workqueue: writeback wb_workfn (flush-7:8) [ 984.927189][T14239] Call Trace: [ 984.927198][T14239] [ 984.927209][T14239] dump_stack_lvl+0x189/0x250 [ 984.927242][T14239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.927268][T14239] ? __pfx_queue_work_on+0x10/0x10 [ 984.927290][T14239] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 984.927318][T14239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 984.927359][T14239] f2fs_handle_critical_error+0x37c/0x540 [ 984.927402][T14239] f2fs_write_end_io+0x886/0xb60 [ 984.927445][T14239] __submit_merged_bio+0x27a/0x6a0 [ 984.927483][T14239] __submit_merged_write_cond+0x255/0x530 [ 984.927522][T14239] f2fs_write_data_pages+0x261d/0x3000 [ 984.927597][T14239] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 984.927646][T14239] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 984.927706][T14239] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 984.927746][T14239] ? trace_f2fs_writepages+0x7f/0x200 [ 984.927773][T14239] ? f2fs_write_node_pages+0x478/0x6e0 [ 984.927804][T14239] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 984.927844][T14239] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 984.927874][T14239] do_writepages+0x32b/0x550 [ 984.927906][T14239] ? reacquire_held_locks+0x127/0x1d0 [ 984.927927][T14239] ? writeback_sb_inodes+0x384/0x1010 [ 984.927961][T14239] __writeback_single_inode+0x145/0xff0 [ 984.927987][T14239] ? do_raw_spin_unlock+0x122/0x240 [ 984.928015][T14239] writeback_sb_inodes+0x6c7/0x1010 [ 984.928047][T14239] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 984.928090][T14239] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 984.928167][T14239] ? rcu_is_watching+0x15/0xb0 [ 984.928198][T14239] wb_writeback+0x43b/0xaf0 [ 984.928231][T14239] ? queue_io+0x2f1/0x590 [ 984.928259][T14239] ? __pfx_wb_writeback+0x10/0x10 [ 984.928291][T14239] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.928321][T14239] wb_workfn+0x409/0xef0 [ 984.928357][T14239] ? __pfx_wb_workfn+0x10/0x10 [ 984.928383][T14239] ? __lock_acquire+0xab9/0xd20 [ 984.928422][T14239] ? process_scheduled_works+0x9ef/0x17b0 [ 984.928447][T14239] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.928469][T14239] ? process_scheduled_works+0x9ef/0x17b0 [ 984.928486][T14239] ? process_scheduled_works+0x9ef/0x17b0 [ 984.928507][T14239] process_scheduled_works+0xade/0x17b0 [ 984.928556][T14239] ? __pfx_process_scheduled_works+0x10/0x10 [ 984.928595][T14239] worker_thread+0x8a0/0xda0 [ 984.928620][T14239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 984.928655][T14239] ? __kthread_parkme+0x7b/0x200 [ 984.928689][T14239] kthread+0x711/0x8a0 [ 984.928719][T14239] ? __pfx_worker_thread+0x10/0x10 [ 984.928740][T14239] ? __pfx_kthread+0x10/0x10 [ 984.928770][T14239] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.928796][T14239] ? lockdep_hardirqs_on+0x9c/0x150 [ 984.928825][T14239] ? __pfx_kthread+0x10/0x10 [ 984.928854][T14239] ret_from_fork+0x3f9/0x770 [ 984.928882][T14239] ? __pfx_ret_from_fork+0x10/0x10 [ 984.928910][T14239] ? __switch_to_asm+0x39/0x70 [ 984.928938][T14239] ? __switch_to_asm+0x33/0x70 [ 984.928965][T14239] ? __pfx_kthread+0x10/0x10 [ 984.928994][T14239] ret_from_fork_asm+0x1a/0x30 [ 984.929043][T14239] [ 984.929314][T14239] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 985.405931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.445852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.176707][T14506] loop0: detected capacity change from 0 to 64 [ 987.475686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.125359][T14525] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 988.525600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.555509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.595371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.645205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.685016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.048848][T14552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.714943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.754841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.779009][ T30] audit: type=1326 audit(1754621882.031:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 995.794796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.856563][ T30] audit: type=1326 audit(1754621882.031:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 996.137147][T14576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 996.149192][T14576] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 996.761869][ T30] audit: type=1326 audit(1754621882.071:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 996.784142][ T30] audit: type=1326 audit(1754621882.071:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 996.809610][ T30] audit: type=1326 audit(1754621882.071:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 996.834590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.001579][ T30] audit: type=1326 audit(1754621882.071:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 997.124280][ T30] audit: type=1326 audit(1754621882.071:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 997.236938][ T30] audit: type=1326 audit(1754621882.071:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 997.344560][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1900'. [ 997.874406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.194432][ T30] audit: type=1326 audit(1754621882.081:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 998.224320][ T30] audit: type=1326 audit(1754621882.081:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.9.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7ffc0000 [ 998.283638][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.290367][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.313378][T14587] netlink: 'syz.8.1901': attribute type 10 has an invalid length. [ 998.844526][T12351] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 998.914440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.984455][T12351] usb 10-1: device descriptor read/64, error -71 [ 999.120256][T14587] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 999.244807][T12351] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 999.406710][T12351] usb 10-1: device descriptor read/64, error -71 [ 999.555370][T12351] usb usb10-port1: attempt power cycle [ 999.954227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.805884][T12351] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1000.870961][T12351] usb 10-1: device descriptor read/8, error -71 [ 1000.950935][T14618] random: crng reseeded on system resumption [ 1001.004093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.593851][T12351] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1001.875628][T12351] usb 10-1: device descriptor read/8, error -71 [ 1001.985132][T12351] usb usb10-port1: unable to enumerate USB device [ 1002.033890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.616022][T14629] tipc: Enabled bearer , priority 0 [ 1002.837405][T14629] syzkaller0: entered promiscuous mode [ 1002.844676][T14629] syzkaller0: entered allmulticast mode [ 1003.038237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.046805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.073886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.563767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.571952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.596226][T14629] tipc: Resetting bearer [ 1003.642681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.650929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.697979][T14626] tipc: Resetting bearer [ 1004.664353][T14626] tipc: Disabling bearer [ 1004.785396][T14652] loop9: detected capacity change from 0 to 128 [ 1004.843765][T14652] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1004.891850][T14652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1005.163556][ C1] net_ratelimit: 1 callbacks suppressed [ 1005.163573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.319241][T14658] loop8: detected capacity change from 0 to 256 [ 1005.491659][T14658] exfat: Deprecated parameter 'namecase' [ 1005.603381][T14658] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1005.656860][T14658] exFAT-fs (loop8): Invalid exboot-signature(sector = 1): 0xaa000000 [ 1005.768489][T14658] exFAT-fs (loop8): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1219aba6) [ 1005.876344][T14658] exFAT-fs (loop8): invalid boot region [ 1006.003390][T14658] exFAT-fs (loop8): failed to recognize exfat type [ 1006.193663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.233300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.273219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.313033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.352967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.392818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.448487][T14715] loop9: detected capacity change from 0 to 256 [ 1011.637846][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 1011.776975][T14715] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1011.788191][T14715] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1012.248878][T14715] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1012.432735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.482671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.847760][T14735] loop9: detected capacity change from 0 to 64 [ 1014.333792][T14736] 8021q: VLANs not supported on ipvlan0 [ 1014.512451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.010304][T14743] loop0: detected capacity change from 0 to 8 [ 1015.552462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.992085][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1015.992107][ T30] audit: type=1326 audit(1754621902.124:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1016.030416][ T30] audit: type=1326 audit(1754621902.124:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1016.098627][ T30] audit: type=1326 audit(1754621902.124:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1016.241192][ T30] audit: type=1326 audit(1754621902.124:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1016.312411][ T30] audit: type=1326 audit(1754621902.124:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1016.522044][ T30] audit: type=1326 audit(1754621902.124:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1016.574716][ T30] audit: type=1326 audit(1754621902.124:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1016.598802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.777307][T14762] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1016.788514][T14762] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1017.572326][ T30] audit: type=1326 audit(1754621902.124:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1017.594853][ T30] audit: type=1326 audit(1754621902.124:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1017.632219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.277254][ T30] audit: type=1326 audit(1754621902.124:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225318ebe9 code=0x7fc00000 [ 1018.682215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.712252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.069415][T14784] loop0: detected capacity change from 0 to 8 [ 1020.573349][T14784] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1020.582306][T14784] SQUASHFS error: Failed to read block 0x144: -5 [ 1020.588769][T14784] SQUASHFS error: Unable to read metadata cache entry [142] [ 1020.596947][T14784] SQUASHFS error: Unable to read inode 0x11f [ 1020.762267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.792229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.832186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.051392][T14802] bpq0: entered allmulticast mode [ 1023.872236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.898520][ T5985] kernel write not supported for file /1510/attr/exec (pid: 5985 comm: kworker/1:6) [ 1024.912326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.952596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.992229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.375037][T14834] loop8: detected capacity change from 0 to 512 [ 1027.420584][T14834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1027.809140][T14834] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1028.032181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.596581][T14834] EXT4-fs (loop8): 1 truncate cleaned up [ 1029.082293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.323393][T14834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.122243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.272465][T14844] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1031.162340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.192244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.315402][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.242118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.282205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.950225][T14876] loop9: detected capacity change from 0 to 4096 [ 1035.092047][T14876] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1035.312196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.352173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.392169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.442192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.639237][T14925] loop9: detected capacity change from 0 to 1764 [ 1039.085566][T14922] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1039.287687][T14927] loop8: detected capacity change from 0 to 512 [ 1039.469771][T14927] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1972: casefold flag without casefold feature [ 1039.492189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.546577][T14927] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1972: couldn't read orphan inode 15 (err -117) [ 1039.602030][T14927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.659841][T14936] loop9: detected capacity change from 0 to 16 [ 1039.732873][T14936] erofs (device loop9): mounted with root inode @ nid 36. [ 1039.780633][T14936] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1039.843168][T14936] erofs (device loop9): failed to decompress -29 in[58, 4038] out[1851] [ 1039.853858][T14936] erofs (device loop9): read error -117 @ 43 of nid 36 [ 1040.021025][T14943] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1040.029879][T14943] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1040.038876][T14943] erofs (device loop9): readahead error at folio 42 @ nid 36 [ 1040.048546][T14943] erofs (device loop9): bogus lookback distance 774 @ lcn 40 of nid 36 [ 1040.056926][T14943] erofs (device loop9): readahead error at folio 41 @ nid 36 [ 1040.064632][T14943] erofs (device loop9): bogus lookback distance 774 @ lcn 40 of nid 36 [ 1040.073022][T14943] erofs (device loop9): readahead error at folio 40 @ nid 36 [ 1040.080551][T14943] erofs (device loop9): readahead error at folio 39 @ nid 36 [ 1040.088068][T14943] erofs (device loop9): readahead error at folio 38 @ nid 36 [ 1040.098551][T14943] erofs (device loop9): readahead error at folio 36 @ nid 36 [ 1040.111252][T14943] erofs (device loop9): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 1040.119887][T14943] erofs (device loop9): readahead error at folio 31 @ nid 36 [ 1040.129127][T14943] erofs (device loop9): readahead error at folio 25 @ nid 36 [ 1040.136880][T14943] erofs (device loop9): readahead error at folio 24 @ nid 36 [ 1040.145151][T14943] erofs (device loop9): readahead error at folio 19 @ nid 36 [ 1040.154751][T14943] syz.9.1974: attempt to access beyond end of device [ 1040.154751][T14943] loop9: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1040.169437][T14943] syz.9.1974: attempt to access beyond end of device [ 1040.169437][T14943] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1040.184695][T14943] syz.9.1974: attempt to access beyond end of device [ 1040.184695][T14943] loop9: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1040.203783][T14943] erofs (device loop9): failed to decompress -29 in[58, 4038] out[2639] [ 1040.213482][T14943] erofs (device loop9): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 1040.222031][T14943] erofs (device loop9): readahead error at folio 47 @ nid 36 [ 1040.229458][T14943] erofs (device loop9): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 1040.237968][T14943] erofs (device loop9): readahead error at folio 46 @ nid 36 [ 1040.245909][T14943] erofs (device loop9): readahead error at folio 45 @ nid 36 [ 1040.256438][T14943] syz.9.1974: attempt to access beyond end of device [ 1040.256438][T14943] loop9: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1040.287012][T14943] erofs (device loop9): failed to decompress -29 in[58, 4038] out[3537] [ 1040.512256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.654127][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.756535][T14948] loop0: detected capacity change from 0 to 128 [ 1040.832787][T14948] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1041.138360][T14948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1041.552278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.592185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.632254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.672132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.792013][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1044.792063][ T30] audit: type=1326 audit(21488306.864:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.8.1982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f667618ebe9 code=0x0 [ 1045.712252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.412468][T14990] random: crng reseeded on system resumption [ 1046.422007][ T5931] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1046.752281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.601985][ T5931] usb 9-1: Using ep0 maxpacket: 8 [ 1047.792257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.848992][T15004] bridge1: entered allmulticast mode [ 1048.776794][ T5931] usb 9-1: unable to read config index 0 descriptor/all [ 1048.832421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.946267][ T5931] usb 9-1: can't read configurations, error -71 [ 1049.872159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.640762][T15026] loop8: detected capacity change from 0 to 16 [ 1050.659041][T15026] erofs (device loop8): mounted with root inode @ nid 36. [ 1050.912370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.952167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.992256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.759289][T15047] loop8: detected capacity change from 0 to 8 [ 1054.032202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.786670][T15061] loop8: detected capacity change from 0 to 64 [ 1055.072165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.112168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.152292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.192187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.071324][T15088] loop9: detected capacity change from 0 to 512 [ 1059.232130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.272146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.432934][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.439318][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.312120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.352129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.758538][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 1062.913631][T15120] lo: left allmulticast mode [ 1062.919471][T15120] tunl0: left allmulticast mode [ 1062.925675][T15120] gre0: left allmulticast mode [ 1062.931669][T15120] gretap0: left allmulticast mode [ 1062.938008][T15120] ip_vti0: left allmulticast mode [ 1062.944236][T15120] ip6_vti0: left allmulticast mode [ 1062.950526][T15120] sit0: left allmulticast mode [ 1062.956309][T15120] ip6tnl0: left allmulticast mode [ 1062.961933][T15120] ip6gre0: left allmulticast mode [ 1062.969315][T15120] ip6gretap0: left allmulticast mode [ 1062.975582][T15120] bridge0: left allmulticast mode [ 1062.981477][T15120] bond0: left allmulticast mode [ 1062.987475][T15120] team0: left allmulticast mode [ 1062.993674][T15120] dummy0: left allmulticast mode [ 1062.999861][T15120] nlmon0: left allmulticast mode [ 1063.006259][T15120] caif0: left allmulticast mode [ 1063.012261][T15120] veth0: left allmulticast mode [ 1063.019266][T15120] wg0: left allmulticast mode [ 1063.024943][T15120] wg1: left allmulticast mode [ 1063.030710][T15120] wg2: left allmulticast mode [ 1063.036699][T15120] veth0_to_bridge: left allmulticast mode [ 1063.043714][T15120] bridge_slave_0: left allmulticast mode [ 1063.050391][T15120] veth1_to_bridge: left allmulticast mode [ 1063.057327][T15120] bridge_slave_1: left allmulticast mode [ 1063.064083][T15120] veth0_to_bond: left allmulticast mode [ 1063.071659][T15120] bond_slave_0: left allmulticast mode [ 1063.078481][T15120] veth1_to_bond: left allmulticast mode [ 1063.085413][T15120] bond_slave_1: left allmulticast mode [ 1063.092018][T15120] veth0_to_team: left allmulticast mode [ 1063.098707][T15120] team_slave_0: left allmulticast mode [ 1063.105426][T15120] veth1_to_team: left allmulticast mode [ 1063.111989][T15120] team_slave_1: left allmulticast mode [ 1063.118345][T15120] veth0_to_batadv: left allmulticast mode [ 1063.126202][T15120] veth1_to_batadv: left allmulticast mode [ 1063.132749][T15120] batadv_slave_1: left allmulticast mode [ 1063.139542][T15120] xfrm0: left allmulticast mode [ 1063.145539][T15120] veth0_to_hsr: left allmulticast mode [ 1063.153651][T15120] veth1_to_hsr: left allmulticast mode [ 1063.161101][T15120] hsr0: left allmulticast mode [ 1063.166051][T15120] hsr_slave_0: left allmulticast mode [ 1063.171593][T15120] hsr_slave_1: left allmulticast mode [ 1063.179080][T15120] veth1_vlan: left allmulticast mode [ 1063.186617][T15120] vlan0: left allmulticast mode [ 1063.192627][T15120] vlan1: left allmulticast mode [ 1063.198562][T15120] macvlan0: left allmulticast mode [ 1063.204832][T15120] macvlan1: left allmulticast mode [ 1063.211103][T15120] ipvlan0: left allmulticast mode [ 1063.217453][T15120] ipvlan1: left allmulticast mode [ 1063.222807][T15120] veth0_vlan: left allmulticast mode [ 1063.229416][T15120] veth1_macvtap: left allmulticast mode [ 1063.236278][T15120] veth0_macvtap: left allmulticast mode [ 1063.242863][T15120] macvtap0: left allmulticast mode [ 1063.249169][T15120] macsec0: left allmulticast mode [ 1063.255509][T15120] geneve0: left allmulticast mode [ 1063.261712][T15120] geneve1: left allmulticast mode [ 1063.268000][T15120] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1063.277144][T15120] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 1063.285728][T15120] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 1063.294177][T15120] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 1063.302723][T15120] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 1063.310692][T15120] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1063.318615][T15120] hsr1: left allmulticast mode [ 1063.323580][T15120] syz_tun: left allmulticast mode [ 1063.328682][T15120] batadv_slave_0: left allmulticast mode [ 1063.335911][T15120] ip6gretap1: left allmulticast mode [ 1063.342137][T15120] L: left allmulticast mode [ 1063.347566][T15120] mac80211_hwsim hwsim15 wlan2: left allmulticast mode [ 1063.355640][T15120] ip6tnl1: left allmulticast mode [ 1063.361538][T15120] ip6gre1: left allmulticast mode [ 1063.367466][T15120] bond1: left allmulticast mode [ 1063.373568][T15120] erspan0.1: left allmulticast mode [ 1063.379420][T15120] erspan0: left allmulticast mode [ 1063.386208][T15120] geneve2: left allmulticast mode [ 1063.392148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.401255][T15120] syztnl1: left allmulticast mode [ 1063.407126][T15120] ip6tnl2: left allmulticast mode [ 1063.413402][T15120] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1063.421680][T15120] bond2: left allmulticast mode [ 1063.427538][T15120] veth2: left allmulticast mode [ 1063.433633][T15120] veth3: left allmulticast mode [ 1063.439801][T15120] vlan2: left allmulticast mode [ 1063.444774][T15120] veth1: left allmulticast mode [ 1063.450898][T15120] bond3: left allmulticast mode [ 1064.432106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.472121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.512113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.562139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.592238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.642101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.672237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.712214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.752278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.571092][T15194] loop9: detected capacity change from 0 to 40427 [ 1073.593807][T15194] F2FS-fs (loop9): invalid crc value [ 1073.660238][T15194] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1073.672501][T15194] F2FS-fs (loop9): Start checkpoint disabled! [ 1073.725737][T15194] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1073.792161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.832178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.063491][ T36] kworker/u8:2: attempt to access beyond end of device [ 1075.063491][ T36] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1075.118090][T15207] loop8: detected capacity change from 0 to 4096 [ 1075.190468][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 1075.190501][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1075.190516][ T36] Workqueue: writeback wb_workfn (flush-7:9) [ 1075.190562][ T36] Call Trace: [ 1075.190571][ T36] [ 1075.190581][ T36] dump_stack_lvl+0x189/0x250 [ 1075.190614][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1075.190641][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 1075.190663][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1075.190693][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1075.190735][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 1075.190776][ T36] f2fs_write_end_io+0x886/0xb60 [ 1075.190818][ T36] __submit_merged_bio+0x27a/0x6a0 [ 1075.190848][ T36] ? up_write+0x1c4/0x420 [ 1075.190879][ T36] __submit_merged_write_cond+0x44c/0x530 [ 1075.190919][ T36] f2fs_sync_node_pages+0x1479/0x15e0 [ 1075.190971][ T36] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1075.191001][ T36] ? __percpu_counter_sum+0x1c2/0x1e0 [ 1075.191067][ T36] ? rcu_is_watching+0x15/0xb0 [ 1075.191089][ T36] ? blk_start_plug+0x52/0x1b0 [ 1075.191124][ T36] f2fs_write_node_pages+0x303/0x6e0 [ 1075.191161][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1075.191201][ T36] ? unwind_next_frame+0xa5/0x2390 [ 1075.191223][ T36] ? unwind_next_frame+0x19ae/0x2390 [ 1075.191252][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1075.191282][ T36] do_writepages+0x32b/0x550 [ 1075.191320][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 1075.191343][ T36] ? writeback_sb_inodes+0x384/0x1010 [ 1075.191387][ T36] __writeback_single_inode+0x145/0xff0 [ 1075.191417][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 1075.191450][ T36] writeback_sb_inodes+0x6c7/0x1010 [ 1075.191511][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1075.191595][ T36] ? rcu_is_watching+0x15/0xb0 [ 1075.191628][ T36] wb_writeback+0x43b/0xaf0 [ 1075.191666][ T36] ? queue_io+0x2f1/0x590 [ 1075.191698][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1075.191738][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1075.191771][ T36] wb_workfn+0x409/0xef0 [ 1075.191814][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1075.191843][ T36] ? __lock_acquire+0xab9/0xd20 [ 1075.191889][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 1075.191918][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1075.191944][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 1075.191965][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 1075.191990][ T36] process_scheduled_works+0xade/0x17b0 [ 1075.192046][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 1075.192087][ T36] worker_thread+0x8a0/0xda0 [ 1075.192143][ T36] kthread+0x711/0x8a0 [ 1075.192175][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1075.192197][ T36] ? __pfx_kthread+0x10/0x10 [ 1075.192227][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1075.192255][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 1075.192282][ T36] ? __pfx_kthread+0x10/0x10 [ 1075.192312][ T36] ret_from_fork+0x3f9/0x770 [ 1075.192338][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1075.192369][ T36] ? __switch_to_asm+0x39/0x70 [ 1075.192396][ T36] ? __switch_to_asm+0x33/0x70 [ 1075.192422][ T36] ? __pfx_kthread+0x10/0x10 [ 1075.192450][ T36] ret_from_fork_asm+0x1a/0x30 [ 1075.192499][ T36] [ 1075.572402][ T36] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1075.579431][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 1075.579463][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1075.579478][ T36] Workqueue: writeback wb_workfn (flush-7:9) [ 1075.579512][ T36] Call Trace: [ 1075.579522][ T36] [ 1075.579531][ T36] dump_stack_lvl+0x189/0x250 [ 1075.579566][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1075.579595][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 1075.579617][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1075.579647][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1075.579693][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 1075.579737][ T36] f2fs_write_end_io+0x886/0xb60 [ 1075.579784][ T36] __submit_merged_bio+0x27a/0x6a0 [ 1075.579814][ T36] ? up_write+0x1c4/0x420 [ 1075.579847][ T36] __submit_merged_write_cond+0x44c/0x530 [ 1075.579890][ T36] f2fs_sync_node_pages+0x1479/0x15e0 [ 1075.579948][ T36] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1075.579979][ T36] ? __percpu_counter_sum+0x1c2/0x1e0 [ 1075.580060][ T36] ? rcu_is_watching+0x15/0xb0 [ 1075.580082][ T36] ? blk_start_plug+0x52/0x1b0 [ 1075.580117][ T36] f2fs_write_node_pages+0x303/0x6e0 [ 1075.580153][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1075.580193][ T36] ? unwind_next_frame+0xa5/0x2390 [ 1075.580216][ T36] ? unwind_next_frame+0x19ae/0x2390 [ 1075.580242][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1075.580272][ T36] do_writepages+0x32b/0x550 [ 1075.580310][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 1075.580342][ T36] ? writeback_sb_inodes+0x384/0x1010 [ 1075.580386][ T36] __writeback_single_inode+0x145/0xff0 [ 1075.580417][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 1075.580452][ T36] writeback_sb_inodes+0x6c7/0x1010 [ 1075.580521][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1075.580611][ T36] ? rcu_is_watching+0x15/0xb0 [ 1075.580647][ T36] wb_writeback+0x43b/0xaf0 [ 1075.580689][ T36] ? queue_io+0x2f1/0x590 [ 1075.580722][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1075.580761][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1075.580797][ T36] wb_workfn+0x409/0xef0 [ 1075.580842][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1075.580876][ T36] ? __lock_acquire+0xab9/0xd20 [ 1075.580925][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 1075.580957][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1075.580983][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 1075.581004][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 1075.581029][ T36] process_scheduled_works+0xade/0x17b0 [ 1075.581095][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 1075.581144][ T36] worker_thread+0x8a0/0xda0 [ 1075.581202][ T36] kthread+0x711/0x8a0 [ 1075.581233][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1075.581255][ T36] ? __pfx_kthread+0x10/0x10 [ 1075.581283][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1075.581311][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 1075.581370][ T36] ? __pfx_kthread+0x10/0x10 [ 1075.581399][ T36] ret_from_fork+0x3f9/0x770 [ 1075.581427][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1075.581459][ T36] ? __switch_to_asm+0x39/0x70 [ 1075.581486][ T36] ? __switch_to_asm+0x33/0x70 [ 1075.581513][ T36] ? __pfx_kthread+0x10/0x10 [ 1075.581643][ T36] ret_from_fork_asm+0x1a/0x30 [ 1075.581700][ T36] [ 1075.581711][ T36] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1075.873460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.952291][T15207] ntfs3(loop8): ino=1a, mi_enum_attr [ 1075.957677][T15207] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1076.912167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.810623][T15220] libceph: resolve '. [ 1077.810623][T15220] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1077.810623][T15220] ' (ret=-3): failed [ 1077.952133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.546084][ T36] ntfs3(loop8): ino=5, mi_enum_attr [ 1078.992168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.032102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.072143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.112098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.152119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.202110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.242050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.272231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.668865][T15270] loop8: detected capacity change from 0 to 40427 [ 1086.685042][T15270] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1086.692906][T15270] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1086.716158][T15270] F2FS-fs (loop8): invalid crc value [ 1086.958769][T15270] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1087.219435][T15270] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1087.231850][T15270] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1087.322049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.352060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.392102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.443597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.472150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.521036][T15318] Bluetooth: MGMT ver 1.23 [ 1092.522050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.212284][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1093.391309][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1093.417076][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1093.453242][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1093.498262][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1093.552043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.592021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.461688][T15344] loop0: detected capacity change from 0 to 512 [ 1095.474735][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1095.489597][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1095.506599][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1095.567768][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1095.632036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.782529][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1095.941897][T15344] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2055: casefold flag without casefold feature [ 1095.959357][T15344] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2055: couldn't read orphan inode 15 (err -117) [ 1095.984653][T15344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.985245][ T6331] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.209774][T15327] lo speed is unknown, defaulting to 1000 [ 1096.241970][ T5871] Bluetooth: hci4: command tx timeout [ 1096.334241][T15360] loop8: detected capacity change from 0 to 2048 [ 1096.393611][ T6331] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.672077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.823963][T15360] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1097.434976][ T30] audit: type=1800 audit(21488359.694:128): pid=15362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2055" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1097.437030][T15369] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1097.712441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.753362][T15346] lo speed is unknown, defaulting to 1000 [ 1097.823223][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.914426][ T51] Bluetooth: hci3: command tx timeout [ 1098.268491][T15375] Falling back ldisc for ttyS3. [ 1098.278352][ T51] Bluetooth: hci4: command tx timeout [ 1098.480688][ T6331] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.762057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.101976][T15391] overlayfs: overlapping lowerdir path [ 1099.220549][T15392] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1099.792058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.926165][ T6331] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.952799][ T51] Bluetooth: hci3: command tx timeout [ 1100.351907][ T51] Bluetooth: hci4: command tx timeout [ 1100.832035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.502098][T15327] chnl_net:caif_netlink_parms(): no params data found [ 1101.554264][T15422] loop8: detected capacity change from 0 to 128 [ 1101.872161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.662522][ T51] Bluetooth: hci3: command tx timeout [ 1102.668048][ T51] Bluetooth: hci4: command tx timeout [ 1102.887290][ T12] kworker/u8:0: attempt to access beyond end of device [ 1102.887290][ T12] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1102.912448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.060464][T15346] chnl_net:caif_netlink_parms(): no params data found [ 1103.417534][T15327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.439975][T15327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.462161][T15327] bridge_slave_0: entered allmulticast mode [ 1103.470439][T15327] bridge_slave_0: entered promiscuous mode [ 1103.494821][T15327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.522181][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.529508][T15327] bridge_slave_1: entered allmulticast mode [ 1103.554126][T15327] bridge_slave_1: entered promiscuous mode [ 1103.952258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.037584][ T6331] bridge_slave_1: left allmulticast mode [ 1104.085419][ T6331] bridge_slave_1: left promiscuous mode [ 1104.182364][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.326378][ T6331] bridge_slave_0: left allmulticast mode [ 1104.344159][ T6331] bridge_slave_0: left promiscuous mode [ 1104.360028][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.758272][ T5871] Bluetooth: hci3: command tx timeout [ 1104.992088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.038686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.172701][ T6331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.072057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.206772][ T6331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.492562][ T6331] bond0 (unregistering): (slave team0): Releasing backup interface [ 1107.506050][ T6331] bond0 (unregistering): Released all slaves [ 1108.112061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.278185][T15455] siw: device registration error -23 [ 1108.736508][T15327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.000190][T15327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.151988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.192010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.232056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.272075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.302522][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 1113.313503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.328425][T15327] team0: Port device team_slave_0 added [ 1113.469293][T15346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.492935][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.500924][T15346] bridge_slave_0: entered allmulticast mode [ 1113.512358][T15346] bridge_slave_0: entered promiscuous mode [ 1113.529036][T15327] team0: Port device team_slave_1 added [ 1113.733029][ T6331] hsr_slave_0: left promiscuous mode [ 1114.362042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.422626][ T6331] hsr_slave_1: left promiscuous mode [ 1114.428881][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.471957][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.493828][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.501282][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.523710][T15505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1114.567757][ T6331] veth1_macvtap: left promiscuous mode [ 1114.580620][ T6331] veth0_macvtap: left promiscuous mode [ 1114.648590][ T6331] veth1_vlan: left promiscuous mode [ 1114.654651][ T6331] veth0_vlan: left promiscuous mode [ 1115.391998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.432006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.718932][T15541] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 1116.730887][T15541] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 1116.739317][T15541] CPU: 1 UID: 0 PID: 15541 Comm: syz.4.2086 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 1116.750528][T15541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1116.760617][T15541] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 1116.766463][T15541] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b e2 19 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 2c e2 19 f8 4d 8b 24 24 e8 f3 a1 [ 1116.786270][T15541] RSP: 0018:ffffc90003ddf1d0 EFLAGS: 00010202 [ 1116.792980][T15541] RAX: 0000000000000083 RBX: ffff888027543020 RCX: 0000000000000002 [ 1116.801021][T15541] RDX: ffff88802cd15a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1116.809032][T15541] RBP: ffff888027543037 R08: 0000000000000000 R09: ffffffff8a0f31bf [ 1116.817034][T15541] R10: 0000000000000008 R11: 0000000000000002 R12: 0000000000000418 [ 1116.825028][T15541] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11004ea8606 [ 1116.833011][T15541] FS: 00007f6ce80786c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 1116.841952][T15541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.848547][T15541] CR2: 0000001b33519ff8 CR3: 0000000062f78000 CR4: 00000000003526f0 [ 1116.856529][T15541] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 1116.864506][T15541] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1116.872483][T15541] Call Trace: [ 1116.875782][T15541] [ 1116.878734][T15541] nexthop_get_nhc_lookup+0x1af/0x400 [ 1116.884127][T15541] fib_table_lookup+0xf26/0x16e0 [ 1116.889086][T15541] ? fib4_rule_action+0x8f/0x330 [ 1116.894045][T15541] fib4_rule_action+0x1fb/0x330 [ 1116.898939][T15541] ? __pfx_fib4_rule_action+0x10/0x10 [ 1116.904341][T15541] fib_rules_lookup+0x8a6/0xe90 [ 1116.909229][T15541] ? fib_rules_lookup+0x96/0xe90 [ 1116.914415][T15541] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1116.919810][T15541] ? l3mdev_update_flow+0x29/0x640 [ 1116.924932][T15541] ? l3mdev_update_flow+0x4d1/0x640 [ 1116.930140][T15541] __fib_lookup+0xf9/0x200 [ 1116.934577][T15541] ? __pfx___fib_lookup+0x10/0x10 [ 1116.939632][T15541] ? __lock_acquire+0xab9/0xd20 [ 1116.944615][T15541] ? fib_lookup+0x49/0x440 [ 1116.949149][T15541] ? ip_route_output_key_hash_rcu+0x2fc/0x23d0 [ 1116.955417][T15541] ip_route_output_key_hash_rcu+0x31b/0x23d0 [ 1116.961520][T15541] ? ip_route_output_key_hash+0xde/0x2e0 [ 1116.967365][T15541] ? ip_route_output_key_hash+0xde/0x2e0 [ 1116.973034][T15541] ip_route_output_key_hash+0x1b9/0x2e0 [ 1116.979597][T15541] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1116.987517][T15541] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1116.994680][T15541] ? crng_make_state+0x34c/0x700 [ 1116.999825][T15541] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.005150][T15541] ip_route_output_flow+0x2a/0x150 [ 1117.010555][T15541] sctp_v4_get_dst+0x3c7/0x1200 [ 1117.015435][T15541] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 1117.020997][T15541] ? _get_random_bytes+0x1bd/0x210 [ 1117.026303][T15541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1117.032656][T15541] ? dst_release+0x72/0x1b0 [ 1117.037175][T15541] sctp_transport_route+0x115/0x2f0 [ 1117.042393][T15541] sctp_assoc_add_peer+0x657/0x13b0 [ 1117.047608][T15541] sctp_connect_new_asoc+0x30a/0x690 [ 1117.052898][T15541] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1117.058715][T15541] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1117.064533][T15541] __sctp_connect+0x5ba/0xd50 [ 1117.069256][T15541] ? __pfx___sctp_connect+0x10/0x10 [ 1117.074464][T15541] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1117.080049][T15541] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1117.085887][T15541] sctp_getsockopt_connectx3+0x2c4/0x440 [ 1117.091541][T15541] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1117.097801][T15541] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1117.103179][T15541] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1117.108908][T15541] sctp_getsockopt+0x98a/0xb60 [ 1117.113688][T15541] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1117.119606][T15541] do_sock_getsockopt+0x36f/0x450 [ 1117.124641][T15541] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1117.130194][T15541] ? do_syscall_64+0x60/0x3b0 [ 1117.134890][T15541] ? __fget_files+0x3a0/0x420 [ 1117.139575][T15541] ? __fget_files+0x2a/0x420 [ 1117.144208][T15541] __x64_sys_getsockopt+0x1a5/0x250 [ 1117.149442][T15541] ? do_syscall_64+0x60/0x3b0 [ 1117.154152][T15541] ? do_syscall_64+0x60/0x3b0 [ 1117.158885][T15541] do_syscall_64+0xfa/0x3b0 [ 1117.163412][T15541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.169486][T15541] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1117.175131][T15541] ? clear_bhb_loop+0x60/0xb0 [ 1117.179826][T15541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.185846][T15541] RIP: 0033:0x7f6ce718ebe9 [ 1117.190273][T15541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.210330][T15541] RSP: 002b:00007f6ce8078038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1117.218753][T15541] RAX: ffffffffffffffda RBX: 00007f6ce73b6180 RCX: 00007f6ce718ebe9 [ 1117.226730][T15541] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000009 [ 1117.234716][T15541] RBP: 00007f6ce7211e19 R08: 0000200000000180 R09: 0000000000000000 [ 1117.242696][T15541] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.250676][T15541] R13: 00007f6ce73b6218 R14: 00007f6ce73b6180 R15: 00007ffe22badcb8 [ 1117.258667][T15541] [ 1117.261703][T15541] Modules linked in: [ 1117.266244][T15541] ---[ end trace 0000000000000000 ]--- [ 1117.275898][T15541] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 1117.283154][T15541] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b e2 19 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 2c e2 19 f8 4d 8b 24 24 e8 f3 a1 [ 1117.303349][T15541] RSP: 0018:ffffc90003ddf1d0 EFLAGS: 00010202 [ 1117.309587][T15541] RAX: 0000000000000083 RBX: ffff888027543020 RCX: 0000000000000002 [ 1117.318024][T15541] RDX: ffff88802cd15a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1117.326543][T15541] RBP: ffff888027543037 R08: 0000000000000000 R09: ffffffff8a0f31bf [ 1117.338355][T15541] R10: 0000000000000008 R11: 0000000000000002 R12: 0000000000000418 [ 1117.346775][T15541] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11004ea8606 [ 1117.356153][T15541] FS: 00007f6ce80786c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 1117.369799][T15541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.376796][T15541] CR2: 00007f6ce8035f98 CR3: 0000000062f78000 CR4: 00000000003526f0 [ 1117.385248][T15541] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 1117.393660][T15541] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1117.402179][T15541] Kernel panic - not syncing: Fatal exception [ 1117.408638][T15541] Kernel Offset: disabled [ 1117.412980][T15541] Rebooting in 86400 seconds..