last executing test programs: 9m39.369534242s ago: executing program 32 (id=736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r2, 0xd, 0x0, @void}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 9m37.81588363s ago: executing program 33 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 9m32.746021078s ago: executing program 34 (id=754): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0x1, 0x7fe, &(0x7f00000007c0)="$eJzs3c9rJFkdAPBvdX50khlNBEF3TwFBA8t2zBh3FTxEPIjgwoKenQ2d3jCmkx7SnWESApM5CF4EFQ+CXubsj/EgePXHVf8J8SAziGaC40lbqro6SSfd+TXp7pmdzwcq9V7Vq3rv5b16/bqr6A7gtTWb/ilEvBERP0wipvPtSUSMZaHRiKVWuuf7u+V0SaLZ/NY/kyzNb28cnSvJ1zfyyKcj4o/fi3ircDLXyXxdrWzmofnG+t35+vbO23fWl1crq5WNdxYWF2+9+8V33zl91FX9+y87N5/+6Ouf+/XSaHzq8Q/+lMRS3Mz3Hezvll/w9KfMxmz+PxlL/4UdvnbdmQ1ZMuwCcCXppTnSusrjjZiOkSzUw4tegADAS+FBRDQBgNdMkr/+j/RKMGKKAAAfLe3PAQ72d8vtZbifSAzWP74aERNp/QuH9zdbe0bze3YT2X3QqYOk485IEhEz15D/bET8/Hff+WW6RJ/uQwJ0s/ewtT7YL54Y/5N0/Bs//wzFnns+f9ZhzdZxsyc2G/9gcH6fzn++dHr+9+bhAz0T2d8T85+JYpdr9yrOv/4LT3oceoGx6Xzp/O8rx55tO5r/HT60NjOSxz6WzfnGkg/vVCvp2PbxiJiLsWIaX8iSdn8Kau7Zf58dPVnX6fj8718//u4v0vzT9VGKwpPRYjRbR/8vm6+vLDeWr6PuWf0fRrw52q3+yeH8N+lo/6XDmr7f86ydTfONL3//Z71SpvVP69teTte/v5qPIj7btf2P2jI58/nE+aw7zLc7RRe/+dtPp3rlf9T+xWyd5t9+LzAIaftPnV3/mTRU395ZW65WK5v1y+fx50fTf+i173j/717/rP93SPv/ePLtLNzuafeXG43NhYjx5Junt986OrYdb6dP6z/3me7Xf/f+3xoL0veEHxzGzjb6dPxX+am61j+z16v+/ZXWf+VS7X9GoJkfc2LX4+drI73yv1j7L2ahuXzLRca/c0r6Ar0ZAAAAAAAAAAAAAAAAAAAAAAAAAC6vEBE3IymUDsOFQqnU+g3vT8ZUoVqrN976sLa1sRLZb2XPxFih/VWX08e+D3Uh/z78dvzWifgXIuITEfGT4mQWL5Vr1ZVhVx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcjc6f///QboqlVr7/l4cdukAgL6ZGHYBAICB8/oPAK+fy73+T/atHADA4Fz6/X8z6U9BAICBufDr/wf9LQcAMDju/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBn77/3Xro0/7O/W07jK/e2t9Zq995eqdTXSutb5VK5tnm3tFqrrVYrpXJtveeJ9lqraq12dzE2tu7PNyr1xnx9e+f2em1ro3H7zvryauV2ZWxgNQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi6tv76wtV6uVzQsFJq501KsfmKxM9k6TRMTQS3heIG216zzh6Eta5b2/jmU99MzEMdPRjQt5rx564bsExs9Ik1xnXpMntxwfJSYHOSQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvFL+HwAA//8C9QnP") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = fanotify_init(0xf00, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file3\x00', 0x0, 0xa5400, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1) 9m31.863495775s ago: executing program 35 (id=758): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 9m0.612667988s ago: executing program 36 (id=826): inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000840)="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", 0x182, 0x5, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) io_setup(0x1, &(0x7f0000000200)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_ext={0x1c, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000080000000000700000018440000feffffff000000000000000040760600070000009500000000000000180000007f000000000000000000010018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x2, 0xa3, &(0x7f0000000700)=""/163, 0x41100, 0x2a, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000007c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2d2f1, 0xffffffffffffffff, 0x1, &(0x7f00000026c0)=[0xffffffffffffffff, r5, r5, r5, r5, r5], &(0x7f0000002700)=[{0x4, 0x2, 0x1, 0xa}], 0x10, 0x1}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') read$watch_queue(r7, &(0x7f0000000000)=""/196, 0xc4) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f00000000c0)='./file1\x00', 0x20089d, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES16=r1], 0x9f, 0x19f, &(0x7f0000000100)="$eJzskb9rE2EYxz/P+15yOcFoilMdGjBwnii5xB+DU3BqIQeuIkGPEpvQVLTJYItinASp9m9w0klEcBOx4CwOgoNGBDcxQ+ggDvXkvbv8Fb4fuHue7z08P683vD10gYPZ3VVapDiU+egKDrAkHDLflMpiIvAA+CmpLO/yInUuZZodoWTs80wneiw6i1QvVkuZx3o8GHQ3q+jZfpXKd4Zb2+vxwJRNs6ZCC/k806uxXI8EyXvDqcfojkfwhEXnMMeuoUn8HVZUkojfhiP10cat+nBr+0x/4+pad617s9k8eyE8F4bnm/Ub/UE3fI0Ej8TN1gQ3wgvuUejgpVsiBD010eJBscPuB33yxOkpKvhFgvDOn+J+dXrl+UAVWN7vw1N0RK2Np3CS+6bRMnJZvZKG88n5XVCUxvkZuKL0n6I7L1DwG8QrQAiLLBzs8XBCbcJRzbOJ8+MbS/IGj79Jfl9nbN4vc3Xc/Jsid+LRaLNRpPRe/IimeSpmmQX2UFGr1jZzvs1zcsOXuWOxWCwWi8VisVgslv+AfwEAAP//E8pYHA==") io_submit(r6, 0x1, &(0x7f0000000640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r5, 0x0, 0x0, 0x1}]) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000240)={0x980000, 0x2, 0x4, r5, 0x0, &(0x7f0000000200)={0x9b0954, 0xa87, '\x00', @ptr=0x9298}}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 6m19.568583629s ago: executing program 8 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 6m17.425028325s ago: executing program 8 (id=1324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x30181b, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m17.27066073s ago: executing program 8 (id=1326): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2008000, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) 6m15.385634789s ago: executing program 5 (id=1328): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000100)={[{@data_journal}, {@jqfmt_vfsv0}, {@abort}, {}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505020000004250301640f3e01"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 6m14.973804222s ago: executing program 37 (id=1329): r0 = fsmount(0xffffffffffffffff, 0x0, 0x86) fchdir(r0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') 6m14.967595332s ago: executing program 8 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 6m14.902003304s ago: executing program 5 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 6m14.761896468s ago: executing program 8 (id=1333): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="554b000000000000000008000000140001800800050000000000060001"], 0x28}}, 0x0) 6m14.312005372s ago: executing program 8 (id=1336): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000010) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x1100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 6m13.484893378s ago: executing program 38 (id=1336): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000010) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x1100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 6m12.621270165s ago: executing program 5 (id=1338): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2008000, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) 6m10.635273056s ago: executing program 5 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 6m10.069954444s ago: executing program 5 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x30181b, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m9.435041634s ago: executing program 5 (id=1343): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="554b000000000000000008000000140001800800050000000000060001"], 0x28}}, 0x0) 6m9.033477327s ago: executing program 39 (id=1343): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="554b000000000000000008000000140001800800050000000000060001"], 0x28}}, 0x0) 5m59.443972745s ago: executing program 4 (id=1358): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1000081, &(0x7f00000000c0), 0x6, 0x595, &(0x7f0000000840)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x8, 0x3, 0x9, 0x1, 0x3, 0x4, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x808003, 0x200, 0x1080, 0x3, 0x2, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m59.028013118s ago: executing program 4 (id=1359): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x4}], {}, {0x20, 0x7}}, 0x44, 0x3) 5m58.667945389s ago: executing program 4 (id=1360): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r0], 0x7) 5m57.611872002s ago: executing program 4 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 5m57.281080432s ago: executing program 4 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x74) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5m56.668087961s ago: executing program 4 (id=1365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x4}], {}, {0x20, 0x7}}, 0x44, 0x3) 5m56.110862079s ago: executing program 40 (id=1365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x4}], {}, {0x20, 0x7}}, 0x44, 0x3) 5m52.272127608s ago: executing program 2 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xf}, 0x1c) 5m51.365837116s ago: executing program 2 (id=1378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x49) 5m48.793253596s ago: executing program 2 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) 5m48.483490336s ago: executing program 2 (id=1387): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 5m48.081617339s ago: executing program 2 (id=1388): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) 5m45.235847537s ago: executing program 2 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x49) 5m44.528136889s ago: executing program 41 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x49) 5m7.971510077s ago: executing program 1 (id=1483): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x32315258, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0x1}, {0x7, 0x4}, {0x6, 0x2}], 0xf2, 0x10, 0x1, 0x0, 0x6}}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x8) r7 = openat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000004000)={0x2020}, 0x2020) accept4(r1, 0x0, 0x0, 0x0) 5m5.152068734s ago: executing program 1 (id=1493): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000280), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) 5m3.466309507s ago: executing program 1 (id=1497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 5m1.924525945s ago: executing program 1 (id=1501): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x32315258, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0x1}, {0x7, 0x4}, {0x6, 0x2}], 0xf2, 0x10, 0x1, 0x0, 0x6}}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x8) r7 = openat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000004000)={0x2020}, 0x2020) accept4(r1, 0x0, 0x0, 0x0) 4m57.157377043s ago: executing program 1 (id=1515): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 4m56.887900362s ago: executing program 1 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 4m41.110785413s ago: executing program 42 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 34.288015263s ago: executing program 6 (id=2396): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 34.133514238s ago: executing program 6 (id=2399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) 33.015336512s ago: executing program 6 (id=2404): r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x210001, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 32.783493849s ago: executing program 6 (id=2407): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x991480, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 32.273376716s ago: executing program 6 (id=2410): r0 = creat(0x0, 0x17e) close(r0) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 31.062299983s ago: executing program 6 (id=2414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x16}, @empty, 0x80, 0x20, 0x4, 0x1}}) gettid() r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 30.769276082s ago: executing program 43 (id=2414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x16}, @empty, 0x80, 0x20, 0x4, 0x1}}) gettid() r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 8.739862217s ago: executing program 0 (id=2486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9) 7.575172224s ago: executing program 9 (id=2491): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 7.339486961s ago: executing program 9 (id=2492): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 7.125909098s ago: executing program 9 (id=2495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000580)={r0, 0x7de, {0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x5, 0x9, 0x8, "a5d7fd847d590e8a7b713f89ba293ef13635889ecec1330d592fd20c395d4974753cd6d5c76dbb9640bbc2bedd26aed7ba7e01364f595aeb26de21bf3c34d999", "8a3cee41a964b7370ba8dfb242d3946bc70faadf4ee64d7d14b3630dc19b8ae04a4583ce1f2becb3f6efd467682bf8a79d2a0387d43a97d8fd479f8de95d8567", "fe5ad5af0447afd0662e34eb739741f4deee7f0b814df6f176776172f03f90c1", [0x1, 0x7ff]}}) 6.984090732s ago: executing program 9 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="100200001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b0000000000e8011680"], 0x210}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 6.043060672s ago: executing program 3 (id=2501): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r4 = socket$phonet(0x23, 0x2, 0x1) getpeername(r4, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000180)=0x80) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r5, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) 5.077578971s ago: executing program 0 (id=2502): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 4.884105808s ago: executing program 0 (id=2503): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x3, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) 4.863023709s ago: executing program 0 (id=2504): r0 = inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000840)="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", 0x1b3, 0x5, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) io_setup(0x1, &(0x7f0000000200)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_ext={0x1c, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000080000000000700000018440000feffffff000000000000000040760600070000009500000000000000180000007f000000000000000000010018120000", @ANYRES32=r6, @ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x2, 0xa3, &(0x7f0000000700)=""/163, 0x41100, 0x2a, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000007c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2d2f1, 0xffffffffffffffff, 0x1, &(0x7f00000026c0)=[0xffffffffffffffff, r6, r6, r6, r6, r6], &(0x7f0000002700)=[{0x4, 0x2, 0x1, 0xa}], 0x10, 0x1}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') read$watch_queue(r8, &(0x7f0000000000)=""/196, 0xc4) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f00000000c0)='./file1\x00', 0x20089d, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES32=r2, @ANYRES16=r2], 0x9f, 0x19f, &(0x7f0000000100)="$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") io_submit(r7, 0x0, &(0x7f0000000640)) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000240)={0x980000, 0x2, 0x4, r6, 0x0, &(0x7f0000000200)={0x9b0954, 0xa87, '\x00', @ptr=0x9298}}) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="5c0011f95b2bdfa0d70a1f2bf5e000009078268825918156fe382738c10000"], 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c10000000000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0100000003"], 0x50) inotify_rm_watch(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.825537071s ago: executing program 7 (id=2507): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000086a05e32200000000000109022400010000a0000904008009030001000921ecffff00222800090581034000000bfe"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40062f0000002f0bf7bf"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.391137774s ago: executing program 9 (id=2508): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@sysvgroups}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@acl}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") openat(r0, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semop(0xffffffffffffffff, &(0x7f00000001c0)=[{0x3, 0x5, 0xc00}, {0x1, 0x4, 0x1800}, {0x0, 0x2, 0xc00}, {0x1, 0x8}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) openat$tun(0xffffffffffffff9c, 0x0, 0x48680, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="4299506604df", 'bridge_slave_1\x00'}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.344028396s ago: executing program 3 (id=2509): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207001702"], 0x10}, 0x1, 0x7}, 0x0) 3.246123699s ago: executing program 0 (id=2510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9) 3.111901213s ago: executing program 3 (id=2511): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080e4) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, 0x0, 0x0, 0x4000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.536504791s ago: executing program 3 (id=2512): close(0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x7f, 0x3, 0xffffffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a53f271a76d2608004c6588a8d6dc03d5cc2a", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.038494156s ago: executing program 3 (id=2513): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x2, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.779937274s ago: executing program 3 (id=2514): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x18b341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1.732534956s ago: executing program 7 (id=2515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0) 1.558778921s ago: executing program 7 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="010000000b000000be00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) 1.351765768s ago: executing program 7 (id=2517): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r4 = socket$phonet(0x23, 0x2, 0x1) getpeername(r4, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000180)=0x80) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r5, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) 1.106292426s ago: executing program 9 (id=2518): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x10100, 0x0, 0x0) 397.883857ms ago: executing program 7 (id=2519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="100200001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b0000000000e80116801c0001800c000700feff"], 0x210}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 243.635362ms ago: executing program 7 (id=2520): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080e4) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000001500), 0x0, 0x4000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 0s ago: executing program 0 (id=2521): r0 = io_uring_setup(0x5c95, &(0x7f0000001ac0)={0x0, 0xbcdd, 0x1000, 0x2, 0xac}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000140)={&(0x7f0000001000)}, 0x1) kernel console output (not intermixed with test programs): aa:aa:3f) already exists on: batadv_slave_1 [ 519.599804][ T51] Bluetooth: hci3: command tx timeout [ 519.700445][T11330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.711255][T11330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.751609][T11330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.788043][T11330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.808218][T11330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.829539][T11330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.867322][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.885469][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.026186][T11330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.167755][T11330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.189119][T11330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.216999][T11330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.326073][T11485] team0: Port device team_slave_0 added [ 521.681291][ T51] Bluetooth: hci3: command tx timeout [ 522.492585][T11485] team0: Port device team_slave_1 added [ 522.564817][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.578588][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.652451][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.708884][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.715872][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.778303][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.804237][T11540] loop9: detected capacity change from 0 to 1024 [ 522.816014][T11540] EXT4-fs: quotafile must be on filesystem root [ 523.010615][T11485] hsr_slave_0: entered promiscuous mode [ 523.063977][T11485] hsr_slave_1: entered promiscuous mode [ 523.079144][T11485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.086843][T11485] Cannot create hsr debugfs directory [ 523.717981][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.725843][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.758196][ T51] Bluetooth: hci3: command tx timeout [ 523.866146][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.890430][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.215718][T11555] loop3: detected capacity change from 0 to 512 [ 524.337472][T11555] EXT4-fs: Ignoring removed nobh option [ 524.548022][T11555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 524.825126][T11555] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 525.853603][ T51] Bluetooth: hci3: command tx timeout [ 526.443601][T11581] loop1: detected capacity change from 0 to 1024 [ 526.453411][T11581] EXT4-fs: quotafile must be on filesystem root [ 526.499407][T11572] netlink: 'syz.9.1415': attribute type 8 has an invalid length. [ 527.519701][T11595] loop9: detected capacity change from 0 to 512 [ 527.534472][T11595] EXT4-fs: Ignoring removed nobh option [ 527.679067][T11595] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 527.739884][T11595] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 532.714198][T11485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.940828][T11655] loop1: detected capacity change from 0 to 8 [ 533.510262][T11655] squashfs image failed sanity check [ 533.872864][T11656] netlink: 'syz.9.1426': attribute type 8 has an invalid length. [ 534.058295][T11485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 534.197653][T11485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 534.220315][T11661] loop3: detected capacity change from 0 to 1024 [ 534.241741][T11485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.258804][T11661] EXT4-fs: quotafile must be on filesystem root [ 534.942344][T11673] loop1: detected capacity change from 0 to 256 [ 534.999235][T11673] FAT-fs (loop1): Directory bread(block 64) failed [ 535.005937][T11673] FAT-fs (loop1): Directory bread(block 65) failed [ 535.012818][T11673] FAT-fs (loop1): Directory bread(block 66) failed [ 535.019506][T11673] FAT-fs (loop1): Directory bread(block 67) failed [ 535.026218][T11673] FAT-fs (loop1): Directory bread(block 68) failed [ 535.033948][T11673] FAT-fs (loop1): Directory bread(block 69) failed [ 535.041038][T11673] FAT-fs (loop1): Directory bread(block 70) failed [ 535.047706][T11673] FAT-fs (loop1): Directory bread(block 71) failed [ 535.054507][T11673] FAT-fs (loop1): Directory bread(block 72) failed [ 535.061468][T11673] FAT-fs (loop1): Directory bread(block 73) failed [ 535.088545][T11673] syz.1.1430: attempt to access beyond end of device [ 535.088545][T11673] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 535.102451][T11673] syz.1.1430: attempt to access beyond end of device [ 535.102451][T11673] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 535.247258][ T27] audit: type=1800 audit(1779132451.501:11): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1430" name="file0" dev="loop1" ino=1048636 res=0 errno=0 [ 535.682021][T11676] loop3: detected capacity change from 0 to 512 [ 535.739867][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.749152][T11676] EXT4-fs: Ignoring removed nobh option [ 535.790178][T11676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 535.864795][T11676] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 535.890858][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.005854][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.013074][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.112874][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.120079][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.363324][T11485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.642660][T11706] netlink: 'syz.1.1436': attribute type 8 has an invalid length. [ 537.945572][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.219106][T11485] veth0_vlan: entered promiscuous mode [ 538.248917][T11485] veth1_vlan: entered promiscuous mode [ 538.402793][T11485] veth0_macvtap: entered promiscuous mode [ 538.433214][T11485] veth1_macvtap: entered promiscuous mode [ 538.479334][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.495139][T11727] loop1: detected capacity change from 0 to 1024 [ 538.502227][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.519042][T11727] EXT4-fs: quotafile must be on filesystem root [ 538.528036][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.556317][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.579349][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.601655][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.625345][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.649759][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.687184][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.741909][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.787981][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.807740][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.856656][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.987095][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.164142][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.330611][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.379622][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.408955][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.461734][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.492236][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.527909][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.552861][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.594898][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.629392][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.643004][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.653011][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.667732][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.677592][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.701242][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.712379][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.723516][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.733914][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.746181][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.768316][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.822692][T11485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.867059][T11485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.915612][T11485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.990054][T11485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.184256][T11745] loop3: detected capacity change from 0 to 256 [ 540.290460][T11745] FAT-fs (loop3): Directory bread(block 64) failed [ 540.297099][T11745] FAT-fs (loop3): Directory bread(block 65) failed [ 540.303885][T11745] FAT-fs (loop3): Directory bread(block 66) failed [ 540.310488][T11745] FAT-fs (loop3): Directory bread(block 67) failed [ 540.317107][T11745] FAT-fs (loop3): Directory bread(block 68) failed [ 540.324105][T11745] FAT-fs (loop3): Directory bread(block 69) failed [ 540.330868][T11745] FAT-fs (loop3): Directory bread(block 70) failed [ 540.337399][T11745] FAT-fs (loop3): Directory bread(block 71) failed [ 540.344231][T11745] FAT-fs (loop3): Directory bread(block 72) failed [ 540.351028][T11745] FAT-fs (loop3): Directory bread(block 73) failed [ 540.390174][T11745] syz.3.1442: attempt to access beyond end of device [ 540.390174][T11745] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 540.404821][T11745] syz.3.1442: attempt to access beyond end of device [ 540.404821][T11745] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 540.428268][ T27] audit: type=1800 audit(1779132456.811:12): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1442" name="file0" dev="loop3" ino=1048637 res=0 errno=0 [ 540.548919][T11748] loop9: detected capacity change from 0 to 512 [ 540.671290][T11748] EXT4-fs: Ignoring removed nobh option [ 540.749096][T11748] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 540.862092][T11748] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 541.186611][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.257161][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.439564][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.489429][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.615757][T11769] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1393'. [ 543.726025][T11798] loop1: detected capacity change from 0 to 512 [ 543.763089][T11798] EXT4-fs: Ignoring removed nobh option [ 543.963071][T11798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 543.981910][T11798] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 546.047585][T11828] loop9: detected capacity change from 0 to 512 [ 546.140426][T11828] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.166443][T11828] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 547.319097][T11845] fuse: Bad value for 'fd' [ 549.313565][T11866] loop3: detected capacity change from 0 to 512 [ 549.370329][T11866] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 549.407913][T11866] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 550.793634][T11890] loop1: detected capacity change from 0 to 512 [ 550.820174][T11890] EXT4-fs: Ignoring removed nobh option [ 550.890634][T11890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 550.940231][T11890] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 550.968936][T11895] loop9: detected capacity change from 0 to 8 [ 550.988651][T11895] squashfs image failed sanity check [ 554.686043][T11947] loop9: detected capacity change from 0 to 8 [ 554.704891][T11947] squashfs image failed sanity check [ 557.230925][T11986] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 558.608854][T12004] loop9: detected capacity change from 0 to 8 [ 558.634973][T12004] squashfs image failed sanity check [ 559.387145][T12008] loop3: detected capacity change from 0 to 512 [ 559.394997][T12008] EXT4-fs: Ignoring removed nobh option [ 559.404042][T12008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 559.436708][T12008] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 562.374386][T12053] loop9: detected capacity change from 0 to 8 [ 562.516324][T12053] squashfs image failed sanity check [ 563.053088][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.059577][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.536536][T12065] loop3: detected capacity change from 0 to 512 [ 563.569011][T12065] EXT4-fs: Ignoring removed nobh option [ 563.797651][T12065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 564.198987][T12065] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 570.863605][T12106] loop3: detected capacity change from 0 to 512 [ 570.937157][T12106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 571.029511][T12106] EXT4-fs (loop3): 1 orphan inode deleted [ 571.035341][T12106] EXT4-fs (loop3): 1 truncate cleaned up [ 571.169644][T12106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.345763][T12116] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20001 [ 571.355326][T12116] ubi: mtd0 is already attached to ubi0 [ 572.999155][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.117370][T12129] loop9: detected capacity change from 0 to 1024 [ 573.163854][T12129] EXT4-fs: quotafile must be on filesystem root [ 576.407087][T12169] loop3: detected capacity change from 0 to 8 [ 576.495256][T12170] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20001 [ 576.506356][T12170] ubi: mtd0 is already attached to ubi0 [ 577.746135][T12169] squashfs image failed sanity check [ 578.515796][T12185] loop3: detected capacity change from 0 to 1024 [ 578.544399][T12185] EXT4-fs: quotafile must be on filesystem root [ 578.617985][T12103] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 580.713752][T12218] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20001 [ 580.723542][T12218] ubi: mtd0 is already attached to ubi0 [ 582.034769][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 582.085829][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 582.094769][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 582.102964][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 582.111900][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 582.128258][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.226112][T12225] wg2 speed is unknown, defaulting to 1000 [ 583.272352][T12247] fuse: Bad value for 'fd' [ 583.586218][T12225] chnl_net:caif_netlink_parms(): no params data found [ 583.793020][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.820583][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.852191][T12225] bridge_slave_0: entered allmulticast mode [ 583.880891][T12225] bridge_slave_0: entered promiscuous mode [ 583.930350][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.938315][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.945608][T12225] bridge_slave_1: entered allmulticast mode [ 583.996218][T12225] bridge_slave_1: entered promiscuous mode [ 584.041567][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.115054][T12269] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20001 [ 584.124802][T12269] ubi: mtd0 is already attached to ubi0 [ 584.747845][ T51] Bluetooth: hci4: command tx timeout [ 584.779662][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.137443][T12225] team0: Port device team_slave_0 added [ 585.200362][T12225] team0: Port device team_slave_1 added [ 585.355573][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.427779][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.497896][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.511059][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.520097][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.546556][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.613316][T12225] hsr_slave_0: entered promiscuous mode [ 585.668464][T12225] hsr_slave_1: entered promiscuous mode [ 585.698122][T12225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.705734][T12225] Cannot create hsr debugfs directory [ 586.797860][ T51] Bluetooth: hci4: command tx timeout [ 587.582720][T12310] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20001 [ 587.592345][T12310] ubi: mtd0 is already attached to ubi0 [ 588.666568][T12319] loop3: detected capacity change from 0 to 512 [ 588.704640][T12319] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 588.860880][T12319] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1568: bad orphan inode 131083 [ 588.886952][ T51] Bluetooth: hci4: command tx timeout [ 588.911454][T12319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.133149][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.860807][T12225] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 589.886223][T12225] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 589.926205][T12225] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 589.951649][T12225] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 590.209282][T12225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.297822][T12225] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.319513][T12363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1577'. [ 590.392697][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.399950][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.494786][T12368] IPVS: set_ctl: invalid protocol: 60 172.30.1.10:20001 [ 590.504663][T12368] ubi: mtd0 is already attached to ubi0 [ 591.107625][ T51] Bluetooth: hci4: command tx timeout [ 591.166825][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.174147][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.112294][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.129090][T12403] loop3: detected capacity change from 0 to 8 [ 593.176154][T12403] squashfs image failed sanity check [ 593.887173][T12409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1585'. [ 593.900325][T12409] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 594.189796][T12421] overlayfs: failed to resolve './file0': -2 [ 594.392643][T12428] IPVS: set_ctl: invalid protocol: 60 172.30.1.10:20001 [ 594.403388][T12428] ubi: mtd0 is already attached to ubi0 [ 595.565344][T12225] veth0_vlan: entered promiscuous mode [ 595.659084][T12225] veth1_vlan: entered promiscuous mode [ 595.907244][T12225] veth0_macvtap: entered promiscuous mode [ 596.330746][T12225] veth1_macvtap: entered promiscuous mode [ 596.471546][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.526345][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.587736][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.625996][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.657710][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.707950][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.741449][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.820692][T12461] loop9: detected capacity change from 0 to 8 [ 596.847126][T12461] squashfs image failed sanity check [ 597.081453][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.277166][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.490325][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.537826][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.574383][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.610141][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.630357][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.640886][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.657729][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.678285][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.707778][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.734569][T12225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.772619][T12103] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 597.828095][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.850693][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.872103][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.892063][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.919703][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.958546][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.986758][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.018610][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.041040][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.061763][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.076651][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.100299][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.137436][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.167809][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.187759][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.218542][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.254091][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.264948][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.289556][T12225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.319953][T12225] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.346109][T12225] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.368032][T12225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.376782][T12225] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.717133][T11964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.762668][T11964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.887056][T11964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.908989][T11964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.245367][T12496] IPVS: set_ctl: invalid protocol: 60 172.30.1.10:20001 [ 599.255198][T12496] ubi: mtd0 is already attached to ubi0 [ 600.132716][T12506] loop3: detected capacity change from 0 to 1024 [ 600.163299][T12506] EXT4-fs: quotafile must be on filesystem root [ 603.729671][T12523] netlink: 'syz.9.1604': attribute type 4 has an invalid length. [ 604.064675][T12528] loop3: detected capacity change from 0 to 8 [ 604.681434][T12528] squashfs image failed sanity check [ 606.125518][T12553] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20001 [ 606.135182][T12553] ubi: mtd0 is already attached to ubi0 [ 606.735589][T11124] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 606.968693][T11124] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.001779][T11124] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.026662][T11124] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.097990][T11124] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.148178][T11124] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.182417][T11124] usb 7-1: config 0 descriptor?? [ 607.298318][T12559] loop9: detected capacity change from 0 to 1024 [ 607.308809][T12559] EXT4-fs: quotafile must be on filesystem root [ 607.372278][T12103] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 612.935050][T11124] usbhid 7-1:0.0: can't add hid device: -71 [ 612.958114][T11124] usbhid: probe of 7-1:0.0 failed with error -71 [ 613.201454][T11124] usb 7-1: USB disconnect, device number 2 [ 613.588444][T12582] warning: `syz.0.1620' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 613.906679][T12592] IPVS: set_ctl: invalid protocol: 60 172.30.1.7:20001 [ 613.916461][T12592] ubi: mtd0 is already attached to ubi0 [ 614.722011][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 616.267119][T12612] loop9: detected capacity change from 0 to 1024 [ 616.338032][T12612] EXT4-fs: quotafile must be on filesystem root [ 617.501391][T12627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1628'. [ 617.540050][T12627] bridge_slave_0: left allmulticast mode [ 617.545747][T12627] bridge_slave_0: left promiscuous mode [ 617.596863][T12627] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.971724][T12641] binder_alloc: 12640: pid 12640 spamming oneway? 1 buffers allocated for a total size of 5240 [ 618.217751][T12646] IPVS: set_ctl: invalid protocol: 60 172.30.1.10:20001 [ 619.676500][T12650] loop6: detected capacity change from 0 to 1024 [ 619.683979][T12650] EXT4-fs: quotafile must be on filesystem root [ 625.090939][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.097524][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.929132][T12675] wg2 speed is unknown, defaulting to 1000 [ 626.389374][T12676] loop6: detected capacity change from 0 to 512 [ 627.517484][T12676] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 629.121116][T12676] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 629.121516][T12676] EXT4-fs: failed to create workqueue [ 629.137887][T12676] EXT4-fs (loop6): mount failed [ 630.383223][T12694] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20001 [ 630.391302][T12694] ubi: mtd0 is already attached to ubi0 [ 630.443863][T12695] netlink: 'syz.6.1647': attribute type 8 has an invalid length. [ 631.729738][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 631.991929][T12711] loop6: detected capacity change from 0 to 1024 [ 632.042491][T12711] EXT4-fs: quotafile must be on filesystem root [ 633.752013][ T27] audit: type=1326 audit(1779132550.131:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 633.817765][ T27] audit: type=1326 audit(1779132550.131:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 633.868134][ T27] audit: type=1326 audit(1779132550.131:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 634.518065][ T27] audit: type=1326 audit(1779132550.131:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 634.647932][ T27] audit: type=1326 audit(1779132550.131:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 634.815104][ T27] audit: type=1326 audit(1779132550.131:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 634.952374][ T27] audit: type=1326 audit(1779132550.131:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 635.781266][ T27] audit: type=1326 audit(1779132550.131:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 635.927203][ T27] audit: type=1326 audit(1779132550.131:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 636.063070][ T27] audit: type=1326 audit(1779132550.131:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12724 comm="syz.9.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 636.329387][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1658'. [ 636.654453][T12760] netlink: 'syz.0.1659': attribute type 8 has an invalid length. [ 637.338582][T12764] loop9: detected capacity change from 0 to 8 [ 637.404812][T12764] squashfs image failed sanity check [ 638.165185][T12769] loop6: detected capacity change from 0 to 4096 [ 638.275714][T12769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.716020][T12780] loop3: detected capacity change from 0 to 1024 [ 638.757020][T12780] EXT4-fs: quotafile must be on filesystem root [ 639.530430][T12790] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1663'. [ 640.400704][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.703559][T12803] netlink: 'syz.0.1670': attribute type 8 has an invalid length. [ 641.553290][T12826] loop3: detected capacity change from 0 to 1024 [ 641.567243][T12826] EXT4-fs: quotafile must be on filesystem root [ 641.949616][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 642.558871][T12836] loop9: detected capacity change from 0 to 1024 [ 642.566334][T12836] EXT4-fs: Ignoring removed orlov option [ 642.711454][T12836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.787046][T11135] Process accounting resumed [ 642.793125][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 642.793139][ T27] audit: type=1326 audit(1779132559.171:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1678" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16a8f9ce59 code=0x0 [ 642.854902][T11068] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.273194][T12856] loop3: detected capacity change from 0 to 256 [ 643.409185][T12856] FAT-fs (loop3): Directory bread(block 64) failed [ 643.455450][T12856] FAT-fs (loop3): Directory bread(block 65) failed [ 643.502960][T12856] FAT-fs (loop3): Directory bread(block 66) failed [ 643.557447][T12856] FAT-fs (loop3): Directory bread(block 67) failed [ 643.578386][T12856] FAT-fs (loop3): Directory bread(block 68) failed [ 643.627881][T12856] FAT-fs (loop3): Directory bread(block 69) failed [ 643.634593][T12856] FAT-fs (loop3): Directory bread(block 70) failed [ 643.687823][T12856] FAT-fs (loop3): Directory bread(block 71) failed [ 643.694551][T12856] FAT-fs (loop3): Directory bread(block 72) failed [ 643.733995][T12856] FAT-fs (loop3): Directory bread(block 73) failed [ 644.061871][T12864] netlink: 'syz.9.1682': attribute type 8 has an invalid length. [ 644.308129][T12871] loop3: detected capacity change from 0 to 1024 [ 644.343355][T12871] EXT4-fs: quotafile must be on filesystem root [ 645.799727][T12894] loop6: detected capacity change from 0 to 512 [ 645.869081][T12894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 645.922029][T12894] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.509385][T12913] netlink: 'syz.9.1695': attribute type 8 has an invalid length. [ 646.666357][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 646.863724][T12919] loop6: detected capacity change from 0 to 1024 [ 646.891913][T12919] EXT4-fs: quotafile must be on filesystem root [ 648.517802][T11135] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 648.717941][T11135] usb 7-1: Using ep0 maxpacket: 16 [ 648.731450][T11135] usb 7-1: unable to get BOS descriptor or descriptor too short [ 648.772519][T11135] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 648.789925][T11135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.822635][T11135] usb 7-1: Product: syz [ 648.844444][T11135] usb 7-1: Manufacturer: syz [ 648.869963][T11135] usb 7-1: SerialNumber: syz [ 649.138081][T11135] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 649.166597][T11135] usb 7-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 649.198190][T11135] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 649.250019][T11135] usb 7-1: unit 3 not found! [ 649.440196][T11135] usb 7-1: USB disconnect, device number 3 [ 649.864790][T12961] loop6: detected capacity change from 0 to 512 [ 650.114843][T12961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 650.180836][T12961] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.276281][T12970] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 12970 comm: syz.0.1705) [ 650.292186][T12970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'. [ 651.439406][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 652.136060][T12998] loop9: detected capacity change from 0 to 256 [ 654.286632][T13040] loop3: detected capacity change from 0 to 1024 [ 654.320046][T13040] EXT4-fs: quotafile must be on filesystem root [ 655.468257][T11170] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 655.690977][T11170] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.727777][T11170] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.770032][T11170] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 655.805255][T11170] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 655.836827][T11170] usb 10-1: SerialNumber: syz [ 656.096870][T11170] usb 10-1: 0:2 : does not exist [ 656.207456][T11170] usb 10-1: USB disconnect, device number 2 [ 656.817411][T13084] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1726'. [ 657.561508][T13101] syzkaller0: entered promiscuous mode [ 657.567030][T13101] syzkaller0: entered allmulticast mode [ 658.731672][T13126] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1736'. [ 659.757902][T11170] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 659.957907][T11170] usb 10-1: Using ep0 maxpacket: 16 [ 659.981684][T11170] usb 10-1: unable to get BOS descriptor or descriptor too short [ 660.014210][T11170] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 660.033633][T13156] loop3: detected capacity change from 0 to 1024 [ 660.043801][T11170] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.045553][T13156] EXT4-fs: quotafile must be on filesystem root [ 660.062576][T11170] usb 10-1: Product: syz [ 660.079090][T11170] usb 10-1: Manufacturer: syz [ 660.088143][T11170] usb 10-1: SerialNumber: syz [ 660.099717][T13140] loop6: detected capacity change from 0 to 40427 [ 660.198085][T13140] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 660.206352][T13140] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 660.330785][T11170] usb 10-1: 1:1 : format type 0 is detected, processed as PCM [ 660.348610][T11170] usb 10-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 660.355106][T13140] F2FS-fs (loop6): invalid crc value [ 660.899581][T13140] F2FS-fs (loop6): Found nat_bits in checkpoint [ 660.998324][T11170] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 661.010151][T11170] usb 10-1: unit 3 not found! [ 661.105183][T11170] usb 10-1: USB disconnect, device number 3 [ 661.217742][T13140] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 661.225131][T13140] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 661.233701][T13170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1745'. [ 661.240047][T13164] udevd[13164]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.371004][T13179] tipc: Started in network mode [ 661.375936][T13179] tipc: Node identity b24f3c38a364, cluster identity 4711 [ 661.448006][T13179] tipc: Enabled bearer , priority 0 [ 661.529196][T13180] syzkaller0: entered promiscuous mode [ 661.534746][T13180] syzkaller0: entered allmulticast mode [ 661.712296][T13179] tipc: Resetting bearer [ 661.754563][T13176] tipc: Resetting bearer [ 661.871074][T13192] loop9: detected capacity change from 0 to 8 [ 661.973427][T13192] squashfs image failed sanity check [ 662.532234][T13176] tipc: Disabling bearer [ 662.596857][T11233] tipc: Node number set to 288046136 [ 663.908679][T11170] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 664.289234][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1756'. [ 664.948348][T11170] usb 10-1: Using ep0 maxpacket: 16 [ 664.961663][T11170] usb 10-1: unable to get BOS descriptor or descriptor too short [ 664.981262][T11170] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 664.997691][T11170] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.016307][T11170] usb 10-1: Product: syz [ 665.026236][T11170] usb 10-1: Manufacturer: syz [ 665.038027][T11170] usb 10-1: SerialNumber: syz [ 665.290182][T11170] usb 10-1: 1:1 : format type 0 is detected, processed as PCM [ 665.327827][T11170] usb 10-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 665.345117][T11170] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 665.358189][T11170] usb 10-1: unit 3 not found! [ 665.441010][T11170] usb 10-1: USB disconnect, device number 4 [ 665.527038][T12103] udevd[12103]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.829946][T13260] loop6: detected capacity change from 0 to 1024 [ 665.858617][T13260] EXT4-fs: quotafile must be on filesystem root [ 666.518411][T13271] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1766'. [ 666.876156][T13275] loop6: detected capacity change from 0 to 512 [ 667.083810][T13275] EXT4-fs: Ignoring removed orlov option [ 667.090773][T13275] EXT4-fs (loop6): Test dummy encryption mode enabled [ 667.097587][T13275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 667.150340][T13275] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.1767: bad orphan inode 131083 [ 667.180336][T13275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.294845][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.605804][T13311] loop6: detected capacity change from 0 to 1024 [ 668.636377][T13311] EXT4-fs: quotafile must be on filesystem root [ 668.714887][T13178] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 670.283121][T13337] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1778'. [ 671.253869][T13346] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 671.753066][T13358] loop3: detected capacity change from 0 to 16 [ 671.813672][T13358] erofs: (device loop3): mounted with root inode @ nid 36. [ 672.083260][T13358] syz.3.1786: attempt to access beyond end of device [ 672.083260][T13358] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 672.217990][T13358] syz.3.1786: attempt to access beyond end of device [ 672.217990][T13358] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 672.638290][T13358] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 672.728041][ T27] audit: type=1800 audit(1779132589.111:80): pid=13358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1786" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 672.854216][T13358] syz.3.1786 (13358) used greatest stack depth: 19528 bytes left [ 673.318573][T13377] loop3: detected capacity change from 0 to 1024 [ 673.560943][T13377] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 673.910161][T13377] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.1793: lblock 2 mapped to illegal pblock 2 (length 1) [ 673.928323][T13377] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 673.965771][T13377] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.1793: lblock 0 mapped to illegal pblock 48 (length 1) [ 674.003262][T13377] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 674.013435][T13377] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1793: Failed to acquire dquot type 0 [ 674.078841][T13377] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 674.113611][T13377] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1793: mark_inode_dirty error [ 674.152040][T13377] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 674.199364][T13377] EXT4-fs (loop3): 1 orphan inode deleted [ 674.223589][T11963] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 674.224942][T13377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.290246][T11963] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 674.370350][T11963] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:13: Failed to release dquot type 0 [ 674.532043][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.603070][T11963] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 674.653103][T11963] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 674.680345][T11963] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:13: Failed to release dquot type 0 [ 674.713789][T11330] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 674.747726][T11330] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 674.787809][T11330] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 674.921161][T13410] loop6: detected capacity change from 0 to 256 [ 674.995231][T13413] loop3: detected capacity change from 0 to 1024 [ 675.033252][T13413] EXT4-fs: quotafile must be on filesystem root [ 675.049915][T13410] FAT-fs (loop6): Directory bread(block 64) failed [ 675.071473][T13410] FAT-fs (loop6): Directory bread(block 65) failed [ 675.113110][T13410] FAT-fs (loop6): Directory bread(block 66) failed [ 675.127514][T13410] FAT-fs (loop6): Directory bread(block 67) failed [ 675.142591][T13410] FAT-fs (loop6): Directory bread(block 68) failed [ 675.172079][T13410] FAT-fs (loop6): Directory bread(block 69) failed [ 675.215384][T13410] FAT-fs (loop6): Directory bread(block 70) failed [ 675.247805][T13410] FAT-fs (loop6): Directory bread(block 71) failed [ 675.297665][T13410] FAT-fs (loop6): Directory bread(block 72) failed [ 675.304263][T13410] FAT-fs (loop6): Directory bread(block 73) failed [ 676.983903][T13442] loop9: detected capacity change from 0 to 512 [ 677.009165][T13442] EXT4-fs: Ignoring removed nobh option [ 677.045826][T13442] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 677.080170][T13442] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 677.800595][T13461] loop9: detected capacity change from 0 to 16 [ 677.868326][T13461] erofs: (device loop9): mounted with root inode @ nid 36. [ 678.362788][T13473] pim6reg1: entered promiscuous mode [ 678.368310][T13473] pim6reg1: entered allmulticast mode [ 679.073862][T13495] wg2 speed is unknown, defaulting to 1000 [ 680.873094][T13549] autofs4:pid:13549:autofs_fill_super: called with bogus options [ 683.444675][T13596] loop6: detected capacity change from 0 to 512 [ 683.540477][T13596] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 683.561478][T13596] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 683.615742][T13596] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1845: Failed to acquire dquot type 1 [ 683.680583][T13603] autofs4:pid:13603:autofs_fill_super: called with bogus options [ 683.688345][T13596] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 683.688509][T13596] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 683.758757][T13596] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1845: Failed to acquire dquot type 1 [ 683.834335][T13596] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1845: bg 0: block 248: padding at end of block bitmap is not set [ 683.892284][T13596] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 683.931843][T13596] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 683.978641][T13596] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 683.989473][T13596] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1845: Failed to acquire dquot type 1 [ 684.212642][T13596] EXT4-fs (loop6): 1 orphan inode deleted [ 684.488689][T13596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.600646][T13596] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.829403][T13596] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 684.970093][T13596] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 685.031047][T13596] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1845: Failed to acquire dquot type 1 [ 685.097150][T13615] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 685.196492][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.923747][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.930264][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.126430][T13638] loop3: detected capacity change from 0 to 512 [ 686.159728][T13638] EXT4-fs: Ignoring removed nobh option [ 686.210054][T13638] EXT4-fs (loop3): orphan cleanup on readonly fs [ 686.224652][T13638] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #11: block 1: comm syz.3.1854: lblock 0 mapped to illegal pblock 1 (length 1) [ 686.270601][T13638] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 686.416256][T13638] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.1854: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 686.509501][T13638] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.1854: ea_inode dec ref err=-117 [ 686.557569][T13638] EXT4-fs (loop3): 1 orphan inode deleted [ 686.571021][T13638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 686.716003][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.980002][T13667] syzkaller0: entered promiscuous mode [ 687.986030][T13667] syzkaller0: entered allmulticast mode [ 688.436739][T13684] loop3: detected capacity change from 0 to 256 [ 688.487851][T13684] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 688.558416][T13684] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 688.612717][T13684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 688.701481][ T27] audit: type=1800 audit(1779132605.091:81): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1864" name="file1" dev="loop3" ino=1048665 res=0 errno=0 [ 688.928156][T13698] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1867'. [ 689.900438][T11170] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 690.129999][T11170] usb 7-1: config 0 interface 0 has no altsetting 0 [ 690.136684][T11170] usb 7-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 690.171123][T11170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.193648][T11170] usb 7-1: config 0 descriptor?? [ 690.662701][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.683465][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.703280][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.721815][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.747864][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.777957][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.794644][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.822742][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.852009][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.882806][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.905211][T11170] logitech-hidpp-device 0003:046D:C090.0002: unknown main item tag 0x0 [ 690.924794][T11170] logitech-hidpp-device 0003:046D:C090.0002: item fetching failed at offset 14/41 [ 690.948741][T11170] logitech-hidpp-device 0003:046D:C090.0002: hidpp_probe:parse failed [ 690.967534][T11170] logitech-hidpp-device: probe of 0003:046D:C090.0002 failed with error -22 [ 691.003197][T11170] usb 7-1: USB disconnect, device number 4 [ 691.540953][T13746] capability: warning: `syz.6.1878' uses deprecated v2 capabilities in a way that may be insecure [ 691.605978][T13746] loop6: detected capacity change from 0 to 128 [ 691.870418][T13178] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 694.493868][T13792] vlan1: entered promiscuous mode [ 694.510714][T13792] vlan1: entered allmulticast mode [ 694.516057][T13792] veth0_vlan: entered allmulticast mode [ 695.734436][T13796] loop6: detected capacity change from 0 to 512 [ 695.775265][T13796] EXT4-fs: Ignoring removed nobh option [ 695.807998][T13796] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 695.842143][T13799] overlayfs: failed to resolve './file0': -2 [ 695.852761][T13796] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 695.931305][T13796] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1890'. [ 696.238215][ T5083] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 697.125545][T13819] loop3: detected capacity change from 0 to 256 [ 698.972358][T13846] loop9: detected capacity change from 0 to 8 [ 699.002350][T13846] squashfs image failed sanity check [ 699.985483][T13830] loop6: detected capacity change from 0 to 40427 [ 700.035841][T13830] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 700.067770][T13830] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 700.106947][T13830] F2FS-fs (loop6): Image doesn't support compression [ 700.157255][T13830] F2FS-fs (loop6): Image doesn't support compression [ 700.217896][T13830] F2FS-fs (loop6): invalid crc value [ 700.543795][T13830] F2FS-fs (loop6): Start checkpoint disabled! [ 700.783935][T13830] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 700.879064][T13830] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 701.293431][T13867] netlink: 'syz.0.1906': attribute type 5 has an invalid length. [ 701.449026][T13869] loop9: detected capacity change from 0 to 4096 [ 701.468615][T13869] EXT4-fs: inline encryption not supported [ 701.474937][T13869] EXT4-fs: Ignoring removed bh option [ 701.560700][T13869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 701.597993][T13869] EXT4-fs (loop9): Test dummy encryption mode enabled [ 701.651176][T13869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.717834][T13869] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 701.813166][T13881] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 701.910641][T13884] loop3: detected capacity change from 0 to 1024 [ 701.920752][T11068] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.938303][T13884] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 701.979185][T13884] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #3: block 1: comm syz.3.1911: lblock 1 mapped to illegal pblock 1 (length 1) [ 702.000510][T13884] Quota error (device loop3): write_blk: dquota write failed [ 702.016067][T13884] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 702.026861][T13884] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1911: Failed to acquire dquot type 0 [ 702.040004][T13884] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.1911: Freeing blocks not in datazone - block = 0, count = 4096 [ 702.056801][T13884] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1911: Invalid inode bitmap blk 0 in block_group 0 [ 702.086771][ T49] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 702.116565][T13884] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 702.172298][T13884] EXT4-fs (loop3): 1 orphan inode deleted [ 702.182000][ T49] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 702.198866][T13884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.211713][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 702.270741][T13884] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.1911: Invalid inode table block 18446744069414584321 in block_group 0 [ 702.304533][T13884] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 702.366650][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.417793][ T5810] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 702.610542][ T5810] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 702.636922][ T5810] usb 10-1: config 1 has no interface number 0 [ 702.644096][ T5810] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 702.675900][ T5810] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 702.700860][ T5810] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 702.740015][ T5810] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 702.756356][ T5810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.778504][ T5810] usb 10-1: Product: syz [ 702.782814][ T5810] usb 10-1: Manufacturer: syz [ 702.807733][ T5810] usb 10-1: SerialNumber: syz [ 703.236530][ T5810] usb 10-1: 1:0 : does not exist [ 703.406094][ T5810] usb 10-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 703.678422][ T5810] usb 10-1: 1:3 : does not exist [ 703.697750][ T5810] usb 10-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 703.761677][ T5810] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 703.837981][ T5810] usb 10-1: USB disconnect, device number 5 [ 703.921207][T13178] udevd[13178]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.920274][T13922] loop6: detected capacity change from 0 to 40427 [ 704.961979][T13922] F2FS-fs (loop6): invalid crc value [ 705.005453][T13922] F2FS-fs (loop6): Found nat_bits in checkpoint [ 705.298280][T13922] F2FS-fs (loop6): Start checkpoint disabled! [ 705.316117][T13922] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 706.486332][ T11] kworker/u4:0: attempt to access beyond end of device [ 706.486332][ T11] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 706.504261][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 706.558253][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 706.565195][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 706.592774][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 707.449401][T13995] loop6: detected capacity change from 0 to 1024 [ 707.458453][T13995] EXT4-fs: Ignoring removed orlov option [ 707.603801][T13995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.376876][T13995] Process accounting resumed [ 708.478696][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 708.545918][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.611325][T14028] syzkaller0: entered promiscuous mode [ 709.630753][T14028] syzkaller0: entered allmulticast mode [ 709.847151][T14039] overlayfs: failed to resolve './file0': -2 [ 709.869269][T14040] raw_sendmsg: syz.6.1944 forgot to set AF_INET. Fix it! [ 710.131568][T14046] Illegal XDP return value 4294967294 on prog (id 48) dev syz_tun, expect packet loss! [ 711.711061][T14073] overlayfs: failed to resolve './file0': -2 [ 711.954097][T14077] autofs4:pid:14077:autofs_fill_super: called with bogus options [ 716.414849][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1971'. [ 718.047710][T11233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 719.727746][T11233] usb 1-1: Using ep0 maxpacket: 16 [ 719.739678][T11233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 719.751610][T11233] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 719.787707][T11233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.795763][T11233] usb 1-1: Product: syz [ 719.827464][T14185] loop3: detected capacity change from 0 to 512 [ 719.831493][T11233] usb 1-1: Manufacturer: syz [ 719.847683][T11233] usb 1-1: SerialNumber: syz [ 719.895834][T14185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 719.986882][T14185] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1980: corrupted in-inode xattr: invalid ea_ino [ 720.074973][T14185] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1980: couldn't read orphan inode 15 (err -117) [ 720.087510][T11233] usb 1-1: 1:1 : bogus bTerminalLink 2 [ 720.126830][T14185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.146345][T11233] usb 1-1: USB disconnect, device number 2 [ 720.379810][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.387844][ T5768] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 720.593627][ T5768] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 720.615929][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.657290][ T5768] usb 7-1: config 0 descriptor?? [ 722.954276][ T5768] usb 7-1: Cannot set autoneg [ 722.974201][ T5768] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 723.029221][ T5768] usb 7-1: USB disconnect, device number 5 [ 723.350769][T14246] syzkaller0: entered promiscuous mode [ 723.356959][T14246] syzkaller0: entered allmulticast mode [ 727.621457][T14293] syzkaller0: entered promiscuous mode [ 727.627284][T14293] syzkaller0: entered allmulticast mode [ 728.747564][T14313] autofs4:pid:14313:autofs_fill_super: called with bogus options [ 728.781803][T11170] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 729.713839][T11170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.908372][T11170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.922639][T11170] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.936731][T11170] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.946237][T11170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.957708][T11170] usb 4-1: config 0 descriptor?? [ 730.720574][T11170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xe [ 730.737808][T11170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 730.760167][T11170] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 730.793988][T11170] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 731.145444][T11170] usb 4-1: USB disconnect, device number 2 [ 731.220378][T14342] syzkaller0: entered promiscuous mode [ 731.225919][T14342] syzkaller0: entered allmulticast mode [ 732.406429][T14360] autofs4:pid:14360:autofs_fill_super: called with bogus options [ 734.127893][T11170] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 734.362084][T11170] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 734.810470][T11170] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 734.857950][T11170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 734.866174][T11170] usb 4-1: Product: syz [ 734.901822][T11170] usb 4-1: Manufacturer: syz [ 734.906475][T11170] usb 4-1: SerialNumber: syz [ 734.950070][T11170] usb 4-1: config 0 descriptor?? [ 735.181793][ T51] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 735.181953][ T9824] Bluetooth: hci2: Frame reassembly failed (-84) [ 735.325452][T11170] usb 4-1: USB disconnect, device number 3 [ 736.441414][T14418] 9pnet: p9_errstr2errno: server reported unknown error [ 737.210755][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 737.219664][ T5083] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 737.992940][T14407] loop6: detected capacity change from 0 to 40427 [ 738.269298][T14407] F2FS-fs (loop6): invalid crc value [ 738.966507][T14407] F2FS-fs (loop6): Start checkpoint disabled! [ 739.043863][T14407] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 740.661778][ T5810] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 741.521420][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.543048][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.562138][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 741.593313][ T5810] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 741.797550][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.818783][ T5810] usb 4-1: config 0 descriptor?? [ 742.253643][ T5810] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xe [ 742.292833][ T5810] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 742.329878][ T5810] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 742.381713][ T5810] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 742.528845][T11170] usb 4-1: USB disconnect, device number 4 [ 742.563212][T14514] fido_id[14514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 743.521738][ T27] audit: type=1326 audit(1779132659.911:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14517 comm="syz.0.2058" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34179ce59 code=0x7fc00000 [ 744.237229][T14532] loop3: detected capacity change from 0 to 1024 [ 744.300560][T14532] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 744.300560][T14532] [ 746.307678][ T5810] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 746.433726][T14567] loop9: detected capacity change from 0 to 256 [ 746.453471][T14567] exfat: Unknown parameter '{ÃRã*L´’SdÑr' [ 746.507860][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 746.526563][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 746.571620][ T5810] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 746.581132][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.622703][ T5810] usb 4-1: Product: syz [ 746.626931][ T5810] usb 4-1: Manufacturer: syz [ 746.651543][ T5810] usb 4-1: SerialNumber: syz [ 747.438663][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.445990][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.548689][ T27] audit: type=1326 audit(1779132663.941:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14570 comm="syz.0.2071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34179ce59 code=0x7fc00000 [ 747.598302][ T5810] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 747.657881][ T5810] usb 4-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 747.665262][ T5810] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 747.927821][ T27] audit: type=1326 audit(1779132663.941:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14570 comm="syz.0.2071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34179ce59 code=0x7fc00000 [ 747.960298][ T5810] usb 4-1: unit 3 not found! [ 748.082865][ T27] audit: type=1326 audit(1779132663.941:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14570 comm="syz.0.2071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34179ce59 code=0x7fc00000 [ 748.150918][ T5810] usb 4-1: USB disconnect, device number 5 [ 748.305906][T12103] udevd[12103]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.664012][T14611] loop3: detected capacity change from 0 to 1024 [ 749.738110][T14611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 749.842169][T14611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.949656][T14611] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 750.121471][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.007639][ T27] audit: type=1326 audit(1779132667.391:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.6.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2bcb9ce59 code=0x7fc00000 [ 752.458043][ T965] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 752.692849][ T965] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.722656][T14630] loop3: detected capacity change from 0 to 40427 [ 752.729335][ T965] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.755351][T14630] F2FS-fs (loop3): invalid crc value [ 752.766827][ T965] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 752.847120][ T965] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 752.891343][ T965] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.942486][ T965] usb 10-1: config 0 descriptor?? [ 753.097732][T14630] F2FS-fs (loop3): Start checkpoint disabled! [ 753.133958][T14630] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 753.328847][ T9824] kworker/u4:1: attempt to access beyond end of device [ 753.328847][ T9824] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 753.365954][ T9824] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 753.392489][T14653] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 753.402599][ T965] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xe [ 753.425562][ T965] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 753.445200][ T965] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 753.510586][ T965] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 753.621793][ T5840] usb 10-1: USB disconnect, device number 6 [ 753.731196][T14672] fido_id[14672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 754.840654][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2100'. [ 754.949182][T14705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.049536][T14709] bond1: entered allmulticast mode [ 756.018011][ T5832] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 756.261959][T14740] loop6: detected capacity change from 0 to 512 [ 756.275794][ T5832] usb 10-1: unable to get BOS descriptor or descriptor too short [ 756.318144][ T5832] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.333635][T14740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 756.354350][ T5832] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 756.399588][T14740] EXT4-fs error (device loop6): ext4_iget_extra_inode:4739: inode #15: comm syz.6.2109: corrupted in-inode xattr: invalid ea_ino [ 756.407686][ T5832] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 756.426436][ T5832] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 756.440255][ T5832] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 756.451468][ T5832] usb 10-1: config 1 interface 1 has no altsetting 0 [ 756.467082][ T5832] usb 10-1: string descriptor 0 read error: -22 [ 756.473947][ T5832] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 756.480798][T14740] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2109: couldn't read orphan inode 15 (err -117) [ 756.487632][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.515070][T14740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.791525][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.944680][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2111'. [ 756.983028][T14753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.007398][T14753] bond1: entered allmulticast mode [ 758.085799][ T965] usb 10-1: USB disconnect, device number 7 [ 758.913185][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2116'. [ 761.203223][T14810] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2127'. [ 764.090894][T14873] netlink: 'syz.6.2146': attribute type 29 has an invalid length. [ 764.574908][T14844] loop9: detected capacity change from 0 to 40427 [ 764.590794][T14844] F2FS-fs (loop9): invalid crc value [ 764.646409][T14844] F2FS-fs (loop9): Found nat_bits in checkpoint [ 764.987867][T14844] F2FS-fs (loop9): Start checkpoint disabled! [ 765.009828][T14844] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 765.335237][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 765.382809][ T67] kworker/u4:4: attempt to access beyond end of device [ 765.382809][ T67] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 765.408438][ T67] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 765.415933][ T67] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 765.499405][T14844] VFS:Filesystem freeze failed [ 765.539619][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.555615][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.566074][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 765.580594][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.622114][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.671283][ T23] usb 4-1: config 0 descriptor?? [ 766.098990][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 766.105023][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 766.143277][ T23] usb 4-1: USB disconnect, device number 6 [ 766.213508][T14927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.127907][T11170] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 770.349822][T11170] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.379073][T11170] usb 4-1: config 0 has no interface number 0 [ 770.405730][T11170] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.450907][T11170] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.488288][T11170] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 770.517962][T11170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.547702][T11170] usb 4-1: config 0 descriptor?? [ 770.803822][T15052] loop6: detected capacity change from 0 to 256 [ 770.895233][T15052] FAT-fs (loop6): Directory bread(block 64) failed [ 770.917768][T15052] FAT-fs (loop6): Directory bread(block 65) failed [ 770.936145][T15052] FAT-fs (loop6): Directory bread(block 66) failed [ 770.944747][T15052] FAT-fs (loop6): Directory bread(block 67) failed [ 770.952485][T15052] FAT-fs (loop6): Directory bread(block 68) failed [ 770.982262][T15052] FAT-fs (loop6): Directory bread(block 69) failed [ 771.003222][T15052] FAT-fs (loop6): Directory bread(block 70) failed [ 771.017711][T15052] FAT-fs (loop6): Directory bread(block 71) failed [ 771.055129][T15052] FAT-fs (loop6): Directory bread(block 72) failed [ 771.073718][T11170] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0006/input/input29 [ 771.086116][T15052] FAT-fs (loop6): Directory bread(block 73) failed [ 771.159199][T15052] syz.6.2186: attempt to access beyond end of device [ 771.159199][T15052] loop6: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 771.217044][T15052] syz.6.2186: attempt to access beyond end of device [ 771.217044][T15052] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 771.264004][T11170] holtek_kbd 0003:04D9:A055.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 771.288807][ T27] audit: type=1800 audit(1779132687.681:87): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2186" name="file1" dev="loop6" ino=1048667 res=0 errno=0 [ 771.301193][T11170] usb 4-1: USB disconnect, device number 7 [ 771.439410][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 771.446591][ T5083] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 771.510476][T15060] fido_id[15060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 772.632061][T15091] loop6: detected capacity change from 0 to 256 [ 772.664536][T15091] exfat: Deprecated parameter 'utf8' [ 772.688138][T15091] exfat: Deprecated parameter 'utf8' [ 772.693578][T15091] exfat: Deprecated parameter 'utf8' [ 772.733716][T15091] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 775.248769][T15161] netlink: 'syz.6.2209': attribute type 8 has an invalid length. [ 777.242361][T15221] netlink: 'syz.0.2224': attribute type 8 has an invalid length. [ 779.704688][T15277] loop3: detected capacity change from 0 to 4096 [ 779.733927][T15277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.838465][ T28] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 780.067691][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 780.079330][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 780.088138][ T5083] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 780.123590][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 780.141486][ T28] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 780.156201][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.166163][ T28] usb 1-1: Product: syz [ 780.170701][ T28] usb 1-1: Manufacturer: syz [ 780.176891][ T28] usb 1-1: SerialNumber: syz [ 780.342323][T15289] loop9: detected capacity change from 0 to 1024 [ 780.368917][T15289] EXT4-fs: quotafile must be on filesystem root [ 780.441085][ T28] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 780.471192][ T28] usb 1-1: unit 3 not found! [ 780.580983][ T28] usb 1-1: USB disconnect, device number 3 [ 780.667108][T12103] udevd[12103]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.468766][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.110262][T15317] netlink: 'syz.3.2238': attribute type 8 has an invalid length. [ 782.918004][ T5840] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 783.123560][ T5840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.147025][T15347] loop3: detected capacity change from 0 to 512 [ 783.153651][ T5840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.164035][ T5840] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.190310][T15347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 783.222680][ T5840] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.254348][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.297250][T15347] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.2252: Unimplemented hash flags: 0x0001 [ 783.330782][ T5840] usb 10-1: config 0 descriptor?? [ 783.337077][T15347] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2252: Corrupt directory, running e2fsck is recommended [ 783.358833][T15347] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2252: path /195/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 783.454809][T15352] loop6: detected capacity change from 0 to 8 [ 783.484709][T15352] squashfs image failed sanity check [ 784.138957][ T5840] usbhid 10-1:0.0: can't add hid device: -71 [ 784.145090][ T5840] usbhid: probe of 10-1:0.0 failed with error -71 [ 784.174067][ T5840] usb 10-1: USB disconnect, device number 8 [ 784.211376][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.649414][T15382] 9pnet_fd: Insufficient options for proto=fd [ 790.424229][T15429] 9pnet_fd: Insufficient options for proto=fd [ 791.174964][T15454] loop9: detected capacity change from 0 to 512 [ 791.203059][T15454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 791.251316][T15454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.264076][T15454] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.298971][T15454] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.2278: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 791.354006][T15454] EXT4-fs error (device loop9): ext4_evict_inode:265: comm syz.9.2278: couldn't truncate inode 15 (err -117) [ 791.388118][ T5832] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 791.425920][T11068] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.739755][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.763982][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.774106][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 791.787376][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.789479][T15462] netlink: 'syz.6.2280': attribute type 8 has an invalid length. [ 791.796924][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.842824][ T5832] usb 4-1: config 0 descriptor?? [ 791.941966][T15466] 9pnet_fd: Insufficient options for proto=fd [ 792.310583][ T5832] usbhid 4-1:0.0: can't add hid device: -71 [ 792.316860][ T5832] usbhid: probe of 4-1:0.0 failed with error -71 [ 792.370782][ T5832] usb 4-1: USB disconnect, device number 8 [ 793.825854][T15495] loop3: detected capacity change from 0 to 256 [ 793.876449][T15498] Bluetooth: MGMT ver 1.22 [ 793.891029][T15495] FAT-fs (loop3): Directory bread(block 64) failed [ 793.909460][T15495] FAT-fs (loop3): Directory bread(block 65) failed [ 793.917204][T15495] FAT-fs (loop3): Directory bread(block 66) failed [ 793.941365][T15495] FAT-fs (loop3): Directory bread(block 67) failed [ 793.968052][T15495] FAT-fs (loop3): Directory bread(block 68) failed [ 793.994362][T15495] FAT-fs (loop3): Directory bread(block 69) failed [ 794.013676][T15495] FAT-fs (loop3): Directory bread(block 70) failed [ 794.022683][T15495] FAT-fs (loop3): Directory bread(block 71) failed [ 794.030512][T15495] FAT-fs (loop3): Directory bread(block 72) failed [ 794.037160][T15495] FAT-fs (loop3): Directory bread(block 73) failed [ 795.302589][ T27] audit: type=1326 audit(1779132711.691:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.3.2297" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8f9ce59 code=0x7fc00000 [ 799.147756][ T23] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 799.360197][ T23] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 799.382915][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.416750][ T23] usb 7-1: config 0 descriptor?? [ 800.713552][ T27] audit: type=1326 audit(1779132717.101:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15570 comm="syz.0.2312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34179ce59 code=0x7fc00000 [ 802.820549][T15597] loop3: detected capacity change from 0 to 1024 [ 803.052055][T15597] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 803.120590][T15597] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 803.142027][T15597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.174171][ T23] usb 7-1: Cannot set autoneg [ 803.179453][ T23] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 803.233316][ T23] usb 7-1: USB disconnect, device number 6 [ 803.403217][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.219300][ T965] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 804.390983][T15616] loop3: detected capacity change from 0 to 8 [ 804.416847][T15616] squashfs image failed sanity check [ 804.438216][ T965] usb 10-1: Using ep0 maxpacket: 16 [ 804.713978][ T965] usb 10-1: unable to get BOS descriptor or descriptor too short [ 804.912200][ T965] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 804.988269][ T965] usb 10-1: can't read configurations, error -71 [ 805.009792][T15618] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2322'. [ 805.365682][T15621] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2323'. [ 806.558786][ T27] audit: type=1326 audit(1779132722.951:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.9.2325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda439ce59 code=0x7fc00000 [ 807.435571][T15644] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2331'. [ 808.712880][T15657] loop6: detected capacity change from 0 to 8 [ 808.804939][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.819737][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.864458][T15657] squashfs image failed sanity check [ 813.877699][ T27] audit: type=1326 audit(1779132730.201:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8f9ce59 code=0x7fc00000 [ 815.116474][T15698] loop9: detected capacity change from 0 to 512 [ 815.251276][T15698] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.376287][T15698] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.664168][T11135] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 815.937999][T11135] usb 7-1: Using ep0 maxpacket: 16 [ 815.962790][T11135] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.005344][T11135] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.058743][T11135] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 816.089367][T11135] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.150465][T11135] usb 7-1: config 0 descriptor?? [ 816.665867][T11135] wacom 0003:056A:0084.0007: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.6-1/input0 [ 816.964953][ T5810] usb 7-1: USB disconnect, device number 7 [ 817.204975][T11233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 817.217105][T11068] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.385791][T15721] vlan1: entered promiscuous mode [ 817.391819][T15721] vlan1: entered allmulticast mode [ 817.397004][T15721] veth0_vlan: entered allmulticast mode [ 818.170179][T11233] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 818.189286][T11233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.231093][T11233] usb 1-1: config 0 descriptor?? [ 819.199054][T15735] loop3: detected capacity change from 0 to 1024 [ 819.349421][T15735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 819.363708][T15735] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.489873][ T1001] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm kworker/u4:6: lblock 0 mapped to illegal pblock 0 (length 3) [ 819.553567][ T1001] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 819.587276][ T1001] EXT4-fs (loop3): This should not happen!! Data will be lost [ 819.587276][ T1001] [ 819.629494][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 820.239644][T11233] usb 1-1: Cannot set autoneg [ 820.245599][T11233] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 820.287492][T11233] usb 1-1: USB disconnect, device number 4 [ 820.569010][T15757] vlan1: entered promiscuous mode [ 820.574835][T15757] vlan1: entered allmulticast mode [ 820.580180][T15757] veth0_vlan: entered allmulticast mode [ 821.455232][T15763] loop6: detected capacity change from 0 to 512 [ 821.469721][T15763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 821.507419][T15763] EXT4-fs error (device loop6): ext4_iget_extra_inode:4739: inode #15: comm syz.6.2366: corrupted in-inode xattr: invalid ea_ino [ 821.538533][T15763] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2366: couldn't read orphan inode 15 (err -117) [ 821.569444][T15763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.874854][T12225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.091474][T15780] loop9: detected capacity change from 0 to 256 [ 822.707884][ T965] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 822.917489][ T965] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 823.525051][ T965] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.559918][ T965] usb 10-1: config 0 descriptor?? [ 824.317905][T11233] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 824.328359][ T5832] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 824.517711][T11233] usb 1-1: device descriptor read/64, error -71 [ 824.550537][ T5832] usb 4-1: config index 0 descriptor too short (expected 30717, got 27) [ 824.559490][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.575027][ T5832] usb 4-1: string descriptor 0 read error: -22 [ 824.581810][ T5832] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=55.0e [ 824.591004][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.606854][ T5832] rtl8150 4-1:1.0: couldn't find required endpoints [ 824.614469][ T5832] rtl8150: probe of 4-1:1.0 failed with error -5 [ 824.808328][T11233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 824.813404][ T28] usb 4-1: USB disconnect, device number 9 [ 824.977799][T11233] usb 1-1: device descriptor read/64, error -71 [ 825.108711][T11233] usb usb1-port1: attempt power cycle [ 825.240249][ T965] usb 10-1: Cannot set autoneg [ 825.245239][ T965] MOSCHIP usb-ethernet driver: probe of 10-1:0.0 failed with error -32 [ 825.257790][ T965] usb 10-1: USB disconnect, device number 11 [ 825.548096][T11233] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 825.587020][T11233] usb 1-1: device descriptor read/8, error -71 [ 825.631278][T15820] loop3: detected capacity change from 0 to 256 [ 825.867665][T11233] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 825.921002][T11233] usb 1-1: device descriptor read/8, error -71 [ 825.951704][T15830] netlink: 'syz.6.2394': attribute type 11 has an invalid length. [ 825.963080][T15830] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2394'. [ 826.057508][T11233] usb usb1-port1: unable to enumerate USB device [ 826.346166][T15845] loop3: detected capacity change from 0 to 1024 [ 826.372306][T15845] EXT4-fs: Ignoring removed mblk_io_submit option [ 826.440577][T15845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 826.472096][T15845] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.516665][T15845] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.2400: lblock 3 mapped to illegal pblock 3 (length 3) [ 826.536629][T15845] EXT4-fs (loop3): Remounting filesystem read-only [ 826.576179][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 827.158103][T11233] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 827.351620][T11233] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 827.391051][T11233] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.433106][T11233] usb 10-1: config 0 descriptor?? [ 827.600073][T15866] loop6: detected capacity change from 0 to 256 [ 827.663270][T15866] FAT-fs (loop6): Directory bread(block 64) failed [ 827.673085][T15866] FAT-fs (loop6): Directory bread(block 65) failed [ 827.690698][T15866] FAT-fs (loop6): Directory bread(block 66) failed [ 827.707914][T15866] FAT-fs (loop6): Directory bread(block 67) failed [ 827.714644][T15866] FAT-fs (loop6): Directory bread(block 68) failed [ 827.757723][T15866] FAT-fs (loop6): Directory bread(block 69) failed [ 827.777829][T15866] FAT-fs (loop6): Directory bread(block 70) failed [ 827.784434][T15866] FAT-fs (loop6): Directory bread(block 71) failed [ 827.808900][T15866] FAT-fs (loop6): Directory bread(block 72) failed [ 827.815473][T15866] FAT-fs (loop6): Directory bread(block 73) failed [ 827.967384][T15871] syzkaller0: entered promiscuous mode [ 827.973378][T15871] syzkaller0: entered allmulticast mode [ 828.066156][T12225] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 828.089677][T12225] FAT-fs (loop6): Filesystem has been set read-only [ 828.305197][T15875] loop3: detected capacity change from 0 to 4096 [ 828.314058][T15875] EXT4-fs: Ignoring removed mblk_io_submit option [ 828.360918][T15875] EXT4-fs (loop3): Test dummy encryption mode enabled [ 828.399812][T15875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.497687][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 828.678169][ T28] usb 1-1: device descriptor read/64, error -71 [ 828.753021][T15875] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 828.875402][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.958711][ T28] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 829.069810][T11233] usb 10-1: Cannot set autoneg [ 829.086356][T11233] MOSCHIP usb-ethernet driver: probe of 10-1:0.0 failed with error -32 [ 829.115168][T11233] usb 10-1: USB disconnect, device number 12 [ 829.127870][ T28] usb 1-1: device descriptor read/64, error -71 [ 829.249554][ T28] usb usb1-port1: attempt power cycle [ 829.343443][ T1001] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.491068][ T1001] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.667761][ T28] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 829.681227][ T1001] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.708497][ T28] usb 1-1: device descriptor read/8, error -71 [ 829.835738][ T1001] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.887185][T15894] syzkaller0: entered promiscuous mode [ 829.893381][T15894] syzkaller0: entered allmulticast mode [ 830.008510][ T28] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 830.078008][ T28] usb 1-1: device descriptor read/8, error -71 [ 830.346776][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 830.359486][ T28] usb usb1-port1: unable to enumerate USB device [ 830.378958][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 830.391409][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 830.415565][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 830.426154][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 830.433805][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 830.491712][T15900] wg2 speed is unknown, defaulting to 1000 [ 830.567851][T11233] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 830.736948][T11233] usb 10-1: device descriptor read/64, error -71 [ 831.029535][T11233] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 831.207833][T11233] usb 10-1: device descriptor read/64, error -71 [ 831.328209][T11233] usb usb10-port1: attempt power cycle [ 831.562879][T15900] chnl_net:caif_netlink_parms(): no params data found [ 831.757805][T11233] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 831.798621][T11233] usb 10-1: device descriptor read/8, error -71 [ 831.925919][T15900] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.933496][T15900] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.944480][T15900] bridge_slave_0: entered allmulticast mode [ 831.953974][T15900] bridge_slave_0: entered promiscuous mode [ 832.006418][T15900] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.014397][T15900] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.022232][T15900] bridge_slave_1: entered allmulticast mode [ 832.030069][T15900] bridge_slave_1: entered promiscuous mode [ 832.078077][T11233] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 832.118996][T11233] usb 10-1: device descriptor read/8, error -71 [ 832.255226][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.258038][T11233] usb usb10-port1: unable to enumerate USB device [ 832.344093][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.489951][ T51] Bluetooth: hci2: command tx timeout [ 832.572250][T15900] team0: Port device team_slave_0 added [ 832.597681][T11233] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 832.618433][T15949] loop3: detected capacity change from 0 to 2048 [ 832.630064][ T1001] hsr_slave_0: left promiscuous mode [ 832.659878][ T1001] hsr_slave_1: left promiscuous mode [ 832.668753][T15949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.683037][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.689012][T15949] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 832.692753][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.714728][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.723374][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.731737][ T1001] bridge_slave_1: left allmulticast mode [ 832.737996][ T1001] bridge_slave_1: left promiscuous mode [ 832.743757][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.779714][T11233] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 832.797637][T11233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.816235][T11233] usb 1-1: config 0 descriptor?? [ 832.843152][ T1001] veth1_macvtap: left promiscuous mode [ 832.862900][ T1001] veth0_macvtap: left promiscuous mode [ 832.875583][ T1001] veth1_vlan: left promiscuous mode [ 832.884856][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.476588][ T1001] bond1 (unregistering): Released all slaves [ 834.406702][ T1001] team0 (unregistering): Port device team_slave_1 removed [ 834.481998][ T1001] team0 (unregistering): Port device team_slave_0 removed [ 834.490048][T11233] usb 1-1: Cannot set autoneg [ 834.508668][T11233] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 834.528142][T11233] usb 1-1: USB disconnect, device number 13 [ 834.558349][ T51] Bluetooth: hci2: command tx timeout [ 834.577519][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.637475][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.176176][ T1001] bond0 (unregistering): Released all slaves [ 835.296614][T15900] team0: Port device team_slave_1 added [ 835.317083][T15956] netlink: 496 bytes leftover after parsing attributes in process `syz.3.2427'. [ 835.379634][T11135] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 835.515168][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.663047][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.719086][T11135] usb 1-1: device descriptor read/64, error -71 [ 835.726480][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.740199][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.747171][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.787653][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.967978][T15900] hsr_slave_0: entered promiscuous mode [ 835.987809][T11135] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 836.004486][T15900] hsr_slave_1: entered promiscuous mode [ 836.025607][T15900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.040386][T15900] Cannot create hsr debugfs directory [ 836.158031][T11135] usb 1-1: device descriptor read/64, error -71 [ 836.279959][T11135] usb usb1-port1: attempt power cycle [ 836.439689][T15900] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.518496][T11233] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 836.637823][ T51] Bluetooth: hci2: command tx timeout [ 836.656227][T15900] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.678399][T11233] usb 10-1: device descriptor read/64, error -71 [ 836.742245][T11135] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 836.832440][T11135] usb 1-1: device descriptor read/8, error -71 [ 836.847190][T15900] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.947846][T11233] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 836.970885][T15900] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.109880][T11233] usb 10-1: device descriptor read/64, error -71 [ 837.140891][T11135] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 837.224759][T11135] usb 1-1: device descriptor read/8, error -71 [ 837.238129][T11233] usb usb10-port1: attempt power cycle [ 837.316576][T15900] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 837.358298][T11135] usb usb1-port1: unable to enumerate USB device [ 837.377998][T15900] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 837.397237][T15900] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 837.437247][T15900] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 837.624763][T15900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.686963][T15900] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.713001][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.720676][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.790577][T11233] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 837.810866][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.818126][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.834184][T11233] usb 10-1: device descriptor read/8, error -71 [ 838.117928][T11233] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 838.158995][T11233] usb 10-1: device descriptor read/8, error -71 [ 838.244088][T15900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.288153][T11233] usb usb10-port1: unable to enumerate USB device [ 838.543992][T16044] netlink: 'syz.0.2445': attribute type 8 has an invalid length. [ 838.718235][ T51] Bluetooth: hci2: command tx timeout [ 839.182473][T15900] veth0_vlan: entered promiscuous mode [ 839.193245][T16067] block device autoloading is deprecated and will be removed. [ 839.239956][T15900] veth1_vlan: entered promiscuous mode [ 839.326256][T16074] loop3: detected capacity change from 0 to 8 [ 839.421646][T16074] squashfs image failed sanity check [ 840.000393][T13178] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 840.029913][T15900] veth0_macvtap: entered promiscuous mode [ 840.086850][T15900] veth1_macvtap: entered promiscuous mode [ 840.176795][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.287682][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.314108][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.364514][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.387646][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.413604][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.514421][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.644128][T11233] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 840.722725][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.874417][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.077372][ T27] audit: type=1326 audit(1779132757.451:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16078 comm="syz.0.2453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34179ce59 code=0x7fc00000 [ 841.118123][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.141923][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.169677][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.197211][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.225545][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.246016][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.267316][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.294171][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.324584][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.349964][T15900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.486763][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.558192][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.581997][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.603607][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.635197][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.657442][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.679294][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.700686][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.723000][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.748119][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.767724][T11135] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 841.778037][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.800753][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.822324][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.846285][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.866859][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.891210][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.908004][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.933528][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.952534][T11135] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 841.974059][T15900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.984262][T11135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.021899][T15900] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.034981][T11135] usb 4-1: Product: syz [ 842.050656][T11135] usb 4-1: Manufacturer: syz [ 842.058176][T11135] usb 4-1: SerialNumber: syz [ 842.068125][T15900] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.097421][T15900] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.118729][T15900] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.175010][T11135] usb 4-1: config 0 descriptor?? [ 842.211332][T11135] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 842.477210][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.515997][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.555362][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.575946][T11233] usb 10-1: device descriptor read/64, error -71 [ 842.585672][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.868282][T11233] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 843.049874][T11233] usb 10-1: device descriptor read/64, error -71 [ 843.072296][T11135] usb 4-1: USB disconnect, device number 10 [ 843.178081][T11233] usb usb10-port1: attempt power cycle [ 843.298436][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 843.634212][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.672598][ T23] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.710580][ T23] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.728294][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.917085][ T23] usb 8-1: config 0 descriptor?? [ 845.288814][ T27] audit: type=1326 audit(1779132761.681:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16127 comm="syz.0.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34179ce59 code=0x7fc00000 [ 845.597938][T16142] netlink: 'syz.3.2466': attribute type 8 has an invalid length. [ 846.114457][ T5840] usb 8-1: USB disconnect, device number 2 [ 846.787985][ T23] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 847.238752][ T23] usb 10-1: device descriptor read/64, error -71 [ 847.453103][T16163] loop7: detected capacity change from 0 to 512 [ 847.531407][T16163] EXT4-fs (loop7): 1 truncate cleaned up [ 847.538968][T16163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.711421][T16170] loop3: detected capacity change from 0 to 512 [ 847.804644][T16170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.827238][ T23] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 848.266933][T16176] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2473'. [ 849.197640][ T23] usb 10-1: device descriptor read/64, error -71 [ 849.320013][ T23] usb usb10-port1: attempt power cycle [ 849.650904][T11330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.881904][T15900] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.063462][ T23] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 850.110585][ T23] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.325764][ T23] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 850.335897][ T23] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 850.345427][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.356089][ T23] usb 10-1: config 0 descriptor?? [ 850.370664][T16189] netlink: 'syz.7.2479': attribute type 8 has an invalid length. [ 851.109115][T16207] wg2 speed is unknown, defaulting to 1000 [ 851.877703][T11233] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 851.985698][T16231] loop7: detected capacity change from 0 to 1024 [ 851.993286][T16231] EXT4-fs: quotafile must be on filesystem root [ 852.071052][T11233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.096482][T11233] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 852.108206][T13178] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 852.146649][T11233] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 852.193029][T11233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.244210][T11233] usb 1-1: config 0 descriptor?? [ 852.709310][ T23] usb 10-1: USB disconnect, device number 26 [ 852.788440][T16240] netlink: 'syz.3.2490': attribute type 8 has an invalid length. [ 853.836085][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.838759][T16268] loop3: detected capacity change from 0 to 128 [ 853.843872][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.243512][T16091] usb 1-1: USB disconnect, device number 18 [ 855.398144][T16262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.535267][T16262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.726055][T16262] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.735212][T16262] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.744909][T16262] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.754293][T16262] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.868006][T16091] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 857.053642][T16304] loop9: detected capacity change from 0 to 1024 [ 857.068830][T16304] EXT4-fs: quotafile must be on filesystem root [ 857.221338][T16091] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 857.254628][T16091] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 857.275866][T16091] usb 8-1: config 0 interface 0 has no altsetting 0 [ 857.294537][T16091] usb 8-1: New USB device found, idVendor=056a, idProduct=22e3, bcdDevice= 0.00 [ 857.317399][T16091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.376160][T16091] usb 8-1: config 0 descriptor?? [ 857.413344][T16091] usbhid 8-1:0.0: fixing wrong optional hid class descriptors count [ 857.528245][T16313] netlink: 'syz.3.2511': attribute type 8 has an invalid length. [ 857.657972][ T5768] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 857.835411][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.856464][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.874582][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.887948][ T5768] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.909554][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.911701][ T5768] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 857.937813][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.958207][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.965141][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.967747][ T5768] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 857.992541][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 857.996703][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.031600][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.052175][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.052549][ T5768] usb 1-1: config 0 descriptor?? [ 858.074680][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.099060][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.123702][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.147187][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.173296][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.193750][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.217706][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.251036][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.267601][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.274631][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.303367][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.348367][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.363250][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.387622][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.399865][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.407046][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.440490][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.447511][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.474544][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.496318][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.507638][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.527918][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.534839][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.571543][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.607705][T16091] wacom 0003:056A:22E3.0008: unknown main item tag 0x0 [ 858.617975][T16091] wacom 0003:056A:22E3.0008: Unknown device_type for 'HID 056a:22e3'. Ignoring. [ 858.651710][T16091] usb 8-1: USB disconnect, device number 3 [ 860.001331][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2519'. [ 860.021130][T16357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.051664][T16339] loop3: detected capacity change from 0 to 40427 [ 860.086452][T16339] F2FS-fs (loop3): invalid crc value [ 860.098042][T16339] F2FS-fs (loop3): Found nat_bits in checkpoint [ 860.177885][T16339] F2FS-fs (loop3): Start checkpoint disabled! [ 860.274161][ T5832] usb 1-1: USB disconnect, device number 19 [ 860.317856][T16339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 860.371835][T16360] netlink: 'syz.7.2520': attribute type 8 has an invalid length. [ 860.442704][T16339] ------------[ cut here ]------------ [ 860.448831][T16339] kernel BUG at fs/f2fs/segment.c:3481! [ 860.489995][T16339] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 860.496487][T16339] CPU: 0 PID: 16339 Comm: syz.3.2514 Not tainted syzkaller #0 [ 860.504062][T16339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 860.514264][T16339] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0 [ 860.520985][T16339] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 da 47 c1 fd 48 c7 c7 70 03 70 8d 4c 89 f6 e8 6b 9f 97 00 e9 a4 eb ff ff e8 c1 47 c1 fd <0f> 0b e8 ba 47 c1 fd 0f 0b e8 b3 47 c1 fd 0f 0b e8 ac 47 c1 fd 0f [ 860.540617][T16339] RSP: 0018:ffffc9000499f3f0 EFLAGS: 00010283 [ 860.546706][T16339] RAX: ffffffff83c5dfdf RBX: 0000000000000203 RCX: 0000000000080000 [ 860.554788][T16339] RDX: ffffc9000cce9000 RSI: 00000000000371c6 RDI: 00000000000371c7 [ 860.562779][T16339] RBP: 0000000000000200 R08: ffff888063c2445f R09: 1ffff1100c78488b [ 860.570772][T16339] R10: dffffc0000000000 R11: ffffed100c78488c R12: 1ffff92000933ef0 [ 860.578763][T16339] R13: 0000000000000000 R14: 0000000000001a03 R15: dffffc0000000000 [ 860.586759][T16339] FS: 00007f16a9eb46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 860.595728][T16339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.602331][T16339] CR2: 0000200000000140 CR3: 0000000063c4e000 CR4: 00000000003506f0 [ 860.610366][T16339] Call Trace: [ 860.613692][T16339] [ 860.616647][T16339] ? f2fs_mark_inode_dirty_sync+0x120/0x1f0 [ 860.622584][T16339] f2fs_map_blocks+0x1191/0x40f0 [ 860.627661][T16339] ? f2fs_get_block_locked+0xe0/0xe0 [ 860.632984][T16339] ? __up_read+0x2b6/0x6b0 [ 860.637483][T16339] ? up_write+0x1c3/0x410 [ 860.641844][T16339] ? f2fs_allocate_pinning_section+0x1af/0x590 [ 860.648040][T16339] f2fs_expand_inode_data+0x67a/0xa10 [ 860.653455][T16339] ? f2fs_insert_range+0x470/0x470 [ 860.658599][T16339] ? __mnt_drop_write_file+0xc3/0x100 [ 860.664328][T16339] ? file_modified_flags+0x267/0x2a0 [ 860.669688][T16339] f2fs_fallocate+0x416/0x890 [ 860.674476][T16339] vfs_fallocate+0x58e/0x700 [ 860.679224][T16339] do_vfs_ioctl+0x19f6/0x1cc0 [ 860.683942][T16339] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 860.689612][T16339] ? tomoyo_path_number_perm+0x217/0x620 [ 860.695314][T16339] ? __lock_acquire+0x7d40/0x7d40 [ 860.700361][T16339] ? slab_free_freelist_hook+0x130/0x1a0 [ 860.706024][T16339] ? tomoyo_path_number_perm+0x5b4/0x620 [ 860.711685][T16339] ? tomoyo_path_number_perm+0x217/0x620 [ 860.717347][T16339] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 860.722858][T16339] ? __fget_files+0x28/0x4b0 [ 860.727484][T16339] ? __fget_files+0x28/0x4b0 [ 860.732101][T16339] ? bpf_lsm_file_ioctl+0x9/0x10 [ 860.737092][T16339] ? security_file_ioctl+0x80/0xa0 [ 860.742221][T16339] __se_sys_ioctl+0x83/0x170 [ 860.746837][T16339] do_syscall_64+0x55/0xb0 [ 860.751332][T16339] ? clear_bhb_loop+0x40/0x90 [ 860.756129][T16339] ? clear_bhb_loop+0x40/0x90 [ 860.760841][T16339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.766795][T16339] RIP: 0033:0x7f16a8f9ce59 [ 860.771243][T16339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.790870][T16339] RSP: 002b:00007f16a9eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.799308][T16339] RAX: ffffffffffffffda RBX: 00007f16a9215fa0 RCX: 00007f16a8f9ce59 [ 860.807303][T16339] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000005 [ 860.815294][T16339] RBP: 00007f16a9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 860.823289][T16339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.831432][T16339] R13: 00007f16a9216038 R14: 00007f16a9215fa0 R15: 00007ffe706a11c8 [ 860.839428][T16339] [ 860.842449][T16339] Modules linked in: [ 860.850572][T16339] ---[ end trace 0000000000000000 ]--- [ 860.856080][T16339] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0 [ 860.863036][T16339] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 da 47 c1 fd 48 c7 c7 70 03 70 8d 4c 89 f6 e8 6b 9f 97 00 e9 a4 eb ff ff e8 c1 47 c1 fd <0f> 0b e8 ba 47 c1 fd 0f 0b e8 b3 47 c1 fd 0f 0b e8 ac 47 c1 fd 0f [ 860.877816][ T5768] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 860.884142][T16339] RSP: 0018:ffffc9000499f3f0 EFLAGS: 00010283 [ 860.896578][T16339] RAX: ffffffff83c5dfdf RBX: 0000000000000203 RCX: 0000000000080000 [ 860.904622][T16339] RDX: ffffc9000cce9000 RSI: 00000000000371c6 RDI: 00000000000371c7 [ 860.912856][T16339] RBP: 0000000000000200 R08: ffff888063c2445f R09: 1ffff1100c78488b [ 860.920892][T16339] R10: dffffc0000000000 R11: ffffed100c78488c R12: 1ffff92000933ef0 [ 860.928938][T16339] R13: 0000000000000000 R14: 0000000000001a03 R15: dffffc0000000000 [ 860.936932][T16339] FS: 00007f16a9eb46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 860.945937][T16339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.952595][T16339] CR2: 0000200000000140 CR3: 0000000063c4e000 CR4: 00000000003506f0 [ 860.961247][T16339] Kernel panic - not syncing: Fatal exception [ 860.967618][T16339] Kernel Offset: disabled [ 860.971943][T16339] Rebooting in 86400 seconds..