last executing test programs: 1m43.141151673s ago: executing program 2 (id=275): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/binder1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000}, 0x50) 1m40.930160699s ago: executing program 2 (id=279): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readahead(r1, 0x8, 0x6) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x0, 0xf31, &(0x7f0000001e80)="$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") syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$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") io_uring_setup(0x5e99, &(0x7f00000000c0)={0x0, 0xa68c, 0x1, 0xffffffff, 0xfffffffc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = eventfd2(0x1, 0x1) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000180)={0x0, r5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1m39.831104302s ago: executing program 2 (id=282): name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) timerfd_create(0x0, 0x80800) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fstat(0xffffffffffffffff, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000050000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) sync() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) 1m37.315422516s ago: executing program 2 (id=289): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0xfffffffffffffff9, 0x2, 0x5}) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000010000001400000018000180140402006e657464657673696d3000"/46], 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000009c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) 1m35.022568011s ago: executing program 2 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x6a002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x106, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x3, 0xa]}}) socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x101400) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m34.942042923s ago: executing program 1 (id=294): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000040)) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x8000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_TDX_INIT_MEM_REGION(r2, 0xc008aeba, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x80a0000, 0x8000000000000000}}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20000, &(0x7f0000000200)={@align=0x1, {0x1, 0x10, 0x1, 0x5}}, 0x3, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1}, {[0x400, 0x7, 0x1, 0x3]}, 0x1, 0x4, &(0x7f00000002c0)=""/4}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r3, 0xc010644d, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)='/dev/snd/midiC#D#\x00'}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x1}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000440)={0x400, 0x7ff, 0xae, 0x1, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000480)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000004c0)=0x2c) syz_open_dev$evdev(&(0x7f0000000500), 0x101, 0x200000) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000540)) r5 = eventfd(0xb0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={r3, 0x7ff, 0x1, r5}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f0000000ec0)={&(0x7f00000006c0)=0x1000000000, 0x7, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e80)}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000f00)={0x3, 0x0, [{0xc0010117, 0x0, 0x743}, {0x96e, 0x0, 0x65c5b8fc}, {0x2e5, 0x0, 0x2}]}) syz_open_dev$dvb_demux(&(0x7f0000000f40), 0x9ec0, 0x2) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x8) sendto$phonet(r3, &(0x7f0000000f80)="6e37e02dc86cf2977d8e63731d52a1e02f806109f7046b544057a70f289b43f65f87aeb92cbe636a9ff83e6891cc143ae878a211240239baf5628e0d8869ff0e71020fba1a419e0d176eb4957472b48baac55b1134033b6399118789f458871b04", 0x61, 0x800, &(0x7f0000001000)={0x23, 0x8, 0x0, 0xff}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001040), 0xc000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000001080)) ioctl$KDADDIO(r4, 0x4b34, 0x10001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000001200)={&(0x7f00000010c0), 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x11, 0xbe, "618571f8d8415044aa440ad203"}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x21}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001240)={0x10200, 0x7, 0xd000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 1m33.838248076s ago: executing program 2 (id=295): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getflags(r3, 0x40a) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xfbff, 0x8, 0x5, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m33.456513429s ago: executing program 1 (id=298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x140) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0xf62, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x84, &(0x7f00000004c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000b80)=[{0x0, 0x0, 0x0}], 0x1, 0x8004) r7 = fcntl$getown(r6, 0x9) prlimit64(r7, 0x9, &(0x7f0000000040)={0x7, 0xe64}, &(0x7f0000000140)) recvmmsg(r6, 0x0, 0x0, 0x42, 0x0) 1m31.550636004s ago: executing program 1 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) timerfd_create(0x0, 0x80800) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000010000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) 1m29.4510454s ago: executing program 1 (id=305): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000100000042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="038df700001004001800128008000100736974000c00068008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000ffb70200000820000018230020", @ANYRES32=r1, @ANYBLOB="0000000000000000b70d008500000078000000e88852cf51b3fd1978ef350a51be6ff80985c958723f6153613dd73d0090648a291c1a3ea5c1484b2b7c43a06a4554d2804f7ee2a4c1f97f8011f6bfffffffffffffff7f0f78bc9d0bf2799420a09473f704a75824b204323cbff44fa9e96abb6e9cda58ce4a1beacb28ddaeda9f6f3b3e80003b9c00bf156e3be4cb4209a984b7b0c329cdbf5923d5b14ec20ca417369aa624ed42cdd8a1c77beb1bffa9304ead482ff7bc70a6eb086de27b9159f7e9affe91dd3a34388277cdda27e13c0979d013d10000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000300)) prlimit64(0x0, 0x2, &(0x7f0000001080)={0x0, 0x7}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@nodecompose}, {@barrier}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "04c22302"}}, {@nls={'nls', 0x3d, 'cp936'}}, {@gid}, {@type={'type', 0x3d, "11d54ec3"}}, {@type={'type', 0x3d, "5361c9e5"}}]}, 0xff, 0x5de, &(0x7f0000000d40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x200040, &(0x7f0000000040)={[{@xino_off}], [{@uid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'barrier'}}], 0x2f}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r5, 0x0, 0x10020) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x24000054) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1m22.207591211s ago: executing program 1 (id=310): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$eJzs3U1sHFcBAOA3a68TJynZlISaJLRJgbb81G4cE34iaKrmQtRU3CpVXKI0LRFpQKQStKpEklNvtKrClR9xKocKEFJ7QVFPXCrRSFx6Khw4EAWpEgcoJItsv7c/L7vM2LG9u97vk57fvnmz+96MZ2ZnZ+a9F4CxVVv6u7AwU4Rw5e3Xj//9gb9NL055tDVHY+nvZEeqHkIoYnoy+7wPJpbjmx++fLpXXIT5pb8pHZ680Xrv9hDCxXAgXA2NsPfKtdfenX/i5KUTlw++98bR6+uz9AAAMF6+dfXowp6//Gnfro/evPdY2NKans7PGzG9I573H4sn/un8vxa600VH6DSVzTcZQy2bb6LHfJ3l1LP5JvuUP5V9br2Vv69rvi0l5U90TOu13DDK0nbcCEVttitdq83OLv8mD0u/66eK2fNnzz17YUAVBdbcP+8LIRwQVhqazeaPl1bgENRFEFYbmjsHfQQCWJbfL7zNxfzKwp1pfdpktfJvPFbr/X5YAxu9/f+/8vNraBtdfs8Zxrz8X11yxGHtbNatKS1X2o92xHR+HyF/fmml+3/6vPx+RL1iPfvdRxiV+wv96jmxwfVYrX71z7eLzerrMU7r4RtZfuf+k/9PR+V/DPT2rzG7/n9gCOqwqUN9COogVA7NQR+AgKHVfm5uWTNK+flzfXn+lpL8rSX50yX520ryt5fkwzj73Qs/Ca8W7d/5+W/6lV4PS9fZ7orxx1ZYn/x65ErL73nPYgPLz58nhmH21qmnznzlmaevLT//X7S2/1txez8Q0424b12NM6Trhfl19daz/43ucmp95rs7q89dt83fXC5xd/d8xe7254SO48xt9Zjpft/OfvPt756vkc03HcPWrL75+cm27H3p/CMdV9P6msyWt54tx1RWj3Rc2RXjvB6wGml77Pf8f9o+Z0K9ePbsuTOPxHTaTv84Ud+yOP1Q54f+emPqDtyZqu1/ZkJ3+58dren1WudxYWd7etF5XGhk0+eXk63b5Gn64ZhO33PfmZhemj57+nvnnlnrhYcxd+HFl7576ty5Mz/wIr2YtlrW6cXFMBTV8KLKi0EfmYD1NvfC89+fu/DiSw+fff7Uc2eeO3P+8JEjh+fnj3z18MLc0nn9XOfZPbCZtL/0B10TAAAAAAAAAAAAoKofnjh+7c/vfPn95fb/7fZ/qf1/evI3tf9/JWv/n7eTT+3gUzvAXT3yl8bde6u7HlPZfPUYPp7Vd3dWzp7sfZ+IcWscv9j+P7W3z/t1TfW5J5ue99+b5su6E7itv5SprA+SfLzA+2N8Oca/DDBAxXTvyTEu6986beupfwr9Uoym9H9LW0PqxyS1/+7Xr1M6/u/agDqy9jaiOeGglxHo7R9D3/93x5n4wOsyBsF6HqvQbBrFAxgOgx7/M133TPH5P3xz62JIs914rPt4mfdfCndi2MefVP7mGv+zNf5dpeNfj97Vu/p5rj66wr9/dv39jmLD3krlN8KNfPlTP9C7qyxt20ex/LT8D4Yq5YfQ/EVWfn5DqKL/ZOVvq1j+4vK/0vkVtH915f83lp9W20Ofrlr+co2LWvd6yK8bp/t/+XXj5Ga2/KlvzyrL32WVAzXeiuXDOOs/zmzVEWyH06iM/9tP/hzGl2I6HQjTcw75N/JK65+er0jfA3uyzy9Kvt9GZZzifsZ9/N+vxbhsf0jj/6btsdEjXetI13us21HfVmCz+WDo7/+NWLg4BHUQNiDc396JKr9negjq3R2azeb6XtAqMdDCGfj6H/Td50GXP+j1XyYf/zc/h8/H/61lPyDy8X/z9+fj/+b5+fh6eX4+/m++PvPxf/P8e7LPza9gz5Tkf7Ikf29J/r52/nSv/P0l7/9USf7Bkvx7S/LvK8m/uyR/oiT/MyX5ny3Jf6Ak/6GS/M+V5G926SxmXJcfxlnePs/+D+Mj3f/pt//vLskHRtdP3zz0+NO//XZjuf3/VOv3WrqPdyym6/G3849iOr/vHTrSi3nvxPRfs/xhv94B4yTvPyP/fn+wJB8YXek5L/s3jKGid489Vfut6neez2j5fIy/EOMvxvjhGM/GeC7Gh2I8v0H1Y308/pvfH321aP/e35nlV32ePG8PlPcTdbhiffLrAyt9nj3vx2+l7rT8VTYHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJja0t+FhZkihCtvv378qZNn5xanPNqao7H0d7IjVW+9L4RHYjwR45/HFzc/fPl0Z3wrxkWYD0UoWtPDkzdaJW0PIVwMB8LV0Ah7r1x77d35J05eOnH54HtvHL2+fmsAAAAANr//BQAA//9uaBiO") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe6}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044104}, 0x8840) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000140)="435900f4aa2ca4cfa7571d5ff839dc0230687705d84ae47b2fc9d08630b43016b169179e7042da78721f76d55a07878673b99dd99dcbf3abead4c36d74210d65a955e0db43f8011c23a78691", 0x4c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x9, 0x401, 0x400f}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000009c0), 0x181200, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004300070102000000fcdbdf25017c000005000680"], 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0xc010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) 1m18.039261624s ago: executing program 32 (id=295): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getflags(r3, 0x40a) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xfbff, 0x8, 0x5, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m13.995242397s ago: executing program 1 (id=322): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000090000002000038014000300626174616476300000000000000000e2070001"], 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r3 = eventfd2(0x800, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r4, &(0x7f0000000000)="41000200010001", 0x7) creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0001, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) socketpair(0x10, 0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000300)=""/197, &(0x7f0000000440)=0xc5) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r3}]) 58.903953348s ago: executing program 33 (id=322): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000090000002000038014000300626174616476300000000000000000e2070001"], 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r3 = eventfd2(0x800, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r4, &(0x7f0000000000)="41000200010001", 0x7) creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0001, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) socketpair(0x10, 0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000300)=""/197, &(0x7f0000000440)=0xc5) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r3}]) 56.814390247s ago: executing program 3 (id=341): open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000016}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577eaddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x3, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 56.310225608s ago: executing program 3 (id=344): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$eJzs3U1sHFcBAOA3a68TJynZlISaJLRJgbb81G4cE34iaKrmQtRU3CpVXKI0LRFpQKQStKpEklNvtKrClR9xKocKEFJ7QVFPXCrRSFx6Khw4EAWpEgcoJItsv7c/L7vM2LG9u97vk57fvnmz+96MZ2ZnZ+a9F4CxVVv6u7AwU4Rw5e3Xj//9gb9NL055tDVHY+nvZEeqHkIoYnoy+7wPJpbjmx++fLpXXIT5pb8pHZ680Xrv9hDCxXAgXA2NsPfKtdfenX/i5KUTlw++98bR6+uz9AAAMF6+dfXowp6//Gnfro/evPdY2NKans7PGzG9I573H4sn/un8vxa600VH6DSVzTcZQy2bb6LHfJ3l1LP5JvuUP5V9br2Vv69rvi0l5U90TOu13DDK0nbcCEVttitdq83OLv8mD0u/66eK2fNnzz17YUAVBdbcP+8LIRwQVhqazeaPl1bgENRFEFYbmjsHfQQCWJbfL7zNxfzKwp1pfdpktfJvPFbr/X5YAxu9/f+/8vNraBtdfs8Zxrz8X11yxGHtbNatKS1X2o92xHR+HyF/fmml+3/6vPx+RL1iPfvdRxiV+wv96jmxwfVYrX71z7eLzerrMU7r4RtZfuf+k/9PR+V/DPT2rzG7/n9gCOqwqUN9COogVA7NQR+AgKHVfm5uWTNK+flzfXn+lpL8rSX50yX520ryt5fkwzj73Qs/Ca8W7d/5+W/6lV4PS9fZ7orxx1ZYn/x65ErL73nPYgPLz58nhmH21qmnznzlmaevLT//X7S2/1txez8Q0424b12NM6Trhfl19daz/43ucmp95rs7q89dt83fXC5xd/d8xe7254SO48xt9Zjpft/OfvPt756vkc03HcPWrL75+cm27H3p/CMdV9P6msyWt54tx1RWj3Rc2RXjvB6wGml77Pf8f9o+Z0K9ePbsuTOPxHTaTv84Ud+yOP1Q54f+emPqDtyZqu1/ZkJ3+58dren1WudxYWd7etF5XGhk0+eXk63b5Gn64ZhO33PfmZhemj57+nvnnlnrhYcxd+HFl7576ty5Mz/wIr2YtlrW6cXFMBTV8KLKi0EfmYD1NvfC89+fu/DiSw+fff7Uc2eeO3P+8JEjh+fnj3z18MLc0nn9XOfZPbCZtL/0B10TAAAAAAAAAAAAoKofnjh+7c/vfPn95fb/7fZ/qf1/evI3tf9/JWv/n7eTT+3gUzvAXT3yl8bde6u7HlPZfPUYPp7Vd3dWzp7sfZ+IcWscv9j+P7W3z/t1TfW5J5ue99+b5su6E7itv5SprA+SfLzA+2N8Oca/DDBAxXTvyTEu6986beupfwr9Uoym9H9LW0PqxyS1/+7Xr1M6/u/agDqy9jaiOeGglxHo7R9D3/93x5n4wOsyBsF6HqvQbBrFAxgOgx7/M133TPH5P3xz62JIs914rPt4mfdfCndi2MefVP7mGv+zNf5dpeNfj97Vu/p5rj66wr9/dv39jmLD3krlN8KNfPlTP9C7qyxt20ex/LT8D4Yq5YfQ/EVWfn5DqKL/ZOVvq1j+4vK/0vkVtH915f83lp9W20Ofrlr+co2LWvd6yK8bp/t/+XXj5Ga2/KlvzyrL32WVAzXeiuXDOOs/zmzVEWyH06iM/9tP/hzGl2I6HQjTcw75N/JK65+er0jfA3uyzy9Kvt9GZZzifsZ9/N+vxbhsf0jj/6btsdEjXetI13us21HfVmCz+WDo7/+NWLg4BHUQNiDc396JKr9negjq3R2azeb6XtAqMdDCGfj6H/Td50GXP+j1XyYf/zc/h8/H/61lPyDy8X/z9+fj/+b5+fh6eX4+/m++PvPxf/P8e7LPza9gz5Tkf7Ikf29J/r52/nSv/P0l7/9USf7Bkvx7S/LvK8m/uyR/oiT/MyX5ny3Jf6Ak/6GS/M+V5G926SxmXJcfxlnePs/+D+Mj3f/pt//vLskHRtdP3zz0+NO//XZjuf3/VOv3WrqPdyym6/G3849iOr/vHTrSi3nvxPRfs/xhv94B4yTvPyP/fn+wJB8YXek5L/s3jKGid489Vfut6neez2j5fIy/EOMvxvjhGM/GeC7Gh2I8v0H1Y308/pvfH321aP/e35nlV32ePG8PlPcTdbhiffLrAyt9nj3vx2+l7rT8VTYHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJja0t+FhZkihCtvv378qZNn5xanPNqao7H0d7IjVW+9L4RHYjwR45/HFzc/fPl0Z3wrxkWYD0UoWtPDkzdaJW0PIVwMB8LV0Ah7r1x77d35J05eOnH54HtvHL2+fmsAAAAANr//BQAA//9uaBiO") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe6}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044104}, 0x8840) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000140)="435900f4aa2ca4cfa7571d5ff839dc0230687705d84ae47b2fc9d08630b43016b169179e7042da78721f76d55a07878673b99dd99dcbf3abead4c36d74210d65a955e0db43f8011c23a786913f0f40f847", 0x51) ioctl$FITRIM(r0, 0xc0185879, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000009c0), 0x181200, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004300070102000000fcdbdf25017c000005000680"], 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0xc010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) 53.088684658s ago: executing program 0 (id=348): pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000380)) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000380)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000200)=@nullb, r4, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r4, &(0x7f0000000080)={0x3, 0x6, 0x6, 0x1, 0x5, 0xe3, 0x0, 0x236, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @loopback={0xffffffffffffff9d}, 0x86}, r5}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @loopback={0xffffffffffffff9d}, 0x86}, r5}}, 0x48) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) (async) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x80c0}}], 0x1, 0x10) 52.43186564s ago: executing program 0 (id=350): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x3f, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, 0xffffffffffffffff, 0x81000000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c"], 0x0, 0x56}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001900)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) 51.457943723s ago: executing program 3 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x500}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000580)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000340)="0619252f5d31726d5ab087164db31898520d47d4da4e3c47b746a0c497b6da8163f6df641370a2d679866f1490d48df9805ff4c5af3d2ec3646ede581cf9e6a57f66f4076bcddf02e0d8198c1018731934f830697a3f9b9b33bb28039d3bfe79a8e11f7b4cd91a94166e79cf82e5f77ffa6f2764cd437b66932dd5e3f5279da8a2a3d2dd96507f847047588a39d00fee044e6c9b00b13de9321d2160be3f1da30570e90aedba58a00f6184", 0xab}, {&(0x7f0000000440)="0fe42cccd6243be8ddbfeb44a119348d01f514797d9cd1c55ffc8b00", 0x1c}, {&(0x7f0000000500)="b63ccad0454d7cc5a8bff83f78e08ce4", 0x10}, {&(0x7f00000005c0)="edc5826a7a2fd1cf384c62bbf1ff274b578ad79e971afb866a9ef94a2cba2127a66e96b0d6b808cda0d7ddd478f3ff50f88b444f2ff57bbba737fbfe3c5463f5c7bc11775d9d1f3edbf629acae9a37d5370846bf11b5ae4830bc32c12e06f83c9cb696591fa968ea425b6590fdaf8ae5715a0c4f2c3e119a6216c45db029ace824d13e63a3411df98d13b0ee423e83a456e1ef9cf454670447123326de838ec2b07df97cb61a34bf94b88a8f979ba570c8bfe2b6f60d39b3762f1289d1265c385e8bb351978008eb42790131fa7c225325e911f7f3e6", 0xd6}, {&(0x7f00000006c0)="cf844317448e13bcd576a4d864a1da0215c33c78cf43d89c81ded35d755840695a4550a532bf5fe2c39d1951932462fef86bbe7e0841754d431071c6baf8743332981c0d85fc23a285cbc426ba2c464a1c60a259ec524a27a9b0d2e2f281a6a48936b13d637d47eb29ed6045aac55478a9a089dd307523e18999d52badaf4c96d334280e458b135953db145b66f68603e9e001bceabfe269da08c7681a0f6921f3e13fcb8b5a91fe97896a809fab6c4bea2c1210c8c1fef56ca519b1e089d4402dd848a51dc0e79b3545030d962ae08ab627c3fb6b7d0e22a442a8b9e5dd992d", 0xe0}, {&(0x7f00000008c0)="887e4025d6bcc74d83d50f1a8b90bc23a1444090308ef52d91331c3ca76a7c9f6cf8f6cb3545645dd10e7b717e5a9e07280fc48883e33943e754cb3408d7f8b8631678e67c6e5e7423dcfac988c2e47e20b420c4ad4f5e9dcb8f7d577f20592afe9bac47e6364dfd2b1f5a08d6b7cd81391c6929ef78a906ac0379178beb35942f5be167c3a446829742ef0ca7fa8947677a2e4e8c38a6b20805a305cc583684aee70762e963", 0xa6}, {&(0x7f0000000980)="fc7de899", 0x4}, {&(0x7f00000009c0)="283690e29e31f2732e57ec6024fc340dbcde116551008bde8071e7af40ffc85932cadb521c", 0x25}, {&(0x7f0000000a00)="60fc5a53a446e9696673bd89bb07e303b6d11f64ca69da86e2ddf2f7efe2f557b8bbde5a9cbc7855caf4a819c4b9fe615221d020f592020d551363b27fe30bf38c9570723050ed6c4c4d2c64626ef2986fae2caa4f5859bfdef09d4cad24e258b13812c284b2817d8bb6d174067d60f05e1c135fec92678f54098640a65e2454815c8f71f99a4cb6a57ded7f4f60a0f61dd37abfd0815153a721efd130f72e41e4862f3bd75bfbe5c6c73026ff661d826b4edd7b2c4e27ae64", 0xb9}], 0x9, &(0x7f0000000d00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r5, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0x70, 0x4000000}}, {{&(0x7f0000000d80)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000e00)}], 0x1, &(0x7f0000001180)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x58, 0x4000}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001200)="15c5c33ce0ce9ce05168", 0xa}, {&(0x7f0000001240)="098cc992ec29ae31ca1996849dcd015712a26524852c0c55c4", 0x19}, {&(0x7f0000001280)="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", 0xfd}, {&(0x7f0000001380)="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", 0x1000}], 0x4, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8, 0x8}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002680)="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", 0xfd}, {&(0x7f0000002840)="17c70455d86ee204b43f34d8ddaa203bb2e3f9f44f8b2bd94be9df32a33815c11238dc943ea0572c024970ec76b4dd97b1a02dd2574809e61a6d99e89c2e10b1a5776f8713699eadad891c523fa34de994e4711fa4569151c4aa", 0x5a}], 0x2, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x38, 0x40}}], 0x4, 0x20040000) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000880)={0x28, 0x4, 0x0, {0x6, 0xfffffffffffffff5}}, 0x28) 48.519912779s ago: executing program 0 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}, {{&(0x7f0000000680)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)}], 0x1, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x50}}], 0x78}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x368}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}], 0x6, 0x40088c5) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000540)={0xf0f022}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) (async) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000080)={0x0, 0x8, 0x6}) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0xfffeffff, 0x32314d56, 0x6, 0xd, [{0x5, 0x9}, {0x6311, 0xfffffff1}, {0x8, 0xb7}, {0x7a15, 0x800}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x2, 0x5}], 0xff, 0xd, 0x7, 0x1, 0x5}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r6, 0x7867268dc8eb0315, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) 48.402736504s ago: executing program 3 (id=354): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x200010000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x10008000) socket$inet6_sctp(0xa, 0x5, 0x84) 47.589404244s ago: executing program 0 (id=355): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x80400, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 45.792530954s ago: executing program 0 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000020, 0x0, 0xfffffffffffffffa}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r4, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) sendmsg$inet_sctp(r4, &(0x7f00000005c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="f4c7982232ab64e9c3539ce979899f797e4cf63b19f11cd8d9ed183fe5624b22", 0x20}, {&(0x7f0000000240)="0442176ba72b413c982282accfc4e8a0b1c629ebd06946064ac2993b1421a7ee9104cea439815535980291836911c109213e93e500b7", 0x36}, {&(0x7f0000000440)="17b721b5cd8ed4f19832d0f92ba409fd1c5b2c5764ab8e8a6e14543f7ec5f81f78d67bce3af326b5f627c8889246418f4d02511dbfce8389d3a38f0459ee3a23991f7bc87d0f389b72e50125b8e1b8d6bcbf5a0bc3a44364c87fa0afe56081bf3ed9a8a0ff152b4d1f88645c34c557c43bd92eefbbd624432b32ebe7155b600f1d92fb6478102a19065a8bf4978b6ed7c350bff6fc6e33b21d9cc5a2e003fe86d546f0f9093813850d4149c671ec9a81fc337cc6f1016122f61a8c193d1e7333e75f727f16aeedcac4", 0xc9}], 0x3, &(0x7f0000000580)=[@authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}], 0x30, 0x4040050}, 0x40c0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000002c0)=0x5bb, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r2], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ff7f0e3f2617d1f52ab5a1db8511", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xd8, 0x1403, 0x400, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 42.566748085s ago: executing program 0 (id=359): ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000080)={{@host, 0x1}, 0x1000, 0x7, 0xad2a, 0x1, 0x192, 0x1, 0x3, 0x4}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4}, 'syz1\x00', 0x4b}) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @pic={0x8, 0x4, 0x8, 0x5, 0x7f, 0x17, 0x3, 0x3, 0xf2, 0x2, 0x7, 0xa, 0x3, 0x2, 0x3, 0x4}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j\x01\x00\xefw\x96\\\\\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\xd2\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x70, r6, 0x1, 0xffffff80, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x70}}, 0x0) listen(r4, 0x8) connect$x25(r4, &(0x7f0000000100), 0x12) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r7, r7, &(0x7f0000000000)=0xa01f, 0x100000110) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) getrandom(&(0x7f00000002c0)=""/153, 0x99, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905", @ANYRES8], 0x0) 42.566352991s ago: executing program 3 (id=360): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4623, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1a2, &(0x7f0000000580)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3250c1, 0x121) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001840)="f2a3caf12c99b40132fd592132e08f0f952c87a30e5747a2d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546ce2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4351633c58424e", 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a80)="7209407e79abd26c5b39aa11778cfbbac094bebe1d861115c9eee9250a013542367280f37f769031f5fe69b57767068ec8ad5652afb215463c438b69e71a53471805d664eeb09d742e513658688e569872", 0x51}, {&(0x7f0000001c40)="965545e06065e0a652ead559c963304035d3c7902cf0d99e5a8f2a8e3c8ea8a910cac04e727c541fe5738d9a4b1ff9c442b66c21293ca16d8c0c52fc93c831b44e17bf959267c01984fba898c1764807d3ca2febf19b10fb23b5cb31107cee94a8fa3be81d2206b5057c94d1", 0x6c}], 0x2}}], 0x2, 0xc840) listen(r2, 0x50) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f0000001340)) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x200003]}, 0x8, 0x80800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x4a9de555, 0x8140) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000200)) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @global=@item_4={0x3, 0x1, 0x2, "df643910"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) clock_adjtime(0x0, 0x0) sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}, 0x1}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001880)="b77aabb283be41c458eba609ea0c", 0xe}], 0x1}}, {{&(0x7f0000000280)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, 0x0, 0x0, &(0x7f0000004f00)=ANY=[], 0x14c8}}], 0x2, 0x0) 38.218635252s ago: executing program 4 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x80}]}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002240)=0x7) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x4}) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x4000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x8005) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 37.982619519s ago: executing program 3 (id=363): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r0, &(0x7f0000000000)="240000001e005f0214fffffffffffff807000000a6000000000010f5efd0e10b21b9da98", 0x24) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$rds(0x15, 0x5, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000024c0)={&(0x7f0000d00000/0x4000)=nil, &(0x7f0000995000/0x3000)=nil, &(0x7f0000cdd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000096a000/0x2000)=nil, &(0x7f0000e1a000/0x2000)=nil, &(0x7f0000930000/0x2000)=nil, &(0x7f0000a57000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000997000/0x4000)=nil, &(0x7f00009af000/0x2000)=nil, &(0x7f00000014c0)="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", 0x1000, r8}, 0x68) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 36.066995973s ago: executing program 4 (id=364): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 32.634448538s ago: executing program 4 (id=365): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x8501) r1 = openat(r0, 0x0, 0x5ab880, 0x126) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x65b, &(0x7f0000000640)="$eJzs3U1oHOf9B/DvrNcryQFFSezE/z+BihjSUlFbLyiteoldSqtDKCE99CxsORZeK0FSihJKUd+hpx5yLulBt54KvRvSc3vLVcdAoZecdFOZ2VlpZa9kyZK1cvP5mNnnmXlmnvk9v52d3dm1mABfW/MTaT5MkfmJd9bL+a3NmfbW5sxQ3dxOUtYbSbNTpFhOis+Tm+lM+b9yYb1+cdB+Pl2ae++Lr7a+7Mw16+nJ2x3NRj1lPMmFunxE64/H6e9ip1L2c7t/f8fx4+4Iy4Rd6yYOBm2nV7VgY9AhAWes6LxvPmYsuZRkuP4ckPrs0Djb6E6fsxwAAABfBy9uZzvrGR10HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8qe//X9RTo1sfT9G9/38rya169daAwz2xh4MOAAAAAAAAAABOwTe2s531jHbnd4rqN/83qpnL1eML+SirWcxKrmc9C1nLWlYylWSsp6PW+sLa2srUEbac7rvl9NmMFwAAAAAAAAD+R/0683u//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCBdqMuiUy3q6XK3PpZGM8lwd/2N5F9JWoOL+NiKfgsfnn0cAAAAcCLDT7HNi9vZznpGu/M7RXXN/2p1vTycj7KctSxlLe0s5k59DV1e9Te2NmfaW5szD8rp8X5v/edYYVQ97n4N0W/PV6s1RnI3S9WS67ldBXMnjWrL0tVuPP3j+lUZU/F27YiR3anLcmd/OuhbhIEYqzJycTcjk3VsZTZeOjwTT3x2mofuaSqN3W9+Lj+DnF+qy3I8vz+fOW+kysR0z9H36uGZSL7597/+7F57+f69u6sT52dIT+nRY2KmJxOvHTcTf37h7AdwoO6xf9SnaLLKxJXd+fn8KD/NRMbzblaylJ9nIWtZzE7dvlD3XD6OHZ6pm/vm3n1SJK36eemcRY8S03h+WNUW8ka17WiWUuSD3Mli3qr+TWcq381sZjPX8wxfOTDuamzVq75xvFf9tW/VlZEkf6jLQeu8pZZ5faknr73n3LGqrXfJXpZePv1zY/P/60q5j9/U5fnwaCamejLxyuGZ+Ev12lhtL99fubfw4QH9bzwy/2Zdlkfc787Vu0R5vLyc4fpMsv/oKNte2T3L7M9Xq/7FpdPWeKztStVWFN1X6k8OfKW26s9wj/c0XbW91rdtpmq72tO27/NWPkh79/MQAOfYpW9fao38e+SfI5+N/Hbk3sg7wz8Y+t7Q661c/MfF7zcnL7zZeL34Wz7LL/eu/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKe3+vEn9xfa7cWV/pXGwU2nWynqG/kctk7zaDEPqtI85cCGzsm4nkGlexPBE3d4c2CjuDXoHJ5W5UKSfk31U/Q0NxcFngs31h58eGP140++s/Rg4f3F9xeXL87Ozk3Ozb41c+PuUntxsvM46CiBZ2HvTb9/e3GubrAJAAAAAAAAAAAA5Gh/S7NT//+/7pK1oeSof2DQLHcx6DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz7f5iTQfpsjU5PXJcn5rc6ZdTt363prNJI1GUvwiKT5PbqYzZaynu+LtA/bz6dLce198tfXlXl/Nav2y07o8ktG+SzfqKeNJLtTlCezr7/aJ+yt2R1gm7Fo3cTBo/w0AAP//83X2Wg==") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c0000001816180000ffffff95000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd85, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa}, 0x23) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xce0}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffff7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5c) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_GET_STC(r4, 0xc0106f32, &(0x7f00000000c0)={0x667}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_read_part_table(0x1076, &(0x7f0000001080)="$eJzs0LFNxDAUBuDfCcnFFbtQUTMCq1AjpWAgRmAPFjlOQkYOFmIBuOb7Ctvv2f8rHK7qPsncSlJTMx+tbenrVJKUZPl+d8685dxq9qS196w9l2w9sn20bYxr3d3bcS7l+enhcjNuTm1as7bb5NJKTp919HtySl3yq375qTIG9yl7Dx/mse95ffyznwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA//MVAAD//z8KGu8=") ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x1dc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611960000000000095000000000000006523ddb9e5874d8a60b3dbdd3aa22331c1164958721644afcf84c00c"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) 20.322028412s ago: executing program 34 (id=359): ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000080)={{@host, 0x1}, 0x1000, 0x7, 0xad2a, 0x1, 0x192, 0x1, 0x3, 0x4}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4}, 'syz1\x00', 0x4b}) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @pic={0x8, 0x4, 0x8, 0x5, 0x7f, 0x17, 0x3, 0x3, 0xf2, 0x2, 0x7, 0xa, 0x3, 0x2, 0x3, 0x4}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j\x01\x00\xefw\x96\\\\\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\xd2\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x70, r6, 0x1, 0xffffff80, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x70}}, 0x0) listen(r4, 0x8) connect$x25(r4, &(0x7f0000000100), 0x12) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000006b80)="$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") r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r7, r7, &(0x7f0000000000)=0xa01f, 0x100000110) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) getrandom(&(0x7f00000002c0)=""/153, 0x99, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905", @ANYRES8], 0x0) 19.970354225s ago: executing program 35 (id=363): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r0, &(0x7f0000000000)="240000001e005f0214fffffffffffff807000000a6000000000010f5efd0e10b21b9da98", 0x24) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$rds(0x15, 0x5, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000024c0)={&(0x7f0000d00000/0x4000)=nil, &(0x7f0000995000/0x3000)=nil, &(0x7f0000cdd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000096a000/0x2000)=nil, &(0x7f0000e1a000/0x2000)=nil, &(0x7f0000930000/0x2000)=nil, &(0x7f0000a57000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000997000/0x4000)=nil, &(0x7f00009af000/0x2000)=nil, &(0x7f00000014c0)="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", 0x1000, r8}, 0x68) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 19.862285743s ago: executing program 4 (id=368): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2810080, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x8, 0x1dd, &(0x7f0000000500)="$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") r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x10001, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x40, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2db, &(0x7f0000000480)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', r1, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="147002fadbdf2511000000c42175a5203ef5d539db266c5c908b18c9e8904162"], 0x14}}, 0xc004) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r5, &(0x7f0000000480)=ANY=[@ANYBLOB='unlock '], 0xe) r6 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4095, 0xfff}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f0000000800)=""/206, 0xce}, {&(0x7f0000000280)=""/124, 0x7c}], 0xa}, 0x102) setregid(0xffffffffffffffff, r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x442, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000780)={'veth0_to_bridge\x00', @remote}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r10, 0x11b, 0x1, 0xffffffffffffffff, &(0x7f0000010180)=0x60) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0x8, 0x5, 0x9, 0x5}, 0x8) 18.197378783s ago: executing program 4 (id=369): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) sendto$inet6(r0, &(0x7f0000000180)="341cfb742143baed3834b17cb839aef583dae34fb62a1475813e093681f6f7fa1b5fdbb35bc02240c984ce4b74d914cba95c8363d808aa4c97c2868a7cc33724e10aa8625e8a7bcbf6245bca2b84ef4d9fffde4a63954b79f4d7d189cf332a568eb951f83867c9c16ff9d0d8571c64067e86c71dad73cda0929a81bb60104fdfa7b8025599f05d4e9c49f748dd3b57713df72d4f4bffc48c1625dfe864114ccb8b9ccc925e4856c1bda9fc3c41423b5406a82681f5f19060582ded0a209a64aef461596018d4fed9fca505b4", 0xcc, 0x4000000, 0x0, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munlockall() 16.226141442s ago: executing program 4 (id=370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1800000}}]}, 0x5, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') umount2(&(0x7f00000000c0)='./file1\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) unshare(0x6020400) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r2, 0x6, 0x2, 0x448616ece558bd97) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x24, r3, 0x21, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}]}, 0x24}}, 0x4000000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x1000, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = io_uring_setup(0x64d5, &(0x7f0000000100)={0x0, 0x94fc, 0x2, 0x0, 0x11e}) socket$tipc(0x1e, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000180), 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 0s ago: executing program 36 (id=370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1800000}}]}, 0x5, 0x596, &(0x7f0000000400)="$eJzs3V1rFFcYAOB3NonGj9YIIrUXRfCiFuvGJK0fUNBellYqtPd2SdYg2biS3YhJhepFvelNkUIpFUp/QO97Kf0D/RVCK0iR0FKkkDKb2SQm+5Ho6q7u88DoOTOTPefsmXf2nJlZNoC+dTj9JxdxKCK+TSL2rds2GNnGwyv7LT26MZkuSSwvf/ZXEkm2rr5/kv2/J8u8ERG/fR1xLLeyfmjda1cWFmcKpVJxLsuPVmevjlYWFo9fni1MF6eLV8YnJk6/Pzx+5tTJjrX1nQv//PDpvY+Gvzmy9P0vD/bfSeJc7M22rW/HM7i5PnO48F+WGopzG3Yc60BhvSTpdgV4KgNZnKexeSj2xUAW9cCr76uIWAb6VCL+oU/VxwH1uX2H5sEvjYcfrkyANrd/cOXaSAzX5ka7l5InZkbpfHekA+WnZfz659076RKtr0PsapMH2JabtyLixODg5vNfkp3/nt6J2sXj1jaW0W+fP9BN99Lxz7uNxj+51fFPNBj/7GkQu0+jffznHjyR7fCNhnT890HD8e/qqWtkIMu9VhvzDSWXLpeKJyLi9Yg4GkM703yr+zmnl+4vN9u2fvyXLmn59bFgVo8Hgztrl+lXTRWqhWdr9ZqHtyLebDj+TVb7P2nQ/+n7caHlK6911MHi3bea7dW+/c/X8s8Rbzfs/7X6J03vT06Mnzl1crR2PIzWj4rN/r598Pdm5Xe7/Wn/727d/pFk/f3ayvbL+Gn4cbHZti0e/09Ij/8dyee19I5s3fVCtTo3FrEj+WTz+vG1v63n6/un7T96pPX5r9Hxn06+vthi+28fuN10117o/6lt9f/2E/c//vLHZuVvrf/fq6WOZms2nP8eb7iUUbPVCnbobQQAAAAAAICekIuIvZHk8qvpXC6fX3m+40DszpXKleqxS+X5K1NR+67sSAzl6ne699Vuwa48DzGWPQ9bfz5ifEN+IiL2R8R3A7tq+fxkuTTV7cYDAAAAAAAAAAAAAAAAAABAj9jT5Pv/qT8Gul074Lmr/bDBzm7XAuiGtj/534lfegJ6Utv4B15Z4h/6l/iH/iX+oX+Jf+hf4h/6V+P49/QP9AOf/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBRF86fT5flpUc3JtP81LWF+ZnyteNTxcpMfnZ+Mj9Znruany6Xp0vF/GR5tt3rlcrlq2PjMX99tFqsVEcrC4sXZ8vzV6oXL88WposXi0MvpFUAAAAAAAAAAAAAAAAAAADwcqksLM4USqXi3AtODEYXCm2VGM7ekAabzkZP1PD5Jc42b3v7xODmTf9GRC+0S+IZEl08KQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADABv8HAAD//9L0OVA=") chdir(&(0x7f0000000400)='./file0\x00') umount2(&(0x7f00000000c0)='./file1\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) unshare(0x6020400) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r2, 0x6, 0x2, 0x448616ece558bd97) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x24, r3, 0x21, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}]}, 0x24}}, 0x4000000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x1000, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = io_uring_setup(0x64d5, &(0x7f0000000100)={0x0, 0x94fc, 0x2, 0x0, 0x11e}) socket$tipc(0x1e, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000180), 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) kernel console output (not intermixed with test programs): nt=1 [ 226.090323][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 226.097511][ T3444] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 226.102873][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 226.144800][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 226.145110][ T6936] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 226.145562][ T3444] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 226.146467][ T3444] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 226.146646][ T6936] Remounting filesystem read-only [ 226.525411][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 226.536235][ T13] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 226.605729][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 226.778725][ T5855] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 226.794403][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 227.584976][ T6953] loop1: detected capacity change from 0 to 64 [ 227.605266][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.620765][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.638435][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.648763][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.677682][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.693038][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.728476][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.728519][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.728542][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.755548][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.772926][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 227.846394][ T6957] loop3: detected capacity change from 0 to 128 [ 227.962837][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 227.966314][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 227.966428][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 227.966524][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 227.967779][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 227.968827][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.017821][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.026546][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.028231][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.047782][ T1024] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.374395][ T1024] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 228.393316][ T6957] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.394514][ T44] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 228.394760][ T6957] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.664990][ T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 228.667036][ T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 228.682936][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 228.700769][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 228.851588][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 228.855938][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.857103][ T5890] usb 4-1: config 11 has an invalid interface number: 110 but max is 0 [ 228.857128][ T5890] usb 4-1: config 11 has no interface number 0 [ 228.857173][ T5890] usb 4-1: config 11 interface 110 has no altsetting 0 [ 228.895864][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=7211, bcdDevice=cc.2a [ 228.895895][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.895915][ T5890] usb 4-1: Product: syz [ 228.895930][ T5890] usb 4-1: Manufacturer: syz [ 228.895945][ T5890] usb 4-1: SerialNumber: syz [ 228.931297][ T6974] loop1: detected capacity change from 0 to 256 [ 228.945211][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.945519][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.948208][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.949289][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.949504][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.949705][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.949883][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.951257][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.954360][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.956277][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.957246][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.958501][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.966776][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.966843][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.966867][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.966888][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.966909][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.975183][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.975400][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.977474][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.979190][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.979360][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.979626][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.981366][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.981496][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.985989][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.986436][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.988463][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.988500][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.988524][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.988547][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.988570][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.988593][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.988617][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.990209][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.990665][ T1371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.995099][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 228.995144][ T1525] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.010498][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.011668][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.011911][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.012027][ T6974] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 229.012850][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.027372][ T1024] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.036951][ T1179] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.217099][ T5734] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 229.436819][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 229.440233][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 229.456127][ T5734] usb 5-1: config 2 has an invalid interface number: 12 but max is 0 [ 229.456152][ T5734] usb 5-1: config 2 has no interface number 0 [ 229.456182][ T5734] usb 5-1: config 2 interface 12 has no altsetting 0 [ 229.459508][ T5734] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=2f.72 [ 229.459597][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.459615][ T5734] usb 5-1: Product: syz [ 229.459627][ T5734] usb 5-1: Manufacturer: syz [ 229.459640][ T5734] usb 5-1: SerialNumber: syz [ 229.555499][ T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 229.557995][ T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 229.841402][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 229.962235][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.963407][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.965680][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.978264][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.100308][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 230.100325][ T38] audit: type=1326 audit(1779078026.145:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.4.285" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f557520ce59 code=0x0 [ 230.179142][ T38] audit: type=1804 audit(1779078026.225:95): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.288" name="/newroot/54/file0/bus" dev="loop1" ino=1048611 res=1 errno=0 [ 230.338666][ T6990] loop0: detected capacity change from 0 to 128 [ 230.374526][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.375600][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.412873][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.413025][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.415516][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.419586][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.420453][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.424358][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.424395][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.424417][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.439603][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.439962][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.458730][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.459775][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.465711][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.530538][ T6990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 230.546852][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.547471][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.549720][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.554696][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.586146][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.597182][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.597506][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.597787][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.603261][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.605450][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.605726][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.617401][ T6990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.639792][ T1525] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 230.641134][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.641401][ T1525] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 230.751096][ T5890] usb 4-1: USB disconnect, device number 5 [ 230.965085][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'. [ 231.014879][ T5611] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.057446][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 231.073374][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 231.190292][ T6997] loop2: detected capacity change from 0 to 2048 [ 231.195199][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.215275][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.215408][ T6997] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 231.217004][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.217336][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.217724][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.218021][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.219556][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.220439][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.220997][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.221800][ T1024] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.222952][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.224963][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.225089][ T6997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.225428][ T44] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 231.226118][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.237047][ T6997] loop5: detected capacity change from 0 to 7 [ 231.262426][ T1024] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 231.277451][ T1525] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 231.281301][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.281453][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.324822][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 231.344930][ T3444] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.374996][ T3444] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 231.385319][ T7001] overlayfs: upper fs needs to support d_type. [ 231.391362][ T7001] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 231.391388][ T7001] overlayfs: failed to set xattr on upper [ 231.391396][ T7001] overlayfs: ...falling back to redirect_dir=nofollow. [ 231.391405][ T7001] overlayfs: ...falling back to index=off. [ 231.391413][ T7001] overlayfs: ...falling back to uuid=null. [ 231.415660][ T1525] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 231.510908][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.510946][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.511120][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.511148][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.511404][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.511429][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.511569][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.511593][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.511728][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.511753][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.511871][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.511920][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.512009][ T6997] ldm_validate_partition_table(): Disk read failed. [ 231.512061][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.512084][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.512203][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.512227][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.512434][ T6997] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 231.512459][ T6997] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.512647][ T6997] Dev loop5: unable to read RDB block 0 [ 231.513096][ T6997] loop5: unable to read partition table [ 231.513308][ T6997] loop5: partition table beyond EOD, truncated [ 231.513340][ T6997] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 231.667010][ T6996] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 232.623005][ T5734] cypress_m8 5-1:2.12: HID->COM RS232 Adapter converter detected [ 232.624166][ T5734] cyphidcom ttyUSB0: required endpoint is missing [ 232.640660][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.641277][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.643142][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.643687][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.645164][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.647489][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.648187][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.653496][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.703425][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.711627][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.719355][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.725741][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.728965][ T5734] usb 5-1: USB disconnect, device number 12 [ 232.729749][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.730495][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.730732][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.732614][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.732648][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.732671][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.732692][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.735908][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.735944][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.735967][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.735988][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.736009][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.736030][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.736051][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.736954][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.742731][ T1371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.747549][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.750666][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.762439][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.763672][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.763709][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.763731][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.763752][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.763773][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.763795][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.763816][ T1525] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 232.890157][ T5777] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 232.987319][ T5734] cypress_m8 5-1:2.12: device disconnected [ 233.068920][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 233.097251][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 233.098327][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 233.098631][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 233.098755][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 233.180076][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 233.180174][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 233.180227][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 233.335848][ T1525] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 233.370378][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 233.897672][ T1179] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 234.200234][ T38] audit: type=1326 audit(1779078030.245:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.200299][ T38] audit: type=1326 audit(1779078030.245:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.201227][ T38] audit: type=1326 audit(1779078030.255:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.205157][ T7019] block nbd1: shutting down sockets [ 234.205336][ T38] audit: type=1326 audit(1779078030.255:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.206232][ T38] audit: type=1326 audit(1779078030.255:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.206696][ T38] audit: type=1326 audit(1779078030.255:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.207003][ T38] audit: type=1326 audit(1779078030.255:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.207625][ T38] audit: type=1326 audit(1779078030.255:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 234.515880][ T7031] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 234.516135][ T7031] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 234.734503][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 234.745080][ T5612] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 235.118177][ T5612] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 235.134717][ T7041] FAULT_INJECTION: forcing a failure. [ 235.134717][ T7041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.134765][ T7041] CPU: 0 UID: 0 PID: 7041 Comm: syz.1.303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 235.134793][ T7041] Tainted: [L]=SOFTLOCKUP [ 235.134799][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.134811][ T7041] Call Trace: [ 235.134818][ T7041] [ 235.134826][ T7041] dump_stack_lvl+0xe8/0x150 [ 235.134856][ T7041] should_fail_ex+0x46b/0x600 [ 235.134884][ T7041] _copy_from_user+0x2d/0xb0 [ 235.134913][ T7041] __sys_bpf+0x229/0x950 [ 235.134933][ T7041] ? __pfx___sys_bpf+0x10/0x10 [ 235.134948][ T7041] ? rt_mutex_slowunlock+0x1cb/0x300 [ 235.134993][ T7041] ? ksys_write+0x248/0x270 [ 235.135023][ T7041] ? __pfx_ksys_write+0x10/0x10 [ 235.135055][ T7041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.135076][ T7041] __x64_sys_bpf+0x7c/0x90 [ 235.135104][ T7041] do_syscall_64+0x15f/0xf80 [ 235.135126][ T7041] ? trace_irq_disable+0x3b/0x140 [ 235.135155][ T7041] ? clear_bhb_loop+0x40/0x90 [ 235.135178][ T7041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.135197][ T7041] RIP: 0033:0x7f8dac9fce59 [ 235.135224][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.135240][ T7041] RSP: 002b:00007f8daac2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.135260][ T7041] RAX: ffffffffffffffda RBX: 00007f8dacc76090 RCX: 00007f8dac9fce59 [ 235.135274][ T7041] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 235.135286][ T7041] RBP: 00007f8daac2d090 R08: 0000000000000000 R09: 0000000000000000 [ 235.135299][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.135310][ T7041] R13: 00007f8dacc76128 R14: 00007f8dacc76090 R15: 00007ffe7de93588 [ 235.135340][ T7041] [ 236.113463][ T5624] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 236.607553][ T5624] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.607580][ T5624] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 236.607617][ T5624] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.607651][ T5624] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 236.607675][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.741709][ T5624] usb 5-1: config 0 descriptor?? [ 236.943974][ T38] kauditd_printk_skb: 23 callbacks suppressed [ 236.943992][ T38] audit: type=1326 audit(1779078032.995:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f557520caeb code=0x7ffc0000 [ 236.944856][ T38] audit: type=1326 audit(1779078032.995:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f557520caeb code=0x7ffc0000 [ 236.946173][ T38] audit: type=1326 audit(1779078032.995:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55751cd68e code=0x7ffc0000 [ 237.146818][ T38] audit: type=1326 audit(1779078033.195:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 237.147459][ T38] audit: type=1326 audit(1779078033.195:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.4.302" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f557520ce59 code=0x7ffc0000 [ 239.110037][ C0] sched: DL replenish lagged too much [ 239.320551][ T7046] loop3: detected capacity change from 0 to 32768 [ 239.348311][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.352008][ T7046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.304 (7046) [ 239.417535][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.431526][ T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.435556][ T7046] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.435601][ T7046] BTRFS info (device loop3): using sha256 checksum algorithm [ 239.572180][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.666967][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.668817][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.715720][ T1505] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.738090][ T1505] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.765333][ T1505] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.836152][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.866355][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.882596][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.923008][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.974089][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 239.976831][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.018148][ T163] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.028296][ T163] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.047693][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.167282][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.181038][ T1371] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.208782][ T1505] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.211320][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.215228][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.237669][ T1505] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.278328][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.372889][ T1371] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.400161][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.413407][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.486131][ T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.490592][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.563405][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.572138][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.609241][ T7046] BTRFS error (device loop3): open_ctree failed: -4 [ 240.659774][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.688786][ T5624] Bluetooth: Can't get version to change to load ram patch err [ 240.688818][ T5624] Bluetooth: Loading patch file failed [ 240.688856][ T5624] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 240.820843][ T5624] usb 5-1: USB disconnect, device number 13 [ 240.885324][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.898734][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.920693][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.928623][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.955620][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.959356][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.978798][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.993475][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 240.995974][ T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 241.020645][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 241.036927][ T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 241.059833][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.384386][ T7075] loop0: detected capacity change from 0 to 32768 [ 242.481421][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.481720][ T7075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.309 (7075) [ 242.593812][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.609103][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.620743][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.640256][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.664004][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.717190][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.744293][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.792878][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.839532][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.846283][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.862605][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.865451][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.888530][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.903213][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.904433][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.930152][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.934657][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.969491][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 242.986301][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.059453][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.065160][ T7081] mmap: syz.1.305 (7081): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 243.087837][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.120400][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.123028][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.123801][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.129314][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.163263][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.178996][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.189269][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.198765][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.217524][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.217575][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.217605][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.245139][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.273913][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.274098][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.290623][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.290821][ T7075] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.290851][ T7075] BTRFS info (device loop0): using sha256 checksum algorithm [ 243.306714][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.365404][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.388962][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.398337][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.799951][ T3425] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.827518][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.836713][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.952573][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 243.999053][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.000519][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.020756][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.023853][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.100197][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.106401][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.112537][ T7075] BTRFS info (device loop0): rebuilding free space tree [ 244.278577][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 244.278675][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 244.419955][ T13] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 244.485238][ T7075] BTRFS info (device loop0): disabling free space tree [ 244.485492][ T7075] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.485521][ T7075] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.527093][ T13] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 244.545554][ T1505] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 244.604864][ T7100] loop1: detected capacity change from 0 to 2048 [ 244.696586][ T1179] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.752017][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.752230][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.752416][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.756234][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.759576][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.805730][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.824555][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.828383][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.845873][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.847989][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.849486][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.924474][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.924555][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.928353][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932453][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932492][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932515][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932538][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932560][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932583][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932605][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932627][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932649][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932672][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932694][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.932715][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.948580][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.948619][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.948643][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.948665][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 244.950922][ T7075] BTRFS info (device loop0): setting nodatasum [ 244.950944][ T7075] BTRFS info (device loop0): setting nodatacow [ 244.950958][ T7075] BTRFS info (device loop0): turning off barriers [ 244.950975][ T7075] BTRFS info (device loop0): turning on sync discard [ 244.950991][ T7075] BTRFS info (device loop0): force clearing of disk cache [ 244.953422][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 245.156536][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187103][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187245][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187266][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187284][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187301][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187318][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187334][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187351][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.187368][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.358757][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.380391][ T3425] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.414081][ T1505] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.428852][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.428893][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.428917][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.428964][ T7106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.443293][ T5855] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 245.452257][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.452663][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.452912][ T3425] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.453067][ T3425] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 245.910164][ T5624] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 246.060252][ T5624] usb 4-1: Using ep0 maxpacket: 16 [ 246.067429][ T5624] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 246.067458][ T5624] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.067478][ T5624] usb 4-1: config 0 has no interface number 0 [ 246.103467][ T5624] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 246.103498][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.103517][ T5624] usb 4-1: Product: syz [ 246.103532][ T5624] usb 4-1: Manufacturer: syz [ 246.103546][ T5624] usb 4-1: SerialNumber: syz [ 246.150181][ T5624] usb 4-1: config 0 descriptor?? [ 246.182085][ T5624] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 246.182121][ T5624] uvcvideo 4-1:0.105: No valid video chain found. [ 246.410897][ T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 246.420333][ T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 246.517598][ T192] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 246.517940][ T7110] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 246.537513][ T3425] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 246.538531][ T3425] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 246.538738][ T7110] Remounting filesystem read-only [ 247.105897][ T7118] netlink: 10872 bytes leftover after parsing attributes in process `syz.4.317'. [ 247.305979][ T7120] process 'syz.4.318' launched './file0' with NULL argv: empty string added [ 249.802004][ T5615] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.886777][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.932461][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.936070][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.937787][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.939021][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.462237][ T7134] loop4: detected capacity change from 0 to 1024 [ 251.477457][ T7134] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 251.708744][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 252.018503][ T10] usb 4-1: USB disconnect, device number 7 [ 252.222051][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 252.222546][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 252.238731][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 252.278535][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 253.060143][ T5632] Bluetooth: hci2: command tx timeout [ 253.495547][ T7142] loop0: detected capacity change from 0 to 4096 [ 253.499190][ T7142] ntfs3: Unknown parameter ' ' [ 253.523440][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.525256][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.526002][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.526676][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.527416][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.528099][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.529397][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.589529][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.600442][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.601234][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.601994][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.626870][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.639674][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.649140][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.658951][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.671331][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.672157][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.674810][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.705814][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.719099][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.729042][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.738109][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.739101][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.756729][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.758739][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.759551][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.783654][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.784664][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.818216][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 253.894437][ T7025] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 255.296134][ T5632] Bluetooth: hci2: command tx timeout [ 256.271262][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.271365][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.963409][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 257.440207][ T7156] Bluetooth: MGMT ver 1.23 [ 259.012238][ T5625] Bluetooth: hci2: command tx timeout [ 259.613317][ T5632] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 261.392210][ T5632] Bluetooth: hci2: command 0x0419 tx timeout [ 261.626417][ T7170] overlayfs: failed to resolve 'index=on': -2 [ 261.696112][ T5777] IPVS: starting estimator thread 0... [ 261.803741][ T7171] IPVS: using max 8 ests per chain, 19200 per kthread [ 262.857471][ T3425] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.128926][ T7151] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 263.145004][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.185974][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.262868][ T7158] bridge0: entered allmulticast mode [ 263.343817][ T7156] bridge_slave_1: left allmulticast mode [ 263.343998][ T7156] bridge_slave_1: left promiscuous mode [ 263.344720][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.387038][ T7175] binder_alloc: 7174: binder_alloc_buf size -360 failed, no address space [ 263.387057][ T7175] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 263.448070][ T5632] Bluetooth: hci2: command 0x0419 tx timeout [ 263.567272][ T7175] loop3: detected capacity change from 0 to 512 [ 263.604426][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.605122][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.606825][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.607376][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608285][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608324][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608347][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608371][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608394][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608417][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608439][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.608463][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.731908][ T6417] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 263.752927][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.754286][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.755030][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.755667][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.756314][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.756960][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.758554][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.817227][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 263.849299][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 264.740418][ T6417] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 264.796373][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 265.154401][ T7156] bridge_slave_0: left allmulticast mode [ 265.154437][ T7156] bridge_slave_0: left promiscuous mode [ 265.280290][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.454131][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.531152][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.533891][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.574567][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.576754][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.224275][ T7211] loop3: detected capacity change from 0 to 512 [ 269.252803][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.253248][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.253287][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.253309][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.253331][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.253352][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.253374][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.253395][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.254490][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.255886][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.256592][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.257275][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.257971][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.437202][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.437378][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.438181][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.438964][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.439703][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.451506][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.493555][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.496368][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.499537][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513133][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513177][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513203][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513227][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513249][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513272][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513294][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.513317][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.525034][ T1371] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 269.632820][ T1371] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670144][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670182][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670201][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670219][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670236][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670253][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670270][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.670287][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 269.770564][ T5632] Bluetooth: hci5: command tx timeout [ 269.862864][ T1525] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 269.887365][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 271.006397][ T7228] loop3: detected capacity change from 0 to 2048 [ 271.028154][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x1, refcnt=2 [ 271.028922][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x1, refcnt=2 [ 271.055222][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.068698][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.070095][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.080463][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.081435][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098681][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098726][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098750][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098774][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098796][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098818][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098841][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098874][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098896][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098918][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098940][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098962][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.098984][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.099007][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261190][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261255][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261283][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261308][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261341][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261364][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261416][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261440][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261463][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261486][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261509][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.261532][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.358758][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.359124][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.359408][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.359952][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.394140][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.398895][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.433772][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.434140][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.434414][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.436041][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.478354][ T192] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.478523][ T1525] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.547209][ T3425] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.602637][ T7229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.607213][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.607266][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.607292][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.607315][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.654606][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.654651][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.654676][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.685264][ T3444] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.699783][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.713160][ T6417] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.742323][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.749704][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 271.762425][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 271.780679][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.780877][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.781120][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.840327][ T5632] Bluetooth: hci5: command tx timeout [ 271.944983][ T1505] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 271.946591][ T7232] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 271.989537][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 272.012068][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 272.013644][ T7232] Remounting filesystem read-only [ 272.507087][ T7216] tipc: Enabled bearer , priority 10 [ 272.741361][ T7235] loop4: detected capacity change from 0 to 128 [ 272.757252][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.769238][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.769500][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.769619][ T7235] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 272.769670][ T7235] hpfs: filesystem error: improperly stopped [ 272.769685][ T7235] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 272.769699][ T7235] hpfs: You really don't want any checks? You are crazy... [ 272.790357][ T7235] hpfs: hpfs_map_sector(): read error [ 272.790377][ T7235] hpfs: code page support is disabled [ 272.800565][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.814283][ T7235] hpfs: hpfs_map_4sectors(): unaligned read [ 272.814418][ T7235] hpfs: hpfs_map_4sectors(): unaligned read [ 272.814429][ T7235] hpfs: filesystem error: unable to find root dir [ 272.836358][ T7235] hpfs: hpfs_map_4sectors(): unaligned read [ 272.836943][ T7235] netlink: 128 bytes leftover after parsing attributes in process `syz.4.347'. [ 272.836961][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 272.842607][ T7235] hpfs: hpfs_map_4sectors(): unaligned read [ 272.842837][ T7235] hpfs: hpfs_map_sector(): read error [ 272.842858][ T7235] hpfs: hpfs_map_sector(): read error [ 272.929633][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.929677][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.929700][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.934731][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.934772][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.934795][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.240597][ T7237] loop0: detected capacity change from 0 to 1024 [ 273.249735][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.264186][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.269073][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.296556][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.317560][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.325539][ T1371] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 273.333661][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.346748][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.346797][ T1371] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 273.368076][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.368899][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.369684][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.403808][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.403959][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.404067][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.404846][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.405604][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.452624][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.465703][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.498028][ T1371] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 273.526440][ T7237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.573177][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.573248][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 273.664660][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.666465][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.667194][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.668058][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.669621][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.721757][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.725153][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.725336][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.725508][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.725670][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.725844][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.781628][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.920249][ T5632] Bluetooth: hci5: command tx timeout [ 274.017367][ T192] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 274.078913][ T5614] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 274.189005][ T1505] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 274.189111][ T1505] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 274.189149][ T1505] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 274.218946][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.310055][ T6417] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 274.335452][ T6417] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 274.360202][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 274.764392][ T7248] loop9: detected capacity change from 0 to 7 [ 274.765690][ T192] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 274.772786][ T7248] Dev loop9: unable to read RDB block 7 [ 274.772815][ T7248] loop9: AHDI p1 p2 p3 [ 274.772840][ T7248] loop9: partition table partially beyond EOD, truncated [ 274.773057][ T7248] loop9: p1 start 1920169572 is beyond EOD, truncated [ 274.773076][ T7248] loop9: p2 start 1851744889 is beyond EOD, truncated [ 274.899005][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 275.080291][ T5777] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.513720][ T5632] Bluetooth: hci5: command tx timeout [ 276.685343][ T7246] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 276.892922][ T5777] usb 5-1: Using ep0 maxpacket: 8 [ 276.900919][ T5777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.900971][ T5777] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.900994][ T5777] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.901022][ T5777] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.907193][ T5777] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 276.907221][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.907240][ T5777] usb 5-1: Product: syz [ 276.907254][ T5777] usb 5-1: Manufacturer: syz [ 276.907269][ T5777] usb 5-1: SerialNumber: syz [ 277.086403][ T5777] usb 5-1: config 0 descriptor?? [ 277.161938][ T5777] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 277.353827][ T5777] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 277.356194][ T5777] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 277.383074][ T5777] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 277.563074][ T5777] usb 5-1: USB disconnect, device number 14 [ 278.324564][ T3425] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.661675][ T7266] loop0: detected capacity change from 0 to 1024 [ 278.732615][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 278.762279][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 278.763789][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 278.765501][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 278.768391][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 278.769926][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.097224][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.108166][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.117465][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.117506][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.117531][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.117554][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.151771][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.151816][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.151841][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.151863][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.206781][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.206825][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.206849][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.206870][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.209568][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.209599][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.209617][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.209634][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.266244][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.266417][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.266668][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.266859][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.267048][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.486781][ T1179] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.496794][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.511037][ T3444] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 279.534096][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.537595][ T6417] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.663153][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.668241][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.708215][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.900102][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.930443][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.935568][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 279.937724][ T6417] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 280.294528][ T5748] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 280.294668][ T5777] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 280.440345][ T5748] usb 4-1: device descriptor read/64, error -71 [ 280.460153][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 280.464989][ T5777] usb 5-1: config 0 has no interfaces? [ 280.468643][ T5777] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 280.468671][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.468695][ T5777] usb 5-1: Product: syz [ 280.468709][ T5777] usb 5-1: Manufacturer: syz [ 280.468724][ T5777] usb 5-1: SerialNumber: syz [ 280.536698][ T5777] usb 5-1: config 0 descriptor?? [ 280.654335][ T1505] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 280.665010][ T1179] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 280.665383][ T1179] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 280.665742][ T1179] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 280.710242][ T5748] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 280.757886][ T7274] binder: 7273:7274 ioctl c018620c 200000000100 returned -1 [ 281.412788][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 281.420457][ T5748] usb 4-1: device descriptor read/64, error -71 [ 281.536069][ T5748] usb usb4-port1: attempt power cycle [ 281.890172][ T5748] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 281.941659][ T5748] usb 4-1: device descriptor read/8, error -71 [ 282.190291][ T5748] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 282.211082][ T5748] usb 4-1: device descriptor read/8, error -71 [ 282.325187][ T5748] usb usb4-port1: unable to enumerate USB device [ 282.346030][ T7275] loop4: detected capacity change from 0 to 256 [ 282.405196][ T7275] exfat: Unknown parameter '0M5Ët„' [ 282.405441][ T7275] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 282.651487][ T7275] loop4: detected capacity change from 0 to 2048 [ 282.685326][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 282.737862][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 282.767665][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.216008][ T3444] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.239329][ T1179] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.240915][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.244476][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.391106][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.399180][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.452764][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.457710][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.458641][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.477952][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.503524][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 283.611502][ T7285] loop3: detected capacity change from 0 to 16 [ 283.628569][ T7025] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 283.675998][ T7286] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 283.676292][ T7286] CIFS: VFS: Malformed UNC in devname [ 283.693889][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 283.696995][ T7285] erofs (device loop3): mounted with root inode @ nid 36. [ 283.700709][ T1505] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 285.115533][ T3425] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.190233][ T5777] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 285.343816][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.343853][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.343877][ T5777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.343987][ T5777] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.344013][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.421693][ T5777] usb 4-1: config 0 descriptor?? [ 285.809791][ T7287] loop0: detected capacity change from 0 to 40427 [ 285.877240][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 285.899079][ T5748] usb 5-1: USB disconnect, device number 15 [ 285.935843][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 285.936660][ T7287] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 285.936682][ T7287] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 286.027509][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.028352][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.033629][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.046307][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.047412][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.050300][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.055068][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.055375][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.057199][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.059073][ T7287] F2FS-fs (loop0): invalid crc value [ 286.063202][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.067873][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.138125][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.139894][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.139944][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.140963][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.141421][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.159257][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.164455][ T192] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.171160][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.189856][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.192576][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.194613][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.221244][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.235877][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.283340][ T1371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.303205][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.311303][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.321321][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.333590][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.344012][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.388650][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.391237][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.401528][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.407207][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.418018][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.422280][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.430927][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.430973][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.431002][ T3444] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.493854][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.493962][ T1505] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 286.902119][ T7295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 286.902496][ T7295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.380897][ T5777] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 288.598136][ T7304] bad cache= option: noner_mlock 0 [ 288.598136][ T7304] nr_zspages 0 [ 288.598136][ T7304] nr_free_cma 0 [ 288.598136][ T7304] numa_hit 1069595 [ 288.598136][ T7304] numa_miss 2 [ 288.598136][ T7304] numa_foreign 2 [ 288.598136][ T7304] numa_interleave 6681 [ 288.598136][ T7304] numa_local 1066176 [ 288.598136][ T7304] numa_other 3421 [ 288.598136][ T7304] nr_inactive_anon 0 [ 288.598136][ T7304] nr_active_anon 14885 [ 288.598136][ T7304] nr_inactive_file 60035 [ 288.598136][ T7304] nr_active_file 0 [ 288.598136][ T7304] nr_unevictable 768 [ 288.598136][ T7304] nr_slab_reclaimable 11738 [ 288.598136][ T7304] nr_slab_unreclaimable 100556 [ 288.598136][ T7304] nr_isolated_anon 0 [ 288.598136][ T7304] nr_isolated_file 0 [ 288.598136][ T7304] workingset_nodes 0 [ 288.598136][ T7304] workingset_refault_anon 7 [ 288.598136][ T7304] workingset_refault_file 0 [ 288.598136][ T7304] workingset_activate_anon 7 [ 288.598136][ T7304] workingset_activate_file 0 [ 288.598136][ T7304] workingset_restore_anon 0 [ 288.598136][ T7304] workingset_restore_file 0 [ 288.598136][ T7304] workingset_nodereclaim 0 [ 288.598136][ T7304] nr_anon_pages 6187 [ 288.598136][ T7304] nr_mapped 35222 [ 288.598136][ T7304] nr_file_pages 69476 [ 288.598136][ T7304] nr_dirty 167 [ 288.598136][ T7304] nr_writeback 0 [ 288.598136][ T7304] nr_shmem 9471 [ 288.598136][ T7304] nr_shmem_hugepages 0 [ 288.598136][ T7304] nr_shmem_pmdmapped 0 [ 288.598136][ T7304] nr_file_hugepages 0 [ 288.598136][ T7304] nr_file_pmdmapped 0 [ 288.598136][ T7304] nr_anon_transparent_hugepages 0 [ 288.598136][ T7304] nr_vmscan_write 9 [ 288.598136][ T7304] nr_vmscan_immediate_reclaim 0 [ 288.598136][ T7304] nr_dirtied 3335 [ 288.598136][ T7304] nr_written 3158 [ 288.598136][ T7304] nr_throttled_written 0 [ 288.598136][ T7304] nr_kernel_misc_reclaimable 0 [ 288.598136][ T7304] nr_foll_pin_acquired 3955 [ 288.598136][ T7304] nr_foll_pin_released 3955 [ 288.598136][ T7304] nr_vmalloc 98334 [ 288.598518][ T7304] CIFS: VFS: bad cache= option: noner_mlock 0 [ 288.598518][ T7304] nr_zspages 0 [ 288.598518][ T7304] nr_free_cma 0 [ 288.598518][ T7304] numa_hit 1069595 [ 288.598518][ T7304] numa_miss 2 [ 288.598518][ T7304] numa_foreign 2 [ 288.598518][ T7304] numa_interleave 6681 [ 288.598518][ T7304] numa_local 1066176 [ 288.598518][ T7304] numa_other 3421 [ 288.598518][ T7304] nr_inactive_anon 0 [ 288.598518][ T7304] nr_active_anon 14885 [ 288.598518][ T7304] nr_inactive_file 60035 [ 288.598518][ T7304] nr_active_file 0 [ 288.598518][ T7304] nr_unevictable 768 [ 288.598518][ T7304] nr_slab_reclaimable 11738 [ 288.598518][ T7304] nr_slab_unreclaimable 100556 [ 288.598518][ T7304] nr_isolated_anon 0 [ 288.598518][ T7304] nr_isolated_file 0 [ 288.598518][ T7304] workingset_nodes 0 [ 288.598518][ T7304] workingset_refault_anon 7 [ 288.598518][ T7304] workingset_refault_file 0 [ 288.598518][ T7304] workingset_activate_anon 7 [ 288.598518][ T7304] workingset_activate_file 0 [ 288.598518][ T7304] workingset_restore_anon 0 [ 288.598518][ T7304] workingset_restore_file 0 [ 288.598518][ T7304] workingset_nodereclaim 0 [ 288.598518][ T7304] nr_anon_pages 6187 [ 288.598518][ T7304] nr_mapped 35222 [ 288.598518][ T7304] nr_file_pages 69476 [ 288.598518][ T7304] nr_dirty 167 [ 288.598518][ T7304] nr_writeback 0 [ 288.598518][ T7304] nr_shmem 9471 [ 288.598518][ T7304] nr_shmem_hugepages 0 [ 288.598518][ T7304] nr_shmem_pmdmapped 0 [ 288.598518][ T7304] nr_file_hugepages 0 [ 288.598518][ T7304] nr_file_pmdmapped 0 [ 288.598518][ T7304] nr_anon_transparent_hugepages 0 [ 288.598518][ T7304] nr_vmscan_write 9 [ 288.598518][ T7304] nr_vmscan_immediate_reclaim 0 [ 288.598518][ T7304] nr_dirtied 3335 [ 288.598518][ T7304] nr_written 3158 [ 288.598518][ T7304] nr_throttled_written 0 [ 288.598518][ T7304] nr_kernel_misc_reclaimable 0 [ 288.598518][ T7304] nr_foll_pin_acquired 3955 [ 288.598518][ T7304] nr_foll_pin_released 3955 [ 288.598518][ T7304] nr_vmalloc 98334 [ 289.705368][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 290.318457][ T5777] usb 4-1: USB disconnect, device number 12 [ 290.457715][ T7308] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 290.459236][ T7308] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 291.276531][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 291.452682][ T7287] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 291.588435][ T6417] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 306.590807][ T7330] loop4: detected capacity change from 0 to 16 [ 306.677901][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 306.719092][ T7330] erofs (device loop4): mounted with root inode @ nid 36. [ 306.733601][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 307.052414][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.119890][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.133860][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.204626][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.207010][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.252323][ T7333] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.368'. [ 307.581469][ T7336] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.368'. [ 308.036170][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.229377][ T5614] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 308.346108][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.407404][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.493665][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.739785][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.183760][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.241098][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.243180][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.244504][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.275792][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.443281][ T5632] Bluetooth: hci0: command tx timeout [ 309.928487][ T7356] loop4: detected capacity change from 0 to 1024 [ 309.943750][ T7356] EXT4-fs: Ignoring removed orlov option [ 309.944461][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 309.966079][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 309.966439][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 309.966974][ T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 309.967336][ T44] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 309.967702][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 309.969136][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.085558][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.101225][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.105988][ T6417] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 310.122700][ T6417] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 310.123526][ T6417] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.147549][ T7356] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 310.147686][ T7356] System zones: 0-1, 3-12 [ 310.148759][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.149693][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.149950][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.188133][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.201603][ T1505] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.203898][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.206511][ T7356] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.238363][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.239814][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.324122][ T1371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.341572][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 310.384743][ T3425] bridge_slave_1: left allmulticast mode [ 310.475896][ T3425] bridge_slave_1: left promiscuous mode [ 310.649200][ T3425] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.960254][ T5632] Bluetooth: hci6: command tx timeout [ 311.360231][ T5632] Bluetooth: hci1: command tx timeout [ 311.520248][ T5632] Bluetooth: hci0: command tx timeout [ 313.040181][ T5632] Bluetooth: hci6: command tx timeout [ 313.431585][ T3425] bridge_slave_0: left allmulticast mode [ 313.441379][ T5632] Bluetooth: hci1: command tx timeout [ 313.506955][ T3425] bridge_slave_0: left promiscuous mode [ 313.604270][ T3425] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.610361][ T5632] Bluetooth: hci0: command tx timeout [ 315.123038][ T5632] Bluetooth: hci6: command tx timeout [ 315.126232][ T6417] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 315.520234][ T5632] Bluetooth: hci1: command tx timeout [ 315.680204][ T5632] Bluetooth: hci0: command tx timeout [ 317.200179][ T5632] Bluetooth: hci6: command tx timeout [ 317.600239][ T5632] Bluetooth: hci1: command tx timeout [ 319.646451][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.646555][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.160293][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 325.213354][ T1505] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 326.154436][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.228026][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.249697][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.258465][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.259347][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.576010][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.618829][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.622108][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.653961][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.656810][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 329.360211][ T5632] Bluetooth: hci4: command tx timeout [ 329.760278][ T5632] Bluetooth: hci7: command tx timeout [ 330.240392][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 331.440534][ T5632] Bluetooth: hci4: command tx timeout [ 331.840324][ T5632] Bluetooth: hci7: command tx timeout [ 333.520532][ T5632] Bluetooth: hci4: command tx timeout [ 333.920158][ T5632] Bluetooth: hci7: command tx timeout [ 335.280363][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 335.600663][ T5632] Bluetooth: hci4: command tx timeout [ 336.000196][ T5632] Bluetooth: hci7: command tx timeout [ 340.321836][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 340.991259][ T1505] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 340.991546][ T1505] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 345.362977][ T1371] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 350.402032][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 355.440779][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 360.480500][ T1179] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 365.164011][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.523530][ T1179] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 366.711031][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.609145][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 367.662462][ T3425] bond0 (unregistering): Released all slaves [ 367.752184][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 367.844640][ T5618] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 367.845966][ T5618] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 367.945143][ T5618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 367.983814][ T5621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 368.117594][ T5632] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 368.153700][ T5632] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 368.201919][ T5632] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 368.262378][ T5632] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 369.398234][ T5625] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 369.445450][ T5625] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 369.449263][ T5625] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 369.486454][ T5625] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 369.495001][ T5625] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 370.240376][ T5632] Bluetooth: hci8: command tx timeout [ 370.400481][ T5632] Bluetooth: hci9: command tx timeout [ 370.560338][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 371.600271][ T5632] Bluetooth: hci10: command tx timeout [ 372.327874][ T5632] Bluetooth: hci8: command tx timeout [ 372.490045][ T5632] Bluetooth: hci9: command tx timeout [ 373.696868][ T5632] Bluetooth: hci10: command tx timeout [ 374.400541][ T5632] Bluetooth: hci8: command tx timeout [ 374.560370][ T5632] Bluetooth: hci9: command tx timeout [ 375.600584][ T1371] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 375.760267][ T5632] Bluetooth: hci10: command tx timeout [ 376.480346][ T5632] Bluetooth: hci8: command tx timeout [ 376.640313][ T5632] Bluetooth: hci9: command tx timeout [ 377.841753][ T5632] Bluetooth: hci10: command tx timeout [ 380.641080][ T1179] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 385.076559][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.076666][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.680747][ T6417] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 386.477527][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.552454][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.555486][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.608743][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.633841][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.485788][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.543474][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.546028][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.547375][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.579724][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.725636][ T5625] Bluetooth: hci0: command tx timeout [ 389.442447][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 390.640196][ T5632] Bluetooth: hci1: command tx timeout [ 390.720391][ T1505] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 390.800310][ T5632] Bluetooth: hci0: command tx timeout [ 392.720412][ T5632] Bluetooth: hci1: command tx timeout [ 392.880125][ T5632] Bluetooth: hci0: command tx timeout [ 394.800265][ T5632] Bluetooth: hci1: command tx timeout [ 394.960257][ T5632] Bluetooth: hci0: command tx timeout [ 395.783844][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 396.881644][ T5632] Bluetooth: hci1: command tx timeout [ 399.452916][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 400.493127][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.493441][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.493818][ T7390] bridge_slave_0: entered allmulticast mode [ 400.497315][ T7390] bridge_slave_0: entered promiscuous mode [ 400.647230][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.647641][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.647953][ T7390] bridge_slave_1: entered allmulticast mode [ 400.677304][ T7390] bridge_slave_1: entered promiscuous mode [ 400.688195][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.688489][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.688789][ T7378] bridge_slave_0: entered allmulticast mode [ 400.732090][ T7378] bridge_slave_0: entered promiscuous mode [ 400.863646][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.863982][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.864295][ T7378] bridge_slave_1: entered allmulticast mode [ 400.867827][ T7378] bridge_slave_1: entered promiscuous mode [ 400.915414][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 401.225207][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.225584][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.225887][ T7379] bridge_slave_0: entered allmulticast mode [ 401.229747][ T7379] bridge_slave_0: entered promiscuous mode [ 401.284933][ T7390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.355756][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.357171][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.357469][ T7379] bridge_slave_1: entered allmulticast mode [ 401.386534][ T7379] bridge_slave_1: entered promiscuous mode [ 401.451841][ T7390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.488267][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.645431][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.143459][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.842368][ T1371] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 410.882031][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 413.565223][ T7390] team0: Port device team_slave_0 added [ 413.625938][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.691740][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 413.713607][ T7390] team0: Port device team_slave_1 added [ 413.734238][ T7378] team0: Port device team_slave_0 added [ 413.826419][ T7378] team0: Port device team_slave_1 added [ 414.051679][ T7379] team0: Port device team_slave_0 added [ 414.172188][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.172205][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.172228][ T7390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.240437][ T7379] team0: Port device team_slave_1 added [ 414.240857][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.241526][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.242185][ T7441] bridge_slave_0: entered allmulticast mode [ 414.245678][ T7441] bridge_slave_0: entered promiscuous mode [ 414.301141][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.301461][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.301786][ T7447] bridge_slave_0: entered allmulticast mode [ 414.311294][ T7447] bridge_slave_0: entered promiscuous mode [ 414.353871][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.353887][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.353911][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.409118][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.409135][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.409159][ T7390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.516597][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.516917][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.517559][ T7441] bridge_slave_1: entered allmulticast mode [ 414.545527][ T7441] bridge_slave_1: entered promiscuous mode [ 414.548116][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.548422][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.549694][ T7447] bridge_slave_1: entered allmulticast mode [ 414.605271][ T7447] bridge_slave_1: entered promiscuous mode [ 414.616764][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.616794][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.616820][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.920617][ T1179] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 416.135106][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.135124][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.135149][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.250159][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.250176][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.250201][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.338273][ T7441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.365370][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.458793][ T7441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.476427][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.622672][ T7390] hsr_slave_0: entered promiscuous mode [ 416.624971][ T7390] hsr_slave_1: entered promiscuous mode [ 416.626968][ T7390] debugfs: 'hsr0' already exists in 'hsr' [ 416.626993][ T7390] Cannot create hsr debugfs directory [ 416.870824][ T7378] hsr_slave_0: entered promiscuous mode [ 416.874984][ T7378] hsr_slave_1: entered promiscuous mode [ 416.879923][ T7378] debugfs: 'hsr0' already exists in 'hsr' [ 416.879950][ T7378] Cannot create hsr debugfs directory [ 417.005415][ T7441] team0: Port device team_slave_0 added [ 417.028998][ T7447] team0: Port device team_slave_0 added [ 417.118586][ T7441] team0: Port device team_slave_1 added [ 417.144551][ T7447] team0: Port device team_slave_1 added [ 417.318466][ T7379] hsr_slave_0: entered promiscuous mode [ 417.333119][ T7379] hsr_slave_1: entered promiscuous mode [ 417.335910][ T7379] debugfs: 'hsr0' already exists in 'hsr' [ 417.335935][ T7379] Cannot create hsr debugfs directory [ 420.963596][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 426.000901][ T1505] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 426.355083][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 426.478895][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.478913][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.478938][ T7441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.529772][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.529787][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.529811][ T7447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.777649][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.777667][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.777692][ T7441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.835353][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.835369][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.835395][ T7447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.038141][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.102057][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.134077][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.135877][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.160813][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.491788][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.540411][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.577977][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.616597][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.617521][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.313443][ T7441] hsr_slave_0: entered promiscuous mode [ 429.322211][ T7441] hsr_slave_1: entered promiscuous mode [ 429.323996][ T7441] debugfs: 'hsr0' already exists in 'hsr' [ 429.324020][ T7441] Cannot create hsr debugfs directory [ 429.414057][ T7447] hsr_slave_0: entered promiscuous mode [ 429.419762][ T7447] hsr_slave_1: entered promiscuous mode [ 429.449862][ T7447] debugfs: 'hsr0' already exists in 'hsr' [ 429.449890][ T7447] Cannot create hsr debugfs directory [ 430.240342][ T5632] Bluetooth: hci2: command tx timeout [ 430.749477][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.802885][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.812814][ T5621] Bluetooth: hci3: command tx timeout [ 430.827080][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.975866][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.976830][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.042262][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 432.976150][ T5632] Bluetooth: hci3: command tx timeout [ 432.976248][ T5625] Bluetooth: hci2: command tx timeout [ 434.080445][ T5625] Bluetooth: hci5: command tx timeout [ 435.042829][ T5625] Bluetooth: hci2: command tx timeout [ 435.043887][ T5632] Bluetooth: hci3: command tx timeout [ 436.091979][ T1371] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 436.187861][ T5632] Bluetooth: hci5: command tx timeout [ 437.127253][ T5632] Bluetooth: hci3: command tx timeout [ 437.127286][ T5632] Bluetooth: hci2: command tx timeout [ 437.203317][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.203693][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.203999][ T7552] bridge_slave_0: entered allmulticast mode [ 437.207909][ T7552] bridge_slave_0: entered promiscuous mode [ 437.380327][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.380621][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.381309][ T7552] bridge_slave_1: entered allmulticast mode [ 437.420578][ T7552] bridge_slave_1: entered promiscuous mode [ 437.532267][ T7441] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 438.240663][ T5625] Bluetooth: hci5: command tx timeout [ 440.320870][ T5625] Bluetooth: hci5: command tx timeout [ 441.120574][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 444.592328][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.684657][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.685267][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.686465][ T7555] bridge_slave_0: entered allmulticast mode [ 444.721077][ T7555] bridge_slave_0: entered promiscuous mode [ 444.750379][ T7441] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 445.653416][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.719698][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.729001][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.729360][ T7555] bridge_slave_1: entered allmulticast mode [ 445.746610][ T7555] bridge_slave_1: entered promiscuous mode [ 446.163452][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 447.284894][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 447.341318][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 447.345546][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 447.366184][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 447.381188][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 448.538357][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 448.584942][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 448.609114][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 448.647553][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 448.666975][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 449.601401][ T5632] Bluetooth: hci6: command tx timeout [ 450.206742][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.206833][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.800689][ T5632] Bluetooth: hci7: command tx timeout [ 451.200865][ T6417] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 451.681408][ T5632] Bluetooth: hci6: command tx timeout [ 452.321039][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 452.881603][ T5632] Bluetooth: hci7: command tx timeout [ 453.407509][ T7441] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 453.761701][ T5632] Bluetooth: hci6: command tx timeout [ 454.960946][ T5632] Bluetooth: hci7: command tx timeout [ 455.261529][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.389813][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.842484][ T5632] Bluetooth: hci6: command tx timeout [ 456.242075][ T44] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 457.040568][ T5625] Bluetooth: hci7: command tx timeout [ 461.290867][ T3444] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 466.320443][ T44] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 467.434262][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.364998][ T3444] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 471.644923][ T7555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.264748][ T7555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.379713][ T7552] team0: Port device team_slave_0 added [ 473.008086][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.008485][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.008864][ T7572] bridge_slave_0: entered allmulticast mode [ 473.090259][ T7572] bridge_slave_0: entered promiscuous mode [ 473.122667][ T7552] team0: Port device team_slave_1 added [ 473.221144][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.221442][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.221806][ T7572] bridge_slave_1: entered allmulticast mode [ 473.277304][ T7572] bridge_slave_1: entered promiscuous mode [ 473.371223][ T7555] team0: Port device team_slave_0 added [ 474.147069][ T7555] team0: Port device team_slave_1 added [ 475.650984][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.651000][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.651025][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.400516][ T1371] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 479.044996][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.048754][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.048770][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.048795][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.227481][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.256400][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.256418][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.256441][ T7555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.520616][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.520633][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.520657][ T7555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.972634][ T7572] team0: Port device team_slave_0 added [ 480.127507][ T7572] team0: Port device team_slave_1 added [ 481.441342][ T3444] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 486.481887][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 488.419081][ T7552] hsr_slave_0: entered promiscuous mode [ 488.444963][ T7552] hsr_slave_1: entered promiscuous mode [ 488.460297][ T7552] debugfs: 'hsr0' already exists in 'hsr' [ 488.460326][ T7552] Cannot create hsr debugfs directory [ 488.609454][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.677016][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.678662][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.756814][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.759568][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.087487][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.135800][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.209290][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.287427][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.287445][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.287470][ T7572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.359511][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.359525][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.359546][ T7572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.411663][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.412620][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.961873][ T5625] Bluetooth: hci0: command tx timeout [ 491.489921][ T5632] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 491.562879][ T1024] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 491.603536][ T5621] Bluetooth: hci1: command tx timeout [ 491.700750][ T5632] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 491.702975][ T5632] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 491.704950][ T5632] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 491.706481][ T5632] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 493.045826][ T5632] Bluetooth: hci0: command tx timeout [ 493.680775][ T5625] Bluetooth: hci1: command tx timeout [ 494.960592][ T5625] Bluetooth: hci8: command tx timeout [ 495.120247][ T5625] Bluetooth: hci0: command tx timeout [ 495.762233][ T5625] Bluetooth: hci1: command tx timeout [ 496.561078][ T163] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 497.040256][ T5625] Bluetooth: hci8: command tx timeout [ 497.200511][ T5625] Bluetooth: hci0: command tx timeout [ 497.840385][ T5625] Bluetooth: hci1: command tx timeout [ 499.120216][ T5625] Bluetooth: hci8: command tx timeout [ 501.200240][ T5625] Bluetooth: hci8: command tx timeout [ 501.601998][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 506.641972][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 507.686171][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 507.749051][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 507.776177][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 507.799057][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 507.827177][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.126925][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.231594][ T7631] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 509.333813][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.338843][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 509.394223][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.074648][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.088300][ T5632] Bluetooth: hci2: command tx timeout [ 511.742190][ T1371] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 512.160604][ T5625] Bluetooth: hci2: command tx timeout [ 512.338562][ T5632] Bluetooth: hci3: command tx timeout [ 512.546055][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.546173][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.210857][ T5632] Bluetooth: hci2: command tx timeout [ 515.281098][ T5632] Bluetooth: hci3: command tx timeout [ 515.889798][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.895249][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.895648][ T7696] bridge_slave_0: entered allmulticast mode [ 515.904785][ T7696] bridge_slave_0: entered promiscuous mode [ 516.028632][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.028972][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.029326][ T7696] bridge_slave_1: entered allmulticast mode [ 516.058002][ T7696] bridge_slave_1: entered promiscuous mode [ 516.479050][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.479475][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.479889][ T7722] bridge_slave_0: entered allmulticast mode [ 516.506514][ T7722] bridge_slave_0: entered promiscuous mode [ 516.693629][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.714342][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.714664][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.715094][ T7722] bridge_slave_1: entered allmulticast mode [ 516.719246][ T7722] bridge_slave_1: entered promiscuous mode [ 516.783388][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.803949][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 517.073675][ T7722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.136291][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.136704][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.137072][ T7699] bridge_slave_0: entered allmulticast mode [ 517.163431][ T7699] bridge_slave_0: entered promiscuous mode [ 517.181914][ T7696] team0: Port device team_slave_0 added [ 517.196621][ T7722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.256745][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.257074][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.257436][ T7699] bridge_slave_1: entered allmulticast mode [ 517.280924][ T5632] Bluetooth: hci2: command tx timeout [ 517.292329][ T7699] bridge_slave_1: entered promiscuous mode [ 517.299446][ T7696] team0: Port device team_slave_1 added [ 517.361265][ T5632] Bluetooth: hci3: command tx timeout [ 517.633769][ T7722] team0: Port device team_slave_0 added [ 519.441974][ T5632] Bluetooth: hci3: command tx timeout [ 520.518277][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.535008][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.535023][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.535048][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.592714][ T7722] team0: Port device team_slave_1 added [ 521.853632][ T1371] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 526.880775][ T1505] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 530.801076][ T39] INFO: task syz-executor:5615 blocked for more than 144 seconds. [ 530.801105][ T39] Tainted: G L syzkaller #0 [ 530.801116][ T39] Blocked by coredump. [ 530.801123][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.801138][ T39] task:syz-executor state:D stack:20976 pid:5615 tgid:5615 ppid:1 task_flags:0x40054c flags:0x00080003 [ 530.801202][ T39] Call Trace: [ 530.801209][ T39] [ 530.801222][ T39] __schedule+0x16f9/0x5500 [ 530.801347][ T39] ? __pfx___schedule+0x10/0x10 [ 530.801392][ T39] rt_mutex_schedule+0x76/0xf0 [ 530.801472][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 530.801546][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 530.801575][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 530.801607][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 530.801648][ T39] ? rcu_barrier+0x4c/0x580 [ 530.801743][ T39] ? rcu_barrier+0x4c/0x580 [ 530.801774][ T39] ? rcu_barrier+0x4c/0x580 [ 530.801795][ T39] mutex_lock_nested+0x168/0x1d0 [ 530.801823][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 530.801852][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.801878][ T39] rcu_barrier+0x4c/0x580 [ 530.801908][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.801933][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.801960][ T39] netdev_run_todo+0x333/0x1130 [ 530.801989][ T39] ? rtnl_is_locked+0x9/0x20 [ 530.802011][ T39] ? netif_state_change+0x241/0x3a0 [ 530.802042][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 530.802067][ T39] ? kasan_quarantine_put+0xbb/0x1f0 [ 530.802157][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 530.802188][ T39] ? netdev_state_change+0x1ca/0x220 [ 530.802210][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.802237][ T39] tun_chr_close+0x13f/0x1c0 [ 530.802264][ T39] __fput+0x461/0xa70 [ 530.802299][ T39] task_work_run+0x1d9/0x270 [ 530.802325][ T39] ? __pfx_task_work_run+0x10/0x10 [ 530.802348][ T39] ? do_exit+0x70a/0x22c0 [ 530.802405][ T39] ? kmem_cache_free+0x187/0x6c0 [ 530.802491][ T39] ? put_net+0x191/0x260 [ 530.802517][ T39] ? do_exit+0x70a/0x22c0 [ 530.802543][ T39] do_exit+0x70f/0x22c0 [ 530.802567][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 530.802594][ T39] ? __pfx_do_exit+0x10/0x10 [ 530.802613][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 530.802644][ T39] ? reacquire_held_locks+0x104/0x190 [ 530.802705][ T39] ? rt_spin_lock+0x1e0/0x400 [ 530.802745][ T39] do_group_exit+0x21b/0x2d0 [ 530.802768][ T39] ? rt_spin_unlock+0x160/0x200 [ 530.802798][ T39] get_signal+0x1284/0x1330 [ 530.802846][ T39] arch_do_signal_or_restart+0xbc/0x840 [ 530.802868][ T39] ? __pfx___x64_sys_wait4+0x10/0x10 [ 530.802892][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 530.802934][ T39] exit_to_user_mode_loop+0x8c/0x4d0 [ 530.802953][ T39] ? rcu_is_watching+0x15/0xb0 [ 530.802979][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.803001][ T39] do_syscall_64+0x33e/0xf80 [ 530.803023][ T39] ? trace_irq_disable+0x3b/0x140 [ 530.803110][ T39] ? clear_bhb_loop+0x40/0x90 [ 530.803134][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.803155][ T39] RIP: 0033:0x7f6707e3d68e [ 530.803174][ T39] RSP: 002b:00007ffe76226278 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 530.803195][ T39] RAX: fffffffffffffe00 RBX: 0000555557d84500 RCX: 00007f6707e3d68e [ 530.803210][ T39] RDX: 0000000040000000 RSI: 00007ffe7622631c RDI: ffffffffffffffff [ 530.803224][ T39] RBP: 00007ffe7622631c R08: 0000000000000000 R09: 0000000000000000 [ 530.803237][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000046 [ 530.803249][ T39] R13: 0000555557d97a10 R14: 00000000000453b8 R15: 00007ffe76226370 [ 530.803280][ T39] [ 530.803325][ T39] INFO: task syz.4.370:7356 blocked for more than 144 seconds. [ 530.803342][ T39] Tainted: G L syzkaller #0 [ 530.803353][ T39] Blocked by coredump. [ 530.803358][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.803376][ T39] task:syz.4.370 state:D stack:24432 pid:7356 tgid:7355 ppid:5614 task_flags:0x40054c flags:0x00080001 [ 530.803429][ T39] Call Trace: [ 530.803435][ T39] [ 530.803447][ T39] __schedule+0x16f9/0x5500 [ 530.803502][ T39] ? __pfx___schedule+0x10/0x10 [ 530.803539][ T39] rt_mutex_schedule+0x76/0xf0 [ 530.803566][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 530.803611][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 530.803643][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 530.803674][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 530.803715][ T39] ? rcu_barrier+0x4c/0x580 [ 530.803747][ T39] ? rcu_barrier+0x4c/0x580 [ 530.803777][ T39] ? rcu_barrier+0x4c/0x580 [ 530.803799][ [ 530.803799][ T39] mutex_lock_nested+0x168/0x1d0 [ 530.803825][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 530.803855][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.803881][ T39] rcu_barrier+0x4c/0x580 [ 530.803910][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.803936][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.803963][ T39] netdev_run_todo+0x333/0x1130 [ 530.803991][ T39] ? rtnl_is_locked+0x9/0x20 [ 530.804012][ T39] ? netif_state_change+0x241/0x3a0 [ 530.804044][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 530.804070][ T39] ? kasan_quarantine_put+0xbb/0x1f0 [ 530.804096][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 530.804125][ T39] ? netdev_state_change+0x1ca/0x220 [ 530.804146][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 530.804174][ T39] tun_chr_close+0x13f/0x1c0 [ 530.804202][ T39] __fput+0x461/0xa70 [ 530.804239][ T39] task_work_run+0x1d9/0x270 [ 530.804266][ T39] ? __pfx_task_work_run+0x10/0x10 [ 530.804289][ T39] ? do_exit+0x70a/0x22c0 [ 530.804308][ T39] ? kmem_cache_free+0x187/0x6c0 [ 530.804336][ T39] ? put_net+0x191/0x260 [ 530.804360][ T39] ? do_exit+0x70a/0x22c0 [ 530.804394][ T39] do_exit+0x70f/0x22c0 [ 530.804419][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 530.804446][ T39] ? __pfx_do_exit+0x10/0x10 [ 530.804465][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 530.804495][ T39] ? reacquire_held_locks+0x104/0x190 [ 530.804519][ T39] ? rt_spin_lock+0x1e0/0x400 [ 530.804558][ T39] do_group_exit+0x21b/0x2d0 [ 530.804581][ T39] ? rt_spin_unlock+0x160/0x200 [ 530.804613][ T39] get_signal+0x1284/0x1330 [ 530.804658][ T39] arch_do_signal_or_restart+0xbc/0x840 [ 530.804682][ T39] ? __x64_sys_sendmsg+0x1e0/0x2a0 [ 530.804704][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 530.804748][ T39] exit_to_user_mode_loop+0x8c/0x4d0 [ 530.804768][ T39] ? rcu_is_watching+0x15/0xb0 [ 530.804792][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.804813][ T39] do_syscall_64+0x33e/0xf80 [ 530.804836][ T39] ? trace_irq_disable+0x3b/0x140 [ 530.804864][ T39] ? clear_bhb_loop+0x40/0x90 [ 530.804887][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.804906][ T39] RIP: 0033:0x7f557520ce59 [ 530.804923][ T39] RSP: 002b:00007f557345e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.804943][ T39] RAX: 0000000000000024 RBX: 00007f5575485fa0 RCX: 00007f557520ce59 [ 530.804956][ T39] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 530.804969][ T39] RBP: 00007f55752a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 530.804982][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.804994][ T39] R13: 00007f5575486038 R14: 00007f5575485fa0 R15: 00007ffed683e228 [ 530.805026][ T39] [ 530.805093][ T39] [ 530.805093][ T39] Showing all locks held in the system: [ 530.805103][ T39] 3 locks held by kworker/u8:0/12: [ 530.805115][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 530.805261][ T39] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 530.805312][ T39] #2: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 530.805360][ T39] 3 locks held by rcuc/0/21: [ 530.805380][ T39] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 530.805469][ T39] #1: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 530.805522][ T39] #2: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 530.805579][ T39] 1 lock held by khungtaskd/39: [ 530.805590][ T39] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 530.805653][ T39] 2 locks held by kworker/u8:12/1525: [ 530.805664][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 530.805717][ T39] #1: ffffc90006e9fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 530.805781][ T39] 4 locks held by kworker/u8:14/3425: [ 530.805791][ T39] #0: ffff88801b68e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 530.805840][ T39] #1: ffffc9000f627c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 530.805887][ T39] #2: ffffffff8f362ac0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 530.805930][ T39] #3: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.805981][ T39] 2 locks held by getty/5365: [ 530.805991][ T39] #0: ffff8880352430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 530.806083][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 530.806131][ T39] 1 lock held by syz-executor/5615: [ 530.806141][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.806195][ T39] 3 locks held by kworker/1:6/5777: [ 530.806206][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 530.806258][ T39] #1: ffffc90005d17c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 530.806309][ T39] #2: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.806358][ T39] 1 lock held by syz-executor/7129: [ 530.806378][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.806426][ T39] 1 lock held by syz-executor/7197: [ 530.806437][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.806486][ T39] 1 lock held by syz.3.363/7311: [ 530.806497][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.806547][ T39] 1 lock held by syz.4.370/7356: [ 530.806558][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.806608][ T39] 2 locks held by syz-executor/7364: [ 530.806620][ T39] #0: ffffffff8f362ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 530.806670][ T39] #1: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.806721][ T39] 1 lock held by syz-executor/7378: [ 530.806732][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809043][ T39] 1 lock held by syz-executor/7379: [ 530.809058][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809112][ T39] 1 lock held by syz-executor/7390: [ 530.809124][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809193][ T39] 1 lock held by syz-executor/7441: [ 530.809204][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809254][ T39] 1 lock held by syz-executor/7447: [ 530.809265][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809316][ T39] 1 lock held by syz-executor/7552: [ 530.809326][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809383][ T39] 1 lock held by syz-executor/7555: [ 530.809394][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809444][ T39] 1 lock held by syz-executor/7572: [ 530.809455][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809507][ T39] 1 lock held by syz-executor/7631: [ 530.809518][ T39] #0: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 530.809569][ T39] 1 lock held by syz-executor/7637: [ 530.809581][ T39] #0: ffffffff8dfce430 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 530.809631][ T39] 1 lock held by syz-executor/7696: [ 530.809641][ T39] #0: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 530.809684][ T39] 1 lock held by syz-executor/7699: [ 530.809695][ T39] #0: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 530.809739][ T39] 2 locks held by syz-executor/7722: [ 530.809750][ T39] #0: ffffffff8ead8288 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 530.809828][ T39] #1: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 530.809870][ T39] 1 lock held by syz-executor/7751: [ 530.809880][ T39] #0: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 530.809922][ T39] 2 locks held by syz-executor/7759: [ 530.809933][ T39] #0: ffffffff8f8ae7c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 530.944056][ T39] #1: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 530.944113][ T39] 3 locks held by kworker/u8:13/7775: [ 530.944125][ T39] #0: ffff888032e28938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 530.944172][ T39] #1: ffffc90003e67c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 530.944216][ T39] #2: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 530.944264][ T39] [ 530.944268][ T39] ============================================= [ 530.944268][ T39] [ 530.944295][ T39] NMI backtrace for cpu 1 [ 530.944317][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.944345][ T39] Tainted: [L]=SOFTLOCKUP [ 530.944351][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.944361][ T39] Call Trace: [ 530.944369][ T39] [ 530.944378][ T39] dump_stack_lvl+0xe8/0x150 [ 530.944404][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 530.944497][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 530.944557][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 530.944589][ T39] sys_info+0x135/0x170 [ 530.944641][ T39] watchdog+0xfd3/0x1030 [ 530.944728][ T39] ? watchdog+0x1c9/0x1030 [ 530.944759][ T39] kthread+0x388/0x470 [ 530.944780][ T39] ? __pfx_watchdog+0x10/0x10 [ 530.944805][ T39] ? __pfx_kthread+0x10/0x10 [ 530.944878][ T39] ret_from_fork+0x514/0xb70 [ 530.944905][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 530.944928][ T39] ? __switch_to+0xc79/0x1410 [ 530.944950][ T39] ? __pfx_kthread+0x10/0x10 [ 530.944971][ T39] ret_from_fork_asm+0x1a/0x30 [ 530.945010][ T39] [ 530.945038][ T39] Sending NMI from CPU 1 to CPUs 0: [ 530.945070][ C0] NMI backtrace for cpu 0 [ 530.945086][ C0] CPU: 0 UID: 0 PID: 1371 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.945108][ C0] Tainted: [L]=SOFTLOCKUP [ 530.945114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.945124][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 530.945144][ C0] RIP: 0010:__lock_acquire+0x56f/0x2d10 [ 530.945162][ C0] Code: 85 c0 74 1c 83 3d 94 70 ea 0d 00 75 13 48 8d 3d 87 91 ed 0d 48 c7 c6 66 d0 73 8d 67 48 0f b9 3a 90 31 c9 0f b6 81 c4 00 00 00 <84> c0 0f 84 77 ff ff ff 41 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80 [ 530.945176][ C0] RSP: 0018:ffffc9000683e600 EFLAGS: 00000002 [ 530.945189][ C0] RAX: 0000000000000003 RBX: ffff8880298e0cb8 RCX: ffffffff9318dc28 [ 530.945200][ C0] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000000 [ 530.945209][ C0] RBP: ffff8880298e0d60 R08: ffffffff8b2af01c R09: ffffffff8dfc8240 [ 530.945221][ C0] R10: 0000000000000000 R11: fffffbfff1f1597f R12: 0000000000000003 [ 530.945231][ C0] R13: ffff8880298e0d60 R14: ffff8880298e0000 R15: 0000000000000004 [ 530.945241][ C0] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 530.945254][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.945265][ C0] CR2: 00005630ed211008 CR3: 00000000421fe000 CR4: 00000000003526f0 [ 530.945280][ C0] Call Trace: [ 530.945285][ C0] [ 530.945297][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 530.945412][ C0] reacquire_held_locks+0x104/0x190 [ 530.945436][ C0] ? rt_spin_trylock+0x10c/0x2b0 [ 530.945460][ C0] lock_release+0x199/0x3c0 [ 530.945477][ C0] ? kmem_cache_alloc_noprof+0x217/0x680 [ 530.945500][ C0] rt_spin_unlock+0x29/0x200 [ 530.945527][ C0] kmem_cache_alloc_noprof+0x217/0x680 [ 530.945548][ C0] ? dst_alloc+0x105/0x170 [ 530.945567][ C0] dst_alloc+0x105/0x170 [ 530.945586][ C0] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 530.945610][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 530.945629][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 530.945649][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 530.945673][ C0] ip_route_output_flow+0x2a/0x150 [ 530.945689][ C0] ? ip_route_me_harder+0x730/0xf90 [ 530.945708][ C0] ip_route_me_harder+0x742/0xf90 [ 530.945729][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 530.945752][ C0] ? __cookie_v4_init_sequence+0x25d/0x500 [ 530.945778][ C0] synproxy_send_tcp+0x34c/0x670 [ 530.945853][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 530.945877][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 530.945895][ C0] ? nft_symhash_init+0x118/0x310 [ 530.945958][ C0] ? synproxy_pernet+0x45/0x270 [ 530.945978][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 530.946000][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 530.946019][ C0] ? nf_ip_checksum+0x13c/0x510 [ 530.946065][ C0] nft_synproxy_do_eval+0x305/0x580 [ 530.946083][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 530.946125][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 530.946146][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 530.946167][ C0] nft_do_chain+0x48d/0x1ae0 [ 530.946212][ C0] ? ip_vs_service_find+0x152/0x3c0 [ 530.946254][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 530.946277][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 530.946306][ C0] ? ip_vs_in_hook+0xc50/0x1bf0 [ 530.946326][ C0] ? ip_vs_in_hook+0xc84/0x1bf0 [ 530.946351][ C0] nft_do_chain_inet+0x360/0x4b0 [ 530.946394][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 530.946417][ C0] ? NF_HOOK+0x9e/0x3c0 [ 530.946437][ C0] ? NF_HOOK+0x9e/0x3c0 [ 530.946458][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 530.946477][ C0] nf_hook_slow+0xc5/0x220 [ 530.946496][ C0] NF_HOOK+0x21f/0x3c0 [ 530.946518][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 530.946532][ C0] ? NF_HOOK+0x9e/0x3c0 [ 530.946552][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 530.946571][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 530.946587][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 530.946603][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 530.946625][ C0] NF_HOOK+0x336/0x3c0 [ 530.946645][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 530.946662][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 530.946676][ C0] ? NF_HOOK+0x9e/0x3c0 [ 530.946696][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 530.946717][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 530.946732][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 530.946745][ C0] ? process_backlog+0x271/0xc60 [ 530.946766][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 530.946780][ C0] process_backlog+0x569/0xc60 [ 530.946808][ C0] __napi_poll+0xab/0x550 [ 530.946828][ C0] net_rx_action+0x696/0xe00 [ 530.946854][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 530.946874][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 530.946895][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 530.946961][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 530.946983][ C0] handle_softirqs+0x1de/0x6d0 [ 530.947009][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 530.947029][ C0] ? __alloc_skb+0x186/0x7d0 [ 530.947044][ C0] __alloc_skb+0x1aa/0x7d0 [ 530.947060][ C0] nsim_dev_trap_report_work+0x29f/0xbd0 [ 530.947080][ C0] ? process_one_work+0x8be/0x1630 [ 530.947104][ C0] ? process_one_work+0x8be/0x1630 [ 530.947123][ C0] process_one_work+0x98b/0x1630 [ 530.947150][ C0] ? __pfx_process_one_work+0x10/0x10 [ 530.947169][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 530.947219][ C0] worker_thread+0xb49/0x1140 [ 530.947249][ C0] kthread+0x388/0x470 [ 530.947264][ C0] ? __pfx_worker_thread+0x10/0x10 [ 530.947289][ C0] ? __pfx_kthread+0x10/0x10 [ 530.947305][ C0] ret_from_fork+0x514/0xb70 [ 530.947324][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 530.947341][ C0] ? __switch_to+0xc79/0x1410 [ 530.947357][ C0] ? __pfx_kthread+0x10/0x10 [ 530.947372][ C0] ret_from_fork_asm+0x1a/0x30 [ 530.947398][ C0] [ 531.300677][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 531.300703][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.300730][ T39] Tainted: [L]=SOFTLOCKUP [ 531.300737][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.300748][ T39] Call Trace: [ 531.300756][ T39] [ 531.300765][ T39] vpanic+0x56c/0xa60 [ 531.300797][ T39] ? __pfx___schedule+0x10/0x10 [ 531.300819][ T39] ? __pfx_vpanic+0x10/0x10 [ 531.300854][ T39] panic+0xc5/0xd0 [ 531.300877][ T39] ? __pfx_panic+0x10/0x10 [ 531.300903][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 531.300928][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 531.300961][ T39] watchdog+0x102c/0x1030 [ 531.300996][ T39] ? watchdog+0x1c9/0x1030 [ 531.301028][ T39] kthread+0x388/0x470 [ 531.301050][ T39] ? __pfx_watchdog+0x10/0x10 [ 531.301075][ T39] ? __pfx_kthread+0x10/0x10 [ 531.301097][ T39] ret_from_fork+0x514/0xb70 [ 531.301123][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 531.301147][ T39] ? __switch_to+0xc79/0x1410 [ 531.301170][ T39] ? __pfx_kthread+0x10/0x10 [ 531.301192][ T39] ret_from_fork_asm+0x1a/0x30 [ 531.301235][ T39] [ 531.301512][ T39] Kernel Offset: disabled