last executing test programs: 23m14.172496902s ago: executing program 32 (id=531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000000)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="27030200dc0f14000e0000000025c1020000ff1b775ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000bc0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 17m29.626733929s ago: executing program 33 (id=1523): syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)={0x3a}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffdcf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) 17m29.413928791s ago: executing program 34 (id=1522): mkdirat(0xffffffffffffffff, 0x0, 0x1ed) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB]) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000700), 0x1, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x80000000, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000280)={0x3, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f0000000580)="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", 0x165, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r4}, [@crypt={0x0, 0x1000, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) inotify_init1(0xc0800) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f0000000d00)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_REMOVE(r3, 0xc138fd04, &(0x7f0000000e80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000fc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24200, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) 17m29.318560281s ago: executing program 35 (id=1515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000f00)={0x18, &(0x7f0000000d00)={0x40, 0x21, 0x5c, {0x5c, 0xd, "a5ef6f8457ede8844ec240377f1725514e5d2d10d849d529894b6ed8b25b2e70cc4f23e0cd26a3095824140a3df52e9222e1b330f9bf33fa51084c681f858f0f323b2a933744a54189d754607b2272c9f01722a317c3dcbba96d"}}, &(0x7f0000000d80)={0x0, 0x3, 0x94, @string={0x94, 0x3, "7a64e588e7257e6761aba53bc71dbff47abe5a299d10bc5980c32e968c737e79407923dfa4728c33a95ac8543d56c373484f07646a9c6c034b7cac5ce53f137baa6c32378416bc35a5ce4319c13b9e18d4044a3db91854b4d71d375fd2dc4bdbd3887cc6af3552c8223a06690c09764394ca5b5f334a37cf3531a60ba611eabbfabe5e4e4c40986869d6cd36dcedd254cb41"}}, &(0x7f0000000e40)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x8, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0x0, 0x9, [0xc000, 0xf0, 0x7]}]}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x8, 0x2, "2e17311d", "fc128e4f"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7e, 0x0, 0x34, 0x50, 0x3, 0xb88, 0xab}}}, &(0x7f0000001380)={0x44, &(0x7f0000000f40)={0x40, 0x17, 0x5b, "0d3907212076ef080690528cf1e528273848889aebb2ebccf3b1c84f8c000210b1e46abfaad2f252d790730d1498f1d074b3950f98c8da486458c2ea9074f681ccecabbea6b597613cb28081b370f61e1f3c87e2882858329beae6"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001080)={0x20, 0x0, 0x8, {0x100, 0x8, [0xf00]}}, &(0x7f00000010c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001100)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001140)={0x40, 0xb, 0x2, "fff8"}, &(0x7f0000001180)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000011c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000001200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000001240)={0x40, 0x19, 0x2, "86b7"}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000012c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001300)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000001340)={0x40, 0x21, 0xfc85, 0x5}}) mount(&(0x7f0000000880)=@nullb, &(0x7f00000008c0)='./cgroup\x00', &(0x7f0000000900)='befs\x00', 0x200000, 0x0) r2 = dup2(r0, r0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8d66}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8841) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4001090) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000300)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x314, 0x0, 0x11, 0x148, 0x13c, 0x10, 0x280, 0x2a8, 0x2a8, 0x280, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'lo\x00', {}, {}, 0x1d, 0x1}, 0x10, 0xd4, 0x13c, 0x1c, {}, [@common=@unspec=@state={{0x24}, {0x800000}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xcd, 0x9, 0x8, 'snmp_trap\x00', 'syz0\x00', {0x5}}}}, {{@ip={@private=0xa010100, @multicast1, 0xff000000, 0xff, 'dvmrp1\x00', 'veth0\x00', {}, {0xff}, 0x1, 0x1, 0x8}, 0x0, 0xe4, 0x144, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6], 0x7, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x5, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x370) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8805) 17m29.178080886s ago: executing program 36 (id=1519): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='dev/ttyUSB0\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x2, 0xb, 0x0, 0x1}, 0x47, [0xa, 0x2, 0x393ceec7, 0x78b7, 0x1, 0x1, 0xcd6c, 0x5, 0xf, 0x7000, 0x10000, 0x8, 0xf, 0x8, 0x5, 0x0, 0x5, 0x5, 0x0, 0x8, 0x7fffffff, 0xb1c, 0x5, 0xfffffffc, 0x0, 0x6, 0x91, 0x800, 0x80000001, 0x80, 0x401, 0x80, 0x3, 0x3, 0x2, 0x6, 0xcbbd, 0x5, 0x7ff, 0x3, 0x5, 0x3, 0x3, 0x10001, 0xc, 0x7, 0x10000, 0x5, 0x10001, 0x1000, 0x3, 0x401, 0x1, 0xdec, 0x7, 0x3c0, 0xfffffff6, 0x8, 0x7, 0x7, 0xdec, 0x809, 0x1, 0xfff], [0x9, 0x2, 0x1, 0x3, 0x7, 0x8, 0x1, 0x80, 0x2, 0x299, 0xb6f, 0x8, 0x200, 0xedc8, 0x5, 0xac, 0x5, 0x0, 0x100, 0xffffff01, 0x8, 0x5, 0x7, 0xa, 0x1, 0xff, 0x3, 0x7, 0xd4c, 0x23b, 0x9, 0x2, 0x200, 0x0, 0x7, 0x0, 0x5, 0xc69d, 0x101, 0x80000000, 0x7, 0xf6, 0x4, 0x64d, 0x1, 0x5, 0xfff, 0x9, 0xc2, 0x10001, 0x1032800, 0xff, 0xb, 0x751, 0x3, 0xa, 0x3, 0xe0000000, 0x8, 0x3, 0x6, 0x4, 0x8001, 0x80000001], [0x3, 0xfffffff7, 0x3, 0x53, 0x8, 0x35, 0x3, 0x7, 0x1ff, 0x5, 0x0, 0xfff, 0x9, 0x8, 0x3, 0x0, 0x6, 0x4, 0xfffffffb, 0x7, 0xb, 0x2, 0x3, 0x0, 0x4, 0x8001, 0x80000000, 0x5, 0x1, 0x22bc48d0, 0x3, 0x6, 0x683, 0x6, 0x1, 0x4, 0x7, 0x3, 0x7, 0x6, 0x2, 0x7, 0x40, 0x9, 0x3, 0xffffff81, 0x63, 0x5, 0x7, 0x1, 0x8, 0x2, 0x75, 0x9, 0xd, 0x8001, 0x7fff, 0x8, 0x7, 0x9, 0x18, 0x20000, 0x400, 0x9], [0x5, 0xff, 0x3, 0x0, 0x8001, 0x7, 0x1, 0x7, 0xe, 0x1, 0x81, 0x3, 0x3, 0x9, 0xffff, 0x2, 0x2b57, 0x6, 0xa5, 0x356d, 0x9, 0xb2a3, 0x8, 0x4, 0x4, 0xfffffffb, 0xfffffffc, 0x7, 0x80000000, 0x7fffffff, 0xffff0000, 0x1000, 0x2, 0x2, 0x7, 0xfffffffd, 0x1, 0xffffffff, 0xb1a3, 0x2, 0x8, 0x1, 0x1, 0x1, 0x6, 0x401, 0x34f, 0x33a, 0xe7d, 0x78b6, 0x80000000, 0xe2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xffff, 0xff, 0x200008, 0x1600, 0x6, 0x0, 0xa]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) write(r3, &(0x7f0000000980)="3a240f2104bf8d691ea8f92beb67fa13424d56c23c7a7055a370d835c2bd87216ec1747e5425d83adc467d3e360da1f869d8a98c0c51619933d637db801cd596786abf23179bf75c749491e544467f59a536360ab99f67942b3f229ca744e429549e816cd44b03bd1c8432faddcae40633ad37eb", 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b4050000dfffffff6b10692f5ce473aa85fc0c00000100000000001600000000"], &(0x7f0000000b00)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0x85}, 0x52) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2282, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000d00)={0x1, 0x0, [{0x40000010, 0x0, 0x4}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000f40)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000fc0)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001040)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000001080)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001100)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000001140)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000001180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000001200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000001480)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r14, 0x0, 0x488, &(0x7f0000001500)={{0x3b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x7, 0x1, 'lblc\x00', 0x8, 0x3, 0x76}, {@remote, 0x4e21, 0x1000, 0x5, 0x4, 0x97}}, 0x44) 11m36.401579262s ago: executing program 5 (id=2235): openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/failed_transaction_log\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x200008, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f00000003c0)="$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") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$mtd(&(0x7f0000000780), 0x0, 0x8000) socketpair(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = gettid() tkill(r1, 0x21) 11m36.102774483s ago: executing program 5 (id=2242): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)=0xc) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000005145f0625bd7000fddb0300000000000000000005000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x4000ec0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_io_uring_setup(0xf03, &(0x7f00000002c0)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000400)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000480)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000500)=0x1) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000540)={0x41d}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000640), 0x0) r11 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x2a000, 0x0) ftruncate(r11, 0x3) 11m35.725695832s ago: executing program 5 (id=2244): socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x46102, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000ec0)={0x3, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400fb0c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000040008"], 0x98}, 0x1, 0x7}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x2a, 0x0, 0x0) 11m33.766594364s ago: executing program 5 (id=2254): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x210000, &(0x7f0000000640), 0x1, 0x56f, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001400)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001440)='./bus\x00', &(0x7f0000001480), 0x8, &(0x7f00000014c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000001500)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000001540)='./file1\x00', &(0x7f0000001580), 0x0, 0x0, 0x3) 11m33.331811379s ago: executing program 5 (id=2257): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000340)={0x1, r2}) ioctl$int_in(r1, 0x5452, &(0x7f0000000380)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 11m29.838803329s ago: executing program 5 (id=2271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 11m29.333777851s ago: executing program 37 (id=2271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 10m58.474645106s ago: executing program 6 (id=2352): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)=0xc) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000005145f0625bd7000fddb0300000000000000000005000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x4000ec0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_io_uring_setup(0xf03, &(0x7f00000002c0)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000400)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000480)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000500)=0x1) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000540)={0x41d}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000640), &(0x7f0000000680)=0x4) r11 = openat$ptp0(0xffffff9c, 0x0, 0x2a000, 0x0) ftruncate(r11, 0x3) 10m57.879995428s ago: executing program 6 (id=2355): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) syz_emit_ethernet(0x45, &(0x7f0000000e80)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "4f4000384000000000000000010000010000000100010000010000010000000400000000017705dc73797a5f74756e0000000000000000"}}}, 0x0) 10m57.700041386s ago: executing program 6 (id=2356): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000340)={0x1, r2}) ioctl$int_in(r1, 0x5452, &(0x7f0000000380)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 10m57.410774266s ago: executing program 6 (id=2357): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x210000, &(0x7f0000000640), 0x1, 0x56f, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001400)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001440)='./bus\x00', &(0x7f0000001480), 0x8, &(0x7f00000014c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$incfs_metadata(&(0x7f0000001540)='./file1\x00', &(0x7f0000001580), 0x0, 0x0, 0x3) 10m56.9842665s ago: executing program 6 (id=2359): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000340)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r4}, [@crypt={0x0, 0x1000, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f0000000d00)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_REMOVE(r3, 0xc138fd04, &(0x7f0000000e80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000fc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24200, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) 9m23.050197323s ago: executing program 3 (id=2562): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x210000, &(0x7f0000000640), 0x1, 0x56f, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001400)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001440)='./bus\x00', &(0x7f0000001480), 0x8, &(0x7f00000014c0)) chdir(&(0x7f0000001500)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000001540)='./file1\x00', &(0x7f0000001580), 0x0, 0x0, 0x3) 9m20.379596749s ago: executing program 3 (id=2566): syz_mount_image$btrfs(&(0x7f0000001500), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9m16.080170833s ago: executing program 3 (id=2574): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x210000, &(0x7f0000000640), 0x1, 0x56f, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001400)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001440)='./bus\x00', &(0x7f0000001480), 0x8, &(0x7f00000014c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000001500)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000001540)='./file1\x00', &(0x7f0000001580), 0x0, 0x0, 0x3) 9m15.2342178s ago: executing program 3 (id=2577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9m4.082457071s ago: executing program 3 (id=2597): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0xcde, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) 9m2.743366349s ago: executing program 39 (id=2597): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0xcde, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) 8m31.798418523s ago: executing program 7 (id=2665): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000140)=0x8000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) unshare(0x2000000) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xa0}}, 0x0) syz_clone3(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={0x0}) 8m30.743243292s ago: executing program 7 (id=2666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000800)=ANY=[], 0x0}, 0x94) syz_ublk_setup_io_uring(0x1e, &(0x7f00000004c0)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 8m29.762781713s ago: executing program 7 (id=2668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = socket(0x28, 0x4, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0xfff9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}}, 0x20000890) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x10, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_open_dev$hidraw(&(0x7f0000000880), 0x0, 0x14a042) write(r3, &(0x7f00000008c0)="537914249eb448ddd96a", 0xffda) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70800a200000000000007020000f8ffffffb74700000800000e00040000020000008500000082000000240300000100000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000007a150000100000018560000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006c040000850000000600000085100000faffffff852000000400000018000000070000000000000007000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x5, 0x6, 0x7}, {0x0, 0x3, 0x7, 0x6}], 0x10, 0x3}, 0x94) write(0xffffffffffffffff, &(0x7f0000000200)='10000', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r6, &(0x7f0000008b80)='0', 0x1) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000008bc0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000008c00)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) 8m28.288391545s ago: executing program 7 (id=2674): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x841e, &(0x7f0000000c00)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000001b40), &(0x7f0000001b80)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000001bc0)) mount$overlay(0x0, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x4008, &(0x7f0000001c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000001cc0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./sys\x00', 0x188100, 0x85) lseek(r0, 0x80000000, 0x0) 8m26.969118991s ago: executing program 7 (id=2677): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@bsdgroups}, {@sysvgroups}, {@barrier}, {@noload}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x460, &(0x7f00000003c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) getpgid(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x6) setrlimit(0xa, &(0x7f0000000a80)={0x101, 0x5cf2f046}) mount(0x0, 0x0, 0x0, 0x100018, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file2\x00', 0x42, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(0x0, 0x0) 8m24.758904579s ago: executing program 7 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 8m24.133344344s ago: executing program 40 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) 7m54.250682158s ago: executing program 8 (id=2726): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) unshare(0x20000000) 7m53.448319941s ago: executing program 8 (id=2727): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = socket(0x28, 0x4, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0xfff9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}}, 0x20000890) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x10, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b704000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_open_dev$hidraw(&(0x7f0000000880), 0x0, 0x14a042) write(r3, &(0x7f00000008c0)="537914249eb448ddd96a", 0xffda) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70800a200000000000007020000f8ffffffb74700000800000e00040000020000008500000082000000240300000100000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000007a150000100000018560000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006c040000850000000600000085100000faffffff852000000400000018000000070000000000000007000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x5, 0x6, 0x7}, {0x0, 0x3, 0x7, 0x6}], 0x10, 0x3}, 0x94) write(0xffffffffffffffff, &(0x7f0000000200)='10000', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r6, &(0x7f0000008b80)='0', 0x1) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000008bc0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000008c00)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) 7m52.349241194s ago: executing program 8 (id=2728): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000340)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000005c0)={0x0, &(0x7f0000000600)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) 7m51.51124311s ago: executing program 8 (id=2731): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x841e, &(0x7f0000000c00)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c40)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000001b40), &(0x7f0000001b80)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000001bc0)) mount$overlay(0x0, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x4008, &(0x7f0000001c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000001cc0)='./file0\x00') lseek(0xffffffffffffffff, 0x80000000, 0x0) 7m49.322747546s ago: executing program 8 (id=2735): syz_mount_image$btrfs(&(0x7f0000001500), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$eJzs3U9oVdkdB/DzEqOJFpMWEVs3itCdJbho0C4aKtJW0b4aEBSapFJbbRCCC6G7R/8sSqGNlrbpRiSb6iJtpC1101YXKjjizCAjI7OYcXAWrkacf6sZhrx7z8t753rznhmdOPr5SHLfub97zj3vcRfv+8y5LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAI4c7RV6ZrvW+PldV3DI3uu3Bg78mZ2fV3p2+u6wuhUt9fyetj3/ne/p+OjO3tjR3Gf5htBwbKhsy6vpU1VrbsnO/X+vPjEEJPMkB3vr3S3dS3kp4gnCgOuKiZoeM3Np7bderM0dqRwb6Hd4pPnXm9yz2B5ZJfV/cWrqXh+u+u5IhGu+nSq7Rcoln/9IL7XJ4EAPBYBqv1TePtaP4Wt9GupfWkPZy0p5J2fIcw1dxYimzclWXz3JTWl2mew1lUWFU6z6Sev/6NdjXtn7STqPEY82w9NI80vWXznEzqyzVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfJL//1678cPvj7/5XVdwyN7rtwYO/Jmdn1d6dvrusLYaC+v5KVK7/47ug3dh/aOXSq+tHt2e3/3tOd94vbFU0Hh9fjg+39IRxuqtyLw95fG0K1tVBvhr8WC8fqD74fCwAAADxPvlr/3dVoZ3Gwp6VdqafJSv1flIXFmaHjNzae23XqzNHakcG+h3eWPl61ZLzhR47XaA8s/FSagnGMv+l4C/V46InCOItLR0zz/Fe+eXXz2D+2bS3rX8j/A4vn//jKyf8AAAB8FvJ/Os7i2uX/iQ/Xrf/byOkvlfUv5P9NLacs5P8445j/u8LS8j8AAAA8y552/h8ujLO4dvn/ty9N/+S/uw/9s6x/If8Pdpb/VzRPO+68ESc80R/CYLupAwAAACXi/7svfLQQ83r2yUGa1ydHj/1hy5aLM2XjFfL/cGf5v+eJPzMAAABgqb7+o9rHO1+9NltWL+T/amf5f9VTnzkAAADQqftbPxi5+IOvXSirF/L/eGf5f3W+zVc+ZJ2uxr9C+GN/CL3zDyazwrUw9e1GAQAAAHhCYk6/deX8O6dre06UHVfI/5OL3/8/3ukgrv9vuf9fYf1/UyG769+33BgAAACAF1FxPX+8PX72zQVl37/f6fr/jbt+fr17//s/Kzt/If/XOsv/3c3bJ/n9fwAAALAEX7Tv/ztYGGdx7e7/f/vyJ69NTL75p7L+hfw/1Vn+j9s1zU/vUnx9ftUfwob5B/ndBM/H000khbmepkL2wic9RmKPvDC3qqlQN5n02NYfwub5B7Wk8OVYmEoKD9bmhbNJ4eVYyK+HRuHvSeFSvNL+vDafblr4TyzkCyzm4gqKNY0lEUmP98p6zBce2eONxskBAABeKDE851m2p7UZ0ig7V2l3wOp2B3S1O6C73QErkgPSA8v2h/HWQtz/8N3L128d+83/Q4lC/j/bWf6PL8XKbFO2/j/E9f/59xo21v+Px8JAUpiLhWp6x4BqPEcWdn8XzzFQzXs82NAoAAAAwHMtfi7QvczzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FP27j+2rqs+APixY/vFjmO7tKOhIDDtaNppdRxHNDSLhEuFiloB7pYxja4laeN2XlwSkhTqirVpi6aNqqJZO4HEUF02RGCUhaKOsrE1YzRoI2KsjIrfIxuIQWFVB2qYqqnT873n+b5zfftefjiNu8/nD7/z3vf8vO+H77n3vvMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+f3jx2e//40cfvnJPVXzD+qvf9Km3vPGdH37gxYc/8OUzekOYmHu8Iwt3zFx69chlb71k/d6JI48/cNFDl/fk5fJ4WFH/05nfeU+s9fsrQ/hMRwhdaeCC/izQnd/vj/W9rD+E08J8oFFisi8rkTYcHu0NYTbMBxpVfbY3hP5CYNNjn3/krnri3t4QXhVCqKVtfKeWtdGbBs7tyQJ9aWB7VxY48mymEXi4MwvAcYtvhsaLfv9Ec4ahhctVvP66T1jHnl/p8JbFxFB1vp9evMidKuhJH5g4rqetVB2LovT2OODdtgTebaXtfLenrbgjle+hPDsfqoXOrZPXbblxend8pDOMjCyrqmmRnudvPPXua48mvWReh7EDQyfkdbhp44Z7vvaF8UMP7r3vyK3ru2eOt5tfL2zSYnqx1UL+mlsyz2M07vNkCbz9SntJw3a6Qgh/Pn7vXb+4Zc3Gqnhp/j/03PP/+HKOt51NuWOtzwxkc/P4SH9MPDmQzc0BAABgyVgKR01/8vQfnvmhlx7+z6r6SvP/4fbO/8dT/vlkPhvtgRDG5xJ3DIawau7xLPCx2Nw1gyG8ci410Ry4OAkcCOElc4nzG1UlJZbHEsNJ4IcDeWA8CRyMgYkk8JEYuDsJvCcG9ieBa2PgQBJ4XQyEqeZx/MpAPo62A70xsDnbiPvjVQg/G4itJdvqW42qAAAATpB8dtjdfLdwrcPxZojTy/29rTLEK7ArM9SSGtIZbGNaVVlDV6saOlvV0Bj3nucefqnmjlY1ly7D6GjO8BdPfH/f+z5908dDhdL8f/S55/+1BTrSUTr/H8IVc39j7s48Mt2Ib55oygAAAAAchyfe9eh57+05531V8dL8f7y96//jMZFlhczhUDwMsW0whNHmQFbtr5UD2VnvFXkAAAAAloLG+fjGufCp/Da7RDudT5fzTxxl/njif3zB/Bev+O3fuGXoveNV/S3N/yfau/6/r/k268TB2It7BkNYXgh8MfayHpgzHAPfe21zIB//wbgB7oxV5RcmNKq6M5bYHAOjSWC2qsRXGiVWNQfyJ6vR+B2NcUzlJQoBAAAAOOni4YB4Xj5e/z/7V89M/2jVS6erypXm/5uP7vr/uXlw6fL+6RUhrOkKYVn6xYBDfdnCgDHQ35En/rYvq2tZWtVtfSFsrA8srepwvv5/V7rG4GO9WVUxsOrsfU+dW0/8WW8Ia4qBx6+8/9X1xO4k0Gj8N3tDeEV9tGnjDy3PGu9OG3//8hBeXgg0qrpmeQj1xnrSqj5fy3/HIK3qL2shnF4INKq6sBbCca8DC8DzJf4r3Vp8cNfMzdu2TE9P7lzERDyG3xuum5qeHLl2+/TWWkWftiZ9blrG6LbymNr95ZtvxyWKrto32E668T3B0WJb+XH80oWD+f24L9Q9N86x7qa769Ihn3dOuYlQ2JOqGnLnIg+5r1jJ/JNYqj/m7wkrwvIbd03uHLlpy+7dO9dmf9vNPpb9jaeZsm21Nt1WfQv1rY2XR+VqWYlj3Vari5Ws2X3DjjW7Zm6+YOqGLddPXj/59rH168deM3bRunUXrqmPajT722KoqxeqOhnqs/e3Oa4TONSzugqVnIxPDQkJiaWW2PKJ37rm8O2/f33Vx09p/r/juef/8VMnfvLn6zNUnf8fiqf58wsQGqf5N8fAbLvn/4eqzuY3LgwYTgJ7YmCP0/wAAAC8MMTDkfFoZjwqfc41s/99+nWdP64qV5r/72nv+/8naP3/xtL1l1Ut839+LDFatf5/usx/Y/3/PVXr/6fL/DfW/599Htb/v7ERSDbJz6z/DwAAvBCcvPX/Wy7vn/5AQClDy+X90x8IKGVouYx/uz8QcNTr/z924aUPTm498vNQoTT/v7u9+b+F+wEAAODU8cFDXVt/effDd1XFS/P/2fbm/yd//b9Qdf3/cFVgomphQOv/AQAAsERVrf/30Rf1Xj+780P9VeVK8//97c3/42UXnU25Y63PDGRr2oV0TbsnBxpfGQAAAICloTOMjHS3mbdpZdSLj73Nb8SlQJ8jXfS/v/ovq4de8+Obquorzf8PtDf/b/pexqaNG+752hfGDz3z4N77jty6vntm/vw/AAAAsHjaPS4BAAAAAAAAAAAAAAA8/z74pdV/d+P2b15UFS99/z9cMfd41ff/4+/+xe8XnNGUO9baev2//P6myz85M7dk4aGBEM4pBrbdvu20kP82/+pi4JGrzj+znrg9LfG5777uB/XE29LAGy540dP1xMYksDkukviSNBB/VfHplUkgLq/41TQQt8f+NNCTB/5oZTaOjnRb/ag/21Yd6bb6Zn8Ig4VAY1t9pj9royMd4L1JoDHAd6SBOMA35YHOtFefXJH1Kgb6Y9H7VmS9AgDglBX3ArvDdVPTk6NxFz7entXVfBs1LVl2W7najjab/3ZcmuyqfYPtpJel+6LzvzXeHWr1Iawt7a4Ws3TMjfLE1NJi051RMeRWq711VpRLHe2m66keUW82opFrt09v7W458HWts4x1tcyytjTZKWbpnNukbdTSRl/aGFGb26aNLsf7nWFkZFmSa0MMDoUmrV4R7X5fv7jOX9WroJjn3bt7n5g64/APq+orzf+H2pv/14rjejr/MYA98Zf17hgMYVWbIwIAAADa9a2/+frY9g/+wSfS24+ffdbEn7zrX/+hqlxp/j/c3vw/HsHKTwVnRzsOxN//b8z/h7LAx2Jz1wyG8Mq51EQskf2g/mWxxGgW+Fg8YHJ+LLF5ormq5TGwPwn8cCAPHEgCB2MgP0qxL+SHcvYOhPDqudQVzSV2xBJDSeDNMTCcBEZiYDQJrIyB8STwk5V5YCIJfCkGwlTztvr0SkdXAACAY5DPs7qb74Z0nre/q1WGjlYZ+lpl6GyVodYqQ9Uo4v0HY4bu5OKVjkKm7rTW3qSWUob4Y/hH3a9ShvCV5pxpwVLT8fqDxvUGHc0Z/mnXhx6+r3/1aKhQmv+Ptjf/72u+zVo/GOf/87//lwW+GLt3T7x0fDgGvvfa5kB+YOBgnOze2ahqIi+Rj+XOWGI8BoaTwI4YGE8Cm6/IA7NnNgfymXaj8TsajU/lJQoBAAAAOOniAYJ4mCbO/3tff94tv/SKvc9WlSvN/8fbm//H9lYUG3tPrPX7K0P4TMd8bxqBC/qzQDyO0R+/Hv+y/hBOKxzgaJSY7MtK9CQNh0d7s2+o96RVfbY3W2Mg3t/02OcfuaueuLc3hFcVjr402vhOLWujNw2c25MF+tLA9q4sEI/8NAIPd2YBOG6No4LxBZVf6tIwtHC5itffC+U3QdPhlY6BLpBvoe9cLZZa+kB+TLXh6J62UnUsitLb44B321J8tw15txV3pPI9lMIeYC10bp28bsuN07vjI8VvspYs0vNc/JZqO+kT8Drcc+y9ba2WdmA0+fioOAe38OuwI1a3aeOGe772hfFDD+6978it67tn2u5GhfhF4S8+9P6hrxc272Krhfw1t+Q+TyZ8nizFfwPDnrYQwsX3f+nKH7zkifav/59ob/7fldzO+Z+4MXcNhnBeYeMeipv/ksHsc7AQyD4lTy8HslPu/zFQ+ckJAAAAJ1rjcEfjeMFUfptdEJ7Ok8v5J44yfzxeMb5g/nb7/Tv//vc//epb+qer4qX5/+bnnv8vT7rp/L/z/ywS5/8XdKofil6ePrDnuA5Fl6pjUTj/v6BT/d3m/P+CnP93/n8hzv+34Pz/gk71p620l7TDTlcI4YGP33Drf/3isg1V8dL8f0d783/r/y28aF9j/b/NVev/7aha/2+P9f8AAIBFVbHQXDrPK63eV8qQrt5XytBygcCWSwxa/++o1//beOfB1feuev27QoXS/H9Pe/P/+HJYUWx9qaz/N3xFRVV3x8AOCwMCAABwKqo6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDza/aS0w+8+dl/+15VfMP6q9/0qbe88Z0ffuDFhz/w5TN6Q5iae7wjC3fMXHr1yGVvvWT93okjjz9w0UOX1/Jy3fntS5tyx1qfGQhhtvBIf0w8OVC/Mx/YdPknZ7rqiUMDIZxTDGy7fdtp9cRHBkJYXQw8ctX5Z9YTt6clPvfd1/2gnnhbGnjDBS96up7YmAc60u7+6cqsux1pd+9aGcJgIdDo7u+tbK6q0caleaAzbeOj/VkbMdAfi36gP2sjBqZjianlIazpCmFZWtU/1rKqlqVV/XUtq2pZWtUttRA2hhC60qq+25NV1ZWO/J97sqpiYNXZ+546t56Y7QlhTTHw+JX3v7qeeEcSaDT+6z0hvKL+kkkbf7A7a7w7bfze7hBeHkLoSUv8vCsr0ZOWONwVwumFQKPx3+0KYSbwghA/fLYWH9w1c/O2LdPTkzsXMdGTt9Ubrpuanhy5dvv01lrSpyodhfSztx372L/91LuvnUtctW+wnXRXXq57rstj3U13153qvY/96itWMv98lOqP+XvCirD8xl2TO0du2rJ798612d92s49lf5fl0WxbrV0q22p1sZI1u2/YsWbXzM0XTN2w5frJ6yffPrZ+/dhrxi5at+7CNfVRjWZ/T8RQ7z/5Qz2rq1DJyfgAkJCQWGqJzqZPt9FT/YO8tKM/39HuUJv7gC5NK4pZOuZGeSIGffExjDZ31PspLUe0tjRxKGUZa51lXWkyMZ+lN8syt19XmhwWa+qc26TxfmcYGVlWtR2Gmu8WN+9Pj2PzfiNuujbTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/xw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3D6NkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//9yY1uM=") add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 7m44.582850805s ago: executing program 8 (id=2743): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x841e, &(0x7f0000000c00)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c40)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000001b40), &(0x7f0000001b80)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000001bc0)) mount$overlay(0x0, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x4008, &(0x7f0000001c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000001cc0)='./file0\x00') lseek(0xffffffffffffffff, 0x80000000, 0x0) 7m44.358040408s ago: executing program 41 (id=2743): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x841e, &(0x7f0000000c00)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000001b40), &(0x7f0000001b80)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000001bc0)) mount$overlay(0x0, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x4008, &(0x7f0000001c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000001cc0)='./file0\x00') lseek(0xffffffffffffffff, 0x80000000, 0x0) 3m48.180544342s ago: executing program 0 (id=3427): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys_sec\x00', &(0x7f0000000400)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(r0, &(0x7f0000000800)=""/9, 0xfffffd87) 3m45.461062372s ago: executing program 0 (id=3435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='10', 0x2) syz_mount_image$squashfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x1000800, &(0x7f0000000b80)=ANY=[], 0x1, 0x1e8, &(0x7f0000000bc0)="$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") 3m45.082800901s ago: executing program 0 (id=3436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0xfffa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x12}) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 3m44.083140945s ago: executing program 0 (id=3441): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800880, &(0x7f00000005c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030383030312c6e6f6465636f6d706f73652c706172743d3078303030303030303030303030303030392c6e6c733d6b6f69382d72752c008292f69c13f2b85e075ceb69929ebeeb99831ec0ad6951a05c0a3372b4c797bd28ff6fc5608845e83007b059dd33416051898aa354ae1d4402e7fd617b781f4ce696e8e9388fe591ff322d41630e03acb0b0cb89e602c955b8944529a112cd14dbba7c90bf693d03eecc6970126cf3498b1241bf02f4c92b662d7a730835226cf9a378046ea8800460b9b1f5f5f463cf074f971031c6200e2c4f9aed516968689df423df72383853f0d39bcb01b327a86c8a7e4cc104f07a1904a9b45758d1b27bc6fb371e1e19ea86a0e4464a55813d620f688ebe0f50af6f0840b134dc5d"], 0x1, 0x5fb, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 3m43.962490137s ago: executing program 0 (id=3442): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20000000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) syz_mount_image$ext4(&(0x7f0000006840)='ext4\x00', &(0x7f0000006880)='./file1\x00', 0x2010008, &(0x7f00000068c0), 0xff, 0x553, &(0x7f0000006900)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000006e80)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006ec0), &(0x7f0000006f00)=0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000006f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000007000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000007080), 0x651, 0x0) recvmmsg(r3, &(0x7f00000070c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000007280)='./dev\x00', 0x1ff) 3m42.910971176s ago: executing program 0 (id=3444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000020440), r2) r3 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='io\x00') pread64(r4, &(0x7f0000020800)=""/47, 0x2f, 0xe) 3m42.505381218s ago: executing program 42 (id=3444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000020440), r2) r3 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='io\x00') pread64(r4, &(0x7f0000020800)=""/47, 0x2f, 0xe) 9.656746333s ago: executing program 9 (id=4032): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.362185454s ago: executing program 9 (id=4035): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) syz_mount_image$ext4(&(0x7f0000006840)='ext4\x00', &(0x7f0000006880)='./file1\x00', 0x2010008, &(0x7f00000068c0), 0xff, 0x553, &(0x7f0000006900)="$eJzs3c9rJFkdAPBvddKZzExmk1UPOrDr4q7MLDrdk427GzysK4ieFsT1PsakJ4TppIekszsJi3b+AkFEBU968SL4Bwgy4MWjCAN6VlhRRGcV9LBOSXVXJ7FTnfSMnfQk+Xygpt6rH/39vkxeparrURXAufVCRLwZEY/SNH05Iqbz5aV8ilZnyrb74OF7i9mURJq+/bckknxZtlmapmn3My/nu01GxNe+EvHNZF/AyXy+tX1noV6vrefVanP1bnVja/vGyurCcm25tjY3N/va/Ovzr87fHEo7r0TEG1/60/e/89Mvv/HLz777x1t/uf6tLK2pfH23HU9g/LCVnaaXL0z27LD+hMGeRll7yh/mlYuD7bNznAkBANBXdo7/kYj4VES8HNMxdvjpLAAAAHAKpV+Yig+Tzv27AhN9lgMAAACnSKk9BjYpVfKxAFNRKlUqnTG8H4tLpXpjo/mZ243NtaXOWNmZKJdur9RrN/OxwjNRTrL6bLu8V3+lpz4XEc9GxPemL7brlcVGfWnUX34AAADAOXG55/r/n9Od6//DJSeTHAAAADA8M6NOAAAAADh2rv8BAADgTCuPOgEAAADg2H31rbeyKe2+/3rpna3NO413bizVNu5UVjcXK4uN9buV5UZjuf3MvtWjPq/eaNz9XKxt3qs2axvN6pWt7Vurjc215q2VmDyRBgEAAAAHPPvJ+79PIqL1+YvtKTMx6qSAEzG+W+o+07Og9//hmc78/RNKCjgRYwNs8/6F4uXOE+B0G+9d0KevA2eP8f/AUW/06Dt45zedWWnI+QAAAMN37RPF9/+PPp9vOeWHU04nhvOr5/5/Oj2qRIAT177/P+hAHicLcKaUBxoBCJxl/+/9/6Ol6WMlBAAADN1Ue0pKlfzrvakolSqViCvt1wKWk9sr9drNiHgmIn43Xb6Q1WfbeyZHXjMAAAAAAAAAAAAAAAAAAAAAAAAAAB1pmkQKAAAAnGkRpT8nv+o8y//a9EtTvd8PTCT/br8SeCIi3v3R2z+4t9Bsrs9my/++u7z5w3z5K6P4BgMAAADo1b1Ob8//NepsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhrPnj43mJ3GmDzi8OK+9cvRsRMUfzxmGzPJ6McEZf+kcT4vv2SiBgbQvzWTkR8vCh+kqW1G7Io/jB+CK2dpJW2FcaPmfynUBT/8hDiw3l2Pzv+vFnU/0vxQnte3P/GI/6n/qT6H/9i9/g31qf/XxkwxtUHP6/2jX91Kq6OFx//uvGTPvFfHCh6Ob7x9e3tfmvTH0dc6/79aR/x9kfYK1Wbq3erG1vbN1ZWF5Zry7W1ubnZ1+Zfn391/mb19kq9lv9bGOO7z/3iUd/270RcKvz7l+TZ9G//SwWfN1aQ/38e3Hv40W6ldTD+9RcL4v/6J/kWB+OX8jifzsvZ+mvdcqtT3u/5n/32+cPav7TX/vLj/P9f7/ehvQ50lOcG+9UBAI7Fxtb2nYV6vbZ+ugoXImLAjbOr9Kci58cvTMRTkcbZLXw7KzwYcOOxOGKbNE3TrE8VrLofEYMklsSQW1oqzmev0PcIMOojEwAAMGx7J/2jzgQAAAAAAAAAAAAAAAAAAADOr5N4ylpvzL1HICfDeIQ2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBQ/DcAAP//fdvZHw==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000006e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000006f40)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000006f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000007000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000007080), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000007280)='./dev\x00', 0x1ff) 9.274410143s ago: executing program 4 (id=4036): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0xd52, 0x8000, 0x6, 0xfffffff9, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0xa4, 0x3, 0x1, 0x4, 0x9c, 0xff}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 8.099657374s ago: executing program 9 (id=4037): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys_sec\x00', &(0x7f0000000400)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(r0, &(0x7f0000000800)=""/9, 0xfffffd87) 6.984564609s ago: executing program 9 (id=4038): mq_open(0x0, 0x8c2, 0x30, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) poll(&(0x7f00000000c0), 0x0, 0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000003180)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x20, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], @mld={0x84, 0x0, 0x0, 0x8, 0x92a, @private1}}}}}, 0x56) 6.813828306s ago: executing program 4 (id=4039): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x80, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f0000002b80)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(0x0, 0x0, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ce1, 0x80008, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd51, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x5c, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6.709447757s ago: executing program 1 (id=4040): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = socket(0x28, 0x4, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0xfff9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}}, 0x20000890) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x10, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_open_dev$hidraw(&(0x7f0000000880), 0x0, 0x14a042) write(r3, &(0x7f00000008c0)="537914249eb448ddd96a", 0xffda) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70800a200000000000007020000f8ffffffb74700000800000e00040000020000008500000082", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000007a150000100000018560000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006c040000850000000600000085100000faffffff852000000400000018000000070000000000000007000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x5, 0x6, 0x7}, {0x0, 0x3, 0x7, 0x6}], 0x10, 0x3}, 0x94) write(0xffffffffffffffff, &(0x7f0000000200)='10000', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r6, &(0x7f0000008b80)='0', 0x1) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000008bc0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000008c00)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) 6.371027602s ago: executing program 4 (id=4041): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) 6.023672298s ago: executing program 9 (id=4042): syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000005780)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005800)='./file1\x00', 0x143841, 0x115) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000005840)={0x0, 0x2, 0x407ffc, 0xffff}) 5.197080434s ago: executing program 1 (id=4043): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.808367353s ago: executing program 1 (id=4044): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000300)={0x3, 0x0}) 4.427929823s ago: executing program 2 (id=4045): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000002500)={0x6, 0x4, 0x1, {0xa, @pix_mp={0x4, 0x7fff, 0x32314d59, 0x6, 0x9, [{0x0, 0xaf}, {0x4, 0x8}, {0x4000002, 0x8}, {0x80001, 0xfffffbff}, {0x5}, {0x92, 0xff}, {0x0, 0x8}, {0x4, 0x7fffffff}], 0x1, 0xff, 0x2, 0x2}}, 0x101}) 4.401407545s ago: executing program 1 (id=4046): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys_sec\x00', &(0x7f0000000400)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(r0, &(0x7f0000000800)=""/9, 0xfffffd87) 4.183429568s ago: executing program 4 (id=4047): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000e00)='5', 0x1) 4.077270969s ago: executing program 2 (id=4048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000800)=ANY=[], 0x0}, 0x94) syz_ublk_setup_io_uring(0x1e, &(0x7f00000004c0)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.606887868s ago: executing program 4 (id=4049): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x80, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f0000002b80)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(0x0, 0x0, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ce1, 0x80008, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd51, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x5c, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.827053071s ago: executing program 2 (id=4050): mq_open(0x0, 0x8c2, 0x30, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) poll(&(0x7f00000000c0), 0x0, 0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000003180)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x20, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], @mld={0x84, 0x0, 0x0, 0x8, 0x92a, @private1}}}}}, 0x56) 1.632901231s ago: executing program 1 (id=4051): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = socket(0x28, 0x4, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0xfff9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}}, 0x20000890) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x10, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_open_dev$hidraw(&(0x7f0000000880), 0x0, 0x14a042) write(r3, &(0x7f00000008c0)="537914249eb448ddd96a", 0xffda) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70800a200000000000007020000f8ffffffb74700000800000e00040000020000008500000082", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000007a150000100000018560000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006c040000850000000600000085100000faffffff852000000400000018000000070000000000000007000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x5, 0x6, 0x7}, {0x0, 0x3, 0x7, 0x6}], 0x10, 0x3}, 0x94) write(0xffffffffffffffff, &(0x7f0000000200)='10000', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r6, &(0x7f0000008b80)='0', 0x1) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000008bc0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000008c00)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) 1.390661596s ago: executing program 4 (id=4052): r0 = io_uring_setup(0x667, &(0x7f0000000600)={0x0, 0xa14a, 0x400, 0x1, 0x235}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000680)=0x1, 0x4) bind$rds(r1, &(0x7f00000006c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4, 0xd000}], 0x1, &(0x7f0000000800)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x103902, 0x0) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f0000000580)={0x40, 0xf, 0x38, {0x38, 0xd, "5e5643e25f93ad21dcc8f70c78d61de64f560fa4b744580c256fe6fc5f05671bb8b885d5712cfe195e21635856e58a109eb211d3b9b4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r2, &(0x7f0000000480)=[{0x0}, {&(0x7f00000004c0)="c1", 0x1}], 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) 1.389140697s ago: executing program 9 (id=4053): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000200)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000240)={0x2, 0x1, 0x3, 0x4, 0x4}) close(r0) 939.004693ms ago: executing program 2 (id=4054): setrlimit(0x40000000000008, 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) 645.549733ms ago: executing program 2 (id=4055): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000300)={0x3, 0x0}) 165.24µs ago: executing program 1 (id=4056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="3c1204"], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@'], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) syz_usb_connect(0x0, 0x45, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000040)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000002f953e18f9f6343c4021428b0f31826478da48b0d83e82df978f4ed072b75dd0efcd2cf3469c0914f01bfd4a0abbc31d9fe3"], 0x18}, 0x0) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f00000003c0)=ANY=[], 0x2c}, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newsa={0x148, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@private1, {0x4, 0x8001, 0x0, 0xffffffffffffff45, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x7, 0xcc, 0x8}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x56, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x50, 0x40, "92ed85d6e6f036131ca9"}}]}, 0x148}}, 0x20040084) r4 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r4, 0x0, r1, r5, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0xd) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0) unshare(0x4e000400) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000005c0)={0x48}) dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x202200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000440)={0xc}) 0s ago: executing program 2 (id=4057): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_io_uring_setup(0x2f90, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000e00)='5', 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): T18632] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3080: Failed to acquire dquot type 1 [ 1330.058016][T18601] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1330.221978][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1330.865428][T18642] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3082'. [ 1331.210654][ C1] net_ratelimit: 94 callbacks suppressed [ 1332.137807][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.748723][T18684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3092'. [ 1334.387638][T18697] loop9: detected capacity change from 0 to 512 [ 1334.498950][T18697] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1334.521439][T18697] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3096: invalid indirect mapped block 256 (level 1) [ 1334.535741][T18697] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3096: invalid indirect mapped block 2683928664 (level 1) [ 1334.594249][T18697] EXT4-fs (loop9): 1 truncate cleaned up [ 1334.623827][T18697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1334.954914][T18705] loop0: detected capacity change from 0 to 8192 [ 1334.992953][T18705] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1335.087394][T18705] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1335.181538][T18705] REISERFS (device loop0): using ordered data mode [ 1335.188124][T18705] reiserfs: using flush barriers [ 1335.240640][T18705] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1335.302075][T18705] REISERFS (device loop0): checking transaction log (loop0) [ 1335.707164][T18705] REISERFS (device loop0): Using tea hash to sort names [ 1335.751483][T18705] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1336.260998][ C1] net_ratelimit: 91 callbacks suppressed [ 1336.901160][T18734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3102'. [ 1337.771795][T18702] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1337.844825][T18702] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1338.491462][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'. [ 1338.746615][T18338] IPVS: starting estimator thread 0... [ 1338.870806][T18762] IPVS: using max 20 ests per chain, 48000 per kthread [ 1339.548404][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.370982][ C0] net_ratelimit: 97 callbacks suppressed [ 1341.453693][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'. [ 1342.567432][T18819] loop9: detected capacity change from 0 to 512 [ 1342.600007][T18819] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1342.781026][T18819] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3119: bad orphan inode 13 [ 1342.864464][T18819] ext4_test_bit(bit=12, block=18) = 1 [ 1342.904792][T18819] is_bad_inode(inode)=0 [ 1342.948796][T18819] NEXT_ORPHAN(inode)=0 [ 1343.000846][T18819] max_ino=32 [ 1343.004107][T18819] i_nlink=1 [ 1343.067673][T18819] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1343.467712][T18838] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1343.486025][T18838] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3119: bg 0: block 248: padding at end of block bitmap is not set [ 1343.506702][T18838] Quota error (device loop9): write_blk: dquota write failed [ 1343.515124][T18838] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1343.525165][T18838] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3119: Failed to acquire dquot type 1 [ 1343.753834][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1344.693578][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3125'. [ 1345.098684][T18860] loop1: detected capacity change from 0 to 8192 [ 1345.144648][T18860] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1345.198723][T18860] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1345.208264][T18860] REISERFS (device loop1): using ordered data mode [ 1345.216411][T18860] reiserfs: using flush barriers [ 1345.226560][T18860] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1345.264790][T18860] REISERFS (device loop1): checking transaction log (loop1) [ 1345.528756][T18860] REISERFS (device loop1): Using tea hash to sort names [ 1345.569202][T18860] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1346.410651][ C1] net_ratelimit: 99 callbacks suppressed [ 1346.840788][T18880] ip_tables: iptables: counters copy to user failed while replacing table [ 1349.477877][T18923] loop1: detected capacity change from 0 to 8192 [ 1349.569050][T18923] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1349.598283][T18923] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1349.628272][T18923] REISERFS (device loop1): using ordered data mode [ 1349.678533][T18923] reiserfs: using flush barriers [ 1349.708404][T18923] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1349.771648][T18923] REISERFS (device loop1): checking transaction log (loop1) [ 1350.147153][T18923] REISERFS (device loop1): Using tea hash to sort names [ 1350.163042][T18923] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1351.617206][T12636] net_ratelimit: 159 callbacks suppressed [ 1352.002604][T18959] ip_tables: iptables: counters copy to user failed while replacing table [ 1353.215755][T18974] loop9: detected capacity change from 0 to 512 [ 1353.415210][T18974] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1353.472304][T18974] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3152: invalid indirect mapped block 256 (level 1) [ 1353.536666][T18974] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3152: invalid indirect mapped block 2683928664 (level 1) [ 1353.599667][T18974] EXT4-fs (loop9): 1 truncate cleaned up [ 1353.635363][T18974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1355.851619][T18980] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1355.901270][T18980] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1356.367480][T19021] loop1: detected capacity change from 0 to 2048 [ 1356.476529][T19021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.585758][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.970642][ C1] net_ratelimit: 97 callbacks suppressed [ 1357.206429][ T1325] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1357.236743][ T1325] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1357.391001][ T1325] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1357.391001][ T1325] [ 1357.446708][ T1325] EXT4-fs (loop1): Total free blocks count 0 [ 1357.453472][ T1325] EXT4-fs (loop1): Free/Dirty block details [ 1357.459412][ T1325] EXT4-fs (loop1): free_blocks=2415919504 [ 1357.465547][ T1325] EXT4-fs (loop1): dirty_blocks=6688 [ 1357.482794][ T1325] EXT4-fs (loop1): Block reservation details [ 1357.493490][ T1325] EXT4-fs (loop1): i_reserved_data_blocks=418 [ 1357.657340][ T1325] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 1357.890048][T19054] loop0: detected capacity change from 0 to 512 [ 1357.947090][T19054] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1358.067842][T19054] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.3167: bad orphan inode 13 [ 1358.231130][T19054] ext4_test_bit(bit=12, block=18) = 1 [ 1358.283181][T19054] is_bad_inode(inode)=0 [ 1358.362363][T19054] NEXT_ORPHAN(inode)=0 [ 1358.457045][T19054] max_ino=32 [ 1358.543113][T19054] i_nlink=1 [ 1358.838660][T19054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1359.154549][T19054] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1359.212219][T19054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3167: bg 0: block 248: padding at end of block bitmap is not set [ 1359.619067][T19054] Quota error (device loop0): write_blk: dquota write failed [ 1359.792080][T19054] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1359.940321][T19054] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3167: Failed to acquire dquot type 1 [ 1359.989145][T19067] loop1: detected capacity change from 0 to 8192 [ 1360.005908][T19067] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1360.082280][T19067] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1360.091957][T19067] REISERFS (device loop1): using ordered data mode [ 1360.098610][T19067] reiserfs: using flush barriers [ 1360.118859][T19067] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1360.194516][T19067] REISERFS (device loop1): checking transaction log (loop1) [ 1360.352396][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1360.428514][T19067] REISERFS (device loop1): Using tea hash to sort names [ 1360.483720][T19067] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1360.618969][T19097] loop0: detected capacity change from 0 to 2048 [ 1360.786611][T19097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.509653][ T42] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1361.856349][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.869089][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.984662][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1362.196504][ C1] net_ratelimit: 132 callbacks suppressed [ 1362.202696][ T42] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1362.202696][ T42] [ 1362.213996][ T42] EXT4-fs (loop0): Total free blocks count 0 [ 1362.220015][ T42] EXT4-fs (loop0): Free/Dirty block details [ 1362.226151][ T42] EXT4-fs (loop0): free_blocks=2415919504 [ 1362.245606][ T42] EXT4-fs (loop0): dirty_blocks=3824 [ 1362.253628][ T42] EXT4-fs (loop0): Block reservation details [ 1362.259967][ T42] EXT4-fs (loop0): i_reserved_data_blocks=239 [ 1362.651471][T19127] loop1: detected capacity change from 0 to 512 [ 1362.661870][T19127] EXT4-fs: Ignoring removed nobh option [ 1362.759628][T19127] EXT4-fs (loop1): 1 truncate cleaned up [ 1362.824796][T19127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.936425][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1762 with error 28 [ 1365.056066][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.473784][T19164] loop1: detected capacity change from 0 to 2048 [ 1365.521725][T19164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.573140][T19162] loop9: detected capacity change from 0 to 8192 [ 1365.645429][T19162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1365.660988][T19162] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1365.705820][T19173] loop0: detected capacity change from 0 to 512 [ 1365.784600][T19162] REISERFS (device loop9): using ordered data mode [ 1365.799774][T19162] reiserfs: using flush barriers [ 1365.840191][T19173] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1365.880136][T19162] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1365.931895][T19173] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3188: invalid indirect mapped block 256 (level 1) [ 1366.015686][T19162] REISERFS (device loop9): checking transaction log (loop9) [ 1366.048798][T19173] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3188: invalid indirect mapped block 2683928664 (level 1) [ 1366.186012][T19173] EXT4-fs (loop0): 1 truncate cleaned up [ 1366.212232][T19173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.346085][ T3465] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1366.397951][ T3465] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1366.405997][T19162] REISERFS (device loop9): Using tea hash to sort names [ 1366.428720][ T3465] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1366.428720][ T3465] [ 1366.433292][T19162] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1366.439988][ T3465] EXT4-fs (loop1): Total free blocks count 0 [ 1366.486287][ T3465] EXT4-fs (loop1): Free/Dirty block details [ 1366.496410][ T3465] EXT4-fs (loop1): free_blocks=2415919504 [ 1366.511091][ T3465] EXT4-fs (loop1): dirty_blocks=8192 [ 1366.516425][ T3465] EXT4-fs (loop1): Block reservation details [ 1366.533002][ T3465] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 1367.220622][ C1] net_ratelimit: 92 callbacks suppressed [ 1367.375895][ T3465] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 1367.827692][T19199] loop9: detected capacity change from 0 to 512 [ 1367.845619][T19199] EXT4-fs: Ignoring removed nobh option [ 1367.918866][T19199] EXT4-fs (loop9): 1 truncate cleaned up [ 1367.932345][T19199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.974735][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.772285][T19217] loop1: detected capacity change from 0 to 512 [ 1368.838859][T19217] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1368.994981][T19217] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.3189: bad orphan inode 13 [ 1369.088811][T19217] ext4_test_bit(bit=12, block=18) = 1 [ 1369.110977][T19217] is_bad_inode(inode)=0 [ 1369.115173][T19217] NEXT_ORPHAN(inode)=0 [ 1369.119266][T19217] max_ino=32 [ 1369.150760][T19217] i_nlink=1 [ 1369.168109][T19217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1369.605875][T19227] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1369.640851][T19227] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3189: bg 0: block 248: padding at end of block bitmap is not set [ 1369.658970][T19227] Quota error (device loop1): write_blk: dquota write failed [ 1369.666805][T19227] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1369.676761][T19227] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.3189: Failed to acquire dquot type 1 [ 1369.913786][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.007803][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1371.701837][T19265] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1372.577121][ C0] net_ratelimit: 115 callbacks suppressed [ 1373.119706][T19284] overlayfs: failed to clone upperpath [ 1374.531495][T19306] loop1: detected capacity change from 0 to 2048 [ 1374.554069][T19310] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3210'. [ 1375.080448][T19306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.622247][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1375.739346][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1375.813477][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1375.813477][ T12] [ 1375.878529][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 1375.919081][ T12] EXT4-fs (loop1): Free/Dirty block details [ 1375.975283][ T12] EXT4-fs (loop1): free_blocks=2415919504 [ 1376.014082][ T12] EXT4-fs (loop1): dirty_blocks=2608 [ 1376.054450][ T12] EXT4-fs (loop1): Block reservation details [ 1376.060528][ T12] EXT4-fs (loop1): i_reserved_data_blocks=163 [ 1376.160199][ T1325] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 556 with error 28 [ 1377.850631][ C1] net_ratelimit: 113 callbacks suppressed [ 1378.270801][T19370] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1378.607309][T19377] loop0: detected capacity change from 0 to 2048 [ 1379.250914][T19377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.972824][ T1325] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1380.050413][ T1325] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1380.142738][ T1325] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1380.142738][ T1325] [ 1380.191399][ T1325] EXT4-fs (loop0): Total free blocks count 0 [ 1380.218039][ T1325] EXT4-fs (loop0): Free/Dirty block details [ 1380.279978][ T1325] EXT4-fs (loop0): free_blocks=2415919504 [ 1380.310954][ T1325] EXT4-fs (loop0): dirty_blocks=4752 [ 1380.726429][ T1325] EXT4-fs (loop0): Block reservation details [ 1380.826530][ T1325] EXT4-fs (loop0): i_reserved_data_blocks=297 [ 1380.979813][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 1381.330908][T19410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1382.420437][T19433] loop9: detected capacity change from 0 to 2048 [ 1382.576472][T19433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.050665][ C1] net_ratelimit: 95 callbacks suppressed [ 1383.228623][ T12] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1383.291902][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1383.360615][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1383.360615][ T12] [ 1383.370330][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 1383.398105][T19448] overlay: filesystem on ./file0 is read-only [ 1383.428507][ T12] EXT4-fs (loop9): Free/Dirty block details [ 1383.469589][ T12] EXT4-fs (loop9): free_blocks=2415919504 [ 1383.475839][ T12] EXT4-fs (loop9): dirty_blocks=4848 [ 1383.492624][ T12] EXT4-fs (loop9): Block reservation details [ 1383.498656][ T12] EXT4-fs (loop9): i_reserved_data_blocks=303 [ 1383.797458][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 1384.641919][T19465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1384.879684][T19469] loop9: detected capacity change from 0 to 512 [ 1385.000748][T19469] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1385.037558][T19469] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3235: bad orphan inode 13 [ 1385.071639][T19469] ext4_test_bit(bit=12, block=18) = 1 [ 1385.079120][T19469] is_bad_inode(inode)=0 [ 1385.085758][T19469] NEXT_ORPHAN(inode)=0 [ 1385.090975][T19469] max_ino=32 [ 1385.094306][T19469] i_nlink=1 [ 1385.099065][T19469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1385.371816][T19469] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1385.669344][T19469] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3235: bg 0: block 248: padding at end of block bitmap is not set [ 1385.692236][T19469] Quota error (device loop9): write_blk: dquota write failed [ 1385.700213][T19469] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1385.710228][T19469] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3235: Failed to acquire dquot type 1 [ 1385.849107][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1387.473368][T19516] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1388.090613][ C1] net_ratelimit: 97 callbacks suppressed [ 1389.802938][T19562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3259'. [ 1390.554287][T19578] loop1: detected capacity change from 0 to 512 [ 1390.648175][T19578] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1390.671967][T19578] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3263: invalid indirect mapped block 256 (level 1) [ 1390.694456][T19576] loop9: detected capacity change from 0 to 8192 [ 1390.753512][T19578] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3263: invalid indirect mapped block 2683928664 (level 1) [ 1390.754801][T19576] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1390.780290][T19578] EXT4-fs (loop1): 1 truncate cleaned up [ 1390.787672][T19578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1390.845191][T19576] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1390.857155][T19576] REISERFS (device loop9): using ordered data mode [ 1390.864514][T19576] reiserfs: using flush barriers [ 1390.908613][T19576] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1391.002279][T19576] REISERFS (device loop9): checking transaction log (loop9) [ 1391.204532][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.307000][T19576] REISERFS (device loop9): Using tea hash to sort names [ 1391.332219][T19576] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1392.450822][T19615] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3268'. [ 1392.655024][T19618] loop9: detected capacity change from 0 to 2048 [ 1392.762557][T19618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1393.380806][T19624] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1393.524272][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.690605][ C0] net_ratelimit: 96 callbacks suppressed [ 1396.425041][T19667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1396.662089][T19677] overlay: filesystem on ./file0 is read-only [ 1397.133528][T19684] loop9: detected capacity change from 0 to 512 [ 1397.178475][T19684] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1397.266419][T19684] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3282: bad orphan inode 13 [ 1397.350333][T19684] ext4_test_bit(bit=12, block=18) = 1 [ 1397.372927][T19684] is_bad_inode(inode)=0 [ 1397.396331][T19684] NEXT_ORPHAN(inode)=0 [ 1397.400458][T19684] max_ino=32 [ 1397.427396][T19684] i_nlink=1 [ 1397.435300][T19684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1397.610432][T19700] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1397.648422][T19700] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3282: bg 0: block 248: padding at end of block bitmap is not set [ 1397.698281][T19700] Quota error (device loop9): write_blk: dquota write failed [ 1397.706679][T19700] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1397.717065][T19700] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3282: Failed to acquire dquot type 1 [ 1398.257495][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1398.564443][T19717] loop9: detected capacity change from 0 to 512 [ 1398.628427][T19717] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1398.712993][T19717] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3284: invalid indirect mapped block 256 (level 1) [ 1398.769858][T19717] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3284: invalid indirect mapped block 2683928664 (level 1) [ 1398.841589][T19717] EXT4-fs (loop9): 1 truncate cleaned up [ 1398.848531][T19717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1398.970622][ C0] net_ratelimit: 91 callbacks suppressed [ 1399.738409][T19723] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1399.928999][T19723] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1400.269173][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.279629][T19761] loop0: detected capacity change from 0 to 2048 [ 1401.361299][T19761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1402.123708][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.241818][T19794] loop0: detected capacity change from 0 to 512 [ 1403.323999][T19794] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1403.359624][T19794] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3296: invalid indirect mapped block 256 (level 1) [ 1403.494866][T19794] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3296: invalid indirect mapped block 2683928664 (level 1) [ 1403.555022][T19794] EXT4-fs (loop0): 1 truncate cleaned up [ 1403.565958][T19794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1404.090876][ C1] net_ratelimit: 97 callbacks suppressed [ 1404.323315][T19817] overlayfs: failed to clone upperpath [ 1404.356460][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.429342][T19827] loop0: detected capacity change from 0 to 8192 [ 1405.449440][T19827] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1405.500746][T19827] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1405.536393][T19827] REISERFS (device loop0): using ordered data mode [ 1405.595663][T19827] reiserfs: using flush barriers [ 1405.633329][T19827] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1405.691479][T19827] REISERFS (device loop0): checking transaction log (loop0) [ 1405.926346][T19827] REISERFS (device loop0): Using tea hash to sort names [ 1405.938141][T19827] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1407.418282][T19854] loop0: detected capacity change from 0 to 512 [ 1407.472340][T19854] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1407.524369][T19858] loop9: detected capacity change from 0 to 2048 [ 1407.574662][T19854] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.3314: bad orphan inode 13 [ 1407.604015][T19858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.636505][T19854] ext4_test_bit(bit=12, block=18) = 1 [ 1407.651151][T19854] is_bad_inode(inode)=0 [ 1407.753035][T19854] NEXT_ORPHAN(inode)=0 [ 1407.765595][T19854] max_ino=32 [ 1407.796876][T19854] i_nlink=1 [ 1407.817695][T19854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1408.357170][T19872] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1408.432796][T19872] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3314: bg 0: block 248: padding at end of block bitmap is not set [ 1408.549207][T19872] Quota error (device loop0): write_blk: dquota write failed [ 1408.610826][T19872] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1408.689174][T19872] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3314: Failed to acquire dquot type 1 [ 1409.130800][ C1] net_ratelimit: 81 callbacks suppressed [ 1409.323446][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.570431][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1409.666335][T19885] loop9: detected capacity change from 0 to 8192 [ 1409.689668][T19885] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1409.731025][T19885] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1409.741611][T19885] REISERFS (device loop9): using ordered data mode [ 1409.748249][T19885] reiserfs: using flush barriers [ 1409.759126][T19885] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1409.777207][T19885] REISERFS (device loop9): checking transaction log (loop9) [ 1409.946848][T19885] REISERFS (device loop9): Using tea hash to sort names [ 1409.960983][T19885] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1411.288240][T19906] loop9: detected capacity change from 0 to 512 [ 1411.323091][T19906] EXT4-fs: Ignoring removed nobh option [ 1411.342013][T19909] overlay: filesystem on ./file0 is read-only [ 1411.390774][T19906] EXT4-fs (loop9): 1 truncate cleaned up [ 1411.397698][T19906] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1411.449491][T19913] loop1: detected capacity change from 0 to 512 [ 1411.518302][T19913] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1411.638684][T19913] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.3331: bad orphan inode 13 [ 1411.676474][T19913] ext4_test_bit(bit=12, block=18) = 1 [ 1411.690975][T19913] is_bad_inode(inode)=0 [ 1411.695281][T19913] NEXT_ORPHAN(inode)=0 [ 1411.699466][T19913] max_ino=32 [ 1411.703317][T19913] i_nlink=1 [ 1411.707978][T19913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1412.069688][T19921] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1412.138086][T19921] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3331: bg 0: block 248: padding at end of block bitmap is not set [ 1412.193862][T19921] Quota error (device loop1): write_blk: dquota write failed [ 1412.225688][T19921] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1412.280865][T19921] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.3331: Failed to acquire dquot type 1 [ 1413.304971][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1413.904743][T19934] loop1: detected capacity change from 0 to 512 [ 1414.008823][T19934] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1414.064694][T19934] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3336: invalid indirect mapped block 256 (level 1) [ 1414.079273][T19934] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3336: invalid indirect mapped block 2683928664 (level 1) [ 1414.109399][T19934] EXT4-fs (loop1): 1 truncate cleaned up [ 1414.133048][T19934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.152208][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.389787][T19944] overlay: filesystem on ./file0 is read-only [ 1414.410639][ C1] net_ratelimit: 98 callbacks suppressed [ 1414.710078][T19959] ip_tables: iptables: counters copy to user failed while replacing table [ 1414.799196][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.227144][T19969] loop1: detected capacity change from 0 to 8192 [ 1415.268720][T19969] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1415.327465][T19969] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1415.369333][T19969] REISERFS (device loop1): using ordered data mode [ 1415.444848][T19969] reiserfs: using flush barriers [ 1415.502673][T19969] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1415.567449][T19969] REISERFS (device loop1): checking transaction log (loop1) [ 1415.857504][T19969] REISERFS (device loop1): Using tea hash to sort names [ 1415.888908][T19969] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1416.670007][T19985] loop9: detected capacity change from 0 to 512 [ 1416.678799][T19985] EXT4-fs: Ignoring removed nobh option [ 1416.734765][T19985] EXT4-fs (loop9): 1 truncate cleaned up [ 1416.762482][T19985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1417.130449][T19993] overlayfs: failed to resolve './bus': -2 [ 1419.099990][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.338113][T20020] overlayfs: failed to resolve './bus': -2 [ 1419.406993][T20022] loop0: detected capacity change from 0 to 512 [ 1419.456295][T20022] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1419.558668][T20022] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.3362: bad orphan inode 13 [ 1419.573441][T20022] ext4_test_bit(bit=12, block=18) = 1 [ 1419.578889][T20022] is_bad_inode(inode)=0 [ 1419.616694][T20022] NEXT_ORPHAN(inode)=0 [ 1419.627094][T20022] max_ino=32 [ 1419.630335][T20022] i_nlink=1 [ 1419.662467][T20022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1419.778992][ C1] net_ratelimit: 107 callbacks suppressed [ 1420.013757][T20032] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1420.058151][T20032] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3362: bg 0: block 248: padding at end of block bitmap is not set [ 1420.100325][T20032] Quota error (device loop0): write_blk: dquota write failed [ 1420.123668][T20032] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1420.162596][T20032] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3362: Failed to acquire dquot type 1 [ 1420.246137][T20031] loop9: detected capacity change from 0 to 8192 [ 1420.285708][T20031] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1420.301823][T20031] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1420.322847][T20031] REISERFS (device loop9): using ordered data mode [ 1420.329384][T20031] reiserfs: using flush barriers [ 1420.354310][T20031] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1420.372317][T20031] REISERFS (device loop9): checking transaction log (loop9) [ 1420.621225][T20031] REISERFS (device loop9): Using tea hash to sort names [ 1420.643984][T20031] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1421.170259][T20048] loop1: detected capacity change from 0 to 512 [ 1421.230215][T20048] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1421.251725][T20048] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3370: invalid indirect mapped block 256 (level 1) [ 1421.288677][T20048] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3370: invalid indirect mapped block 2683928664 (level 1) [ 1421.311035][T20048] EXT4-fs (loop1): 1 truncate cleaned up [ 1421.318522][T20048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.725701][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1421.941602][T20055] overlayfs: failed to resolve './bus': -2 [ 1422.100428][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.989984][T20074] FAULT_INJECTION: forcing a failure. [ 1422.989984][T20074] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.005432][T20074] CPU: 0 PID: 20074 Comm: syz.9.3375 Not tainted syzkaller #0 [ 1423.012931][T20074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1423.023008][T20074] Call Trace: [ 1423.026300][T20074] [ 1423.029242][T20074] dump_stack_lvl+0x18c/0x250 [ 1423.033957][T20074] ? show_regs_print_info+0x20/0x20 [ 1423.039190][T20074] ? load_image+0x420/0x420 [ 1423.043723][T20074] ? __might_sleep+0xe0/0xe0 [ 1423.048342][T20074] ? __lock_acquire+0x7eb0/0x7eb0 [ 1423.053392][T20074] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1423.058445][T20074] should_fail_ex+0x394/0x4c0 [ 1423.063159][T20074] should_failslab+0x9/0x20 [ 1423.067679][T20074] slab_pre_alloc_hook+0x59/0x300 [ 1423.072728][T20074] kmem_cache_alloc+0x5a/0x2d0 [ 1423.077516][T20074] ? copy_pid_ns+0x282/0x9d0 [ 1423.082145][T20074] copy_pid_ns+0x282/0x9d0 [ 1423.086596][T20074] ? cmp_extents_reverse+0x90/0x90 [ 1423.091741][T20074] ? copy_ipcs+0x92/0x500 [ 1423.096091][T20074] ? copy_utsname+0x97/0x430 [ 1423.100708][T20074] create_new_namespaces+0x2a6/0x700 [ 1423.106038][T20074] unshare_nsproxy_namespaces+0x11a/0x160 [ 1423.111788][T20074] ksys_unshare+0x4fa/0x8f0 [ 1423.116313][T20074] ? sighand_ctor+0x50/0x50 [ 1423.120818][T20074] ? lock_chain_count+0x20/0x20 [ 1423.125671][T20074] ? syscall_enter_from_user_mode+0x25/0x80 [ 1423.131560][T20074] __x64_sys_unshare+0x38/0x40 [ 1423.136329][T20074] do_syscall_64+0x55/0xb0 [ 1423.140760][T20074] ? clear_bhb_loop+0x40/0x90 [ 1423.145439][T20074] ? clear_bhb_loop+0x40/0x90 [ 1423.150114][T20074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1423.156014][T20074] RIP: 0033:0x7f04c1b9f559 [ 1423.160457][T20074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.180070][T20074] RSP: 002b:00007f04c29a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1423.188489][T20074] RAX: ffffffffffffffda RBX: 00007f04c1e25fa0 RCX: 00007f04c1b9f559 [ 1423.196468][T20074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1423.204435][T20074] RBP: 00007f04c1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1423.212403][T20074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.220367][T20074] R13: 00007f04c1e26038 R14: 00007f04c1e25fa0 R15: 00007fffd313db18 [ 1423.228348][T20074] [ 1423.258936][T20076] loop0: detected capacity change from 0 to 512 [ 1423.297394][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.304798][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.327897][T20076] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1423.427450][T20076] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.3380: bad orphan inode 13 [ 1423.455804][T20076] ext4_test_bit(bit=12, block=18) = 1 [ 1423.473059][T20076] is_bad_inode(inode)=0 [ 1423.484693][T20076] NEXT_ORPHAN(inode)=0 [ 1423.494856][T20076] max_ino=32 [ 1423.501513][T20076] i_nlink=1 [ 1423.511593][T20076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1423.579677][T20082] loop9: detected capacity change from 0 to 512 [ 1423.682708][T20082] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1423.741311][T20082] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3382: invalid indirect mapped block 256 (level 1) [ 1423.788962][T20082] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3382: invalid indirect mapped block 2683928664 (level 1) [ 1423.831821][T20082] EXT4-fs (loop9): 1 truncate cleaned up [ 1423.882029][T20085] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1423.901879][T20082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.949106][T20085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3380: bg 0: block 248: padding at end of block bitmap is not set [ 1423.975708][T20085] Quota error (device loop0): write_blk: dquota write failed [ 1423.986965][T20085] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1424.007556][T20085] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3380: Failed to acquire dquot type 1 [ 1424.534008][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.739420][T20093] loop9: detected capacity change from 0 to 512 [ 1424.763009][T20093] EXT4-fs: Ignoring removed nobh option [ 1424.923382][T20093] EXT4-fs (loop9): 1 truncate cleaned up [ 1424.941262][T20093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.970602][ C1] net_ratelimit: 110 callbacks suppressed [ 1425.274258][T16066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1427.164810][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.387345][T20135] FAULT_INJECTION: forcing a failure. [ 1428.387345][T20135] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1428.437775][T20135] CPU: 1 PID: 20135 Comm: syz.9.3399 Not tainted syzkaller #0 [ 1428.445299][T20135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1428.455355][T20135] Call Trace: [ 1428.455366][T20135] [ 1428.455377][T20135] dump_stack_lvl+0x18c/0x250 [ 1428.462033][T20135] ? show_regs_print_info+0x20/0x20 [ 1428.462061][T20135] ? load_image+0x420/0x420 [ 1428.462080][T20135] ? __lock_acquire+0x1431/0x7eb0 [ 1428.462108][T20135] ? kfree+0x31/0x1a0 [ 1428.462135][T20135] should_fail_ex+0x394/0x4c0 [ 1428.462161][T20135] get_futex_key+0x136/0x1030 [ 1428.462180][T20135] ? verify_lock_unused+0x140/0x140 [ 1428.462204][T20135] ? futex_setup_timer+0xc0/0xc0 [ 1428.462221][T20135] ? perf_event_namespaces+0x196/0x9e0 [ 1428.462242][T20135] ? perf_event_fork+0x1c0/0x1c0 [ 1428.462267][T20135] futex_wake+0x127/0x4f0 [ 1428.462292][T20135] ? futex_wake_mark+0x150/0x150 [ 1428.462321][T20135] ? ksys_unshare+0x78c/0x8f0 [ 1428.462348][T20135] do_futex+0x35d/0x3e0 [ 1428.462365][T20135] ? __rwlock_init+0x150/0x150 [ 1428.462393][T20135] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1428.462421][T20135] __se_sys_futex+0x3a9/0x440 [ 1428.462444][T20135] ? sighand_ctor+0x50/0x50 [ 1428.462465][T20135] ? __x64_sys_futex+0xf0/0xf0 [ 1428.462492][T20135] ? __x64_sys_futex+0x21/0xf0 [ 1428.462523][T20135] do_syscall_64+0x55/0xb0 [ 1428.462544][T20135] ? clear_bhb_loop+0x40/0x90 [ 1428.462569][T20135] ? clear_bhb_loop+0x40/0x90 [ 1428.462596][T20135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1428.462620][T20135] RIP: 0033:0x7f04c1b9f559 [ 1428.462638][T20135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.462654][T20135] RSP: 002b:00007f04c29a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1428.462677][T20135] RAX: ffffffffffffffda RBX: 00007f04c1e25fa8 RCX: 00007f04c1b9f559 [ 1428.462691][T20135] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f04c1e25fac [ 1428.462705][T20135] RBP: 00007f04c1e25fa0 R08: 000000000074598b R09: 0000000000000000 [ 1428.462719][T20135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.462731][T20135] R13: 00007f04c1e26038 R14: 00007fffd313da30 R15: 00007fffd313db18 [ 1428.462761][T20135] [ 1428.462780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.608099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.776116][T20145] loop9: detected capacity change from 0 to 512 [ 1428.788105][T20145] EXT4-fs: Ignoring removed nobh option [ 1428.841286][T20145] EXT4-fs (loop9): 1 truncate cleaned up [ 1428.847692][T20141] loop0: detected capacity change from 0 to 8192 [ 1428.855573][T20145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.899263][T20141] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1428.980652][T20141] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1428.990168][T20141] REISERFS (device loop0): using ordered data mode [ 1429.010705][T20141] reiserfs: using flush barriers [ 1429.019277][T20141] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1429.110751][T20141] REISERFS (device loop0): checking transaction log (loop0) [ 1429.247656][T20152] loop1: detected capacity change from 0 to 512 [ 1429.331362][T20152] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1429.351431][T20152] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3405: invalid indirect mapped block 256 (level 1) [ 1429.391569][T20152] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3405: invalid indirect mapped block 2683928664 (level 1) [ 1429.478028][T20141] REISERFS (device loop0): Using tea hash to sort names [ 1429.521966][T20141] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1429.557950][T20152] EXT4-fs (loop1): 1 truncate cleaned up [ 1429.625922][T20152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1430.010598][ C1] net_ratelimit: 89 callbacks suppressed [ 1430.573706][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.725362][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.350917][T20192] loop1: detected capacity change from 0 to 512 [ 1433.423262][T20192] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1433.441348][T20192] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3415: invalid indirect mapped block 256 (level 1) [ 1433.487749][T20192] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3415: invalid indirect mapped block 2683928664 (level 1) [ 1433.509596][T20192] EXT4-fs (loop1): 1 truncate cleaned up [ 1433.518028][T20192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.551155][T20194] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1433.672979][T20194] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1434.436580][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.876348][T20203] loop1: detected capacity change from 0 to 8192 [ 1434.962834][T20203] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1434.962857][T20203] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1435.395298][ C0] net_ratelimit: 97 callbacks suppressed [ 1435.401646][T20203] REISERFS (device loop1): using ordered data mode [ 1435.408278][T20203] reiserfs: using flush barriers [ 1435.415748][T20203] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1435.446335][T20203] REISERFS (device loop1): checking transaction log (loop1) [ 1435.666844][T20203] REISERFS (device loop1): Using tea hash to sort names [ 1435.675828][T20203] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1437.490002][T20233] loop9: detected capacity change from 0 to 512 [ 1437.522581][T20233] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1437.660269][T20233] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3426: invalid indirect mapped block 256 (level 1) [ 1437.744698][T20233] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3426: invalid indirect mapped block 2683928664 (level 1) [ 1437.839475][T20233] EXT4-fs (loop9): 1 truncate cleaned up [ 1437.893551][T20233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.822819][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.132873][T20268] FAULT_INJECTION: forcing a failure. [ 1440.132873][T20268] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.147996][T20268] CPU: 0 PID: 20268 Comm: syz.0.3435 Not tainted syzkaller #0 [ 1440.155510][T20268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1440.165581][T20268] Call Trace: [ 1440.168876][T20268] [ 1440.171822][T20268] dump_stack_lvl+0x18c/0x250 [ 1440.176533][T20268] ? show_regs_print_info+0x20/0x20 [ 1440.181765][T20268] ? load_image+0x420/0x420 [ 1440.186299][T20268] ? __lock_acquire+0x7eb0/0x7eb0 [ 1440.191351][T20268] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 1440.197093][T20268] ? lockdep_hardirqs_on+0x98/0x150 [ 1440.202327][T20268] should_fail_ex+0x394/0x4c0 [ 1440.207027][T20268] should_failslab+0x9/0x20 [ 1440.211549][T20268] slab_pre_alloc_hook+0x59/0x300 [ 1440.216619][T20268] ? mas_next_slot+0x910/0x980 [ 1440.221445][T20268] kmem_cache_alloc+0x5a/0x2d0 [ 1440.226226][T20268] ? vm_area_alloc+0x24/0x1d0 [ 1440.230947][T20268] vm_area_alloc+0x24/0x1d0 [ 1440.235470][T20268] mmap_region+0xcfa/0x2090 [ 1440.240020][T20268] ? file_mmap_ok+0x170/0x170 [ 1440.244732][T20268] ? cap_mmap_addr+0x157/0x2b0 [ 1440.249611][T20268] do_mmap+0x98f/0x10a0 [ 1440.253804][T20268] ? mlock_future_ok+0xf0/0xf0 [ 1440.258590][T20268] ? down_write+0x200/0x200 [ 1440.263122][T20268] vm_mmap_pgoff+0x1c4/0x3f0 [ 1440.267749][T20268] ? account_locked_vm+0x200/0x200 [ 1440.272892][T20268] ? ksys_mmap_pgoff+0xf3/0x720 [ 1440.277750][T20268] ? __x64_sys_mmap+0x7a/0x130 [ 1440.282539][T20268] do_syscall_64+0x55/0xb0 [ 1440.286980][T20268] ? clear_bhb_loop+0x40/0x90 [ 1440.291685][T20268] ? clear_bhb_loop+0x40/0x90 [ 1440.296388][T20268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1440.302313][T20268] RIP: 0033:0x7f357079f2c2 [ 1440.306745][T20268] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1440.326369][T20268] RSP: 002b:00007f35716d2df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1440.334818][T20268] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f357079f2c2 [ 1440.342807][T20268] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1440.350796][T20268] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1440.358786][T20268] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 1440.366774][T20268] R13: 00007f35716d2ee0 R14: 00007f35716d2ea0 R15: 0000200000000b80 [ 1440.374783][T20268] [ 1440.570839][ T2976] net_ratelimit: 89 callbacks suppressed [ 1441.518703][T20289] loop0: detected capacity change from 0 to 1024 [ 1443.938010][T11107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1443.952030][T20313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1443.971132][T20313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1443.984110][T20313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1443.995768][T20313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1444.003654][T20313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1444.268731][T20310] rxe_eth0 speed is unknown, defaulting to 1000 [ 1444.379336][T20318] loop1: detected capacity change from 0 to 512 [ 1444.412091][T20318] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1444.616716][T20318] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.3453: bad orphan inode 13 [ 1444.637848][T20318] ext4_test_bit(bit=12, block=18) = 1 [ 1444.644241][T20318] is_bad_inode(inode)=0 [ 1444.648417][T20318] NEXT_ORPHAN(inode)=0 [ 1444.652806][T20318] max_ino=32 [ 1444.656019][T20318] i_nlink=1 [ 1444.660709][T20318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1445.622151][T20327] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1445.681634][T20327] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3453: bg 0: block 248: padding at end of block bitmap is not set [ 1445.696067][ C0] net_ratelimit: 86 callbacks suppressed [ 1445.932576][T20327] Quota error (device loop1): write_blk: dquota write failed [ 1445.940885][T20327] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1445.951342][T20327] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.3453: Failed to acquire dquot type 1 [ 1446.102366][T20313] Bluetooth: hci2: command tx timeout [ 1446.301492][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1446.554402][T20335] loop1: detected capacity change from 0 to 512 [ 1446.562359][T20335] EXT4-fs: Ignoring removed nobh option [ 1446.600922][T20335] EXT4-fs (loop1): 1 truncate cleaned up [ 1446.607883][T20335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1446.916612][T20310] chnl_net:caif_netlink_parms(): no params data found [ 1447.417859][T20310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.425289][T20310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.432983][T20310] bridge_slave_0: entered allmulticast mode [ 1447.443780][T20310] bridge_slave_0: entered promiscuous mode [ 1447.461475][T20310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.468645][T20310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.476381][T20310] bridge_slave_1: entered allmulticast mode [ 1447.522167][T20310] bridge_slave_1: entered promiscuous mode [ 1447.570929][T20345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1447.579797][T20345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1447.660244][T20345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1448.231233][T20345] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1448.237582][T20313] Bluetooth: hci2: command tx timeout [ 1448.383348][T20345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1448.389405][T20310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.400997][T20345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1448.461130][T20345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1448.467583][T20345] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1448.500080][T20310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.527711][T20345] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1448.786145][T20310] team0: Port device team_slave_0 added [ 1448.816666][T20310] team0: Port device team_slave_1 added [ 1449.132670][T20310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.139655][T20310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.450806][T15977] Bluetooth: hci0: command 0x0c1a tx timeout [ 1449.691356][T15977] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.890690][T20310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.927337][T20310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.960685][T20310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.045214][T20310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.108692][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.336649][T20310] hsr_slave_0: entered promiscuous mode [ 1450.353494][T20310] hsr_slave_1: entered promiscuous mode [ 1450.371920][T20310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1450.394357][T20310] Cannot create hsr debugfs directory [ 1450.412051][T15977] Bluetooth: hci3: command 0x0406 tx timeout [ 1450.491079][T15977] Bluetooth: hci2: command 0x0419 tx timeout [ 1450.900609][ C1] net_ratelimit: 278 callbacks suppressed [ 1451.016146][T20310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.261157][T20310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.596393][T15977] Bluetooth: hci0: command 0x0c1a tx timeout [ 1451.784275][T15977] Bluetooth: hci1: command 0x0406 tx timeout [ 1452.222079][T20310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.404191][T20310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.491042][T15977] Bluetooth: hci3: command 0x0406 tx timeout [ 1452.583617][T15977] Bluetooth: hci2: command 0x0419 tx timeout [ 1453.706487][T20310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1454.261334][T20310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1454.651154][T15977] Bluetooth: hci2: command 0x0419 tx timeout [ 1454.714512][T20310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1455.024312][T20310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1455.929448][T20310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.017383][T20310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.096696][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.103921][T11749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.155980][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.163192][T11749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.231231][T20418] loop9: detected capacity change from 0 to 512 [ 1456.292726][T20418] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1456.414176][T20418] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3477: bad orphan inode 13 [ 1456.420611][ C1] net_ratelimit: 123 callbacks suppressed [ 1456.465666][T20418] ext4_test_bit(bit=12, block=18) = 1 [ 1456.479430][T20418] is_bad_inode(inode)=0 [ 1456.484276][T20418] NEXT_ORPHAN(inode)=0 [ 1456.488471][T20418] max_ino=32 [ 1456.492163][T20418] i_nlink=1 [ 1456.496872][T20418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1456.730639][T20313] Bluetooth: hci2: command 0x0419 tx timeout [ 1457.149495][T20433] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1457.185173][T20310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.224839][T20433] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3477: bg 0: block 248: padding at end of block bitmap is not set [ 1457.284705][T20433] Quota error (device loop9): write_blk: dquota write failed [ 1457.355992][T20433] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1457.390699][T20433] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3477: Failed to acquire dquot type 1 [ 1458.044384][T20310] veth0_vlan: entered promiscuous mode [ 1458.075450][T20310] veth1_vlan: entered promiscuous mode [ 1458.164525][T20310] veth0_macvtap: entered promiscuous mode [ 1458.179258][T20310] veth1_macvtap: entered promiscuous mode [ 1458.239027][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.264511][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.275300][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.286617][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.297212][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.308084][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.348077][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.380413][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.410683][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.440921][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.450966][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.461516][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.474168][T20310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.490071][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.507048][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.517518][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.533679][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.544514][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.555108][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1458.572529][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.586782][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.600012][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.610740][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.638091][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.663893][T20310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.678143][T20310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.696035][T20310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.737674][T20310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.758781][T20310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.775617][T20310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.784635][T20310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.016258][T16478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.039046][T16478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.137954][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.155719][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.348976][T20448] loop9: detected capacity change from 0 to 32768 [ 1459.367400][T20448] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.3480 (20448) [ 1459.454658][T20448] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1459.503133][T20448] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 1459.544508][T20448] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1459.582586][T20448] BTRFS info (device loop9): use zstd compression, level 3 [ 1459.589830][T20448] BTRFS info (device loop9): using free space tree [ 1459.749976][T20448] BTRFS info (device loop9): enabling ssd optimizations [ 1459.757695][T20448] BTRFS info (device loop9): auto enabling async discard [ 1460.555570][T14074] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1461.108855][T20492] FAULT_INJECTION: forcing a failure. [ 1461.108855][T20492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.160373][T20492] CPU: 0 PID: 20492 Comm: syz.1.3489 Not tainted syzkaller #0 [ 1461.167989][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1461.178069][T20492] Call Trace: [ 1461.181370][T20492] [ 1461.184325][T20492] dump_stack_lvl+0x18c/0x250 [ 1461.189038][T20492] ? show_regs_print_info+0x20/0x20 [ 1461.194271][T20492] ? load_image+0x420/0x420 [ 1461.198809][T20492] ? __might_fault+0xaa/0x120 [ 1461.203519][T20492] ? __lock_acquire+0x7eb0/0x7eb0 [ 1461.208580][T20492] should_fail_ex+0x394/0x4c0 [ 1461.213295][T20492] _copy_from_iter+0x1cd/0x1290 [ 1461.218215][T20492] ? copyout_mc+0x70/0x70 [ 1461.222571][T20492] ? __virt_addr_valid+0x10c/0x380 [ 1461.227718][T20492] ? __virt_addr_valid+0x10c/0x380 [ 1461.232862][T20492] ? __virt_addr_valid+0x10c/0x380 [ 1461.238015][T20492] ? __check_object_size+0x4fc/0xa40 [ 1461.243337][T20492] tipc_msg_build+0x87a/0xe60 [ 1461.248179][T20492] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 1461.254297][T20492] ? tipc_group_bc_cong+0x15c/0x210 [ 1461.259529][T20492] tipc_send_group_bcast+0x7d8/0xad0 [ 1461.264887][T20492] ? tipc_wait_for_connect+0x650/0x650 [ 1461.270386][T20492] ? xfd_validate_state+0x6d/0x150 [ 1461.275519][T20492] ? save_fpregs_to_fpstate+0x9e/0x200 [ 1461.280992][T20492] ? wait_woken+0x180/0x180 [ 1461.285504][T20492] __tipc_sendmsg+0x314/0x2b20 [ 1461.290271][T20492] ? __lock_acquire+0x1431/0x7eb0 [ 1461.295301][T20492] ? rht_unlock+0x1d0/0x1d0 [ 1461.299811][T20492] ? aa_sk_perm+0x8e0/0x8e0 [ 1461.304313][T20492] ? verify_lock_unused+0x140/0x140 [ 1461.309509][T20492] ? __schedule+0x15b6/0x4700 [ 1461.314260][T20492] ? verify_lock_unused+0x140/0x140 [ 1461.319475][T20492] ? mark_lock+0x94/0x320 [ 1461.323802][T20492] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1461.329785][T20492] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1461.335157][T20492] ? lockdep_hardirqs_on+0x98/0x150 [ 1461.340364][T20492] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1461.345732][T20492] ? _local_bh_enable+0xa0/0xa0 [ 1461.350592][T20492] tipc_sendmsg+0x55/0x70 [ 1461.354928][T20492] sock_write_iter+0x2dc/0x420 [ 1461.359695][T20492] ? sock_read_iter+0x3f0/0x3f0 [ 1461.364551][T20492] ? common_file_perm+0x198/0x1f0 [ 1461.369594][T20492] vfs_write+0x474/0x9a0 [ 1461.373846][T20492] ? file_end_write+0x250/0x250 [ 1461.378702][T20492] ? __fget_files+0x3fc/0x460 [ 1461.383390][T20492] ? __fdget_pos+0x1d8/0x330 [ 1461.387981][T20492] ? ksys_write+0x74/0x260 [ 1461.392414][T20492] ksys_write+0x151/0x260 [ 1461.396764][T20492] ? __ia32_sys_read+0x90/0x90 [ 1461.401531][T20492] ? lockdep_hardirqs_on+0x98/0x150 [ 1461.406738][T20492] do_syscall_64+0x55/0xb0 [ 1461.411159][T20492] ? clear_bhb_loop+0x40/0x90 [ 1461.415845][T20492] ? clear_bhb_loop+0x40/0x90 [ 1461.420539][T20492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1461.426525][T20492] RIP: 0033:0x7fe60bf9f559 [ 1461.430939][T20492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.450550][T20492] RSP: 002b:00007fe60ced2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1461.458969][T20492] RAX: ffffffffffffffda RBX: 00007fe60c225fa0 RCX: 00007fe60bf9f559 [ 1461.466940][T20492] RDX: 00000000000101d0 RSI: 0000200000000180 RDI: 0000000000000006 [ 1461.474914][T20492] RBP: 00007fe60c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1461.482886][T20492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1461.490942][T20492] R13: 00007fe60c226038 R14: 00007fe60c225fa0 R15: 00007ffcb9febb78 [ 1461.498921][T20492] [ 1461.514600][T20490] loop9: detected capacity change from 0 to 8192 [ 1461.568991][T20490] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1461.630786][T20490] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1461.647720][ C1] net_ratelimit: 140 callbacks suppressed [ 1461.684988][T20490] REISERFS (device loop9): using ordered data mode [ 1461.730950][T20490] reiserfs: using flush barriers [ 1461.743987][T20490] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1461.814198][T20490] REISERFS (device loop9): checking transaction log (loop9) [ 1461.888217][T20497] ip_tables: iptables: counters copy to user failed while replacing table [ 1462.451409][T20490] REISERFS (device loop9): Using tea hash to sort names [ 1462.553109][T20490] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1464.583720][T20527] overlayfs: missing 'lowerdir' [ 1466.970591][ C1] net_ratelimit: 104 callbacks suppressed [ 1468.156811][T20555] loop1: detected capacity change from 0 to 512 [ 1468.179430][T20555] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1468.194493][T20555] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3503: invalid indirect mapped block 256 (level 1) [ 1468.209115][T20555] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3503: invalid indirect mapped block 2683928664 (level 1) [ 1468.225804][T20555] EXT4-fs (loop1): 1 truncate cleaned up [ 1468.233959][T20555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1469.133247][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.170864][ C0] net_ratelimit: 104 callbacks suppressed [ 1472.248521][T20589] overlayfs: missing 'lowerdir' [ 1472.794932][T20599] Bluetooth: MGMT ver 1.22 [ 1472.853211][T20601] loop1: detected capacity change from 0 to 4096 [ 1472.881382][T20603] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1474.808341][T20626] overlayfs: missing 'lowerdir' [ 1474.819373][T20313] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1474.826669][T15977] Bluetooth: hci2: command 0x0419 tx timeout [ 1477.359295][T20651] loop1: detected capacity change from 0 to 8192 [ 1477.369383][T20651] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1477.383377][T20651] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1477.393357][T20651] REISERFS (device loop1): using ordered data mode [ 1477.400133][T20651] reiserfs: using flush barriers [ 1477.412861][T20651] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1477.443598][T20651] REISERFS (device loop1): checking transaction log (loop1) [ 1477.616908][T20651] REISERFS (device loop1): Using tea hash to sort names [ 1477.631869][T20651] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1477.690602][ C0] net_ratelimit: 119 callbacks suppressed [ 1477.835768][T20659] loop9: detected capacity change from 0 to 512 [ 1477.903171][T20659] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1477.947363][T20659] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3535: invalid indirect mapped block 256 (level 1) [ 1478.002257][T20659] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3535: invalid indirect mapped block 2683928664 (level 1) [ 1478.061776][T20659] EXT4-fs (loop9): 1 truncate cleaned up [ 1478.084289][T20659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1478.391494][T15977] Bluetooth: hci2: command 0x0419 tx timeout [ 1479.839439][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.681216][T20685] overlayfs: missing 'lowerdir' [ 1481.646355][T20698] loop1: detected capacity change from 0 to 8192 [ 1481.667180][T20701] loop9: detected capacity change from 0 to 512 [ 1481.674892][T20701] EXT4-fs: Ignoring removed nobh option [ 1481.695828][T20698] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1481.696026][T20701] EXT4-fs (loop9): 1 truncate cleaned up [ 1481.717470][T20701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1481.737661][T20698] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1481.857772][T20698] REISERFS (device loop1): using ordered data mode [ 1481.891668][T20698] reiserfs: using flush barriers [ 1481.903258][T20698] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1481.951502][T20698] REISERFS (device loop1): checking transaction log (loop1) [ 1482.101629][T20698] REISERFS (device loop1): Using tea hash to sort names [ 1482.117539][T20698] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1482.739158][ C0] net_ratelimit: 108 callbacks suppressed [ 1482.874153][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.987151][T20714] loop9: detected capacity change from 0 to 512 [ 1483.019451][T20714] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1483.055280][T20714] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3549: bad orphan inode 13 [ 1483.076563][T20714] ext4_test_bit(bit=12, block=18) = 1 [ 1483.086151][T20714] is_bad_inode(inode)=0 [ 1483.090332][T20714] NEXT_ORPHAN(inode)=0 [ 1483.129663][T20714] max_ino=32 [ 1483.168545][T20714] i_nlink=1 [ 1483.185816][T20714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1484.173338][T20726] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1484.205714][T20726] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3549: bg 0: block 248: padding at end of block bitmap is not set [ 1484.247831][T20726] Quota error (device loop9): write_blk: dquota write failed [ 1484.256392][T20726] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1484.266801][T20726] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3549: Failed to acquire dquot type 1 [ 1484.511891][T20724] overlayfs: missing 'lowerdir' [ 1484.740018][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.746464][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.773029][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1485.933274][T20742] loop1: detected capacity change from 0 to 512 [ 1485.941034][T20742] EXT4-fs: Ignoring removed nobh option [ 1486.026435][T20742] EXT4-fs (loop1): 1 truncate cleaned up [ 1486.033577][T20742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1486.408101][T20746] loop9: detected capacity change from 0 to 8192 [ 1486.432158][T20746] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1486.553678][T20746] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1486.595197][T20746] REISERFS (device loop9): using ordered data mode [ 1486.630832][T20746] reiserfs: using flush barriers [ 1486.659585][T20746] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1486.694850][T20746] REISERFS (device loop9): checking transaction log (loop9) [ 1487.423606][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1487.622965][T20758] Bluetooth: MGMT ver 1.22 [ 1487.673351][T20746] REISERFS (device loop9): Using tea hash to sort names [ 1487.693837][T20746] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1487.850573][ C0] net_ratelimit: 104 callbacks suppressed [ 1493.050819][ C1] net_ratelimit: 89 callbacks suppressed [ 1493.389293][T20808] loop4: detected capacity change from 0 to 8192 [ 1493.481525][T20808] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1493.516036][T20808] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1493.527474][T20808] REISERFS (device loop4): using ordered data mode [ 1493.534503][T20808] reiserfs: using flush barriers [ 1493.543767][T20808] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1493.841459][T20808] REISERFS (device loop4): checking transaction log (loop4) [ 1494.425366][T20808] REISERFS (device loop4): Using tea hash to sort names [ 1494.458400][T20808] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1495.357685][T20831] loop1: detected capacity change from 0 to 512 [ 1495.365347][T20831] EXT4-fs: Ignoring removed nobh option [ 1495.426126][T20831] EXT4-fs (loop1): 1 truncate cleaned up [ 1495.434540][T20831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1497.104968][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.401194][T20851] loop1: detected capacity change from 0 to 512 [ 1497.465332][T20851] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1498.076922][T20851] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.3588: bad orphan inode 13 [ 1498.170932][ T1351] net_ratelimit: 102 callbacks suppressed [ 1498.178152][T20851] ext4_test_bit(bit=12, block=18) = 1 [ 1498.196151][T20851] is_bad_inode(inode)=0 [ 1498.210806][T20851] NEXT_ORPHAN(inode)=0 [ 1498.214925][T20851] max_ino=32 [ 1498.272302][T20851] i_nlink=1 [ 1498.276807][T20851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1498.454930][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1500.163344][T20882] loop1: detected capacity change from 0 to 512 [ 1500.190992][T20882] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1500.199763][T20882] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3599: invalid indirect mapped block 256 (level 1) [ 1500.219535][T20882] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3599: invalid indirect mapped block 2683928664 (level 1) [ 1500.236138][T20882] EXT4-fs (loop1): 1 truncate cleaned up [ 1500.245142][T20882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.316471][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.210582][ C1] net_ratelimit: 82 callbacks suppressed [ 1503.509753][T20915] overlayfs: missing 'lowerdir' [ 1503.762606][T20919] loop4: detected capacity change from 0 to 512 [ 1503.770884][T20919] EXT4-fs: Ignoring removed nobh option [ 1503.794535][T20919] EXT4-fs (loop4): 1 truncate cleaned up [ 1503.801650][T20919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.237324][T20310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.571126][T20951] overlayfs: missing 'lowerdir' [ 1507.845310][T20966] loop9: detected capacity change from 0 to 512 [ 1507.853088][T20966] EXT4-fs: Ignoring removed nobh option [ 1507.878081][T20966] EXT4-fs (loop9): 1 truncate cleaned up [ 1507.886105][T20966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1508.410740][ C0] net_ratelimit: 112 callbacks suppressed [ 1509.112172][T20980] loop4: detected capacity change from 0 to 512 [ 1509.129978][T20980] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1509.178828][T20980] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.3628: bad orphan inode 13 [ 1509.202070][T20980] ext4_test_bit(bit=12, block=18) = 1 [ 1509.326453][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.348595][T20980] is_bad_inode(inode)=0 [ 1509.396824][T20980] NEXT_ORPHAN(inode)=0 [ 1509.457214][T20980] max_ino=32 [ 1509.482762][T20980] i_nlink=1 [ 1509.525516][T20980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1509.573917][T20991] loop9: detected capacity change from 0 to 512 [ 1510.222895][T20999] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1510.640173][T20999] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.3628: bg 0: block 248: padding at end of block bitmap is not set [ 1510.662042][T20999] Quota error (device loop4): write_blk: dquota write failed [ 1510.669508][T20999] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1510.669564][T20999] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.3628: Failed to acquire dquot type 1 [ 1510.683055][T20991] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1510.723115][T20991] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3631: invalid indirect mapped block 256 (level 1) [ 1510.798520][T20991] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3631: invalid indirect mapped block 2683928664 (level 1) [ 1510.813476][T20991] EXT4-fs (loop9): 1 truncate cleaned up [ 1510.820471][T20991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1510.860461][T20310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1511.646752][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.962137][T21012] loop4: detected capacity change from 0 to 8192 [ 1512.029493][T21012] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1512.094377][T21012] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1512.170851][T21012] REISERFS (device loop4): using ordered data mode [ 1512.190950][T21012] reiserfs: using flush barriers [ 1512.222023][T21012] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1512.271278][T21012] REISERFS (device loop4): checking transaction log (loop4) [ 1512.586962][T21012] REISERFS (device loop4): Using tea hash to sort names [ 1512.611050][T21012] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1513.610571][ C0] net_ratelimit: 101 callbacks suppressed [ 1515.096330][T21051] loop4: detected capacity change from 0 to 128 [ 1515.416409][T21051] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 1515.665632][T21051] FAT-fs (loop4): Filesystem has been set read-only [ 1516.022967][T21051] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 1519.050573][ C0] net_ratelimit: 101 callbacks suppressed [ 1522.640150][T21113] loop9: detected capacity change from 0 to 8192 [ 1522.858907][T21113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1522.891185][T21113] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1522.901903][T21113] REISERFS (device loop9): using ordered data mode [ 1522.908581][T21113] reiserfs: using flush barriers [ 1522.928880][T21113] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1522.951857][T21113] REISERFS (device loop9): checking transaction log (loop9) [ 1523.865182][T21113] REISERFS (device loop9): Using tea hash to sort names [ 1523.879643][T21113] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1523.894344][T21128] loop1: detected capacity change from 0 to 512 [ 1524.115693][T21128] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1524.215801][T21128] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3671: invalid indirect mapped block 256 (level 1) [ 1524.281290][T21128] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3671: invalid indirect mapped block 2683928664 (level 1) [ 1524.330561][ C0] net_ratelimit: 101 callbacks suppressed [ 1524.442512][T21128] EXT4-fs (loop1): 1 truncate cleaned up [ 1524.526680][T21128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.911019][T21135] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1525.116553][T21135] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1525.726826][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.822038][T21176] loop4: detected capacity change from 0 to 256 [ 1529.530599][ C0] net_ratelimit: 108 callbacks suppressed [ 1531.082636][T21208] loop4: detected capacity change from 0 to 4096 [ 1531.122771][T21211] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1534.980562][ C1] net_ratelimit: 96 callbacks suppressed [ 1535.429630][T21249] loop1: detected capacity change from 0 to 512 [ 1535.476445][T21249] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1535.637197][T21249] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.3701: bad orphan inode 13 [ 1535.656539][T21249] ext4_test_bit(bit=12, block=18) = 1 [ 1535.666839][T21249] is_bad_inode(inode)=0 [ 1535.681041][T21249] NEXT_ORPHAN(inode)=0 [ 1535.685777][T21249] max_ino=32 [ 1535.689005][T21249] i_nlink=1 [ 1535.694256][T21249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1536.019532][T21261] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1536.648298][T21261] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3701: bg 0: block 248: padding at end of block bitmap is not set [ 1536.669662][T21261] Quota error (device loop1): write_blk: dquota write failed [ 1536.677410][T21261] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1536.687328][T21261] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.3701: Failed to acquire dquot type 1 [ 1536.935346][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1537.044580][T21263] netlink: 'syz.9.3705': attribute type 1 has an invalid length. [ 1537.225009][T21263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1538.188624][T21263] bond1: (slave ip6erspan0): making interface the new active one [ 1538.248088][T21263] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1539.299006][T21284] loop9: detected capacity change from 0 to 8192 [ 1539.341514][T21284] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1539.399126][T21284] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1539.445516][T21284] REISERFS (device loop9): using ordered data mode [ 1539.477526][T21284] reiserfs: using flush barriers [ 1539.544107][T21284] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1539.599971][T21284] REISERFS (device loop9): checking transaction log (loop9) [ 1539.880674][T21284] REISERFS (device loop9): Using tea hash to sort names [ 1539.888053][T21284] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1540.170557][ C0] net_ratelimit: 92 callbacks suppressed [ 1542.669518][T21321] hub 5-0:1.0: USB hub found [ 1542.677672][T21321] hub 5-0:1.0: 1 port detected [ 1543.278558][T21322] loop1: detected capacity change from 0 to 8192 [ 1543.324246][T21322] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1543.384796][T21322] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1543.428422][T21322] REISERFS (device loop1): using ordered data mode [ 1543.468040][T21322] reiserfs: using flush barriers [ 1543.512623][T21322] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1543.545368][T21322] REISERFS (device loop1): checking transaction log (loop1) [ 1543.761854][T21322] REISERFS (device loop1): Using tea hash to sort names [ 1543.791424][T21322] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1545.399307][T21343] net_ratelimit: 121 callbacks suppressed [ 1545.399323][T21343] ip_tables: iptables: counters copy to user failed while replacing table [ 1546.177796][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.230752][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.509239][ C0] net_ratelimit: 71 callbacks suppressed [ 1555.530790][ C0] net_ratelimit: 90 callbacks suppressed [ 1555.989454][T21419] loop4: detected capacity change from 0 to 512 [ 1556.062331][T21419] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1556.133265][T21419] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.3749: bad orphan inode 13 [ 1556.160887][T21419] ext4_test_bit(bit=12, block=18) = 1 [ 1556.176591][T21419] is_bad_inode(inode)=0 [ 1556.181010][T21419] NEXT_ORPHAN(inode)=0 [ 1556.185104][T21419] max_ino=32 [ 1556.208045][T21419] i_nlink=1 [ 1556.212792][T21419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1556.584351][T21431] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1556.669809][T21431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.3749: bg 0: block 248: padding at end of block bitmap is not set [ 1556.686146][T21424] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 1556.762992][T21431] Quota error (device loop4): write_blk: dquota write failed [ 1556.772369][T21431] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1556.782965][T21431] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.3749: Failed to acquire dquot type 1 [ 1557.106504][T20310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1557.327121][ T28] audit: type=1326 audit(1793344068.804:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21436 comm="syz.4.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6df9f559 code=0x7ffc0000 [ 1557.546653][ T28] audit: type=1326 audit(1793344068.804:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21436 comm="syz.4.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6df9f559 code=0x7ffc0000 [ 1557.749498][ T28] audit: type=1326 audit(1793344068.924:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21436 comm="syz.4.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0b6df9f559 code=0x7ffc0000 [ 1558.122600][ T28] audit: type=1326 audit(1793344068.934:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21436 comm="syz.4.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6df9f559 code=0x7ffc0000 [ 1558.344513][ T28] audit: type=1326 audit(1793344068.954:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21436 comm="syz.4.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6df9f559 code=0x7ffc0000 [ 1560.899574][T11354] net_ratelimit: 100 callbacks suppressed [ 1565.867483][T21527] loop9: detected capacity change from 0 to 512 [ 1565.882280][T21527] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1566.037988][ T2976] net_ratelimit: 93 callbacks suppressed [ 1566.136091][T21527] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3783: bad orphan inode 13 [ 1566.154441][T21527] ext4_test_bit(bit=12, block=18) = 1 [ 1566.166135][T21527] is_bad_inode(inode)=0 [ 1566.170330][T21527] NEXT_ORPHAN(inode)=0 [ 1566.433546][T21527] max_ino=32 [ 1566.672933][T21527] i_nlink=1 [ 1566.945225][T21527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1567.911410][T21545] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1568.241933][T21545] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3783: bg 0: block 248: padding at end of block bitmap is not set [ 1568.272403][T21545] Quota error (device loop9): write_blk: dquota write failed [ 1568.280224][T21545] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1568.290184][T21545] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3783: Failed to acquire dquot type 1 [ 1568.422969][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1570.260741][ C0] hrtimer: interrupt took 2084022 ns [ 1571.141812][ T1325] net_ratelimit: 194 callbacks suppressed [ 1571.997799][T21585] loop9: detected capacity change from 0 to 512 [ 1572.162634][T21585] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1572.531169][T21585] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3798: bad orphan inode 13 [ 1573.137649][T21585] ext4_test_bit(bit=12, block=18) = 1 [ 1573.171873][T21585] is_bad_inode(inode)=0 [ 1573.197977][T21585] NEXT_ORPHAN(inode)=0 [ 1573.207183][T21585] max_ino=32 [ 1573.211881][T21585] i_nlink=1 [ 1573.219378][T21585] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1574.743678][T21607] netlink: 'syz.2.3804': attribute type 4 has an invalid length. [ 1574.792380][T21607] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1574.826129][T21607] .`: renamed from bond0 (while UP) [ 1575.696320][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1576.171243][ C0] net_ratelimit: 126 callbacks suppressed [ 1579.411023][T21642] rxe_eth0 speed is unknown, defaulting to 1000 [ 1581.380596][ C0] net_ratelimit: 130 callbacks suppressed [ 1581.528145][T21662] loop9: detected capacity change from 0 to 512 [ 1581.761431][T21662] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1581.864253][T21662] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3819: bad orphan inode 13 [ 1581.902210][T21662] ext4_test_bit(bit=12, block=18) = 1 [ 1582.004140][T21662] is_bad_inode(inode)=0 [ 1582.021547][T21662] NEXT_ORPHAN(inode)=0 [ 1582.034223][T21662] max_ino=32 [ 1582.044396][T21662] i_nlink=1 [ 1582.058364][T21662] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1585.191062][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1585.412340][T21678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1586.583568][ T11] net_ratelimit: 118 callbacks suppressed [ 1588.894028][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3831'. [ 1588.961891][T21704] loop1: detected capacity change from 0 to 512 [ 1589.016308][T21704] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1589.100877][T21704] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.3832: bad orphan inode 13 [ 1589.129466][T21704] ext4_test_bit(bit=12, block=18) = 1 [ 1589.170784][T21704] is_bad_inode(inode)=0 [ 1589.178641][T21704] NEXT_ORPHAN(inode)=0 [ 1589.200044][T21704] max_ino=32 [ 1589.222921][T21704] i_nlink=1 [ 1589.236278][T21704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1589.625766][T21709] rxe_eth0 speed is unknown, defaulting to 1000 [ 1590.584084][T21739] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1590.762860][T21739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3832: bg 0: block 248: padding at end of block bitmap is not set [ 1591.324600][T21739] Quota error (device loop1): write_blk: dquota write failed [ 1591.382649][T21739] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1591.490782][T21739] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.3832: Failed to acquire dquot type 1 [ 1591.610644][ C0] net_ratelimit: 123 callbacks suppressed [ 1593.100916][ T28] audit: type=1326 audit(1793344104.574:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.2.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52559f559 code=0x7ffc0000 [ 1593.124972][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.220726][ T28] audit: type=1326 audit(1793344104.574:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.2.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52559f559 code=0x7ffc0000 [ 1593.328584][ T28] audit: type=1326 audit(1793344104.584:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.2.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff52559f559 code=0x7ffc0000 [ 1593.413784][ T28] audit: type=1326 audit(1793344104.584:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.2.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52559f559 code=0x7ffc0000 [ 1593.518714][ T28] audit: type=1326 audit(1793344104.594:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.2.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ff52559f559 code=0x7ffc0000 [ 1593.614735][ T28] audit: type=1326 audit(1793344104.594:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21758 comm="syz.2.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52559f559 code=0x7ffc0000 [ 1594.877500][T16532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1596.730519][ C1] net_ratelimit: 96 callbacks suppressed [ 1597.986966][T21797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3852'. [ 1598.027465][T21797] syz.1.3852: vmalloc error: size 4096, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=test [ 1598.050684][T21797] ,mems_allowed=0-1 [ 1598.060854][T21797] CPU: 0 PID: 21797 Comm: syz.1.3852 Not tainted syzkaller #0 [ 1598.068355][T21797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1598.078428][T21797] Call Trace: [ 1598.081722][T21797] [ 1598.084648][T21797] dump_stack_lvl+0x18c/0x250 [ 1598.089333][T21797] ? show_regs_print_info+0x20/0x20 [ 1598.094532][T21797] ? load_image+0x420/0x420 [ 1598.099041][T21797] ? __rcu_read_unlock+0x7c/0xd0 [ 1598.103973][T21797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1598.110384][T21797] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1598.116882][T21797] warn_alloc+0x246/0x340 [ 1598.121216][T21797] ? zone_watermark_ok_safe+0x230/0x230 [ 1598.126754][T21797] ? mod_memcg_page_state+0x4bd/0x940 [ 1598.132141][T21797] __vmalloc_node_range+0x1055/0x1320 [ 1598.137535][T21797] ? free_vm_area+0x50/0x50 [ 1598.142154][T21797] ? kvmalloc_node+0x70/0x180 [ 1598.146840][T21797] ? rcu_is_watching+0x15/0xb0 [ 1598.151600][T21797] ? kvmalloc_node+0x70/0x180 [ 1598.156276][T21797] kvmalloc_node+0x13f/0x180 [ 1598.160867][T21797] ? alloc_netdev_mqs+0x88/0x1090 [ 1598.165888][T21797] alloc_netdev_mqs+0x88/0x1090 [ 1598.170739][T21797] ? br_netpoll_disable+0x80/0x80 [ 1598.175868][T21797] rtnl_create_link+0x310/0xd00 [ 1598.180790][T21797] rtnl_newlink+0x14ad/0x2170 [ 1598.185468][T21797] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.191558][T21797] ? rtnl_setlink+0x4e0/0x4e0 [ 1598.196256][T21797] ? mark_lock+0x94/0x320 [ 1598.200597][T21797] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1598.206594][T21797] ? lock_chain_count+0x20/0x20 [ 1598.211455][T21797] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1598.217620][T21797] ? rtnl_setlink+0x4e0/0x4e0 [ 1598.222294][T21797] rtnetlink_rcv_msg+0x843/0xf90 [ 1598.227229][T21797] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1598.232341][T21797] ? rtnetlink_bind+0x80/0x80 [ 1598.237013][T21797] ? kasan_quarantine_put+0xd8/0x220 [ 1598.242308][T21797] ? lockdep_hardirqs_on+0x98/0x150 [ 1598.247599][T21797] ? slab_free_freelist_hook+0x154/0x240 [ 1598.253254][T21797] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1598.259235][T21797] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1598.264602][T21797] ? lock_chain_count+0x20/0x20 [ 1598.269453][T21797] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1598.274819][T21797] ? lockdep_hardirqs_on+0x98/0x150 [ 1598.280017][T21797] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1598.285411][T21797] ? _local_bh_enable+0xa0/0xa0 [ 1598.290260][T21797] ? __dev_queue_xmit+0x1481/0x3a30 [ 1598.295458][T21797] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1598.300585][T21797] ? ref_tracker_free+0x686/0x830 [ 1598.305613][T21797] netlink_rcv_skb+0x235/0x4c0 [ 1598.310448][T21797] ? rtnetlink_bind+0x80/0x80 [ 1598.315134][T21797] ? netlink_ack+0x1160/0x1160 [ 1598.319904][T21797] ? __lock_acquire+0x7eb0/0x7eb0 [ 1598.324928][T21797] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.330118][T21797] netlink_unicast+0x7b1/0x930 [ 1598.334887][T21797] netlink_sendmsg+0x8d0/0xbf0 [ 1598.339654][T21797] ? netlink_getsockopt+0x590/0x590 [ 1598.344845][T21797] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1598.350392][T21797] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1598.355674][T21797] ? security_socket_sendmsg+0x80/0xa0 [ 1598.361130][T21797] ? netlink_getsockopt+0x590/0x590 [ 1598.366320][T21797] ____sys_sendmsg+0x61b/0x980 [ 1598.371083][T21797] ? __asan_memset+0x22/0x40 [ 1598.375669][T21797] ? __sys_sendmsg_sock+0x30/0x30 [ 1598.380687][T21797] ? __import_iovec+0x5f2/0x850 [ 1598.385549][T21797] ? import_iovec+0x73/0xa0 [ 1598.390050][T21797] ___sys_sendmsg+0x2a6/0x360 [ 1598.394810][T21797] ? taprio_dequeue+0x26/0x540 [ 1598.399655][T21797] ? __sys_sendmsg+0x2b0/0x2b0 [ 1598.404447][T21797] ? __might_fault+0xc6/0x120 [ 1598.409116][T21797] ? __might_fault+0xaa/0x120 [ 1598.413787][T21797] __sys_sendmmsg+0x2ca/0x510 [ 1598.418460][T21797] ? __ia32_sys_sendmsg+0x90/0x90 [ 1598.423482][T21797] ? read_tsc+0x9/0x20 [ 1598.427571][T21797] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1598.433583][T21797] ? lock_chain_count+0x20/0x20 [ 1598.438442][T21797] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1598.444439][T21797] __x64_sys_sendmmsg+0xa0/0xb0 [ 1598.449321][T21797] do_syscall_64+0x55/0xb0 [ 1598.453750][T21797] ? clear_bhb_loop+0x40/0x90 [ 1598.458436][T21797] ? clear_bhb_loop+0x40/0x90 [ 1598.463113][T21797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.469050][T21797] RIP: 0033:0x7fe60bf9f559 [ 1598.473465][T21797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.493078][T21797] RSP: 002b:00007fe60ced2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1598.501490][T21797] RAX: ffffffffffffffda RBX: 00007fe60c225fa0 RCX: 00007fe60bf9f559 [ 1598.509454][T21797] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1598.517417][T21797] RBP: 00007fe60c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1598.525405][T21797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.533367][T21797] R13: 00007fe60c226038 R14: 00007fe60c225fa0 R15: 00007ffcb9febb78 [ 1598.541366][T21797] [ 1598.657767][T21797] Mem-Info: [ 1598.660904][T21797] active_anon:17292 inactive_anon:342 isolated_anon:0 [ 1598.660904][T21797] active_file:10115 inactive_file:12306 isolated_file:0 [ 1598.660904][T21797] unevictable:768 dirty:84 writeback:0 [ 1598.660904][T21797] slab_reclaimable:6886 slab_unreclaimable:121413 [ 1598.660904][T21797] mapped:22613 shmem:15643 pagetables:801 [ 1598.660904][T21797] sec_pagetables:0 bounce:0 [ 1598.660904][T21797] kernel_misc_reclaimable:0 [ 1598.660904][T21797] free:275304 free_pcp:20028 free_cma:0 [ 1598.660958][T21797] Node 0 active_anon:2748kB inactive_anon:1224kB active_file:5484kB inactive_file:2908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:69384kB dirty:176kB writeback:0kB shmem:3224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11852kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 1598.706348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.780215][T21797] Node 1 active_anon:66420kB inactive_anon:144kB active_file:34976kB inactive_file:46316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:21068kB dirty:160kB writeback:0kB shmem:59348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1860kB pagetables:984kB sec_pagetables:0kB all_unreclaimable? no [ 1598.812464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.873891][T21797] Node 0 DMA free:10268kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:120kB free_cma:0kB [ 1598.960910][T21797] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 1598.967423][T21797] Node 0 DMA32 free:43332kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:2844kB inactive_anon:1212kB active_file:5464kB inactive_file:2744kB unevictable:1536kB writepending:176kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:33284kB local_pcp:20008kB free_cma:0kB [ 1598.997696][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.009215][T21797] lowmem_reserve[]: 0 0 0 0 0 [ 1599.014387][T21797] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:8kB active_file:20kB inactive_file:164kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1599.041120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.097428][T21797] lowmem_reserve[]: 0 0 0 0 0 [ 1599.110860][T21803] loop4: detected capacity change from 0 to 512 [ 1599.139478][T21797] Node 1 Normal free:1047608kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:66720kB inactive_anon:144kB active_file:34976kB inactive_file:46316kB unevictable:1536kB writepending:160kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:46344kB local_pcp:16616kB free_cma:0kB [ 1599.213416][T21803] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1599.237163][T21797] lowmem_reserve[]: 0 0 0 0 0 [ 1599.339925][T21797] Node 0 DMA: 3*4kB (UM) 0*8kB 1*16kB (M) 2*32kB (UM) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10268kB [ 1599.358736][T21803] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.3855: bad orphan inode 13 [ 1599.363774][T21797] Node 0 DMA32: 274*4kB (UME) 120*8kB (UME) 270*16kB (UME) 213*32kB (UME) 173*64kB (UME) 83*128kB (UE) 32*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43080kB [ 1599.398027][T21803] ext4_test_bit(bit=12, block=18) = 1 [ 1599.407850][T21797] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1599.424690][T21797] Node 1 Normal: 38*4kB (UE) 22*8kB (UE) 103*16kB (UME) 299*32kB (UME) 80*64kB (UME) 31*128kB (UME) 15*256kB (UM) 11*512kB (ME) 7*1024kB (ME) 11*2048kB (UME) 241*4096kB (M) = 1046936kB [ 1599.557873][T21797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.656278][T21803] is_bad_inode(inode)=0 [ 1599.767309][T21803] NEXT_ORPHAN(inode)=0 [ 1599.805989][T21797] Node 0 hugepages_total=804 hugepages_free=804 hugepages_surp=0 hugepages_size=2048kB [ 1599.897042][T21803] max_ino=32 [ 1599.960325][T21803] i_nlink=1 [ 1600.082683][T21797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1600.101941][T21803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1600.141001][T21797] Node 1 hugepages_total=1243 hugepages_free=1243 hugepages_surp=0 hugepages_size=2048kB [ 1600.210288][T21797] 42070 total pagecache pages [ 1600.232109][T21797] 1080 pages in swap cache [ 1600.257098][T21797] Free swap = 87024kB [ 1600.266778][T21797] Total swap = 124996kB [ 1600.287703][T21797] 2097051 pages RAM [ 1600.318131][T21797] 0 pages HighMem/MovableOnly [ 1600.338376][T21797] 421729 pages reserved [ 1600.348543][T21797] 0 pages cma reserved [ 1601.142944][T21824] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1601.167368][T21824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.3855: bg 0: block 248: padding at end of block bitmap is not set [ 1601.215832][T21824] Quota error (device loop4): write_blk: dquota write failed [ 1601.224043][T21824] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1601.233957][T21824] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.3855: Failed to acquire dquot type 1 [ 1601.850850][ C1] net_ratelimit: 103 callbacks suppressed [ 1602.050397][T20310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1606.970686][ C0] net_ratelimit: 84 callbacks suppressed [ 1607.618762][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.630891][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.796936][T21874] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1612.090702][ C0] net_ratelimit: 128 callbacks suppressed [ 1612.595028][T21926] Invalid argument reading file caps for ./file0 [ 1613.136008][T21934] loop9: detected capacity change from 0 to 512 [ 1613.157916][T21934] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1613.860301][T21934] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3895: bad orphan inode 13 [ 1613.920917][T21934] ext4_test_bit(bit=12, block=18) = 1 [ 1613.946916][T21934] is_bad_inode(inode)=0 [ 1613.972285][T21934] NEXT_ORPHAN(inode)=0 [ 1613.976400][T21934] max_ino=32 [ 1614.023346][T21934] i_nlink=1 [ 1614.037076][T21934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1614.524213][T21941] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1614.731887][T21941] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3895: bg 0: block 248: padding at end of block bitmap is not set [ 1614.898475][T21941] Quota error (device loop9): write_blk: dquota write failed [ 1614.951311][T21941] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1615.002033][T21941] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3895: Failed to acquire dquot type 1 [ 1616.883531][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1617.105646][ C1] net_ratelimit: 90 callbacks suppressed [ 1618.311995][ T5895] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1618.516781][ T5895] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1618.535546][ T5895] usb 10-1: config 0 has no interface number 0 [ 1618.555866][ T5895] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1618.644614][ T5895] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1618.680085][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.718820][ T5895] usb 10-1: Product: syz [ 1618.732995][ T5895] usb 10-1: Manufacturer: syz [ 1618.768216][ T5895] usb 10-1: SerialNumber: syz [ 1618.799457][ T5895] usb 10-1: config 0 descriptor?? [ 1618.857397][ T5895] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 1619.322809][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 1620.369637][ T5874] usb 10-1: USB disconnect, device number 6 [ 1620.412440][ T5874] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 1622.287065][ C0] net_ratelimit: 98 callbacks suppressed [ 1622.358894][T22007] rxe_eth0 speed is unknown, defaulting to 1000 [ 1623.277567][T22023] netlink: 'syz.2.3923': attribute type 1 has an invalid length. [ 1623.628570][T22023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.814260][T22024] bond0: (slave ip6erspan0): making interface the new active one [ 1623.965799][T22024] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1627.595044][ C0] net_ratelimit: 86 callbacks suppressed [ 1628.233859][T22045] loop9: detected capacity change from 0 to 512 [ 1628.338884][T22045] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1628.455599][T22045] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.3929: bad orphan inode 13 [ 1628.502036][T22045] ext4_test_bit(bit=12, block=18) = 1 [ 1628.507471][T22045] is_bad_inode(inode)=0 [ 1628.565065][T22045] NEXT_ORPHAN(inode)=0 [ 1628.589437][T22045] max_ino=32 [ 1628.643762][T22045] i_nlink=1 [ 1628.692978][T22045] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1629.233301][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1632.343439][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3944'. [ 1632.734590][T20313] Bluetooth: hci2: command 0x0419 tx timeout [ 1632.740760][T15977] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1632.810518][ C1] net_ratelimit: 109 callbacks suppressed [ 1635.392005][T22115] loop4: detected capacity change from 0 to 4096 [ 1635.431518][T22119] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1638.410669][ C1] net_ratelimit: 91 callbacks suppressed [ 1639.269274][T22140] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1639.716858][T22155] loop4: detected capacity change from 0 to 4096 [ 1639.756027][T22158] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1642.636316][T22195] loop9: detected capacity change from 0 to 4096 [ 1642.701718][T22200] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1643.690633][ C1] net_ratelimit: 103 callbacks suppressed [ 1644.330754][T15977] Bluetooth: hci2: command 0x0419 tx timeout [ 1645.210743][T18338] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1645.414295][T18338] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1645.451739][T18338] usb 2-1: config 0 has no interface number 0 [ 1645.459048][T18338] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1645.534058][T18338] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1645.562574][T18338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.603447][T18338] usb 2-1: Product: syz [ 1645.637798][T18338] usb 2-1: Manufacturer: syz [ 1645.661320][T18338] usb 2-1: SerialNumber: syz [ 1645.707229][T18338] usb 2-1: config 0 descriptor?? [ 1645.776540][T18338] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1645.790142][T22240] rxe_eth0 speed is unknown, defaulting to 1000 [ 1647.948712][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 1648.880739][ C0] net_ratelimit: 107 callbacks suppressed [ 1649.071156][T15665] usb 2-1: USB disconnect, device number 29 [ 1649.146133][T15665] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1650.434747][T22306] loop1: detected capacity change from 0 to 8192 [ 1650.460371][T22306] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1650.482108][T22306] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1650.545666][T22306] REISERFS (device loop1): using ordered data mode [ 1650.558068][T22306] reiserfs: using flush barriers [ 1650.582634][T22306] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1650.635721][T22306] REISERFS (device loop1): checking transaction log (loop1) [ 1653.131624][T18338] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1653.335249][T22306] REISERFS (device loop1): Using tea hash to sort names [ 1653.343514][T22306] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1653.387408][T18338] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1653.443189][T18338] usb 10-1: config 0 has no interface number 0 [ 1653.449427][T18338] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1653.558444][T18338] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1653.600546][T18338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.626666][T18338] usb 10-1: Product: syz [ 1653.660725][T18338] usb 10-1: Manufacturer: syz [ 1653.700916][T18338] usb 10-1: SerialNumber: syz [ 1653.739950][T18338] usb 10-1: config 0 descriptor?? [ 1653.804525][T18338] usb 10-1: can't set config #0, error -71 [ 1653.842093][T18338] usb 10-1: USB disconnect, device number 7 [ 1654.331353][ T1351] net_ratelimit: 116 callbacks suppressed [ 1654.743365][T22345] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1656.363894][T22370] loop9: detected capacity change from 0 to 512 [ 1656.418512][T22370] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1656.542772][T22370] EXT4-fs error (device loop9): ext4_orphan_get:1434: comm syz.9.4035: bad orphan inode 13 [ 1656.631357][T22370] ext4_test_bit(bit=12, block=18) = 1 [ 1656.637647][T22370] is_bad_inode(inode)=0 [ 1656.642912][T22370] NEXT_ORPHAN(inode)=0 [ 1656.647754][T22370] max_ino=32 [ 1656.654794][T22370] i_nlink=1 [ 1656.686642][T22370] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1657.166357][T22384] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1657.183148][T22384] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.4035: bg 0: block 248: padding at end of block bitmap is not set [ 1657.222234][T22384] Quota error (device loop9): write_blk: dquota write failed [ 1657.231028][T22384] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1657.241339][T22384] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.4035: Failed to acquire dquot type 1 [ 1657.462997][T14074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1657.882651][T22378] rxe_eth0 speed is unknown, defaulting to 1000 [ 1659.610706][ C0] net_ratelimit: 108 callbacks suppressed [ 1661.111863][T22409] loop9: detected capacity change from 0 to 32768 [ 1661.152395][T22409] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.4042 (22409) [ 1661.266533][T22409] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1661.305992][T22409] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 1661.377907][T22409] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1661.418926][T22409] BTRFS info (device loop9): use zstd compression, level 3 [ 1661.470618][T22409] BTRFS info (device loop9): using free space tree [ 1663.839820][T22409] BTRFS info (device loop9): enabling ssd optimizations [ 1663.882707][T22409] BTRFS info (device loop9): auto enabling async discard [ 1664.181598][T14074] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1664.751312][ T2178] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1664.977821][ T2178] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.011014][ T6641] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1665.036443][ T2178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1665.080645][ T2178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.092663][ T2178] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1665.105781][ T2178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.135603][ T2178] usb 5-1: config 0 descriptor?? [ 1665.222285][ T6641] usb 10-1: Using ep0 maxpacket: 32 [ 1665.248878][ T6641] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1665.280966][ T6641] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.316086][ T6641] usb 10-1: config 0 descriptor?? [ 1665.394373][ T6641] as10x_usb: device has been detected [ 1665.404399][ T6641] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1665.450524][ C1] net_ratelimit: 100 callbacks suppressed [ 1665.509852][ T6641] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1665.614774][ T2178] hid-picolcd 0003:04D8:F002.002B: item fetching failed at offset 3/5 [ 1665.627301][T22463] ------------[ cut here ]------------ [ 1665.633237][T22463] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1665.633383][ T6641] kobject: 'dvb1.frontend0' (ffff88803036e000): fill_kobj_path: path = '/devices/platform/dummy_hcd.9/usb10/10-1/dvb/dvb1.frontend0' [ 1665.656083][T22470] kcov: kcov_start: t = ffff88802e7e9e00, size = 524288, area = ffffc9000d139000 [ 1665.658743][T22463] WARNING: CPU: 0 PID: 22463 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80 [ 1665.666661][ T1325] bond1: (slave macvlan2): update lacpdu: actor port state 4d [ 1665.675958][T22463] Modules linked in: [ 1665.682818][ T1325] bond1: (slave macvlan2): Sent LACPDU on port 1 [ 1665.683983][T22471] kcov: kcov_start: t = ffff88802e7e8000, size = 524288, area = ffffc9000f541000 [ 1665.687366][T22463] [ 1665.703906][T22472] kcov: kcov_start: t = ffff88802a381e00, size = 524288, area = ffffc9000fd44000 [ 1665.706228][T22463] CPU: 0 PID: 22463 Comm: syz.9.4053 Not tainted syzkaller #0 [ 1665.717630][ C1] virtqueue callback for ffff888140663600 (ffffffff85c24d70) [ 1665.724948][T22463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1665.730707][ C1] No more buffers in queue [ 1665.730731][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1665.730755][ C1] No more buffers in queue [ 1665.742045][T22473] kcov: kcov_start: t = ffff88802bbebc00, size = 524288, area = ffffc9000f140000 [ 1665.746443][T22463] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 1665.760169][T22474] kcov: kcov_start: t = ffff888027f90000, size = 524288, area = ffffc90011c32000 [ 1665.766927][T22463] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 64 ee 04 00 0f 85 d1 f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 08 d9 b1 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 1665.780626][ C1] No more buffers in queue [ 1665.781309][T22463] RSP: 0018:ffffc9000e7dfac0 EFLAGS: 00010246 [ 1665.800365][ C1] eth0: xmit ffff88805fb1b000 42:01:0a:80:00:01 [ 1665.800393][ C1] Added buffer head 6 to ffff888140663800 [ 1665.800430][ C1] virtqueue callback for ffff888140663800 (ffffffff85c24e60) [ 1665.801197][ C1] Sent skb ffff88805fb1b000 [ 1665.801232][ C1] No more buffers in queue [ 1665.817303][T22470] sctp: sctp_init_sock: sk:ffff88802cee4800 [ 1665.819183][T22463] [ 1665.849347][ C1] nf_nat: Already setup manip DST for ct ffff888077368180 (status bits 0x188) [ 1665.851755][T22463] RAX: 90d06a1e5baaab00 RBX: ffff888073c56ce0 RCX: 0000000000080000 [ 1665.860539][ C1] nf_nat: Already setup manip SRC for ct ffff888077368180 (status bits 0x188) [ 1665.860990][ C1] wireguard: wg2: Handshake for peer 59 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 1665.861998][ T2976] nf_nat: Already setup manip DST for ct ffff88807736c900 (status bits 0x188) [ 1665.869858][T22463] RDX: ffffc9000e93e000 RSI: 0000000000003749 RDI: 000000000000374a [ 1665.877999][ T2976] nf_nat: Already setup manip SRC for ct ffff88807736c900 (status bits 0x188) [ 1665.902518][T22476] async_waiting @ 22476 [ 1665.908755][ C0] virtqueue callback for ffff88801daa0400 (ffffffff849accf0) [ 1665.917650][T22476] async_continuing @ 22476 after 1 usec [ 1665.921258][ C0] virtqueue interrupt with no work for ffff88801daa0200 [ 1665.921272][ C0] virtqueue interrupt with no work for ffff88801e64be00 [ 1665.922111][T22463] RBP: ffffc9000e7dfc20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 1665.959307][ T1351] bond0: (slave ip6erspan0): Send learning packet: mac 76:f7:0c:89:d1:3c vlan 0 [ 1665.969956][T22463] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92001cfbf68 [ 1665.978484][T22463] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1665.986971][T22463] FS: 00007f04c29a76c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1665.996508][T22463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1666.003573][T22463] CR2: 00005625ab9bd698 CR3: 00000001f6d8d000 CR4: 00000000003506f0 [ 1666.012205][T22463] Call Trace: [ 1666.015761][T22463] [ 1666.018910][T22463] ? __mutex_lock+0x30d/0xc80 [ 1666.023992][T22463] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 1666.031403][T22463] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1666.037488][T22463] ? mutex_lock_nested+0x20/0x20 [ 1666.042834][T22463] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1666.047093][T22470] n_hdlc_tty_open() called (device=ttynull) [ 1666.049201][T22463] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 1666.061495][T22463] ? mutex_unlock+0x10/0x10 [ 1666.066341][T22463] ? mutex_lock_nested+0x20/0x20 [ 1666.068750][T22470] Registering net sysctl (net ffff88802f979e00): net/netfilter [ 1666.071933][T22463] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1666.072026][T22463] ? _raw_spin_unlock_irq+0x23/0x50 [ 1666.072061][T22463] as102_dvb_dmx_start_feed+0x70/0x280 [ 1666.072102][T22463] dmx_ts_feed_start_filtering+0x120/0x220 [ 1666.085028][T22470] procname=nf_hooks_lwtunnel mode=644 proc_handler=nf_hooks_lwtunnel_sysctl_handler data=0000000000000000 [ 1666.085463][T22463] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 1666.116756][T22470] Registering net sysctl (net ffff88802f979e00): net/netfilter/nf_log [ 1666.121089][T22463] dvb_dmxdev_filter_start+0x422/0x10a0 [ 1666.135601][T22478] kcov: kcov_start: t = ffff888025c48000, size = 524288, area = ffffc90013a0c000 [ 1666.138134][T22478] debugfs: creating file '22468' [ 1666.146260][T22463] dvb_demux_do_ioctl+0x482/0x530 [ 1666.153878][T22470] procname=0 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.156515][T22463] dvb_usercopy+0x195/0x2b0 [ 1666.170775][T22463] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1666.177053][T22463] ? dvb_generic_ioctl+0xb0/0xb0 [ 1666.182362][T22463] ? dvb_demux_poll+0x210/0x210 [ 1666.184937][T22470] procname=1 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.187548][T22463] dvb_demux_ioctl+0x29/0x30 [ 1666.202579][T22463] __se_sys_ioctl+0xfd/0x170 [ 1666.204947][T22470] procname=2 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.207503][T22463] do_syscall_64+0x55/0xb0 [ 1666.217569][T22470] procname=3 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.221559][T22463] ? clear_bhb_loop+0x40/0x90 [ 1666.221614][T22463] ? clear_bhb_loop+0x40/0x90 [ 1666.221650][T22463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1666.221683][T22463] RIP: 0033:0x7f04c1b9f559 [ 1666.221712][T22463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.221729][T22463] RSP: 002b:00007f04c29a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1666.221763][T22463] RAX: ffffffffffffffda RBX: 00007f04c1e25fa0 RCX: 00007f04c1b9f559 [ 1666.221789][T22463] RDX: 0000200000000200 RSI: 0000000040146f2c RDI: 0000000000000004 [ 1666.221813][T22463] RBP: 00007f04c1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1666.254005][T22470] procname=4 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.274278][T22463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1666.283200][T22471] kcov: kcov_task_exit: t = ffff88802e7e8000, kcov->t = ffff88802e7e8000 [ 1666.291130][T22463] R13: 00007f04c1e26038 R14: 00007f04c1e25fa0 R15: 00007fffd313db18 [ 1666.335511][T22470] procname=5 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.344276][T22463] [ 1666.357113][T22463] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1666.358922][T22470] procname=6 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.358959][T22470] procname=7 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.358984][T22470] procname=8 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.359009][T22470] procname=9 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.359034][T22470] procname=10 mode=644 proc_handler=nf_log_proc_dostring data=0000000000000000 [ 1666.359901][T22470] Registering net sysctl (net ffff88802f979e00): net/core [ 1666.359940][T22470] procname=rps_default_mask mode=644 proc_handler=rps_default_mask_sysctl data=ffff88802f979e00 [ 1666.359966][T22470] procname=somaxconn mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a1a0 [ 1666.359992][T22470] procname=txrehash mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a1a4 [ 1666.360118][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4/conf/all [ 1666.360131][T22470] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=ffff88814c268d08 [ 1666.360157][T22470] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=ffff88814c268d0c [ 1666.360181][T22470] Not writable by anyone [ 1666.360188][T22470] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d84 [ 1666.360212][T22470] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d14 [ 1666.360236][T22470] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d18 [ 1666.360259][T22470] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d20 [ 1666.360284][T22470] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d24 [ 1666.360308][T22470] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d1c [ 1666.360332][T22470] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d28 [ 1666.360356][T22470] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d60 [ 1666.360379][T22470] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d64 [ 1666.360403][T22470] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d10 [ 1666.362862][T20911] sd 0:0:1:0: cmd ffff88802586e5d0 CDB: 0x28 [ 1666.362887][T20911] Added buffer head 93 to ffff88814065e000 [ 1666.363245][T22470] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d3c [ 1666.363275][T22470] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d2c [ 1666.363299][T22470] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d30 [ 1666.363323][T22470] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d34 [ 1666.363347][T22470] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d38 [ 1666.363370][T22470] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d4c [ 1666.363394][T22470] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d50 [ 1666.363417][T22470] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d58 [ 1666.363441][T22470] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d5c [ 1666.363465][T22470] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d88 [ 1666.363488][T22470] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d68 [ 1666.363511][T22470] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d48 [ 1666.363536][T22470] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d70 [ 1666.363561][T22470] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d74 [ 1666.363586][T22470] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d78 [ 1666.363610][T22470] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff88814c268d80 [ 1666.363635][T22470] procname=disable_xfrm mode=644 proc_handler=ipv4_doint_and_flush data=ffff88814c268d40 [ 1666.363660][T22470] procname=disable_policy mode=644 proc_handler=ipv4_doint_and_flush data=ffff88814c268d44 [ 1666.363684][T22470] procname=promote_secondaries mode=644 proc_handler=ipv4_doint_and_flush data=ffff88814c268d54 [ 1666.363708][T22470] procname=route_localnet mode=644 proc_handler=ipv4_doint_and_flush data=ffff88814c268d6c [ 1666.363733][T22470] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=ipv4_doint_and_flush data=ffff88814c268d7c [ 1666.364062][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4/conf/default [ 1666.364075][T22470] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=ffff88805b3e3808 [ 1666.364101][T22470] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=ffff88805b3e380c [ 1666.364124][T22470] Not writable by anyone [ 1666.364131][T22470] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3884 [ 1666.364155][T22470] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3814 [ 1666.364179][T22470] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3818 [ 1666.364202][T22470] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3820 [ 1666.364226][T22470] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3824 [ 1666.364250][T22470] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e381c [ 1666.364273][T22470] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3828 [ 1666.364339][T22470] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3860 [ 1666.364364][T22470] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3864 [ 1666.364387][T22470] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3810 [ 1666.364410][T22470] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e383c [ 1666.364434][T22470] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e382c [ 1666.364458][T22470] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3830 [ 1666.364482][T22470] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3834 [ 1666.364506][T22470] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3838 [ 1666.364529][T22470] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e384c [ 1666.364552][T22470] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3850 [ 1666.364576][T22470] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3858 [ 1666.364598][T22470] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e385c [ 1666.364622][T22470] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3888 [ 1666.364646][T22470] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3868 [ 1666.364670][T22470] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3848 [ 1666.364694][T22470] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3870 [ 1666.364719][T22470] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3874 [ 1666.364744][T22470] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3878 [ 1666.364768][T22470] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff88805b3e3880 [ 1666.364791][T22470] procname=disable_xfrm mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805b3e3840 [ 1666.364816][T22470] procname=disable_policy mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805b3e3844 [ 1666.364839][T22470] procname=promote_secondaries mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805b3e3854 [ 1666.364864][T22470] procname=route_localnet mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805b3e386c [ 1666.364887][T22470] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805b3e387c [ 1666.365071][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4 [ 1666.365084][T22470] procname=ip_forward mode=644 proc_handler=devinet_sysctl_forward data=ffff88814c268d08 [ 1666.365626][T22470] Registering net sysctl (net ffff88802f979e00): net/core [ 1666.365640][T22470] procname=xfrm_aevent_etime mode=644 proc_handler=proc_douintvec data=ffff88802f97b430 [ 1666.365666][T22470] procname=xfrm_aevent_rseqth mode=644 proc_handler=proc_douintvec data=ffff88802f97b434 [ 1666.365690][T22470] procname=xfrm_larval_drop mode=644 proc_handler=proc_dointvec data=ffff88802f97b438 [ 1666.365714][T22470] procname=xfrm_acq_expires mode=644 proc_handler=proc_dointvec data=ffff88802f97b43c [ 1666.365776][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4 [ 1666.365788][T22470] procname=xfrm4_gc_thresh mode=644 proc_handler=proc_dointvec data=ffff88802f97b484 [ 1666.365839][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4/route [ 1666.365852][T22470] procname=flush mode=200 proc_handler=ipv4_sysctl_rtcache_flush data=0000000000000000 [ 1666.365880][T22470] procname=min_pmtu mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a600 [ 1666.365917][T22470] procname=mtu_expires mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97a604 [ 1666.365942][T22470] procname=min_adv_mss mode=644 proc_handler=proc_dointvec data=ffff88802f97a608 [ 1666.366345][T22470] Registering net sysctl (net ffff88802f979e00): net/mptcp [ 1666.366358][T22470] procname=enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805faf9b90 [ 1666.366383][T22470] procname=add_addr_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88805faf9b88 [ 1666.366407][T22470] procname=checksum_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805faf9b91 [ 1666.366431][T22470] procname=allow_join_initial_addr_port mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805faf9b92 [ 1666.366456][T22470] procname=stale_loss_cnt mode=644 proc_handler=proc_douintvec_minmax data=ffff88805faf9b8c [ 1666.366529][T22470] procname=pm_type mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805faf9b93 [ 1666.366554][T22470] procname=scheduler mode=644 proc_handler=proc_scheduler data=ffff88805faf9b94 [ 1666.366927][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4 [ 1666.366941][T22470] procname=ipfrag_high_thresh mode=644 proc_handler=proc_doulongvec_minmax data=ffff888069147800 [ 1666.366966][T22470] procname=ipfrag_low_thresh mode=644 proc_handler=proc_doulongvec_minmax data=ffff888069147808 [ 1666.366991][T22470] procname=ipfrag_time mode=644 proc_handler=proc_dointvec_jiffies data=ffff888069147810 [ 1666.367015][T22470] procname=ipfrag_max_dist mode=644 proc_handler=proc_dointvec_minmax data=ffff888069147814 [ 1666.367069][T22470] Registering net sysctl (net ffff88802f979e00): net/unix [ 1666.367082][T22470] procname=max_dgram_qlen mode=644 proc_handler=proc_dointvec data=ffff88802f97a2e0 [ 1666.367726][T22470] kobject: 'net' (ffff88807cb08a40): kobject_add_internal: parent: 'nfs', set: 'nfs' [ 1666.367773][T22470] kobject: 'nfs_client' (ffff88807cb08a00): kobject_add_internal: parent: 'net', set: 'nfs' [ 1666.367829][T22470] kobject: 'nfs_client' (ffff88807cb08a00): kobject_uevent_env [ 1666.367865][T22470] kobject: 'nfs_client' (ffff88807cb08a00): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 1666.370214][T22470] Registering net sysctl (net ffff88802f979e00): net/vrf [ 1666.370230][T22470] procname=strict_mode mode=644 proc_handler=vrf_shared_table_handler data=0000000000000000 [ 1666.373912][T22470] Registering net sysctl (net ffff88802f979e00): net/netfilter [ 1666.373927][T22470] procname=nf_conntrack_max mode=444 proc_handler=proc_dointvec_minmax data=ffffffff8f8e7ec8 [ 1666.374040][T22470] Not writable by anyone [ 1666.374048][T22470] procname=nf_conntrack_count mode=444 proc_handler=proc_dointvec data=ffff888063d1d800 [ 1666.374072][T22470] Not writable by anyone [ 1666.374078][T22470] procname=nf_conntrack_buckets mode=444 proc_handler=nf_conntrack_hash_sysctl data=ffffffff8f8e7f1c [ 1666.374103][T22470] Not writable by anyone [ 1666.374110][T22470] procname=nf_conntrack_checksum mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b06d [ 1666.374136][T22470] procname=nf_conntrack_log_invalid mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b069 [ 1666.374162][T22470] procname=nf_conntrack_expect_max mode=444 proc_handler=proc_dointvec_minmax data=ffffffff8f8e7f38 [ 1666.374186][T22470] Not writable by anyone [ 1666.374193][T22470] procname=nf_conntrack_acct mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b06b [ 1666.374217][T22470] procname=nf_conntrack_events mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b06a [ 1666.374242][T22470] procname=nf_conntrack_timestamp mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b06c [ 1666.374415][T22470] procname=nf_conntrack_generic_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b080 [ 1666.374442][T22470] procname=nf_conntrack_tcp_timeout_syn_sent mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b088 [ 1666.374467][T22470] procname=nf_conntrack_tcp_timeout_syn_recv mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b08c [ 1666.374491][T22470] procname=nf_conntrack_tcp_timeout_established mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b090 [ 1666.374516][T22470] procname=nf_conntrack_tcp_timeout_fin_wait mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b094 [ 1666.374542][T22470] procname=nf_conntrack_tcp_timeout_close_wait mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b098 [ 1666.374567][T22470] procname=nf_conntrack_tcp_timeout_last_ack mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b09c [ 1666.374592][T22470] procname=nf_conntrack_tcp_timeout_time_wait mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0a0 [ 1666.374617][T22470] procname=nf_conntrack_tcp_timeout_close mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0a4 [ 1666.374643][T22470] procname=nf_conntrack_tcp_timeout_max_retrans mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0b4 [ 1666.374668][T22470] procname=nf_conntrack_tcp_timeout_unacknowledged mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0b8 [ 1666.374692][T22470] procname=nf_flowtable_tcp_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0c0 [ 1666.374717][T22470] procname=nf_conntrack_tcp_loose mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b0bc [ 1666.374742][T22470] procname=nf_conntrack_tcp_be_liberal mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b0bd [ 1666.374767][T22470] procname=nf_conntrack_tcp_ignore_invalid_rst mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b0bf [ 1666.374791][T22470] procname=nf_conntrack_tcp_max_retrans mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b0be [ 1666.374816][T22470] procname=nf_conntrack_udp_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0c4 [ 1666.374842][T22470] procname=nf_conntrack_udp_timeout_stream mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0c8 [ 1666.374867][T22470] procname=nf_flowtable_udp_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0cc [ 1666.374892][T22470] procname=nf_conntrack_icmp_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0d0 [ 1666.374924][T22470] procname=nf_conntrack_icmpv6_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0d4 [ 1666.374949][T22470] procname=nf_conntrack_sctp_timeout_closed mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b108 [ 1666.374973][T22470] procname=nf_conntrack_sctp_timeout_cookie_wait mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b10c [ 1666.374998][T22470] procname=nf_conntrack_sctp_timeout_cookie_echoed mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b110 [ 1666.375023][T22470] procname=nf_conntrack_sctp_timeout_established mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b114 [ 1666.375049][T22470] procname=nf_conntrack_sctp_timeout_shutdown_sent mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b118 [ 1666.375074][T22470] procname=nf_conntrack_sctp_timeout_shutdown_recd mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b11c [ 1666.375100][T22470] procname=nf_conntrack_sctp_timeout_shutdown_ack_sent mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b120 [ 1666.375126][T22470] procname=nf_conntrack_sctp_timeout_heartbeat_sent mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b124 [ 1666.375152][T22470] procname=nf_conntrack_dccp_timeout_request mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0e0 [ 1666.375177][T22470] procname=nf_conntrack_dccp_timeout_respond mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0e4 [ 1666.375202][T22470] procname=nf_conntrack_dccp_timeout_partopen mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0e8 [ 1666.375228][T22470] procname=nf_conntrack_dccp_timeout_open mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0ec [ 1666.375254][T22470] procname=nf_conntrack_dccp_timeout_closereq mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0f0 [ 1666.375279][T22470] procname=nf_conntrack_dccp_timeout_closing mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0f4 [ 1666.375305][T22470] procname=nf_conntrack_dccp_timeout_timewait mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b0f8 [ 1666.375330][T22470] procname=nf_conntrack_dccp_loose mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97b0d8 [ 1666.375355][T22470] procname=nf_conntrack_gre_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b140 [ 1666.375482][T22470] procname=nf_conntrack_gre_timeout_stream mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97b144 [ 1666.375936][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4/vs [ 1666.375950][T22470] procname=amemthresh mode=644 proc_handler=proc_dointvec data=ffff888144714790 [ 1666.375976][T22470] procname=am_droprate mode=644 proc_handler=proc_dointvec data=ffff888144714794 [ 1666.375999][T22470] procname=drop_entry mode=644 proc_handler=proc_do_defense_mode data=ffff888144714798 [ 1666.376026][T22470] procname=drop_packet mode=644 proc_handler=proc_do_defense_mode data=ffff88814471479c [ 1666.376051][T22470] procname=conntrack mode=644 proc_handler=proc_dointvec data=ffff8881447147a4 [ 1666.376075][T22470] procname=secure_tcp mode=644 proc_handler=proc_do_defense_mode data=ffff8881447147a0 [ 1666.376101][T22470] procname=snat_reroute mode=644 proc_handler=proc_dointvec data=ffff8881447147a8 [ 1666.376125][T22470] procname=sync_version mode=644 proc_handler=proc_dointvec_minmax data=ffff8881447147ac [ 1666.376150][T22470] procname=sync_ports mode=644 proc_handler=proc_do_sync_ports data=ffff8881447147b0 [ 1666.376175][T22470] procname=sync_persist_mode mode=644 proc_handler=proc_dointvec data=ffff8881447147b4 [ 1666.376199][T22470] procname=sync_qlen_max mode=644 proc_handler=proc_doulongvec_minmax data=ffff8881447147b8 [ 1666.376223][T22470] procname=sync_sock_size mode=644 proc_handler=proc_dointvec data=ffff8881447147c0 [ 1666.376247][T22470] procname=cache_bypass mode=644 proc_handler=proc_dointvec data=ffff8881447147c4 [ 1666.376272][T22470] procname=expire_nodest_conn mode=644 proc_handler=proc_dointvec data=ffff8881447147c8 [ 1666.376296][T22470] procname=sloppy_tcp mode=644 proc_handler=proc_dointvec data=ffff8881447147cc [ 1666.376320][T22470] procname=sloppy_sctp mode=644 proc_handler=proc_dointvec data=ffff8881447147d0 [ 1666.376344][T22470] procname=expire_quiescent_template mode=644 proc_handler=proc_dointvec data=ffff8881447147d4 [ 1666.376368][T22470] procname=sync_threshold mode=644 proc_handler=proc_do_sync_threshold data=ffff8881447147d8 [ 1666.376394][T22470] procname=sync_refresh_period mode=644 proc_handler=proc_dointvec_jiffies data=ffff8881447147e0 [ 1666.376419][T22470] procname=sync_retries mode=644 proc_handler=proc_dointvec_minmax data=ffff8881447147e4 [ 1666.376443][T22470] procname=nat_icmp_send mode=644 proc_handler=proc_dointvec data=ffff8881447147e8 [ 1666.376467][T22470] procname=pmtu_disc mode=644 proc_handler=proc_dointvec data=ffff8881447147ec [ 1666.376585][T22470] procname=backup_only mode=644 proc_handler=proc_dointvec data=ffff8881447147f0 [ 1666.376610][T22470] procname=conn_reuse_mode mode=644 proc_handler=proc_dointvec data=ffff8881447147f4 [ 1666.376635][T22470] procname=schedule_icmp mode=644 proc_handler=proc_dointvec data=ffff8881447147f8 [ 1666.376658][T22470] procname=ignore_tunneled mode=644 proc_handler=proc_dointvec data=ffff8881447147fc [ 1666.376681][T22470] procname=run_estimation mode=644 proc_handler=ipvs_proc_run_estimation data=ffff888144714800 [ 1666.376708][T22470] procname=est_cpulist mode=644 proc_handler=ipvs_proc_est_cpulist data=ffff888144714808 [ 1666.376734][T22470] procname=est_nice mode=644 proc_handler=ipvs_proc_est_nice data=ffff888144714814 [ 1666.377003][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4/vs [ 1666.377016][T22470] procname=lblc_expiration mode=644 proc_handler=proc_dointvec_jiffies data=ffff88814471481c [ 1666.377070][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4/vs [ 1666.377082][T22470] procname=lblcr_expiration mode=644 proc_handler=proc_dointvec_jiffies data=ffff888144714830 [ 1666.377165][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv4 [ 1666.377178][T22470] procname=tcp_max_tw_buckets mode=644 proc_handler=proc_dointvec data=ffff88802f97a488 [ 1666.377202][T22470] procname=icmp_echo_ignore_all mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a5e8 [ 1666.377226][T22470] procname=icmp_echo_enable_probe mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a5e9 [ 1666.377251][T22470] procname=icmp_echo_ignore_broadcasts mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a5ea [ 1666.377276][T22470] procname=icmp_ignore_bogus_error_responses mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a5eb [ 1666.377301][T22470] procname=icmp_errors_use_inbound_ifaddr mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a5ec [ 1666.377326][T22470] procname=icmp_ratelimit mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88802f97a5f0 [ 1666.377351][T22470] procname=icmp_ratemask mode=644 proc_handler=proc_dointvec data=ffff88802f97a5f4 [ 1666.377374][T22470] procname=icmp_msgs_per_sec mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a5f8 [ 1666.377398][T22470] procname=icmp_msgs_burst mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a5fc [ 1666.377422][T22470] procname=ping_group_range mode=644 proc_handler=ipv4_ping_group_range data=ffff88802f97a7e0 [ 1666.377445][T22470] procname=raw_l3mdev_accept mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6a0 [ 1666.377470][T22470] procname=tcp_ecn mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a698 [ 1666.377494][T22470] procname=tcp_ecn_fallback mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a699 [ 1666.378039][ C1] virtqueue callback for ffff88814065e000 (ffffffff857a19c0) [ 1666.378062][ C1] sd 0:0:1:0: cmd ffff88802586e5d0 response 0 status 0x0 sense_len 0 [ 1666.378083][ C1] No more buffers in queue [ 1666.395029][T22470] procname=ip_dynaddr mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a69f [ 1666.395064][T22470] procname=ip_early_demux mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3e2 [ 1666.395090][T22470] procname=udp_early_demux mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6a1 [ 1666.395115][T22470] procname=tcp_early_demux mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3e3 [ 1666.395139][T22470] procname=nexthop_compat_mode mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6a2 [ 1666.395165][T22470] procname=ip_default_ttl mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a69a [ 1666.395190][T22470] procname=ip_local_port_range mode=644 proc_handler=ipv4_local_port_range data=ffff88802f97a688 [ 1666.395213][T22470] procname=ip_local_reserved_ports mode=644 proc_handler=proc_do_large_bitmap data=ffff88802f97a7f0 [ 1666.395239][T22470] procname=ip_no_pmtu_disc mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a69b [ 1666.395264][T22470] procname=ip_forward_use_pmtu mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3e0 [ 1666.395288][T22470] procname=ip_forward_update_priority mode=644 proc_handler=ipv4_fwd_update_priority data=ffff88802f97a69c [ 1666.395313][T22470] procname=ip_nonlocal_bind mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a69d [ 1666.395337][T22470] procname=ip_autobind_reuse mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a69e [ 1666.395362][T22470] procname=fwmark_reflect mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6a3 [ 1666.395387][T22470] procname=tcp_fwmark_accept mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6a4 [ 1666.395411][T22470] procname=tcp_l3mdev_accept mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6a5 [ 1666.395436][T22470] procname=tcp_mtu_probing mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6a6 [ 1666.395460][T22470] procname=tcp_base_mss mode=644 proc_handler=proc_dointvec data=ffff88802f97a6ac [ 1666.395484][T22470] procname=tcp_min_snd_mss mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a3c4 [ 1666.395509][T22470] procname=tcp_mtu_probe_floor mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a6a8 [ 1666.395534][T22470] procname=tcp_probe_threshold mode=644 proc_handler=proc_dointvec data=ffff88802f97a6b0 [ 1666.395559][T22470] procname=tcp_probe_interval mode=644 proc_handler=proc_douintvec_minmax data=ffff88802f97a6b4 [ 1666.395583][T22470] procname=igmp_link_local_mcast_reports mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a75b [ 1666.395608][T22470] procname=igmp_max_memberships mode=644 proc_handler=proc_dointvec data=ffff88802f97a75c [ 1666.395632][T22470] procname=igmp_max_msf mode=644 proc_handler=proc_dointvec data=ffff88802f97a760 [ 1666.395656][T22470] procname=igmp_qrv mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a764 [ 1666.395680][T22470] procname=tcp_congestion_control mode=644 proc_handler=proc_tcp_congestion_control data=ffff88802f97a720 [ 1666.395704][T22470] procname=tcp_available_congestion_control mode=444 proc_handler=proc_tcp_available_congestion_control data=0000000000000000 [ 1666.395729][T22470] Not writable by anyone [ 1666.395736][T22470] procname=tcp_allowed_congestion_control mode=444 proc_handler=proc_allowed_congestion_control data=0000000000000000 [ 1666.395759][T22470] Not writable by anyone [ 1666.395766][T22470] procname=tcp_keepalive_time mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97a6b8 [ 1666.397288][T22470] procname=tcp_keepalive_probes mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c0 [ 1666.397318][T22470] procname=tcp_keepalive_intvl mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97a6bc [ 1666.397342][T22470] procname=tcp_syn_retries mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c1 [ 1666.397367][T22470] procname=tcp_synack_retries mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c2 [ 1666.397391][T22470] procname=tcp_syncookies mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c3 [ 1666.397416][T22470] procname=tcp_migrate_req mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c4 [ 1666.397441][T22470] procname=tcp_reordering mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a3e4 [ 1666.397464][T22470] procname=tcp_retries1 mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c8 [ 1666.397488][T22470] procname=tcp_retries2 mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c9 [ 1666.397512][T22470] procname=tcp_orphan_retries mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6ca [ 1666.397537][T22470] procname=tcp_fin_timeout mode=644 proc_handler=proc_dointvec_jiffies data=ffff88802f97a6cc [ 1666.397561][T22470] procname=tcp_notsent_lowat mode=644 proc_handler=proc_douintvec data=ffff88802f97a3c8 [ 1666.397585][T22470] procname=tcp_tw_reuse mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6cb [ 1666.397610][T22470] procname=tcp_max_syn_backlog mode=644 proc_handler=proc_dointvec data=ffff88802f97a718 [ 1666.397633][T22470] procname=tcp_fastopen mode=644 proc_handler=proc_dointvec data=ffff88802f97a71c [ 1666.397657][T22470] procname=tcp_fastopen_key mode=600 proc_handler=proc_tcp_fastopen_key data=ffff88802f97a71c [ 1666.397680][T22470] procname=tcp_fastopen_blackhole_timeout_sec mode=644 proc_handler=proc_tfo_blackhole_detect_timeout data=ffff88802f97a730 [ 1666.397704][T22470] procname=fib_multipath_use_neigh mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a81c [ 1666.397728][T22470] procname=fib_multipath_hash_policy mode=644 proc_handler=proc_fib_multipath_hash_policy data=ffff88802f97a81d [ 1666.397752][T22470] procname=fib_multipath_hash_fields mode=644 proc_handler=proc_fib_multipath_hash_fields data=ffff88802f97a818 [ 1666.397776][T22470] procname=ip_unprivileged_port_start mode=644 proc_handler=ipv4_privileged_ports data=ffff88802f97a7f8 [ 1666.397799][T22470] procname=udp_l3mdev_accept mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a75a [ 1666.397823][T22470] procname=tcp_sack mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d0 [ 1666.397847][T22470] procname=tcp_window_scaling mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d1 [ 1666.397872][T22470] procname=tcp_timestamps mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d2 [ 1666.397896][T22470] procname=tcp_early_retrans mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3c0 [ 1666.397927][T22470] procname=tcp_recovery mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d3 [ 1666.397951][T22470] procname=tcp_thin_linear_timeouts mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d4 [ 1666.397975][T22470] procname=tcp_slow_start_after_idle mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d5 [ 1666.398001][T22470] procname=tcp_retrans_collapse mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d6 [ 1666.399931][T22470] procname=tcp_stdurg mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d7 [ 1666.399959][T22470] procname=tcp_rfc1337 mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d8 [ 1666.399983][T22470] procname=tcp_abort_on_overflow mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6d9 [ 1666.400008][T22470] procname=tcp_fack mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6da [ 1666.400032][T22470] procname=tcp_max_reordering mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a6dc [ 1666.400057][T22470] procname=tcp_dsack mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6e4 [ 1666.400081][T22470] procname=tcp_app_win mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6e5 [ 1666.400106][T22470] procname=tcp_adv_win_scale mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a6e0 [ 1666.400131][T22470] procname=tcp_frto mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6e6 [ 1666.400154][T22470] procname=tcp_no_metrics_save mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6e7 [ 1666.400179][T22470] procname=tcp_no_ssthresh_metrics_save mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6e8 [ 1666.400330][T22470] procname=tcp_moderate_rcvbuf mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3e1 [ 1666.400356][T22470] procname=tcp_tso_win_divisor mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3c1 [ 1666.400381][T22470] procname=tcp_workaround_signed_windows mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6e9 [ 1666.400406][T22470] procname=tcp_limit_output_bytes mode=644 proc_handler=proc_dointvec data=ffff88802f97a3cc [ 1666.402775][T22470] procname=tcp_challenge_ack_limit mode=644 proc_handler=proc_dointvec data=ffff88802f97a6ec [ 1666.402805][T22470] procname=tcp_min_tso_segs mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6f0 [ 1666.402832][T22470] procname=tcp_tso_rtt_log mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3c2 [ 1666.402857][T22470] procname=tcp_min_rtt_wlen mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a3d0 [ 1666.402882][T22470] procname=tcp_autocorking mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a3c3 [ 1666.402913][T22470] procname=tcp_invalid_ratelimit mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88802f97a6f4 [ 1666.402939][T22470] procname=tcp_pacing_ss_ratio mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a6f8 [ 1666.402964][T22470] procname=tcp_pacing_ca_ratio mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a6fc [ 1666.402990][T22470] procname=tcp_wmem mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a3d4 [ 1666.403015][T22470] procname=tcp_rmem mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a3e8 [ 1666.403039][T22470] procname=tcp_comp_sack_delay_ns mode=644 proc_handler=proc_doulongvec_minmax data=ffff88802f97a708 [ 1666.403065][T22470] procname=tcp_comp_sack_slack_ns mode=644 proc_handler=proc_doulongvec_minmax data=ffff88802f97a710 [ 1666.403090][T22470] procname=tcp_comp_sack_nr mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c5 [ 1666.403115][T22470] procname=tcp_backlog_ack_defer mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c6 [ 1666.403139][T22470] procname=tcp_reflect_tos mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6f1 [ 1666.403164][T22470] procname=tcp_ehash_entries mode=444 proc_handler=proc_tcp_ehash_entries data=ffff88802f97a700 [ 1666.403188][T22470] Not writable by anyone [ 1666.403195][T22470] procname=tcp_child_ehash_entries mode=644 proc_handler=proc_douintvec_minmax data=ffff88802f97a700 [ 1666.404264][T22470] procname=udp_hash_entries mode=444 proc_handler=proc_udp_hash_entries data=ffff88802f97a7ec [ 1666.404290][T22470] Not writable by anyone [ 1666.404296][T22470] procname=udp_child_hash_entries mode=644 proc_handler=proc_douintvec_minmax data=ffff88802f97a7ec [ 1666.404629][T22470] procname=udp_rmem_min mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a754 [ 1666.404655][T22470] procname=udp_wmem_min mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a750 [ 1666.404680][T22470] procname=fib_notify_on_flag_change mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a758 [ 1666.404705][T22470] procname=tcp_plb_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a748 [ 1666.404729][T22470] procname=tcp_plb_idle_rehash_rounds mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a749 [ 1666.404754][T22470] procname=tcp_plb_rehash_rounds mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a74a [ 1666.404779][T22470] procname=tcp_plb_suspend_rto_sec mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a74b [ 1666.404803][T22470] procname=tcp_plb_cong_thresh mode=644 proc_handler=proc_dointvec_minmax data=ffff88802f97a74c [ 1666.404828][T22470] procname=tcp_syn_linear_timeouts mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a759 [ 1666.404853][T22470] procname=tcp_shrink_window mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a5b7 [ 1666.404878][T22470] procname=tcp_pingpong_thresh mode=644 proc_handler=proc_dou8vec_minmax data=ffff88802f97a6c7 [ 1666.407974][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv6 [ 1666.407990][T22470] procname=xfrm6_gc_thresh mode=644 proc_handler=proc_dointvec data=ffff88802f97b584 [ 1666.408280][T22470] Registering net sysctl (net ffff88802f979e00): net/ipv6/conf/all [ 1666.408294][T22470] procname=forwarding mode=644 proc_handler=addrconf_sysctl_forward data=ffff88807c77c400 [ 1666.408319][T22470] procname=hop_limit mode=644 proc_handler=proc_dointvec_minmax data=ffff88807c77c404 [ 1666.408343][T22470] procname=mtu mode=644 proc_handler=addrconf_sysctl_mtu data=ffff88807c77c408 [ 1666.408365][T22470] procname=accept_ra mode=644 proc_handler=proc_dointvec data=ffff88807c77c40c [ 1666.408389][T22470] procname=accept_redirects mode=644 proc_handler=proc_dointvec data=ffff88807c77c410 [ 1666.408412][T22470] procname=autoconf mode=644 proc_handler=proc_dointvec data=ffff88807c77c414 [ 1666.408435][T22470] procname=dad_transmits mode=644 proc_handler=proc_dointvec data=ffff88807c77c418 [ 1666.408459][T22470] procname=router_solicitations mode=644 proc_handler=proc_dointvec_minmax data=ffff88807c77c41c [ 1666.408484][T22470] procname=router_solicitation_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88807c77c420 [ 1666.408509][T22470] procname=router_solicitation_max_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88807c77c424 [ 1666.408534][T22470] procname=router_solicitation_delay mode=644 proc_handler=proc_dointvec_jiffies data=ffff88807c77c428 [ 1666.408559][T22470] procname=force_mld_version mode=644 proc_handler=proc_dointvec data=ffff88807c77c42c [ 1666.408583][T22470] procname=mldv1_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88807c77c430 [ 1666.408609][T22470] procname=mldv2_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88807c77c434 [ 1666.408652][T22470] procname=use_tempaddr mode=644 proc_handler=proc_dointvec data=ffff88807c77c438 [ 1666.408675][T22470] procname=temp_valid_lft mode=644 proc_handler=proc_dointvec data=ffff88807c77c43c [ 1666.408699][T22470] procname=temp_prefered_lft mode=644 proc_handler=proc_dointvec data=ffff88807c77c440 [ 1667.130439][ C1] wireguard: wg1: Handshake for peer 57 ([::1]:20001/0%0) did not complete after 20 attempts, giving up [ 1669.056221][ C1] wireguard: wg0: Handshake for peer 56 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1669.056286][ C1] wireguard: wg0: Handshake for peer 55 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1669.056332][ C1] wireguard: wg2: Handshake for peer 60 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 15) [ 1669.056376][ C1] wireguard: wg1: Handshake for peer 58 (127.0.0.1:20003) did not complete after 20 attempts, giving up [ 1669.911689][T22463] CPU: 0 PID: 22463 Comm: syz.9.4053 Not tainted syzkaller #0 [ 1669.919134][T22463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1669.929178][T22463] Call Trace: [ 1669.932452][T22463] [ 1669.935374][T22463] dump_stack_lvl+0x18c/0x250 [ 1669.940047][T22463] ? show_regs_print_info+0x20/0x20 [ 1669.945236][T22463] ? load_image+0x420/0x420 [ 1669.949733][T22463] panic+0x2ca/0x720 [ 1669.953618][T22463] ? bpf_jit_dump+0xd0/0xd0 [ 1669.958114][T22463] __warn+0x2e0/0x470 [ 1669.962082][T22463] ? __mutex_lock+0xb48/0xc80 [ 1669.966753][T22463] ? __mutex_lock+0xb48/0xc80 [ 1669.971430][T22463] report_bug+0x2be/0x4f0 [ 1669.975915][T22463] ? __mutex_lock+0xb48/0xc80 [ 1669.980589][T22463] ? __mutex_lock+0xb48/0xc80 [ 1669.985256][T22463] ? __mutex_lock+0xb4a/0xc80 [ 1669.989923][T22463] handle_bug+0xcf/0x120 [ 1669.994158][T22463] exc_invalid_op+0x1a/0x50 [ 1669.998652][T22463] asm_exc_invalid_op+0x1a/0x20 [ 1670.003492][T22463] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 1670.008785][T22463] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 64 ee 04 00 0f 85 d1 f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 08 d9 b1 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 1670.028378][T22463] RSP: 0018:ffffc9000e7dfac0 EFLAGS: 00010246 [ 1670.034441][T22463] RAX: 90d06a1e5baaab00 RBX: ffff888073c56ce0 RCX: 0000000000080000 [ 1670.042400][T22463] RDX: ffffc9000e93e000 RSI: 0000000000003749 RDI: 000000000000374a [ 1670.050360][T22463] RBP: ffffc9000e7dfc20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 1670.058323][T22463] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92001cfbf68 [ 1670.066394][T22463] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1670.074391][T22463] ? __mutex_lock+0x30d/0xc80 [ 1670.079068][T22463] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 1670.084694][T22463] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1670.090315][T22463] ? mutex_lock_nested+0x20/0x20 [ 1670.095243][T22463] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1670.101212][T22463] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 1670.107094][T22463] ? mutex_unlock+0x10/0x10 [ 1670.111592][T22463] ? mutex_lock_nested+0x20/0x20 [ 1670.116518][T22463] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1670.121542][T22463] ? _raw_spin_unlock_irq+0x23/0x50 [ 1670.126744][T22463] as102_dvb_dmx_start_feed+0x70/0x280 [ 1670.132210][T22463] dmx_ts_feed_start_filtering+0x120/0x220 [ 1670.138015][T22463] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 1670.143904][T22463] dvb_dmxdev_filter_start+0x422/0x10a0 [ 1670.149459][T22463] dvb_demux_do_ioctl+0x482/0x530 [ 1670.154482][T22463] dvb_usercopy+0x195/0x2b0 [ 1670.158980][T22463] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1670.164517][T22463] ? dvb_generic_ioctl+0xb0/0xb0 [ 1670.169453][T22463] ? dvb_demux_poll+0x210/0x210 [ 1670.174296][T22463] dvb_demux_ioctl+0x29/0x30 [ 1670.178877][T22463] __se_sys_ioctl+0xfd/0x170 [ 1670.183465][T22463] do_syscall_64+0x55/0xb0 [ 1670.187873][T22463] ? clear_bhb_loop+0x40/0x90 [ 1670.192542][T22463] ? clear_bhb_loop+0x40/0x90 [ 1670.197212][T22463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1670.203096][T22463] RIP: 0033:0x7f04c1b9f559 [ 1670.207497][T22463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.227090][T22463] RSP: 002b:00007f04c29a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1670.235503][T22463] RAX: ffffffffffffffda RBX: 00007f04c1e25fa0 RCX: 00007f04c1b9f559 [ 1670.243476][T22463] RDX: 0000200000000200 RSI: 0000000040146f2c RDI: 0000000000000004 [ 1670.251437][T22463] RBP: 00007f04c1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1670.259394][T22463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.267350][T22463] R13: 00007f04c1e26038 R14: 00007f04c1e25fa0 R15: 00007fffd313db18 [ 1670.275321][T22463] [ 1670.278572][T22463] Kernel Offset: disabled [ 1670.282878][T22463] Rebooting in 86400 seconds..