last executing test programs: 14m16.229219001s ago: executing program 32 (id=2289): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing\x00', 0x1ff) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x22200c8c, &(0x7f0000000080)=ANY=[], 0x84, 0x151f, &(0x7f0000001300)="$eJzs3Au4jdX2MPAx5pwvm6SV5D7HHC8rbUySJJeERJIkSZJbkiRJkpDccktCEnIPuYfkFpL7/ZZ7khxJkoSEhPk9Op3jnH/n9v/O+Y7znT1+zzOfPcd+1xhrzjX2s9Z63733+rbtgEp1KleoxczwT8Hff+kCACkA0BsArgGACACKZymeBXDZ1Awau/xzdyL+tR6acqVXIK4k6X/aJv1P26T/aZv0P22T/qdt0v+0Tfqftkn/hUjLtkzNea2MtDv+fdf/AeT6/38aef3/L3Ko8Mgv1xW+vt3/IkX6n7ZJ/9M26X/aJv1P26T/aZv0/79cBFD+bxyW/v93+kcvs0j/hUjLrvT153/DSAGAK3PfqQBw5ff/N8eV/vkTQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJE2nA2XGQD4w/xKr0sIIYQQQgghhBD/OiH9lV6BEEIIIYQQQggh/t9DUKDBQATpID2kQAbICFdBJrgaMsM1kIBrIQtcB1nhesgG2SEH5IRckBvygAUCBwwx5IV8kIQbID/cCKlQAApCIfBQGIrATVAUboZicAsUh1uhBNwGJaEUlIYycDuUhTugHJSHCnAnVIS7oBJUhruhCtwDVeFeqAb3QXW4H2rAA1ATHoRa8BDUhoehDjwCdeFRqAf1oQE0hEb/V/kvQUd4GTpBZ+gCXaEbvALdoQf0hF7QG16FPvAa9IXXoR/0hwHwBgyEN2EQvAWDYQgMhbdhGAyHETASRsFoGAPvwFgYB+PhXZgAE2ESTIYpMBWmwXswHWbATHgfZsEHMBvmwFyYB/PhQ1gAC2ERfASL4WNYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCn8BW2AbbYQfshF2wGz6FPfAZ7IXPYR988b/MP/M/8tshIKBChQYNpsN0mIIpmBEzYibMhJkxMyYwgVkwC2bFrJgNs2EOzIG5MBfmwTxISMjImBfzYhKTmB/zYyqmYkEsiB49FsEiWBRvxmJYDItjcSyBJbAklsJSWAbLYFksi+WwHFbAClgRK2IlrIR34914D1bFqlgNq2F1rI41sAbWxJpYC2thbayNdbAO1sW6WA/rYQNsgI2wETbGxtgEm2BTbIrNsBk2x+bYAltgS2yJrbAVtsbW2AbbYFtsi+2wPbbHl/AlfBlfxs5YUXXFbtgNu2N37Im9sBe+in3wNXwNX8d+2B8H4Bv4Br6Jg/A0DsYhOBSHYlk1HEfgSGQ1GsfgGByLY3E8jscJOBEn4mScglNxGk7D6TgDZ+D7OAs/wA9wDs7BeTgf5+MCXIiLcBEuxjO4BJfiMlyOK3AlrsDVuAZX4zpcj+twI27EzbgZP8FPcBtuwx24A3fhLvwUP8XP8DPsh/twH+7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHscTeBJP4Ck8hafxDJ7Fs3gOz+F5fCHX17V3FVjbD9QlRhmVTqVTKSpFZVQZVSaVSWVWmVVCJVQWlUVlVVlVNpVN5VA5VC6VS+VReRQpUqxilVflVUmVVPlVfpWqUlVBVVB55VURVUQVVUVVMVVMFVe3qhLqNlVSlVJP+DKqjCqrmvpyqryqoCqoiuouVUlVVpVVFVVFVVVVVTVVTVVX1VUN9YCqqbpiT3xIXepMHdUf66oBWE/VVw1UQ/UmPqYaq0HYRD2hmqon1RAcjM1VY99CPaNaqhHYSj2nRuLzqo0ajW3Vi6qdaq86qJdUR9XEd0r361OgmozdVQ/VU/VS0/EudaljldTrqp/qrwaoN9Q8fFMNUm+pwWqIGqreVsPUcDVCjVSj1Gg1Rr2jxqpxarx6V01QE9UkNVlNUVPVNPWemq5mqJnqfTVLfaBmqzlqrpqn5qsP1QK1UC1SH6nF6mO1RC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUV9oraqbWq72qF2ql1qt/pU7VGfqb3qc7VPfaH2q9+pA+pLdVB9pQ6pr9Vh9Y06or5VR9V36pj6Xh1XJ9RJ9YM6pX5Up9UZdVb9pM6pn9V5dUFdVEGBRq201kZHOp1Or1N0Bp1RX6Uz6at1Zn2NTuhrdRZ9nc6qr9fZdHadQ+fUuXRunUdbTdpp1rHOq/PppL5B59c36lRdQBfUhbTXhXURfZMuqm/WxfQturi+VZfQt+mSupQurcvo23VZfYcup8vrCvpOXVHfpSvpyvpuXUXfo6vqe3U1fZ+uru/XNfQDuqZ+UNfSD+na+mFdRz+i6+pHdT1dXzfQDXUj/ZhurB/XF379u7Vm+indXD+tW+hndEv9rG6ln9Ot9fO6jX5Bt9Uv6na6ve6gL+iLOuhOurPuorvqbvoV3V330D11L91bv6r76Nd0X/267qf76wH6DT1Qv6kH6bf0YD1ED9Vv62F6uB6hR+pRerQeo9/RY/U4PV6/qyfoiXqSnqyn6Km656+VZv4D+eP+Qn7fX+59s96iP9Fb9Ta9Xe/QO/UuvVvv1nv0Hr1X79X79D69X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVyf0D/pH/Qp/aM+rc/oM/onfU6f0+d/fQzAoFFGG2Mik86kNykmg8lorjKZzNUms7nGJMy1Jou5zmQ115tsJrvJYXKaXCa3yWOsIeMMm9jkNflM0txg8psbTaopYAqaQsabwqaIuemfzv9762tkGpnGprFpYpqYpqapaWaameamuWlhWpiWpqVpZVqZ1qa1aWPamLamrWln2pkOpoPpaDqaTqaT6WK6mG7mFdPd9DA9TS/T27xq+pg+pq/pa/qZfmaAGWAGmoFmkBlkBpvBZqgZaoaZYWaEGWFGmVFmjBljxpqxZrwZbyaYCWaSmWSmmClmmplmppvpZqaZaWaZWWa2mW3mmrlmvplvFpgFZpFZZBabxWaJWWqWmuVmuVlpVprVZrVZa9aa9Wa92Wg2miVmi9litpqtZrvZbnaanWa32W32mD1mr9lr9pl9Zr/Zbw6YA+agOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmpPmlDllTpvT5qw5a86Zc+a8OW8umouX3vZFKlKRiUyULkoXpUQpUcYoY5QpyhRljjJHiSgRZYmyRFmj66NsUfYoR5QzyhXljvJENqLIRRzFUd4oX5SMbojyRzdGqVGBqGBUKPJR4ahIdFNUNLo5KhbdEhWPbo1KRLdFJaNSUemoTHR7VDa6IyoXlY8qRHdGFaO7okpR5ejuqEp0T1Q1ujeqFt0XVY/uj2pED0Q1owejWtFDUe3o4ahO9EhUN3o0qhfVjxpEDaNG/9L6IZzO/rjvZDvbLrar7WZfsd1tD9vT9rK97au2j33N9rWv2362vx1g37AD7Zt2kH3LDrZD7FD7th1mh9sRdqQdZUfbMfYdO9aOs+Ptu3aCnWgn2cl2ip1qp9n37HQ7w86079tZ9gM7286xc+08O99+aBfYhXaR/cguth/bJXapXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y32E7vVbrPb7Q670+6yu+2ndo/9zO61n9t99gu73/7OHrBf2oP2K3vIfm0P22/sEfutPWq/s8fs9/a4PWFP2h/sKfujPW3P2LP2J3vO/mzP2wv2og2X3txfenknQ4bSUTpKoRTKSBkpE2WizJSZEpSgLJSFslJWykbZKAfloFyUi/JQHrqEiSkv5aUkJSk/5adUSqWCVJA8eSpCRagoFaViVIyKU3EqQSWoJJWk0lSabqfb6Q66g8pTebqT7qS76C6qTJWpClWhqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT1qQA2oETWixtSYmlATakpNqRk1o+bUnFpQC2pJLakVtaLW1JraUBtqS22pHbWjDtSBOlJH6kSdqAt1oW7UjbpTd+pJPak39aY+1If6Ul/qR/1oAA2ggTSQBtEgGkxDaCi9TcNoOI2gkTSKRtMYGkNjaSyNp/E0gSbQJJpEU2gKTaNpNJ2m00yaSbNoFs2m2TSX5tJ8mk8LaAEtokW0mBbTElpCy2gZraAVtIpW0RpaQ+toHW2gDbSJNtEW2kJbaSttp+20k3bSbtpNe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+kknaJTdJpO01k6S+foZzpPF+giBUpxCjK6q1wmd7XL7K5xKS6DuxRHAHApzuFyulwut8vjrMvmsv9ZTM65VFfAFXSFnHeFXRF302/ikq6UK+3KuNtdWXeHK/ebuIq7x1V197pq7j5X2d39Z3F1d7+r4R5xNd2jrpar72q7hq6Oe8TVdY+6eq6+a+AaumbuKdfcPe1auGdcS/fsb+IFbqFb49a6dW692+M+c2fdT+6I+9adcz+7Tq6z6+1edX3ca66ve931c/1/Ew91b7thbrgb4Ua6UW70b+JJbrKb4qa6ae49N93N+E08333oZrlFbrab4+a6eb/El9a0yH3kFruP3RK31C1zy90Kt9Ktcqv/uNblbqPb5Da73e5Tt9Vtc9vdDrfT7folvrSPve5zt8994Q67b9wB96U76I66Q+7rX+JL+zvqvnPH3PfuuDvhTrof3Cn3ozvtzvyy/0t7/8FdcBddcMDIijUbjjgdp+cUzsAZ+SrOxFdzZr6GE3wtZ+HrOCtfz9k4O+fgnJyLc3MetkzsmDnmvJyPk3wD5+cbOZULcEEuxJ4LcxG+iYvyzVyMb+HifCuX4Nu4JJfi0lyGb+eyfAeX4/Jcge/kiiFwJa7Md3MVvoer8r1cje/j6nw/1+AHuCY/yLX4Ia7ND3MdfoTr8qNcj+tzA27IjfgxbsyPcxN+gpvyk9yMn+Lm/DS34Ge4JT/Lrfg5bs3Pcxt+gdvyi9yO23MHfok78svciTtzF+7K3fgV7s49uCf34t78Kvfh17gvv879uD8P4Dd4IL/Jg/gtHsxDeCi/zcN4OI/gkTyKR/MYfofH8jgez+/yBJ7Ik3gyT+GpPI3f4+k8g2fy+zyLP+DZPIfn8jyezx/yAl7Ii/gjXswf8xJeyst4Oa/glbyKV/MaXsvreD1v4I28iTfzFv6Et/I23s47eCfv4t38Ke/hz3gvf877+Avez7/jA/wlH+Sv+BB/zYf5Gz7C3/JR/o6P8fd8nE/wSf6BT/GPfJrP8Fn+ic/xz3yeL/BFDgwxxhliHZs4itPF6eOUOEOcMb4qzhRfHWeOr4kT8bVxlvi6OGt8fZwtzh7niHPGueLccZ7YxhS7mOM4zhvni5PxDXH++MY4NS4QF4wLxT4uHBeJb4qLxjfHxeJb4uLxrXGJ+La4ZFwqfuS+MvHtcdn4jrhcXD6uEN8ZV4zviivFleO74yrxPXHV+N64WnxfXCy+P64RPxDXjB+Ma8UPxbXjh+M68SNx3fjRuF5cP24QN4wbxY/FjePH43PxE3HT+Mm4WfxU3Dx+Om4RPxO3jJ/94/Emf+V4l7hr3C1+JX4lDuFePTc5Lzk/+WFyQXJhclHyo+Ti5MfJJcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzckQKqcHj1557Y2PfDqf3qf4DD6jv8pn8lf7zP4an/DX+iz+Op/VX++z+ew+h8/pc/ncPo+3nrzz7GOf1+fzSX+Dz+9v9Km+gC/oC3nvC/sivqFv5Bv5xv5x38Q/4Zv6J/2T/in/lH/aP+2f8S39s76Vf8639s/7Nv4F/4J/0bfz7X0H/5Lv6F/2nXxn38V38d18N9/dd/c9fU/f2/f2fXwf39f39f18Pz/AD/AD/UA/yA/yg/1gP9QP9cP8MD/Cj/Cj/Cg/xo/xY/1YP96P9xP8BD/JT/JT/BQ/zU/z0/10P9PP9LNSZ/nZfraf6+f6+X6+X+AX+EV+kV/sF/slfolf5pf5FX6FX+VX+TV+jV/n1/kNfoPf5Df5LX6L3+q3+u1+u9/pd/rdfrff4/f4vX6v3+f3+f1+vz/gD/iD/it/yH/tD/tv/BH/rT/qv/PH/Pf+uD/hT/of/Cn/oz/tz/iz/id/zv/sz/sL/qIPfkzincTYxLjE+MS7iQmJiYlJicmJKYmpiWmJ9xLTEzMSMxPvJ2YlPkjMTsxJzE3MS8xPfJhYkFiYWJT4KLE48XFiSWJpYllieWJFYmUihNxb45A35AvJcEPIH24MqaFAKBgKBR8KhyLhplA03ByKhVtC8XBrKBFuCyVDqVA6PBrqhfqhQWgYGoXHQuPweGgSnghNw5OhWXgqNA9PhxbhmdAyPBtahedC6/B8aBNeCG3Di6FdaB86hJdCx/By6BQ6hy6ha+gWXgndQ4/QM/QKvcOroU94LfQNr4d+oX8YEN4IA8ObYVB4KwwOQ8LQ8HYYFoaHEWFkGBVGhzHhnTA2jAvjw7thQpgYJoXJYUqYGqaF98L0MCPMDO+HWeGDMDvMCXPDvDA/fBgWhIVhUfgoLA4fhyVhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoct4ZOwNWwL28OOsDPsCrvDp2FP+CzsDZ+HfeGLsD/8LhwIX4aD4atwKHwdDodvwpHwbTgavgvHwvfheDgRToYfwqnwYzgdzoSz4adwLvwczocL4aL8z5oQQgghxD9E/53jXf/C99Sv45JuAHD1tpyH/mfNDdl+P++hcjVLAMAznds+9IdRsWKXLl1+ve0SDVG+OQCQuJz/y6/lfo2XQlN4ClrAE+P+8gcT9FDtz/Gl+ukB4K/UT94KkPFPclLgcvzH+nDzX9x/D/XYk0MXlIjPZvnr60/OAUjNdzknA1yOL9cv9lfqZ2/Mf/vxyfDlGIAmf5KTCS7Hl+sXgcfhWWjxZ7cUQgghhBBCCCF+r4cq3frvnH/+cn6ey1zOuXSq/Yf48vln0SuyfiGEEEIIIYQQQvx9z7fv8PRjLVo80fo/ZQLwz9ZJAYArvQuZyOT/88mVfmYSQgghhBBC/Kv96Ym3EEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghrox/z0f6CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEGnb/wkAAP//OlxETg==") truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000300), 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x4c, 0x12, 0x907, 0x70bd28, 0x25dfdbfe, {0x21, 0x9, 0xb, 0x0, {0x4e22, 0x4e27, [0xfffffffc, 0x923, 0x0, 0x6], [0x401, 0x7, 0x3, 0x2], 0x0, [0x10000, 0x2005]}, 0x31, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 14m4.410451108s ago: executing program 33 (id=2306): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x17f) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) stat(&(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) futex(0x0, 0xb, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x1, 0x5, 0x20}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4000006, r4}, 0x38) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000006c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 12m21.741909813s ago: executing program 34 (id=2451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x80002c1, 0x2, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10048, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2a5, &(0x7f0000000400)="$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") getdents(r2, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x10, 0x80082) ppoll(&(0x7f0000001d00)=[{r2, 0x1}, {r3, 0x6}, {r1, 0x8000}, {r1, 0x206}, {r1, 0x410}, {0xffffffffffffffff, 0x200}], 0x6, &(0x7f0000001d40)={0x0, 0x989680}, &(0x7f0000001d80)={[0xa]}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000700)=[{&(0x7f0000000a00)="dd701cca9a7585783490822566f7f977a412eba9c2b32ba3b128e6df89cda8945d85d4d603bafc264aca7235201f63e7bc5dd9c7b7b5bed42b8fc6ff1e7c72225830cb1c1ce15e58470500766825832785d0c1eef6f579fabe9f4b59d69197d156c55858eb16fe5776e3643bb2d23bfda439c61ff19d1ab566389c9d37948752d2242285d6557d482f34e638f064ad3a5aa6e34e14e63f170eec35204390c805008415be4049d6369df37c25e08ca65b81342bf2ccf601539fd6e26d041b33615f4206e9045d4fd99b412395d4ce3937", 0xd0}, {&(0x7f0000000b00)="420bcfb6c023606d817ed495b6922df4ce421c62e2f95c797eae4e3af2da205793fefcf13d2b8da23aba7fe7d58d93bdee7906d411fe7b403c232963761b3e5c631d5ebf400701943a3e21992a402b30601a82b78d29e3cd17e0cbd435e4be4dfb7fd3a09836d3e81432c1d3a5bf364ae525386794ee013828d1c1dbc1ca39dd4fbf9d65491d112e544b7fbb8ba4e10293aa4183471ff8254c4836080d284b2418a8acdf67bacc1878cd0b94f28471aed6aeb59ceb3b34b3af86afe4bc81575874c99fc610dafcd16ae3e60b1ccfdd292baa6cba230060710aba8daf1f0c3e59e35862177c12a8616f6b03149e300ed97e9808ef7e43e7a946442276b1ac89e03b6bf2a2d69309e4dd958ac2611c344e95184f34a4c28553873af1d53fbb0a5c1439b2dc31c8bb7615c782ecc2f03a654929b926b0572f22dd58732e21f9e07f7fb3cc592834f9396ea3e71bf24bc18243280909692725b1c60a061a3789775e142b2696b4a1ba351fa03ac0c120e68402d74c4ff0cf1a3340fe8205e1de41c5968125ac3f725f1e02c3474654f55abc03b5b697dced30fcd817feaa5e3dcdc8e11c78ea18a4a4cdfc5002332f57f3bd5939c710c62417a6df2f83c9681e1438adf52a28bf446bffcfcc670d3d038657cedcee23ed95abbebf61d86005da6e2883013c038b79c6b8caf5d08c0696efa295952b9e14214b6f8161081eca0569aa77b52c8f4151670a2f1d9aa0bfe0e170182bcfa0dc3139ec32f17cc9da6f086a6fd8a8183aa5479a12c884c80bddaf8781f4c55837b3fde669e2be844062c61cd34e44ec871099360be1b5c208bd3a041453810691a9b6441750fcb451d47b048d13dfc92dca94a6309aa0bdad657e45a1318d098f111a38e46ddb2d9be2787a82fec98a7a7d7155eebfe55792749c2f3e9c5637aabab29b412c27be629251bed96175f69edd816a3af9b128eb8a6d2de264d40613fb71bcadc7253718eda5ee3d2dda5f479a0c2cd8a00328899f68f95de55cbf16c17c94d191a828d876e1d6166c423840fec4ff093f1d6404e6dd01d3c4858322849f130000feddb552ba084b42749258e13ac43d8cf5faa33bb340592c5218cb75041790de0156211639563ab8f1e07ad903a4d019fd9898b8993414db93cb199a1651559f77a4d4493793dfe40c426ae0156d516df65db54e3b45b4db3dc3306fbae07a2e58676f919d766f06f558999b8d93daa1135ed08523111cdd47848cb31e1ce1216fe079b7c1937e530dbfd14a873000675a9d1dd548c1a33b2479e1aaa04ead61ee075173f31be30bf67e6ba4f4213e29481909241595e7e36bde1ec48f48754114e9b262e8825809fa88a7ce31915ce888e758fe72a7c6897cca2f61cd4c2a5ba6e406cb64ff7b83919c3175df7f5819d8fc1e3332e48bcc041f2570fb9c1708e97ca1d1afbe1e4cae9d27c7529c6302342e35a80f144212523bb6708819f4c0565e19b77361358354125d3675d4e3f7ec3f5aa86e083329dcdf762597c205a979027307e01c3650de1e45df52e047262c7e3ac3eccc280b822163b64f96ce5a8bc0621ef9b2fae16b7f149779e9fd14cf17485002b6a13fa6d289d388c084566bedced9ef92eac5f58129d34d30e465e97abd283e438844ab4473cf31f112beeb9affe4f11c10e728ac897be0ab306323f7c48c77086f6412882721e90b723bdd99ed8528a2a8c6ac98a8b36abfe215fec14f31a789b3e6128a9ac20616fe371523cad078f5a68f14f748a1b7bb0c0fb33958a2fba39bd1ba3c57e31121ac7fd73a8f6ff20c4600c3a2fda7db3595c931d5060fff9223f252c2989883ff63883a4c1cda974d411c7299d5c39c61baf7e8e0fd82b1d14692426bd3dacb47658b20c5b53c7e847475611cdd3a25a101220d7de95009b4e1bbd301a3e5f253e14603e1d0f4cb370e9d9ddb039d7a8c23c4552efc165e52df4dfa36f518af0ac7ff6af02e81a63c6f931f21ab8c7758d981ee04a5670d046d7d910e1c4025a3d05b09bdc4f4bc1e2794871624883d825e091ca1e93b29a6f74eaa581b445b5ada88cb93886202e60f65bdac24b5b4c3ad8599ae1e1197447ff04a394bc6cf4ce152f6777811c426ddc0a6e4d522f2077d58d533f812921c30cb08f5a1e8ef651dfb1604ac4cbedeaf924f25e04b054f4af498e05ea405daefb1dfe1668cef5177a9b2e337ee91589b1d7bf991ca29e0e7eb70934a8e825dd6bee7a1fba210c6bc61dbefab62812c54d82e73e1b35923603d883ff9e82109517995878dd9d63ca9eb9faf4f980f27009058fbc9f58156561674398ae0080d4a61d8544b8bb76f4c79236ee5707793d6345f586d6aed9202b43ec5989c89d9654b729546434f7d015284610b868443554c9cd6ee6f216dc9fcd94381b1c1e429aab6ebcc741f0bdde9ca7ebfe3ed248862cebfef952d596fa9a013e48b18a325b537467fac753919187367870ea481097572740d99f7b3b1cacdb3a0b7544c6b89051ab3061305c669f3d517ea2ea30459779271829420c941f2da9023552e43c11b7747ca57778b288d86668747ada19c4a8894d14cd267766a0215de78453eada815bc98e02818fd0f3a63c38328ecebb52f42b35e1cd56f9a3491a7061dfe0e158557f2d405a3377818afecf4670a141b922f690f6b06dac0a5bf4e2a321a5253f1944cf5e5df90629014212d4a2abcfbad17e8ec7266355a21f09741be25199f333238b1531e2279f4011621fe4fc66850cf6be5519f0fd06db2143b66ff294e40bce1c202b4cddea9384de8d082c786ba89470142d03217c6951d36cc728399c3d89e9ff459d99ace948ac7873645d7e3d3f6044fbb081c19cf951312ff9a848eb4323dc70fbb8892a85cd57ce1f29f2aa2f189710ee20add10419126f2afb193d6ccdc6fa894d47b3c920a6493006d3f2dfc8d04fd24d6ac98fdccc69decd5964e631e2d255dede313d9055505e5927e37ae9f5e81ed30084cf6dfb4f3f5e1571832187c18ec7446815085b5af4e34f6d15c421ffa3c18d6bdb4c6e319eaf5821f1ebb8615b9bef89450a6c650954ce4bbbe2cddd14f23ac1f967f0408125ef75027aea9d34224068371c39597538d81e68c5c1290a76272dc22207277e44df629a5a88f3d3ebe2006c13b3bf6572417353d3819182906688a415b33315a1cd14640b64ebbf3a0fd360db10c00d1db062ec531a1a9979f336b1d642cd3a9da1d27237306a23f6a279f54d8685f9c7173fed5a006c4e8ff09436941ff2698dd6b9ec2fc665ad861cac0fd661989c06ea12804264b1949a7b8065536301aca47eceba335a71d708c5ebb3c7fd53c1060e2304617cff7f2118e9a682570de0aff46854bb365c875c247f27b99e30d6a8852d9ad52e2bd0ac7056ad67ec876cbc57cc028d3cd4887c27f5e0461677f637289546bf122fc7fbbd3d70c95e574f8ab087c9ce644dae0898770a3be6cefbd42a1aaaf4484196d77b6ad8a8ec2a4acd9e473bb92ff4a08bf115ed08a2b8793777d603811af69fee47d6e31f3558e4948b9642b2317a97bb91a8ab78b85f02c0834b932b31d831614919477ccd726a0050d3ee01850c4228ca04a8d1cb4f33bf9aa890c75131573ad1c3cdabad891aedc2e55c0d854d3a29237562c3ac3c7ac5266b39f04cd99729ef6e7f6cad89d22834640c8f97f25b4183b43cddd6c75f1ae1ae3f0f2f1af398a5cf3ce4f7e70c09e14156d0d268b7f84b9ea70e407627e34a2370fbcc247d252d28984a28b92bffe5f1fb51cfb7691850397753b11c8e30bf3784d2dd0f21f345b7c2acbff5355fac1ed72981680ea63ceaddc629bca0677e3b71bfa68320ae8d67d4f57b261d1145ad3c32b5c708db4f806323f3e10d9a2aa41b6da8c3c63df7dc525b4a3167c15969c1bbf266828f678ce15f743ebdb2d04779108f467cd28d9b109bb93974e23595c68dc875fa71c9803580d632bb321ec999bf2a9f8269568c36aff93984132234f329bb252d493b3dd7716b02fb6c5116c8ddaf07dda0b1c79b15f6b1de37e98a769eec0c03a70d5039903cbaa7828b10c7269a217c5e78459a7fab016500fd53e57f794301a6129b0cc36ae1ae2339ce9b573d20f8a89c8232b700b9f40ead3643476169aa89d13d0f09d2b4c00602663450135451d4a8b59cda555dc0fd0f696aef54b417f7def98fb00070fb3372a07054290099178fe37d24c41a6ca4cfc2f6b80c3ddf452db521733651dea23ed0726a5e96737921fcf85fab60ad65663d215832214fee23e81278c330788066a018d3ebba623fbcd8564fb6b3c97e4aaa05ed6e2d4f055987c7076ab51d9efce08a0ecf5f5d65dc922911bb210049895a72b9a3cb2b838f4394d96872610be925b61e105b0375202e4d1cda5fa786f2a3c8fa5836c37f595d404374f98261738cb5b8671d6d4cb044dcf702a6caf86669124c22ec4a3653111755cedec0ffa98e2b36a0c07de379d046aa4c85cf611895dc10a4775a2c2dff45def37b8f1a79d7368010f89399f850a9ac83b4dcf47a1ee5cc527e95d598d59363a1b478b2ab3e7889fa584cbdb71bde77971c8aec74c98152bcd108e4b626e1bdaaebfdb6d830beb2dc89630c7dc5ff4a3c6241b4942a324221b7bec3b2a940a97c39a15c9cfb100e67642485a5e684d27e088014af4dc9aa4bfa509f2a8a9e8ffc671b47b9bc59bc608ecbdc7d3e8d422d77c6634c39134fd5d83a9ce64fc62d02b8cb3aed94b82b8d69f9135fd19edf0ac043ca65aae1a87492da7af2017db15b980277ce6bb45830c519411a69f9098ce9ebb7f73a0a7e2e619f26dce5d5b339bde8d9b200184cebb555a0b299c1109f52f1e324acb7d65bde19b9115151b1bd47e22087d1637b2882180be3b9154c90d1a368a4e076129c149f90fa31e0e6573b37681531358ffdcecd1e1b33553e7506c5660680bde1dd0bfe6f58c3ef4959454fc4bb1020be73a5899566f8edf2779eea9aed1b88102c871334397ccfd20efc78542ad88a55a6739c57894f83a6074d26a0c5f7da64b27f5bf37f25a69543694c02c51f91f2aad511e08297bf529a590bdb0aa07465ea4fd3f9819eb1b3940c2a0543be9361d649416c99eeaf719da02e21681eecfa5ccd581d0b724a621f8350aa6a7e8edd62e6d297535841347515164d11c44922757fca62c8d16153ceaa88d8a88148d9dd7bc77bc9060780d439f7623434c9cc080738d4e447633982f05edb18eabac8216f4339d76e6e3c0154ced4c450cbbbb1ec017159340c8a46133326f55aa8ed3ff9614fe5c738f38d1233add1278d687c47f5202f2299241d36066ef431c76eb25aef684faf7e2bdf18b6585a9720d535cdc1b794bcd7d16df6a9547223ab9918b0110b84e3194386ebf0e26310a4dcd44c59353d1cb3255a8fffd1ef4e81d4bd0f3d131f5d9d4da1de55c0dc46625ec3b3c9c81774555a4e980fe41bc96350ff4d5c41bf80e8ee15e5b0ce2", 0xf33}], 0x2, 0x6, 0x6e, 0x4) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001a40)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11db22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) fallocate(r3, 0x11, 0x0, 0x5345) r5 = memfd_create(0x0, 0x1) splice(r2, 0x0, r5, 0x0, 0x4010d00, 0x0) 11m3.910437879s ago: executing program 35 (id=2552): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000580)="e4b0cdc868d3b59ccef153f3249a", 0xe) read$FUSE(0xffffffffffffffff, &(0x7f0000003940)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r3, 0xb) sendmsg(r3, 0x0, 0x20008800) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000005c0)=0x239, 0x4) r4 = socket(0x10, 0x80000, 0x7) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {&(0x7f0000003600)=""/296, 0x128}, {&(0x7f0000003740)=""/265, 0x109}, {&(0x7f0000003880)=""/141, 0x8d}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/164, 0xa4}, {&(0x7f0000000780)=""/141, 0x8d}], 0xa}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x2000, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) 9m54.029352357s ago: executing program 5 (id=2678): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) pipe2$9p(0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeeb, 0x110, r0, 0xc44a7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x29c0080, &(0x7f0000000440), 0x0, &(0x7f00000004c0), {0x1d}, &(0x7f0000000500)=""/144, 0x90, &(0x7f00000005c0)=""/60, &(0x7f0000000600)=[r1, r1], 0x2, {r0}}, 0x58) 9m50.89709585s ago: executing program 5 (id=2682): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000840)={0x2020}, 0x2082) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000004c40)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000004c80)={0x2, 0x16, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], &(0x7f0000005c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005c40), 0xfffffffffffffe50}, 0x48) syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x3501) 9m48.18124281s ago: executing program 5 (id=2686): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xa, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 9m44.154941524s ago: executing program 5 (id=2688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda18"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, r3, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000880)={&(0x7f0000000640), 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa8, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x84) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x50009405, &(0x7f0000000900)={0x1, 0x402000, 0x5cd2}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 9m41.849294762s ago: executing program 36 (id=2675): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, r2, 0x1, 0x4, 0x8, 0x8, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6004, 0x1) 9m41.497791138s ago: executing program 5 (id=2695): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xa, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 9m39.521181562s ago: executing program 5 (id=2698): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) pipe2$9p(0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeeb, 0x110, r0, 0xc44a7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x29c0080, &(0x7f0000000440), 0x0, &(0x7f00000004c0), {0x1d}, &(0x7f0000000500)=""/144, 0x90, &(0x7f00000005c0)=""/60, &(0x7f0000000600)=[r1, r1], 0x2, {r0}}, 0x58) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./mnt\x00', 0x2000c10, &(0x7f00000006c0), 0xff, 0x23f, &(0x7f0000000700)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0x8202, &(0x7f0000000a00)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nodioread_nolock}, {@grpid}, {@errors_remount}, {}, {@noload}, {@minixdf}, {@noauto_da_alloc}]}, 0x0, 0x5fe, &(0x7f0000000a80)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 9m24.223341197s ago: executing program 37 (id=2698): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) pipe2$9p(0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeeb, 0x110, r0, 0xc44a7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x29c0080, &(0x7f0000000440), 0x0, &(0x7f00000004c0), {0x1d}, &(0x7f0000000500)=""/144, 0x90, &(0x7f00000005c0)=""/60, &(0x7f0000000600)=[r1, r1], 0x2, {r0}}, 0x58) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./mnt\x00', 0x2000c10, &(0x7f00000006c0), 0xff, 0x23f, &(0x7f0000000700)="$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") syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0x8202, &(0x7f0000000a00)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nodioread_nolock}, {@grpid}, {@errors_remount}, {}, {@noload}, {@minixdf}, {@noauto_da_alloc}]}, 0x0, 0x5fe, &(0x7f0000000a80)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 8m15.309718496s ago: executing program 9 (id=2820): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb6, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x2004, 0x0, 0xfffbfff4, 0x4, 0x80000046, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xfa9, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x6, 0x55, 0x7ff, 0x0, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1fb, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8006, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f00000005c0)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x4}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}], 0xc8}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m10.778251972s ago: executing program 9 (id=2827): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x4, r2}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001b00)={0x0, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b0000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x4, 0x1}, 0x50) fcntl$getown(r0, 0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001cc0), 0xca00, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{}, 0x0, &(0x7f0000001e00)}, 0x20) 8m9.237472521s ago: executing program 9 (id=2829): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002f00)=@bpf_lsm={0x6, 0x3, &(0x7f0000002fc0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000003000)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000003040)={r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000003080)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 8m6.129970971s ago: executing program 9 (id=2834): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x9, 0x8, 0x9f, 0x3}]}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000340)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=' ', 0xfdef}], 0x1}}], 0x1, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 8m1.063639593s ago: executing program 9 (id=2843): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='./config/nullb/my_zoned_dev\x00', 0x282, 0x4) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write(r1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 7m57.869375452s ago: executing program 9 (id=2848): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(r1, r1, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000440)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 7m42.761390437s ago: executing program 38 (id=2848): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(r1, r1, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000440)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 4m39.572861836s ago: executing program 6 (id=3152): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xa, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4m36.668413516s ago: executing program 6 (id=3155): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb6, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x2004, 0x0, 0xfffbfff4, 0x4, 0x80000046, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xfa9, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x6, 0x55, 0x7ff, 0x0, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1fb, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8006, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f00000005c0)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x4}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xe0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m34.735004125s ago: executing program 6 (id=3160): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000a00)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000002c0)=""/216) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x46042, 0x179) unlinkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x1) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) setreuid(0xee01, 0xee01) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) unshare(0x2020600) open(0x0, 0x8000, 0x50) mkdir(&(0x7f0000000180)='./control\x00', 0x111) 4m30.239474958s ago: executing program 6 (id=3164): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) r3 = io_uring_setup(0xa0, &(0x7f0000000a00)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000002c80)='./bus\x00') io_setup(0x20fe, &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/115, 0x73}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000005c0)=""/93, 0x5d}], 0x0}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x183b41, 0x12b) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x800801}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000980)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) 4m28.293368308s ago: executing program 6 (id=3168): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x14, &(0x7f0000000400)=[{&(0x7f0000000440)=' ', 0x100120}], 0x1}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000500)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000540)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) lsetxattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 4m25.316218255s ago: executing program 6 (id=3172): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000e0180c200000e08004503005cffff0000002f9078000000e0e0000001248022eb00000000000a0004100008e0000086eb88a888be0800000010fe00000100000000000000280022eb000000002000000002000000020000"], 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000340)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=' ', 0xfdef}], 0x1}}], 0x1, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 4m9.995207543s ago: executing program 39 (id=3172): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000e0180c200000e08004503005cffff0000002f9078000000e0e0000001248022eb00000000000a0004100008e0000086eb88a888be0800000010fe00000100000000000000280022eb000000002000000002000000020000"], 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000340)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=' ', 0xfdef}], 0x1}}], 0x1, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 3m25.666038759s ago: executing program 2 (id=3254): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) r3 = io_uring_setup(0xa0, &(0x7f0000000a00)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000002c80)='./bus\x00') io_setup(0x20fe, &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/115, 0x73}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000005c0)=""/93, 0x5d}], 0x0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x183b41, 0x12b) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x800801}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000980)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) 3m23.236131889s ago: executing program 2 (id=3255): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000a00)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000002c0)=""/216) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x46042, 0x179) unlinkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) setreuid(0xee01, 0xee01) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) unshare(0x2020600) open(0x0, 0x8000, 0x50) mkdir(&(0x7f0000000180)='./control\x00', 0x111) 3m19.336731681s ago: executing program 2 (id=3261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000540)=@raw=[@generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 3m18.932143632s ago: executing program 2 (id=3264): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x98, &(0x7f0000000140)=""/152}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) getrlimit(0xc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000540)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r4 = fsopen(&(0x7f0000000700)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000008c0)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 3m12.245177771s ago: executing program 2 (id=3277): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0xc000045) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000740)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x2, 0x0) fsopen(&(0x7f0000000a00)='devpts\x00', 0x1) syz_create_resource$futex(&(0x7f0000000000)=0x1) syz_create_resource$futex(0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x210008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4b7, &(0x7f0000010880)="$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") 3m9.516166232s ago: executing program 2 (id=3282): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000a00)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x46042, 0x179) unlinkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) setreuid(0xee01, 0xee01) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) unshare(0x2020600) open(0x0, 0x8000, 0x50) mkdir(&(0x7f0000000180)='./control\x00', 0x111) 2m54.420916997s ago: executing program 40 (id=3282): prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000a00)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x46042, 0x179) unlinkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x701, 0x4) setreuid(0xee01, 0xee01) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) unshare(0x2020600) open(0x0, 0x8000, 0x50) mkdir(&(0x7f0000000180)='./control\x00', 0x111) 2m46.92239746s ago: executing program 4 (id=3336): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './tracefs\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250500000100000000000000000001000000000008000900780000000800090034000000080009005200000014000300ffffffff00000000000000000000000008000b007369700008000600acdf0c44000000000027fd0fe3a41b141d021152eecc664402e8c94ca8583adcdbdeebc09c6dce4e0f85dedf97aa52f9daa81eaa8d59c964eb87105f030f5787a37d5499dd1e50768ac3ee53933d338739ed342e9a3fd286b256f176c398e2adc59cea1de0e8659dc3f582e3f9798598f9a06bb41c5b544c2e638bf5ef38ae336eb0ed462982cc669ed6c5acbfecf599a5"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./tracefs\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f00000007c0)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x7, &(0x7f0000000840)={0x0, 0x2, 0x2a, 0x73e9}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000900)='#', 0x1}, {&(0x7f0000000940)="703acb93f7ccd8331b2019", 0xb}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x1200}, 0x50) 2m43.984357702s ago: executing program 4 (id=3341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, r3, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000880)={&(0x7f0000000640), 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa8, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x84) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x50009405, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2m43.598434562s ago: executing program 4 (id=3342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="fb4a37a2ffef", 0x6}], 0x1}}], 0x1, 0x24008040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m42.895797864s ago: executing program 4 (id=3348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'bridge0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2m40.41817605s ago: executing program 4 (id=3352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, r3, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000880)={&(0x7f0000000640), 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa8, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x84) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x50009405, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2m40.050800307s ago: executing program 4 (id=3353): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x4008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sync() socket(0x11, 0xa, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0) 2m24.054766185s ago: executing program 41 (id=3353): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x4008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sync() socket(0x11, 0xa, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0) 24.772829123s ago: executing program 0 (id=3670): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x4, 0x5}) pipe(&(0x7f00000003c0)) fcntl$dupfd(r0, 0x406, r2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000240)=0x6f) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(r4, &(0x7f0000000280)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 22.640842343s ago: executing program 0 (id=3673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xc, 0xb}, {0x7, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 21.357324146s ago: executing program 0 (id=3675): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket(0xa, 0x3, 0xff) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002780)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x2b, 0x0, 0x29040006, 0xff, 0x0, 0x20007, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)={0x90, 0x0, 0x80005, {0x100000000000, 0x400000000000, 0x0, 0x1080000000000000, 0x0, 0xdd, {0x1, 0x1003, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a40)={0x90, 0x0, 0x0, {0x2, 0x3, 0x4, 0x5, 0x9e3, 0xfff, {0x6, 0x4, 0x8, 0x7, 0x800, 0x20e, 0x80000000, 0x80000001, 0x101, 0x1000, 0x6909, r2, r3, 0x1, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) connect$inet6(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x44800) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 20.198304666s ago: executing program 3 (id=3677): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x4, 0x5}) pipe(&(0x7f00000003c0)) fcntl$dupfd(r0, 0x406, r2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000240)=0x6f) write$dsp(r4, &(0x7f0000000280)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 20.197202086s ago: executing program 8 (id=3678): clock_gettime(0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000340)=0x80000006, 0x4) sendmsg$inet6(r1, 0x0, 0x24000005) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000400)={0xffffffffffffffb0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x3, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x54, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x100}, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) r6 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x8) 17.107150634s ago: executing program 1 (id=3680): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffec1) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 14.831069949s ago: executing program 3 (id=3681): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001000000c"], 0x0, 0x200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'syzkaller0\x00'}) capset(0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f00000009c0), 0x4) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000a00)={@private=0xe1010203, @empty, 0x1}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendto(r4, &(0x7f0000000c40)="340000001a00010001000000000000000220000000000000000100000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x0, @multicast2}}) r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[r6, r6, r6, r6, r6], 0x5, 0x40800, 0x0, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2c040080}, 0x8000) r9 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000062a10b40450cbc10fce60102030107cc1b00010000000009043200019740a40009058203ff"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r10, &(0x7f0000000840)='L', 0x1) syz_usb_control_io$lan78xx(r9, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r5], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x4000041) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) 14.794800163s ago: executing program 7 (id=3682): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) request_key(&(0x7f0000000680)='asymmetric\x00', &(0x7f00000007c0)={'syz', 0x1, 0xc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xe, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800), 0x10}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setns(0xc9, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0) 14.751349248s ago: executing program 8 (id=3683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 14.716051321s ago: executing program 0 (id=3684): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r3, &(0x7f0000001900)=""/102392, 0x18ff8) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000001c0)=""/81) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, 0x0) 14.669894916s ago: executing program 8 (id=3685): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000e00), 0xff, 0x54a, &(0x7f0000001140)="$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") mremap(&(0x7f0000a29000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000003c0)={0x2, 0x2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) keyctl$set_timeout(0xf, 0x0, 0x2) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000b40)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000bc0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff}) 14.668414526s ago: executing program 7 (id=3686): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 14.466232417s ago: executing program 7 (id=3687): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') mount(0x0, 0x0, 0x0, 0x100054, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e20, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, {0xa, 0x4e22, 0x0, @empty, 0x7ff}, 0x1, {[0x0, 0x6, 0x7, 0x10000, 0x6, 0xa, 0x8, 0xff]}}, 0x5c) mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 13.438668643s ago: executing program 0 (id=3688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183842, 0x0) r1 = getpid() ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x10448) 13.408760996s ago: executing program 7 (id=3689): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) r3 = io_uring_setup(0xa0, &(0x7f0000000a00)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000002c80)='./bus\x00') io_setup(0x20fe, &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/115, 0x73}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/36, 0x24}], 0x0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x183b41, 0x12b) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x800801}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000980)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) 13.338201543s ago: executing program 1 (id=3690): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(r3, r0) gettid() timer_create(0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000640)={0x0, {{0xa, 0x0, 0x8, @mcast1}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0x2}}}, 0x108) 11.62502771s ago: executing program 1 (id=3691): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x4, 0x5}) pipe(&(0x7f00000003c0)) fcntl$dupfd(r0, 0x406, r2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000240)=0x6f) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(r4, &(0x7f0000000280)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 11.565241357s ago: executing program 3 (id=3692): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, 0x0, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 11.059774049s ago: executing program 8 (id=3693): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x4, 0x5}) pipe(&(0x7f00000003c0)) fcntl$dupfd(r0, 0x406, r2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000240)=0x6f) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 10.390443788s ago: executing program 7 (id=3694): r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019280)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0xbf) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f000001a500)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f000001a540)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) 7.053596182s ago: executing program 1 (id=3695): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x4, 0x5}) pipe(&(0x7f00000003c0)) fcntl$dupfd(r0, 0x406, r2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(r4, &(0x7f0000000280)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 6.624155627s ago: executing program 3 (id=3696): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x4, 0x5}) pipe(&(0x7f00000003c0)) fcntl$dupfd(r0, 0x406, r2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(r4, &(0x7f0000000280)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 5.039568s ago: executing program 7 (id=3697): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) r3 = io_uring_setup(0xa0, &(0x7f0000000a00)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000002c80)='./bus\x00') io_setup(0x20fe, &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640), 0x0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x183b41, 0x12b) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x800801}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000980)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) 3.844487143s ago: executing program 8 (id=3698): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) sendmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)}], 0x1}}], 0x1, 0x24008040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.756220933s ago: executing program 1 (id=3699): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r3, &(0x7f0000001900)=""/102392, 0x18ff8) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000001c0)=""/81) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, 0x0) 3.690560589s ago: executing program 3 (id=3700): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000140)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', @ifru_hwaddr}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) 1.559752049s ago: executing program 3 (id=3701): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000140)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) 1.460163989s ago: executing program 0 (id=3702): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1', 0x1) socket$unix(0x1, 0x1, 0x0) 54.021085ms ago: executing program 8 (id=3703): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) r3 = io_uring_setup(0xa0, &(0x7f0000000a00)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000002c80)='./bus\x00') io_setup(0x20fe, &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640), 0x0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x183b41, 0x12b) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x800801}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000980)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) 0s ago: executing program 1 (id=3704): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) r3 = io_uring_setup(0xa0, &(0x7f0000000a00)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000002c80)='./bus\x00') io_setup(0x20fe, &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/115, 0x73}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f00000005c0)=""/93, 0x5d}], 0x0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x183b41, 0x12b) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x800801}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000980)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) kernel console output (not intermixed with test programs): 2 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3101" name="power" dev="configfs" ino=79002 res=0 errno=0 [ 1103.186006][T15292] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1103.194670][T15292] FAT-fs (loop2): Filesystem has been set read-only [ 1103.354391][ T26] audit: type=1800 audit(1793331200.503:558): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3100" name="file1" dev="loop2" ino=1048741 res=0 errno=0 [ 1106.220130][T15163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.635408][T15163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.921773][T15163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.008564][T15350] rxe_eth0 speed is unknown, defaulting to 1000 [ 1110.471092][ T9] device hsr_slave_0 left promiscuous mode [ 1110.585836][ T9] device hsr_slave_1 left promiscuous mode [ 1110.631457][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.686638][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.749055][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.801927][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.346798][T15364] loop2: detected capacity change from 0 to 512 [ 1111.470680][ T9] device bridge_slave_1 left promiscuous mode [ 1111.653969][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.753699][ T9] device bridge_slave_0 left promiscuous mode [ 1113.612410][ T26] audit: type=1800 audit(1793331209.783:559): pid=15379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3116" name="file1" dev="loop2" ino=1048742 res=0 errno=0 [ 1114.623958][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.856516][T15377] loop0: detected capacity change from 0 to 512 [ 1114.907520][ T9] device veth1_macvtap left promiscuous mode [ 1114.921835][ T9] device veth0_macvtap left promiscuous mode [ 1114.928151][ T9] device veth1_vlan left promiscuous mode [ 1114.934646][ T9] device veth0_vlan left promiscuous mode [ 1115.967652][T15376] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1115.976336][T15376] FAT-fs (loop0): Filesystem has been set read-only [ 1116.614173][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.620530][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.627047][ T26] audit: type=1800 audit(1793331213.253:560): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3118" name="file1" dev="loop0" ino=1048745 res=0 errno=0 [ 1117.970984][T15405] loop0: detected capacity change from 0 to 512 [ 1119.617817][ T26] audit: type=1800 audit(1793331216.553:561): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3123" name="file1" dev="loop0" ino=1048747 res=0 errno=0 [ 1122.903188][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1122.965387][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1123.044177][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.148960][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.044958][T15442] loop8: detected capacity change from 0 to 512 [ 1125.734678][T15450] loop0: detected capacity change from 0 to 512 [ 1125.762051][ T9] bond0 (unregistering): Released all slaves [ 1126.644998][T15438] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1126.653632][T15438] FAT-fs (loop8): Filesystem has been set read-only [ 1127.606410][ T26] audit: type=1800 audit(1793331223.843:562): pid=15456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3131" name="file1" dev="loop8" ino=1048750 res=0 errno=0 [ 1128.387092][T15163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.406525][T15450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.3132: missing EA_INODE flag [ 1128.418568][T15450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3132: error while reading EA inode 2 err=-117 [ 1128.433644][T15450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.3132: inode #3584: comm syz.0.3132: iget: illegal inode # [ 1128.449505][T15450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3132: error while reading EA inode 3584 err=-117 [ 1128.462842][T15450] EXT4-fs (loop0): 1 orphan inode deleted [ 1128.468639][T15450] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1128.966249][T15163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1131.926209][T15163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1131.952844][T15163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1131.975961][T15496] loop6: detected capacity change from 0 to 512 [ 1131.998631][T15163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1132.136041][T15500] loop0: detected capacity change from 0 to 512 [ 1133.613853][ T26] audit: type=1800 audit(1793331230.683:563): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3141" name="file1" dev="loop6" ino=1048752 res=0 errno=0 [ 1133.869425][T15500] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.3140: missing EA_INODE flag [ 1133.881435][T15500] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3140: error while reading EA inode 2 err=-117 [ 1133.896154][T15500] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.3140: inode #3584: comm syz.0.3140: iget: illegal inode # [ 1133.909817][T15500] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3140: error while reading EA inode 3584 err=-117 [ 1133.923208][T15500] EXT4-fs (loop0): 1 orphan inode deleted [ 1133.929067][T15500] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1134.276306][T15163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.395399][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1134.409530][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1134.505473][T15163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.576283][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1134.617134][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1134.648117][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.655385][T13692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.396020][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1135.766786][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1135.805187][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1135.813678][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.820835][T13692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.894013][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1136.837954][T15528] loop6: detected capacity change from 0 to 512 [ 1136.883479][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1137.185599][ T26] audit: type=1800 audit(1793331235.123:564): pid=15528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3145" name="file1" dev="loop6" ino=1048755 res=0 errno=0 [ 1137.280467][T15163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1137.325770][T15527] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1137.334391][T15527] FAT-fs (loop6): Filesystem has been set read-only [ 1137.392508][T15163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.202726][T15163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.455765][T15163] device veth0_vlan entered promiscuous mode [ 1138.532707][T15163] device veth1_vlan entered promiscuous mode [ 1138.635243][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1138.679536][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1138.719254][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1138.958653][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1139.103701][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1139.239825][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1139.377492][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1139.503422][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1139.741166][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1139.818930][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1139.842747][T15567] loop2: detected capacity change from 0 to 512 [ 1139.905665][T15572] loop8: detected capacity change from 0 to 512 [ 1140.625368][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1141.072921][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1141.128796][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1141.230276][T15572] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.3150: missing EA_INODE flag [ 1141.242345][T15572] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3150: error while reading EA inode 2 err=-117 [ 1141.256039][T15572] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3150: inode #3584: comm syz.8.3150: iget: illegal inode # [ 1141.270244][T15572] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3150: error while reading EA inode 3584 err=-117 [ 1141.283511][T15572] EXT4-fs (loop8): 1 orphan inode deleted [ 1141.289298][T15572] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1141.356085][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1141.365567][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1141.373944][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1141.390075][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1141.409705][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1141.422120][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1142.125250][T15566] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1142.133915][T15566] FAT-fs (loop2): Filesystem has been set read-only [ 1142.611257][ T26] audit: type=1800 audit(1793331239.473:565): pid=15584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3151" name="file1" dev="loop2" ino=1048757 res=0 errno=0 [ 1143.950961][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1143.983871][ T26] audit: type=1800 audit(1793331241.933:566): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3154" name="memory_backed" dev="configfs" ino=79528 res=0 errno=0 [ 1144.252059][ T26] audit: type=1800 audit(1793331242.183:567): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3154" name="power" dev="configfs" ino=79544 res=0 errno=0 [ 1145.746422][T15615] loop0: detected capacity change from 0 to 512 [ 1146.115074][T15626] loop6: detected capacity change from 0 to 512 [ 1146.230976][T15626] FAT-fs (loop6): Unrecognized mount option "ÿÿÿ01777777777777777777777" or missing value [ 1146.266748][T15628] loop2: detected capacity change from 0 to 512 [ 1146.405774][ T26] audit: type=1800 audit(1793331244.343:568): pid=15627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3157" name="file1" dev="loop0" ino=1048758 res=0 errno=0 [ 1146.457241][T15628] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3159: missing EA_INODE flag [ 1146.513195][T15628] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3159: error while reading EA inode 2 err=-117 [ 1146.570302][T15628] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3159: inode #3584: comm syz.2.3159: iget: illegal inode # [ 1146.675528][T15628] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3159: error while reading EA inode 3584 err=-117 [ 1146.734591][T15628] EXT4-fs (loop2): 1 orphan inode deleted [ 1146.763984][T15628] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1147.706520][T15612] rxe_eth0 speed is unknown, defaulting to 1000 [ 1147.893921][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 1148.339822][T15642] loop2: detected capacity change from 0 to 512 [ 1148.952410][T15612] chnl_net:caif_netlink_parms(): no params data found [ 1149.285651][T15612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.361628][T15612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.418337][T15612] device bridge_slave_0 entered promiscuous mode [ 1149.484575][T15612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.522050][T15612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.573474][T15612] device bridge_slave_1 entered promiscuous mode [ 1149.780937][ T26] audit: type=1800 audit(1793331247.713:569): pid=15660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3162" name="file1" dev="loop2" ino=1048761 res=0 errno=0 [ 1149.836876][T15612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.939184][T15612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.974090][ T8157] Bluetooth: hci4: command 0x041b tx timeout [ 1150.096543][T15612] team0: Port device team_slave_0 added [ 1150.144911][T15612] team0: Port device team_slave_1 added [ 1150.258525][T15612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.306402][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.415545][T15612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.501160][T15612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.535026][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.613702][T15612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.354755][T15612] device hsr_slave_0 entered promiscuous mode [ 1151.397159][T15612] device hsr_slave_1 entered promiscuous mode [ 1151.436797][T15612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1151.456627][T15612] Cannot create hsr debugfs directory [ 1152.057730][ T8157] Bluetooth: hci4: command 0x040f tx timeout [ 1152.360930][T15696] ima: policy update failed [ 1152.440307][ T26] audit: type=1802 audit(1793331250.393:570): pid=15696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.3166" res=0 errno=0 [ 1155.366130][T15715] Bluetooth: hci4: command 0x0419 tx timeout [ 1157.021130][T15734] loop0: detected capacity change from 0 to 512 [ 1158.467288][T15732] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1158.475888][T15732] FAT-fs (loop0): Filesystem has been set read-only [ 1158.508023][ T26] audit: type=1800 audit(1793331256.253:571): pid=15749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3173" name="file1" dev="loop0" ino=1048764 res=0 errno=0 [ 1159.062718][T15612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1159.096368][T15612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1159.137261][T15612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1159.156270][T15612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1159.384296][T15612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.424900][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1159.437124][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1159.469254][T15612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.495034][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1159.515923][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1159.548804][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.555963][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.623085][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1159.631686][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1159.640759][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1159.727440][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.734654][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.787837][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1159.824390][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1159.913700][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1159.935315][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1159.963403][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1159.982896][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1160.014800][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1160.052100][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1160.069600][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1160.625194][T15612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1160.645346][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1160.666173][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1160.953993][T15781] loop0: detected capacity change from 0 to 512 [ 1161.016547][T15779] rxe_eth0 speed is unknown, defaulting to 1000 [ 1162.154408][ T26] audit: type=1800 audit(1793331259.903:572): pid=15797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3176" name="file1" dev="loop0" ino=1048766 res=0 errno=0 [ 1162.737480][T15780] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1162.746141][T15780] FAT-fs (loop0): Filesystem has been set read-only [ 1164.052208][T15802] loop8: detected capacity change from 0 to 512 [ 1164.549923][T15802] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.3179: missing EA_INODE flag [ 1164.557135][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1164.582751][T15802] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3179: error while reading EA inode 2 err=-117 [ 1164.595754][T15802] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3179: inode #3584: comm syz.8.3179: iget: illegal inode # [ 1164.612712][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1164.621813][T15802] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3179: error while reading EA inode 3584 err=-117 [ 1164.635002][T15802] EXT4-fs (loop8): 1 orphan inode deleted [ 1164.640783][T15802] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1164.722500][T15612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.998915][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1165.027113][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1165.145771][T15819] loop8: detected capacity change from 0 to 512 [ 1165.444074][T15819] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.3181: missing EA_INODE flag [ 1165.459301][T15819] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3181: error while reading EA inode 2 err=-117 [ 1165.475434][T15819] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3181: inode #3584: comm syz.8.3181: iget: illegal inode # [ 1165.491205][T15819] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3181: error while reading EA inode 3584 err=-117 [ 1165.507902][T15819] EXT4-fs (loop8): 1 orphan inode deleted [ 1165.513732][T15819] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1166.049783][T15612] device veth0_vlan entered promiscuous mode [ 1166.123557][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1166.132846][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1166.207757][T15612] device veth1_vlan entered promiscuous mode [ 1166.227050][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.237819][T15825] loop8: detected capacity change from 0 to 512 [ 1166.248723][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1166.331639][T15612] device veth0_macvtap entered promiscuous mode [ 1166.368391][T15612] device veth1_macvtap entered promiscuous mode [ 1166.428661][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.472403][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.503380][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.992723][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.078030][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.113825][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.144014][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.185061][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.233990][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.245422][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.317407][T15612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.569464][T15843] loop0: detected capacity change from 0 to 512 [ 1168.106099][ T26] audit: type=1800 audit(1793331265.923:573): pid=15845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3182" name="file1" dev="loop8" ino=1048768 res=0 errno=0 [ 1168.636120][T15823] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1168.637316][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1168.644723][T15823] FAT-fs (loop8): Filesystem has been set read-only [ 1168.713991][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1168.735538][T15843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.3184: missing EA_INODE flag [ 1168.758373][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1168.778292][T15843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3184: error while reading EA inode 2 err=-117 [ 1168.802032][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1168.834776][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1168.851793][T15843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.3184: inode #3584: comm syz.0.3184: iget: illegal inode # [ 1168.963951][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1168.984192][T15843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3184: error while reading EA inode 3584 err=-117 [ 1169.051840][T15843] EXT4-fs (loop0): 1 orphan inode deleted [ 1169.072196][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.091327][T15843] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1169.113825][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.140841][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.173515][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.210717][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.273239][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.311095][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.367616][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.401942][T15612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.436096][T15612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.473338][T15612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.533282][T15612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.594962][T15612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.627533][T15612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.643820][T15612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.897838][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1169.914489][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1170.177756][T15868] loop0: detected capacity change from 0 to 512 [ 1170.218820][T13692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.241652][T13692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.284122][T13692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.293265][T13692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.317899][T15867] loop8: detected capacity change from 0 to 512 [ 1170.754108][T15868] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.3185: missing EA_INODE flag [ 1170.773838][T15868] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3185: error while reading EA inode 2 err=-117 [ 1170.788190][T15868] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.3185: inode #3584: comm syz.0.3185: iget: illegal inode # [ 1170.803683][T15868] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3185: error while reading EA inode 3584 err=-117 [ 1170.817020][T15868] EXT4-fs (loop0): 1 orphan inode deleted [ 1170.822905][T15868] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1170.980218][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1171.018426][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1171.199300][T15880] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1171.208120][T15880] FAT-fs (loop8): Filesystem has been set read-only [ 1173.679717][T15892] loop2: detected capacity change from 0 to 512 [ 1173.784600][T15888] rxe_eth0 speed is unknown, defaulting to 1000 [ 1174.115605][ T26] audit: type=1800 audit(1793331272.063:574): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3191" name="file1" dev="loop2" ino=1048780 res=0 errno=0 [ 1174.438275][T15891] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1174.446903][T15891] FAT-fs (loop2): Filesystem has been set read-only [ 1174.866456][T15916] loop8: detected capacity change from 0 to 512 [ 1174.984429][T15916] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.3194: missing EA_INODE flag [ 1175.090449][T15916] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3194: error while reading EA inode 2 err=-117 [ 1175.202288][T15916] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3194: inode #3584: comm syz.8.3194: iget: illegal inode # [ 1175.322443][T15916] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3194: error while reading EA inode 3584 err=-117 [ 1175.412391][T15916] EXT4-fs (loop8): 1 orphan inode deleted [ 1175.453966][T15916] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1175.511320][T15888] chnl_net:caif_netlink_parms(): no params data found [ 1175.653872][T10988] Bluetooth: hci0: command 0x0409 tx timeout [ 1175.922953][T15888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.979274][T15888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.023608][T15888] device bridge_slave_0 entered promiscuous mode [ 1176.054575][T15888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.061698][T15888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.101946][T15888] device bridge_slave_1 entered promiscuous mode [ 1176.171639][T15888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.224146][T15888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.339237][T15888] team0: Port device team_slave_0 added [ 1176.378263][T15888] team0: Port device team_slave_1 added [ 1176.438743][ T9] device hsr_slave_0 left promiscuous mode [ 1176.455222][ T9] device hsr_slave_1 left promiscuous mode [ 1176.480034][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.542711][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.561453][ T9] device bridge_slave_1 left promiscuous mode [ 1176.573983][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.369418][T15943] loop2: detected capacity change from 0 to 512 [ 1177.578112][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.606459][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.101906][ T9] device bridge_slave_0 left promiscuous mode [ 1178.141009][ T26] audit: type=1800 audit(1793331276.093:575): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3199" name="memory_backed" dev="configfs" ino=82993 res=0 errno=0 [ 1178.172478][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.230901][ T9] device hsr_slave_0 left promiscuous mode [ 1178.251182][ T9] device hsr_slave_1 left promiscuous mode [ 1178.274054][T15943] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3196: missing EA_INODE flag [ 1178.287552][T15943] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3196: error while reading EA inode 2 err=-117 [ 1178.300578][T15943] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3196: inode #3584: comm syz.2.3196: iget: illegal inode # [ 1178.314423][T15943] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3196: error while reading EA inode 3584 err=-117 [ 1178.328283][T15943] EXT4-fs (loop2): 1 orphan inode deleted [ 1178.334135][T15943] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1178.371299][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.379385][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.395640][ T26] audit: type=1800 audit(1793331276.223:576): pid=15950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3199" name="power" dev="configfs" ino=82999 res=0 errno=0 [ 1178.423912][ T8157] Bluetooth: hci0: command 0x041b tx timeout [ 1178.836116][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.843669][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.931507][ T9] device bridge_slave_1 left promiscuous mode [ 1178.950365][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.961481][ T9] device bridge_slave_0 left promiscuous mode [ 1178.969706][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.142439][ T9] device veth1_vlan left promiscuous mode [ 1179.322061][ T9] device veth0_vlan left promiscuous mode [ 1179.466156][ T9] device veth1_macvtap left promiscuous mode [ 1179.476369][ T9] device veth0_macvtap left promiscuous mode [ 1179.486744][ T9] device veth1_vlan left promiscuous mode [ 1179.495796][ T9] device veth0_vlan left promiscuous mode [ 1180.066829][T15971] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 1181.505295][T15968] ima: policy update failed [ 1181.519293][ T26] audit: type=1802 audit(1793331279.463:577): pid=15968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3206" res=0 errno=0 [ 1181.539416][T15488] Bluetooth: hci0: command 0x040f tx timeout [ 1181.698358][T15982] loop2: detected capacity change from 0 to 512 [ 1182.747784][T15991] loop0: detected capacity change from 0 to 512 [ 1182.988091][T15988] loop8: detected capacity change from 0 to 512 [ 1182.995181][ T26] audit: type=1800 audit(1793331280.883:578): pid=15992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3208" name="file1" dev="loop2" ino=1048781 res=0 errno=0 [ 1184.616733][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 1185.972623][T15990] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1185.981248][T15990] FAT-fs (loop2): Filesystem has been set read-only [ 1187.588858][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1187.889604][T16010] loop2: detected capacity change from 0 to 512 [ 1189.321182][T16010] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3215: missing EA_INODE flag [ 1189.333266][T16010] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3215: error while reading EA inode 2 err=-117 [ 1189.436497][T16016] loop0: detected capacity change from 0 to 512 [ 1189.446012][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1189.453478][T16010] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3215: inode #3584: comm syz.2.3215: iget: illegal inode # [ 1189.467263][T16010] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3215: error while reading EA inode 3584 err=-117 [ 1189.480666][T16010] EXT4-fs (loop2): 1 orphan inode deleted [ 1189.486586][T16010] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1189.846278][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.875553][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.094128][ T26] audit: type=1800 audit(1793331287.903:579): pid=16027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3217" name="file1" dev="loop0" ino=1048783 res=0 errno=0 [ 1192.029438][T16036] loop2: detected capacity change from 0 to 512 [ 1192.555719][T16036] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3220: missing EA_INODE flag [ 1192.568312][T16036] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3220: error while reading EA inode 2 err=-117 [ 1192.582400][T16036] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3220: inode #3584: comm syz.2.3220: iget: illegal inode # [ 1192.596211][T16036] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3220: error while reading EA inode 3584 err=-117 [ 1192.609198][T16036] EXT4-fs (loop2): 1 orphan inode deleted [ 1192.615192][T16036] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1192.902992][ T9] bond0 (unregistering): Released all slaves [ 1196.425889][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1196.495423][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1196.542609][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.857597][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.600208][ T9] bond0 (unregistering): Released all slaves [ 1197.627740][T15888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.637831][T15888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.664497][T15888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.695877][T15888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.702877][T15888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.738388][T15888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.790862][T16061] loop1: detected capacity change from 0 to 512 [ 1198.145895][T15888] device hsr_slave_0 entered promiscuous mode [ 1198.211591][T15888] device hsr_slave_1 entered promiscuous mode [ 1198.323836][ T26] audit: type=1800 audit(1793331296.223:580): pid=16085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3226" name="file1" dev="loop1" ino=1048785 res=0 errno=0 [ 1198.373016][T15888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1198.471531][T15888] Cannot create hsr debugfs directory [ 1200.072917][T15888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1200.103486][T15888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1200.154813][T15888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1200.204908][T15888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1200.504901][T15888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.564860][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1200.580605][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1200.627448][T15888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.768848][T16104] loop2: detected capacity change from 0 to 512 [ 1200.788791][T16106] loop8: detected capacity change from 0 to 512 [ 1200.839704][T15888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1201.040329][T16111] loop1: detected capacity change from 0 to 256 [ 1202.653916][T15888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1202.872638][T16111] exfat: Bad value for 'uid' [ 1202.913212][T16111] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1203.024077][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1203.044640][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1203.099187][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.106442][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.146692][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1203.164276][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1203.172952][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.180117][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.188937][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1203.257440][T16119] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1203.266239][T16119] FAT-fs (loop8): Filesystem has been set read-only [ 1204.044003][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1204.093445][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1204.142524][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1204.181994][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1204.224875][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1204.269361][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1204.308862][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1204.329307][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1204.648954][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1205.350378][T16123] loop0: detected capacity change from 0 to 512 [ 1205.574556][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1205.618733][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1205.627364][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1205.975546][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.3234: missing EA_INODE flag [ 1205.987420][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3234: error while reading EA inode 2 err=-117 [ 1206.000228][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.3234: inode #3584: comm syz.0.3234: iget: illegal inode # [ 1206.014451][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3234: error while reading EA inode 3584 err=-117 [ 1206.027521][T16123] EXT4-fs (loop0): 1 orphan inode deleted [ 1206.033289][T16123] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1206.070699][T16134] loop2: detected capacity change from 0 to 512 [ 1207.017775][T16131] ima: policy update failed [ 1207.052166][ T26] audit: type=1802 audit(1793331305.003:581): pid=16131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.3236" res=0 errno=0 [ 1207.080145][T16134] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3235: missing EA_INODE flag [ 1207.098918][T16134] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3235: error while reading EA inode 2 err=-117 [ 1207.113866][T16134] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3235: inode #3584: comm syz.2.3235: iget: illegal inode # [ 1207.127448][T16134] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3235: error while reading EA inode 3584 err=-117 [ 1207.140371][T16134] EXT4-fs (loop2): 1 orphan inode deleted [ 1207.146259][T16134] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1207.387310][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.401744][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1207.457386][T16148] loop8: detected capacity change from 0 to 512 [ 1207.469692][T15888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.873473][T16161] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1207.882172][T16161] FAT-fs (loop8): Filesystem has been set read-only [ 1210.198047][T16164] kvm: emulating exchange as write [ 1213.541231][T16211] loop8: detected capacity change from 0 to 512 [ 1214.447241][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1214.563094][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1214.760131][T16211] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.3247: missing EA_INODE flag [ 1214.772125][T16211] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3247: error while reading EA inode 2 err=-117 [ 1214.786892][T16211] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3247: inode #3584: comm syz.8.3247: iget: illegal inode # [ 1214.800525][T16211] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3247: error while reading EA inode 3584 err=-117 [ 1214.813575][T16211] EXT4-fs (loop8): 1 orphan inode deleted [ 1214.819385][T16211] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1214.891983][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1214.904795][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1214.956552][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1215.008642][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1215.020311][T15888] device veth0_vlan entered promiscuous mode [ 1215.035395][T15888] device veth1_vlan entered promiscuous mode [ 1215.142775][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1215.166384][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1216.127524][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1216.187009][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1217.166301][T15888] device veth0_macvtap entered promiscuous mode [ 1217.347756][T15888] device veth1_macvtap entered promiscuous mode [ 1217.474108][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1217.494287][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1217.547007][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.613851][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.647528][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.697223][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.738089][T16251] loop2: detected capacity change from 0 to 512 [ 1217.744074][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.793451][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.838107][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.869361][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.899957][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.951310][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.990650][T15888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.046299][T13523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1218.076702][T13523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1218.105548][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.143165][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.242096][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.252692][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.265785][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.310432][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.536824][ T26] audit: type=1800 audit(1793331316.363:582): pid=16261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3255" name="file1" dev="loop2" ino=1048789 res=0 errno=0 [ 1218.583357][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.154411][T16250] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1219.163039][T16250] FAT-fs (loop2): Filesystem has been set read-only [ 1219.210622][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.285144][T15888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.353779][T15888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.450317][T15888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.637819][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1219.665265][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1220.647030][T15888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.207850][T15888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.270124][T15888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.363786][T15888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.681295][T16280] loop8: detected capacity change from 0 to 512 [ 1222.602204][ T26] audit: type=1800 audit(1793331320.403:583): pid=16292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3263" name="file1" dev="loop8" ino=1048791 res=0 errno=0 [ 1223.245266][T16278] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1223.253936][T16278] FAT-fs (loop8): Filesystem has been set read-only [ 1223.644334][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.652666][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.995666][T16299] ima: policy update failed [ 1224.001061][ T26] audit: type=1802 audit(1793331321.953:584): pid=16299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3267" res=0 errno=0 [ 1224.047070][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.083964][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1224.150916][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.209939][T16127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1225.650471][T16318] loop0: detected capacity change from 0 to 128 [ 1225.784752][T16318] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1225.808642][T16318] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.397138][T16318] overlayfs: failed to resolve './bus': -2 [ 1229.346563][T16352] loop2: detected capacity change from 0 to 512 [ 1230.722600][ T26] audit: type=1800 audit(1793331328.673:585): pid=16355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3278" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1230.865090][T16352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3277: missing EA_INODE flag [ 1230.905034][T16352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3277: error while reading EA inode 2 err=-117 [ 1230.917777][T16352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3277: inode #3584: comm syz.2.3277: iget: illegal inode # [ 1230.931828][T16352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3277: error while reading EA inode 3584 err=-117 [ 1230.944715][T16352] EXT4-fs (loop2): 1 orphan inode deleted [ 1230.950484][T16352] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1231.058317][T16367] loop4: detected capacity change from 0 to 512 [ 1231.362781][T16370] loop0: detected capacity change from 0 to 512 [ 1231.653896][ T26] audit: type=1800 audit(1793331329.463:586): pid=16375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3279" name="file1" dev="loop4" ino=1048802 res=0 errno=0 [ 1232.371961][T16364] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1232.380616][T16364] FAT-fs (loop4): Filesystem has been set read-only [ 1232.425299][T16374] loop2: detected capacity change from 0 to 512 [ 1233.005529][ T26] audit: type=1800 audit(1793331330.943:587): pid=16380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3282" name="file1" dev="loop2" ino=1048804 res=0 errno=0 [ 1233.107816][T16373] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1233.117572][T16373] FAT-fs (loop2): Filesystem has been set read-only [ 1233.314934][T16384] loop8: detected capacity change from 0 to 512 [ 1234.113967][ T26] audit: type=1800 audit(1793331331.993:588): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3285" name="file1" dev="loop8" ino=1048806 res=0 errno=0 [ 1234.186739][T16382] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1234.195342][T16382] FAT-fs (loop8): Filesystem has been set read-only [ 1236.362854][ T26] audit: type=1800 audit(1793331334.313:589): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3290" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1236.843285][ T26] audit: type=1800 audit(1793331334.793:590): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3289" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1236.928404][ T26] audit: type=1800 audit(1793331334.833:591): pid=16422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3292" name="out_ports" dev="configfs" ino=83954 res=0 errno=0 [ 1237.064450][T16429] loop4: detected capacity change from 0 to 512 [ 1237.534061][ T26] audit: type=1800 audit(1793331335.453:592): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3294" name="file1" dev="loop4" ino=1048808 res=0 errno=0 [ 1238.615777][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.622129][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.479719][T16428] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1240.488392][T16428] FAT-fs (loop4): Filesystem has been set read-only [ 1240.806171][T16443] loop0: detected capacity change from 0 to 512 [ 1240.837462][T16445] loop1: detected capacity change from 0 to 128 [ 1240.885242][ T26] audit: type=1800 audit(1793331338.843:593): pid=16444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3297" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1241.119005][T16445] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1241.195912][T16445] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.182635][T16441] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1242.191296][T16441] FAT-fs (loop0): Filesystem has been set read-only [ 1242.323774][ T26] audit: type=1800 audit(1793331339.173:594): pid=16454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3299" name="file1" dev="loop0" ino=1048810 res=0 errno=0 [ 1243.701141][T16478] loop1: detected capacity change from 0 to 512 [ 1244.587829][ T26] audit: type=1800 audit(1793331342.423:595): pid=16481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3302" name="file1" dev="loop1" ino=1048812 res=0 errno=0 [ 1245.153667][T16475] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1245.162345][T16475] FAT-fs (loop1): Filesystem has been set read-only [ 1245.350509][ T26] audit: type=1800 audit(1793331343.303:596): pid=16487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3306" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1245.380092][T16474] loop0: detected capacity change from 0 to 512 [ 1245.503595][T16474] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.3304: missing EA_INODE flag [ 1245.515733][T16474] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3304: error while reading EA inode 2 err=-117 [ 1245.528724][T16474] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.3304: inode #3584: comm syz.0.3304: iget: illegal inode # [ 1245.542778][T16474] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3304: error while reading EA inode 3584 err=-117 [ 1245.556093][T16474] EXT4-fs (loop0): 1 orphan inode deleted [ 1245.561884][T16474] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1246.187556][T16501] device syzkaller0 entered promiscuous mode [ 1246.397635][ T26] audit: type=1800 audit(1793331344.353:597): pid=16506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3311" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1246.742258][ T26] audit: type=1800 audit(1793331344.693:598): pid=16511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3312" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1246.743683][T16513] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3313'. [ 1247.889750][T16516] rxe_eth0 speed is unknown, defaulting to 1000 [ 1247.985824][ T26] audit: type=1800 audit(1793331345.943:599): pid=16535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3316" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1248.544995][ T26] audit: type=1800 audit(1793331346.503:600): pid=16544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3317" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1248.786486][T16516] chnl_net:caif_netlink_parms(): no params data found [ 1248.864572][T15488] Bluetooth: hci6: command 0x0409 tx timeout [ 1248.946259][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.953374][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.040806][T16516] device bridge_slave_0 entered promiscuous mode [ 1249.083487][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.131860][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.164945][T16516] device bridge_slave_1 entered promiscuous mode [ 1250.680041][T16516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.758604][T16516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.799428][T16516] team0: Port device team_slave_0 added [ 1250.816021][T16516] team0: Port device team_slave_1 added [ 1250.821656][ T26] audit: type=1800 audit(1793331348.773:601): pid=16578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3324" name="memory_backed" dev="configfs" ino=86500 res=0 errno=0 [ 1251.229701][ T26] audit: type=1800 audit(1793331348.863:602): pid=16587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3324" name="power" dev="configfs" ino=86512 res=0 errno=0 [ 1251.429300][T16516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.663137][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.781926][ T4256] Bluetooth: hci6: command 0x041b tx timeout [ 1251.846419][T16516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.964688][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3329'. [ 1251.989700][T16516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.017228][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.122780][T16516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.485111][T16516] device hsr_slave_0 entered promiscuous mode [ 1252.520975][T16516] device hsr_slave_1 entered promiscuous mode [ 1252.612561][T16516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1252.723162][T16516] Cannot create hsr debugfs directory [ 1253.813864][ T8157] Bluetooth: hci6: command 0x040f tx timeout [ 1256.015905][T15488] Bluetooth: hci6: command 0x0419 tx timeout [ 1260.102571][T16680] IPv6: NLM_F_CREATE should be specified when creating new route [ 1260.111649][T16680] netlink: 'syz.1.3343': attribute type 1 has an invalid length. [ 1261.054764][T16516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1261.091371][T16516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1261.123670][T16516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1261.134105][T13592] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1261.164957][T16516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1261.418524][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.464620][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1261.481177][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1261.519555][T16516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.544195][T13592] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1261.557886][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1261.572335][T13592] usb 9-1: can't read configurations, error -61 [ 1261.579369][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1261.579858][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.594980][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.655313][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1261.694642][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.734599][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.764072][T13592] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1261.764365][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.778720][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.943458][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1262.073448][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1262.091455][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1262.112947][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1262.212766][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1262.254142][T13592] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1262.316783][T13592] usb 9-1: can't read configurations, error -61 [ 1262.405934][T13592] usb usb9-port1: attempt power cycle [ 1262.842345][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1262.893182][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1262.904871][T13592] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1262.930718][T16516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1262.974025][T16516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.003924][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1263.026164][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1263.052277][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1263.083589][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1263.112434][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1263.148907][T15964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.174522][T13592] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1263.182172][T13592] usb 9-1: can't read configurations, error -61 [ 1263.249903][T15964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.334011][T13592] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1263.594334][T13592] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1263.614724][T13592] usb 9-1: can't read configurations, error -61 [ 1263.684007][T13592] usb usb9-port1: unable to enumerate USB device [ 1264.195453][T15964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.845029][T15964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.924486][ T26] audit: type=1800 audit(1793331363.883:603): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3363" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1265.944691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.002133][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1266.012421][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1266.028236][T16516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.617967][T16819] device syzkaller0 entered promiscuous mode [ 1267.793586][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1267.807943][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1267.931961][T16516] device veth0_vlan entered promiscuous mode [ 1267.968726][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1267.998753][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1268.018589][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1268.054692][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1268.101543][T16516] device veth1_vlan entered promiscuous mode [ 1268.251923][T16839] jffs2: notice: (16839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1268.370818][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1268.373937][ T4258] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1268.431394][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1268.528856][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1268.558992][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1268.696874][T16516] device veth0_macvtap entered promiscuous mode [ 1268.740250][T16516] device veth1_macvtap entered promiscuous mode [ 1268.804158][ T4258] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1268.816198][ T4258] usb 9-1: can't read configurations, error -61 [ 1268.824225][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1268.866185][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1268.899658][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.931799][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.984065][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.993976][ T4258] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1269.030074][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.062524][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.090049][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.105465][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.126261][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.144894][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.165409][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.182198][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.203218][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.459133][T16516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.468436][ T4258] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1269.487492][ T4258] usb 9-1: can't read configurations, error -61 [ 1269.599954][ T4258] usb usb9-port1: attempt power cycle [ 1270.152885][T15964] device hsr_slave_0 left promiscuous mode [ 1270.193909][ T4258] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1270.202151][T15964] device hsr_slave_1 left promiscuous mode [ 1270.219538][T15964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.234033][T15964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.242835][T15964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.257862][T15964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.894986][T16864] loop0: detected capacity change from 0 to 512 [ 1270.919838][T15964] device bridge_slave_1 left promiscuous mode [ 1270.929793][T15964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.973289][T15964] device bridge_slave_0 left promiscuous mode [ 1271.023905][T15964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.082370][T15964] device veth1_macvtap left promiscuous mode [ 1271.132322][T15964] device veth0_macvtap left promiscuous mode [ 1271.172520][T15964] device veth1_vlan left promiscuous mode [ 1271.245144][T15964] device veth0_vlan left promiscuous mode [ 1271.313869][ T4258] usb 9-1: device descriptor read/8, error -71 [ 1271.414088][ T5288] Bluetooth: hci4: command 0x0406 tx timeout [ 1271.486835][T16864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.3375: missing EA_INODE flag [ 1271.502270][T16864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3375: error while reading EA inode 2 err=-117 [ 1271.516942][T16864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.3375: inode #3584: comm syz.0.3375: iget: illegal inode # [ 1271.530910][T16864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3375: error while reading EA inode 3584 err=-117 [ 1271.543850][T16864] EXT4-fs (loop0): 1 orphan inode deleted [ 1271.549626][T16864] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1272.127261][T15964] team0 (unregistering): Port device team_slave_1 removed [ 1272.170856][T15964] team0 (unregistering): Port device team_slave_0 removed [ 1272.243941][T15964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.290506][T15964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.553960][ T26] audit: type=1800 audit(1793331370.503:604): pid=16894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3377" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1272.591351][T15964] bond0 (unregistering): Released all slaves [ 1272.614544][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1272.623551][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1272.635035][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.649142][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.660480][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.673459][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.683633][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.694971][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.705091][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.718028][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.728660][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.740801][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.752600][T16516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.778391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1272.813697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1272.837647][T16516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.883847][T16516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.909432][T16903] loop1: detected capacity change from 0 to 512 [ 1272.923504][T16516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.932700][T16516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.254895][T16361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.262890][T16361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.271427][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1273.351111][T16912] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1273.360250][T16912] FAT-fs (loop1): Filesystem has been set read-only [ 1274.866931][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.953290][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.013554][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1276.814986][T16944] jffs2: notice: (16944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1277.293895][ T8157] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1277.417880][ T26] audit: type=1800 audit(1793331375.373:605): pid=16951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3390" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1277.764099][ T8157] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1277.771737][ T8157] usb 9-1: can't read configurations, error -61 [ 1277.822139][T16954] rxe_eth0 speed is unknown, defaulting to 1000 [ 1277.953912][ T8157] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1278.379528][ T8157] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1278.397499][ T8157] usb 9-1: can't read configurations, error -61 [ 1278.421889][ T8157] usb usb9-port1: attempt power cycle [ 1278.564655][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3394'. [ 1279.598004][T16954] chnl_net:caif_netlink_parms(): no params data found [ 1279.713802][ T8157] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1279.768184][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 1279.900591][T16954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.953841][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.003803][ T8157] usb 9-1: device not accepting address 16, error -71 [ 1280.025238][T16954] device bridge_slave_0 entered promiscuous mode [ 1280.064483][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.816479][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.825228][T16954] device bridge_slave_1 entered promiscuous mode [ 1280.938875][T16954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.895223][T15488] Bluetooth: hci3: command 0x041b tx timeout [ 1282.962326][ T26] audit: type=1800 audit(1793331380.913:606): pid=16998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3400" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1283.000579][T16954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.270109][T17011] loop7: detected capacity change from 0 to 256 [ 1283.318380][T17011] exfat: Bad value for 'uid' [ 1283.458922][T16954] team0: Port device team_slave_0 added [ 1283.512729][T16954] team0: Port device team_slave_1 added [ 1283.624458][T16954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.631489][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.742773][T16954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.757878][T16954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.765068][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.791362][T16954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.881064][T16954] device hsr_slave_0 entered promiscuous mode [ 1283.896258][T16954] device hsr_slave_1 entered promiscuous mode [ 1283.972119][T16954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1284.011767][T16954] Cannot create hsr debugfs directory [ 1285.026637][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 1286.286287][ T26] audit: type=1800 audit(1793331384.243:607): pid=17052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3412" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1287.523466][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 1287.532952][T17070] loop1: detected capacity change from 0 to 512 [ 1287.575572][T17048] IPv6: NLM_F_CREATE should be specified when creating new route [ 1287.731734][T17048] netlink: 'syz.8.3405': attribute type 1 has an invalid length. [ 1287.787613][T17070] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1288.773198][T17070] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1288.838330][T17070] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3417: bg 0: block 248: padding at end of block bitmap is not set [ 1289.085269][T17088] jffs2: notice: (17088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1289.316601][T17070] Quota error (device loop1): write_blk: dquota write failed [ 1289.353364][T16954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1289.363974][T17070] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1289.406231][T16954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1289.436057][T17070] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3417: Failed to acquire dquot type 1 [ 1289.471712][T16954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1289.522772][T17070] EXT4-fs (loop1): 1 truncate cleaned up [ 1289.543617][T16954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1289.550658][T17070] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1289.778115][T16954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.798494][T16954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.811183][T17103] loop7: detected capacity change from 0 to 256 [ 1289.822670][T17104] jffs2: notice: (17104) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1289.861777][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1289.870951][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1289.879567][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1289.888570][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1289.911009][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.918148][T11326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.926318][T17103] exfat: Bad value for 'uid' [ 1289.931863][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1289.941619][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1289.951500][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.958704][T11326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.972909][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1289.982361][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1290.608449][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1290.639638][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1290.701170][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1290.722463][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1290.731257][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1290.740306][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1290.750745][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1290.759729][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1290.778874][T16954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1290.790529][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1290.799930][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1290.809609][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1290.866574][ T26] audit: type=1800 audit(1793331388.823:608): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3425" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1291.050726][T17128] loop8: detected capacity change from 0 to 128 [ 1291.097315][T17128] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1291.126569][T17128] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.402406][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1291.979650][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1292.128287][T16954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.724912][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1293.752763][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1293.880249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1293.899554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1293.945234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1293.985995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1294.008768][T16954] device veth0_vlan entered promiscuous mode [ 1294.159177][T16954] device veth1_vlan entered promiscuous mode [ 1294.174987][T17158] jffs2: notice: (17158) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1294.618070][T16954] device veth0_macvtap entered promiscuous mode [ 1294.650347][T17164] loop8: detected capacity change from 0 to 128 [ 1294.780617][T17164] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1295.354670][T16954] device veth1_macvtap entered promiscuous mode [ 1295.434277][T17164] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1295.462313][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1295.495167][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1295.535125][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1295.568242][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1295.585533][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1295.811573][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1296.260890][ T26] audit: type=1800 audit(1793331394.213:609): pid=17181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3437" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1296.299452][T17184] loop1: detected capacity change from 0 to 512 [ 1296.550492][T17184] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.3431: missing EA_INODE flag [ 1296.564579][T17184] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3431: error while reading EA inode 2 err=-117 [ 1296.577274][T17184] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.3431: inode #3584: comm syz.1.3431: iget: illegal inode # [ 1296.591272][T17184] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3431: error while reading EA inode 3584 err=-117 [ 1296.608244][T17184] EXT4-fs (loop1): 1 orphan inode deleted [ 1296.614096][T17184] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1297.236270][T17188] loop0: detected capacity change from 0 to 128 [ 1297.248213][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.322567][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.332585][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.357006][T17188] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1297.373794][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.393965][T17188] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.394578][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.418628][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.428559][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.439042][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.449004][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.459493][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.469389][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.480279][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.498595][T16954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.505933][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 1297.515311][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.542533][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.553270][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.564484][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.575343][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.586905][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.597136][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.607901][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.618093][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.629837][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.640775][T16954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.654918][T16954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.677703][T16954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.848328][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1297.894688][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1297.911457][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1297.930847][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1298.022526][T16954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.055029][T16954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.161864][T16954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.258954][T16954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.331749][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3441'. [ 1298.370253][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3440'. [ 1298.960559][T17227] loop0: detected capacity change from 0 to 256 [ 1299.004861][T17227] exfat: Bad value for 'uid' [ 1299.050527][T11326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.069898][T11326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.245729][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1299.928285][T16361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.964381][T16361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.985976][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.992332][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.006201][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1300.111785][T17243] loop7: detected capacity change from 0 to 512 [ 1300.588000][T17243] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.3447: missing EA_INODE flag [ 1300.601055][T17243] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.3447: error while reading EA inode 2 err=-117 [ 1300.644696][T17243] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.3447: inode #3584: comm syz.7.3447: iget: illegal inode # [ 1300.661185][T17243] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.3447: error while reading EA inode 3584 err=-117 [ 1300.678226][T17243] EXT4-fs (loop7): 1 orphan inode deleted [ 1300.684105][T17243] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1301.161239][ T26] audit: type=1800 audit(1793331399.113:610): pid=17257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3450" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1302.794439][T17270] netlink: 'syz.0.3451': attribute type 21 has an invalid length. [ 1302.802555][T17270] IPv6: NLM_F_CREATE should be specified when creating new route [ 1302.811125][T17270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1302.818448][T17270] IPv6: NLM_F_CREATE should be set when creating new route [ 1303.759615][T17268] loop7: detected capacity change from 0 to 128 [ 1303.879079][T17268] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1303.911381][T17268] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.016867][T17283] loop1: detected capacity change from 0 to 128 [ 1304.255923][T17283] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1304.294865][T17283] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1306.143583][T17303] netlink: 'syz.7.3459': attribute type 21 has an invalid length. [ 1306.151880][T17303] IPv6: NLM_F_CREATE should be specified when creating new route [ 1308.441022][T17314] loop1: detected capacity change from 0 to 256 [ 1308.484406][T17314] exfat: Bad value for 'uid' [ 1308.825378][T17321] jffs2: notice: (17321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1310.204174][T17328] netlink: 'syz.7.3460': attribute type 21 has an invalid length. [ 1310.825706][ T26] audit: type=1800 audit(1793331408.783:611): pid=17346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3466" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 1311.804657][T17363] netlink: 'syz.7.3462': attribute type 21 has an invalid length. [ 1312.811791][T17368] loop1: detected capacity change from 0 to 512 [ 1312.844247][T17365] device syzkaller0 entered promiscuous mode [ 1312.880829][T17368] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1312.976910][T17368] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1313.089046][T17368] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3469: bg 0: block 248: padding at end of block bitmap is not set [ 1313.104621][T17368] Quota error (device loop1): write_blk: dquota write failed [ 1313.112466][T17368] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1313.123066][T17368] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3469: Failed to acquire dquot type 1 [ 1313.138606][T17368] EXT4-fs (loop1): 1 truncate cleaned up [ 1313.144627][T17368] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1313.274755][T17379] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1314.386268][T17390] loop8: detected capacity change from 0 to 128 [ 1314.540462][T17395] jffs2: notice: (17395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1314.736500][T17390] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1314.767589][T17390] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.622586][T17433] jffs2: notice: (17433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1316.693660][T17430] loop0: detected capacity change from 0 to 512 [ 1316.786861][T17430] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1316.946979][T17446] jffs2: notice: (17446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1317.105136][T17430] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1317.165570][T17430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3478: bg 0: block 248: padding at end of block bitmap is not set [ 1317.937217][T17430] Quota error (device loop0): write_blk: dquota write failed [ 1317.968529][T17430] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1318.044972][T17430] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.3478: Failed to acquire dquot type 1 [ 1318.120606][T17430] EXT4-fs (loop0): 1 truncate cleaned up [ 1318.270523][T17430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1319.810502][T17475] jffs2: notice: (17475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1320.495568][T17491] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1320.678573][T17502] loop0: detected capacity change from 0 to 128 [ 1320.698913][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3491'. [ 1320.907298][T17502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1320.924507][T17507] loop3: detected capacity change from 0 to 128 [ 1320.965945][T17502] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.156151][T17507] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1321.185950][T17507] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.410032][T17519] loop1: detected capacity change from 0 to 128 [ 1322.189144][T17519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1322.214184][T17519] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1323.139305][T17541] loop7: detected capacity change from 0 to 512 [ 1323.256202][T17547] loop3: detected capacity change from 0 to 512 [ 1323.335812][T17541] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1323.369108][T17547] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1323.387307][T17541] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1323.414088][T17547] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1324.891410][T17578] loop1: detected capacity change from 0 to 512 [ 1325.050638][T17578] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1325.162687][T17578] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1325.469178][T17578] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3499: bg 0: block 248: padding at end of block bitmap is not set [ 1326.864237][T17578] Quota error (device loop1): write_blk: dquota write failed [ 1326.881571][T17578] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1327.039374][T17578] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3499: Failed to acquire dquot type 1 [ 1328.284736][T17578] EXT4-fs (loop1): 1 truncate cleaned up [ 1328.293764][T17578] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1329.766361][T17634] jffs2: notice: (17634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1330.638490][T17634] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1330.695975][T17630] device syzkaller0 entered promiscuous mode [ 1331.341740][T17652] jffs2: notice: (17652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1332.046324][T17663] loop1: detected capacity change from 0 to 128 [ 1332.567409][T17671] jffs2: notice: (17671) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1332.770874][T17675] loop7: detected capacity change from 0 to 512 [ 1332.804866][T17663] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1332.903997][T17675] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1332.913633][T17663] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.036879][T17675] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1333.202638][T17675] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3519: bg 0: block 248: padding at end of block bitmap is not set [ 1333.475265][T17675] Quota error (device loop7): write_blk: dquota write failed [ 1333.680271][T17675] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1333.887937][T17675] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.3519: Failed to acquire dquot type 1 [ 1333.946392][T17675] EXT4-fs (loop7): 1 truncate cleaned up [ 1333.952100][T17675] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1333.971543][T17687] loop3: detected capacity change from 0 to 128 [ 1334.023216][T17687] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1334.076473][T17687] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.449746][T17713] loop7: detected capacity change from 0 to 512 [ 1335.580179][T17713] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1335.592626][T17719] loop8: detected capacity change from 0 to 128 [ 1335.658797][T17713] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1335.730269][T17713] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3527: bg 0: block 248: padding at end of block bitmap is not set [ 1335.872942][T17713] Quota error (device loop7): write_blk: dquota write failed [ 1335.906491][T17713] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1335.971578][T17713] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.3527: Failed to acquire dquot type 1 [ 1336.214334][T17713] EXT4-fs (loop7): 1 truncate cleaned up [ 1336.293569][T17719] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1336.414403][T17713] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1336.496515][T17719] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.389842][T17767] loop8: detected capacity change from 0 to 512 [ 1339.477134][T17767] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1339.524010][T17767] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1339.549520][T17767] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3536: bg 0: block 248: padding at end of block bitmap is not set [ 1340.099953][T17767] Quota error (device loop8): write_blk: dquota write failed [ 1340.117796][T17767] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1340.200225][T17767] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.3536: Failed to acquire dquot type 1 [ 1340.290396][T17767] EXT4-fs (loop8): 1 truncate cleaned up [ 1340.299864][T17767] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1342.183989][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1344.611884][T17826] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1344.778643][T17831] Bluetooth: hci0: unsupported parameter 255 [ 1344.800424][T17831] Bluetooth: hci0: unsupported parameter 255 [ 1345.185129][T17819] loop8: detected capacity change from 0 to 512 [ 1345.362487][T17819] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1345.412556][T17819] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1347.541318][T17873] loop1: detected capacity change from 0 to 512 [ 1347.583784][T17873] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1347.642063][T17873] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1347.671367][T17873] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3556: bg 0: block 248: padding at end of block bitmap is not set [ 1347.688601][T17883] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1347.709518][T17873] Quota error (device loop1): write_blk: dquota write failed [ 1347.740664][T17873] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1347.800013][T17873] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3556: Failed to acquire dquot type 1 [ 1347.848201][T17873] EXT4-fs (loop1): 1 truncate cleaned up [ 1347.881811][T17873] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1348.034052][T17887] loop3: detected capacity change from 0 to 512 [ 1348.189580][T17887] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1348.216860][T17890] jffs2: notice: (17890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1348.506484][T17887] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1348.582848][T17887] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3559: bg 0: block 248: padding at end of block bitmap is not set [ 1348.668274][T17887] Quota error (device loop3): write_blk: dquota write failed [ 1348.840136][T17887] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1349.020265][T17887] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3559: Failed to acquire dquot type 1 [ 1349.273509][T17887] EXT4-fs (loop3): 1 truncate cleaned up [ 1349.358484][T17887] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1349.525516][T17906] loop1: detected capacity change from 0 to 512 [ 1349.607631][T17906] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1349.732187][T17906] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1349.804457][T17906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3561: bg 0: block 248: padding at end of block bitmap is not set [ 1349.843089][T17908] jffs2: notice: (17908) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1350.819951][T17906] Quota error (device loop1): write_blk: dquota write failed [ 1350.843988][T17906] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1350.915000][T17906] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3561: Failed to acquire dquot type 1 [ 1350.996899][T17906] EXT4-fs (loop1): 1 truncate cleaned up [ 1351.042477][T17906] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1351.176151][T17922] loop8: detected capacity change from 0 to 32768 [ 1351.313213][T17922] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.3564 (17922) [ 1351.436250][T17922] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1351.446601][T17922] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1351.456594][T17922] BTRFS info (device loop8): use zstd compression, level 3 [ 1351.463885][T17922] BTRFS info (device loop8): force clearing of disk cache [ 1351.471094][T17922] BTRFS info (device loop8): enabling disk space caching [ 1351.478417][T17922] BTRFS info (device loop8): disk space caching is enabled [ 1351.486501][T17922] BTRFS info (device loop8): has skinny extents [ 1351.776164][T17943] loop0: detected capacity change from 0 to 512 [ 1352.271924][T17943] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1352.605779][T17943] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1352.673650][T17922] BTRFS info (device loop8): enabling ssd optimizations [ 1352.688463][T17922] BTRFS info (device loop8): clearing free space tree [ 1352.697710][T17922] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1352.707928][T17922] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1352.750103][T17943] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3566: bg 0: block 248: padding at end of block bitmap is not set [ 1352.909521][T17943] Quota error (device loop0): write_blk: dquota write failed [ 1353.709399][T17943] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1353.849785][T17943] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.3566: Failed to acquire dquot type 1 [ 1355.047029][T17943] EXT4-fs (loop0): 1 truncate cleaned up [ 1355.052746][T17943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1355.129745][T17983] device syzkaller0 entered promiscuous mode [ 1355.417008][T17995] loop0: detected capacity change from 0 to 128 [ 1355.700698][T17995] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1355.711522][T17995] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.650716][T18011] jffs2: notice: (18011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1357.194748][T18022] loop1: detected capacity change from 0 to 128 [ 1357.910802][T18022] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1357.949619][T18022] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.251690][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3579'. [ 1358.549342][T18037] loop3: detected capacity change from 0 to 32768 [ 1358.621684][T18037] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.3580 (18037) [ 1358.718667][T18037] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1358.727615][T18037] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1358.737102][T18037] BTRFS info (device loop3): use zstd compression, level 3 [ 1358.744395][T18037] BTRFS info (device loop3): force clearing of disk cache [ 1358.751545][T18037] BTRFS info (device loop3): enabling disk space caching [ 1358.759398][T18037] BTRFS info (device loop3): disk space caching is enabled [ 1358.766891][T18037] BTRFS info (device loop3): has skinny extents [ 1358.782374][T18050] device syzkaller0 entered promiscuous mode [ 1359.489536][T18037] BTRFS info (device loop3): enabling ssd optimizations [ 1359.499545][T18037] BTRFS info (device loop3): clearing free space tree [ 1359.506445][T18037] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1359.516208][T18037] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1360.689187][T18085] loop8: detected capacity change from 0 to 128 [ 1360.770477][T18091] loop7: detected capacity change from 0 to 128 [ 1360.827162][T18094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1360.836129][T18085] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1360.894675][T18085] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.133644][T18091] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1361.166917][T18091] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.479033][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.495402][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.917032][T18149] loop8: detected capacity change from 0 to 128 [ 1364.860216][T18149] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1364.882430][T18149] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.986289][T18165] loop7: detected capacity change from 0 to 128 [ 1366.422061][T18180] jffs2: notice: (18180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1366.681830][T18165] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1366.733505][T18165] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.314420][T18197] loop8: detected capacity change from 0 to 128 [ 1367.442673][T18197] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1367.455199][T18197] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.320777][T18212] loop1: detected capacity change from 0 to 512 [ 1368.361517][T18215] loop3: detected capacity change from 0 to 512 [ 1368.519521][T18215] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1368.646520][T18215] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1368.676091][T18215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3607: bg 0: block 248: padding at end of block bitmap is not set [ 1368.729479][T18220] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1368.738216][T18220] FAT-fs (loop1): Filesystem has been set read-only [ 1369.277124][T18215] Quota error (device loop3): write_blk: dquota write failed [ 1369.334158][T18215] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1369.347093][T18223] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3608'. [ 1369.394232][T18215] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3607: Failed to acquire dquot type 1 [ 1369.468223][T18226] device syzkaller0 entered promiscuous mode [ 1369.487441][T18215] EXT4-fs (loop3): 1 truncate cleaned up [ 1369.514065][T18215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1369.543270][T18226] tipc: Started in network mode [ 1369.568967][T18226] tipc: Node identity e2c2527fa011, cluster identity 4711 [ 1369.612309][T18226] tipc: Enabled bearer , priority 0 [ 1369.864521][T18225] tipc: Resetting bearer [ 1370.578751][T18225] tipc: Disabling bearer [ 1371.389838][T18239] tipc: Started in network mode [ 1371.450906][T18239] tipc: Node identity 0684aa0ec474, cluster identity 4711 [ 1371.997268][T18239] tipc: Enabled bearer , priority 0 [ 1372.053425][T18238] tipc: Disabling bearer [ 1372.540771][T18262] loop3: detected capacity change from 0 to 32768 [ 1372.637058][T18262] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.3616 (18262) [ 1372.799156][T18262] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1372.808113][T18262] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1372.818548][T18262] BTRFS info (device loop3): use zstd compression, level 3 [ 1372.825865][T18262] BTRFS info (device loop3): force clearing of disk cache [ 1372.833057][T18262] BTRFS info (device loop3): enabling disk space caching [ 1372.840143][T18262] BTRFS info (device loop3): disk space caching is enabled [ 1372.847750][T18262] BTRFS info (device loop3): has skinny extents [ 1373.734977][T18303] loop8: detected capacity change from 0 to 512 [ 1373.779151][T18262] BTRFS info (device loop3): enabling ssd optimizations [ 1373.865114][T18262] BTRFS info (device loop3): clearing free space tree [ 1373.872353][T18262] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1373.882505][T18262] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1373.966675][T18318] loop7: detected capacity change from 0 to 128 [ 1373.986702][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1374.009700][T18303] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1374.133765][T18004] Bluetooth: hci6: command 0x0406 tx timeout [ 1374.223119][T18318] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1374.261037][T18318] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.307208][T18303] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1374.906698][T18303] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3620: bg 0: block 248: padding at end of block bitmap is not set [ 1374.956819][T18303] Quota error (device loop8): write_blk: dquota write failed [ 1375.037713][T18333] overlayfs: failed to resolve './bus': -2 [ 1375.076783][T18303] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1375.337228][T18303] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.3620: Failed to acquire dquot type 1 [ 1375.429257][T18303] EXT4-fs (loop8): 1 truncate cleaned up [ 1375.485184][T18303] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1375.588334][T17960] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (17960) [ 1375.715538][T18341] jffs2: notice: (18341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1376.194896][T18358] loop1: detected capacity change from 0 to 128 [ 1376.353333][T18358] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1376.395323][T18358] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.445603][T18356] loop3: detected capacity change from 0 to 32768 [ 1377.287327][T18365] device syzkaller0 entered promiscuous mode [ 1377.471539][T18356] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1377.480563][T18356] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1377.490134][T18356] BTRFS info (device loop3): use zstd compression, level 3 [ 1377.498385][T18356] BTRFS info (device loop3): force clearing of disk cache [ 1377.505635][T18356] BTRFS info (device loop3): enabling disk space caching [ 1377.512788][T18356] BTRFS info (device loop3): disk space caching is enabled [ 1377.520063][T18356] BTRFS info (device loop3): has skinny extents [ 1377.533771][T18373] tipc: Started in network mode [ 1377.538789][T18373] tipc: Node identity fa1cf1795c47, cluster identity 4711 [ 1377.611551][T18356] BTRFS info (device loop3): enabling ssd optimizations [ 1377.621213][T18356] BTRFS info (device loop3): clearing free space tree [ 1377.628205][T18356] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1377.638004][T18356] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1377.823991][T18373] tipc: Enabled bearer , priority 0 [ 1378.030448][T18363] tipc: Resetting bearer [ 1378.245391][T18363] tipc: Disabling bearer [ 1380.210936][T17960] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (17960) [ 1381.740016][T18017] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1382.573913][T18017] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1382.581537][T18017] usb 8-1: can't read configurations, error -61 [ 1382.864041][T18017] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1383.554069][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1384.042128][T18497] overlayfs: missing 'lowerdir' [ 1385.716353][T18516] loop8: detected capacity change from 0 to 128 [ 1385.843558][T18518] loop3: detected capacity change from 0 to 512 [ 1385.877697][T18516] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1385.895647][T18513] loop0: detected capacity change from 0 to 32768 [ 1385.912705][T18516] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.983472][T18518] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1387.371027][T18518] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1387.828932][T18518] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3649: bg 0: block 248: padding at end of block bitmap is not set [ 1389.333141][T18518] Quota error (device loop3): write_blk: dquota write failed [ 1389.372035][T18518] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1389.383224][T18518] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3649: Failed to acquire dquot type 1 [ 1389.408116][T18518] EXT4-fs (loop3): 1 truncate cleaned up [ 1389.414941][T18518] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1390.955515][T18551] tipc: Started in network mode [ 1390.983795][T18551] tipc: Node identity 4e9cb9f5e63, cluster identity 4711 [ 1391.157393][T18553] loop1: detected capacity change from 0 to 32768 [ 1391.234523][T18551] tipc: Enabled bearer , priority 0 [ 1391.278937][T18550] tipc: Disabling bearer [ 1392.543332][T18570] loop8: detected capacity change from 0 to 32768 [ 1392.816617][T18570] JBD2: Ignoring recovery information on journal [ 1392.825313][T18570] jbd2_journal_bmap: journal block not found at offset 32 on loop8-75 [ 1392.834093][T18570] JBD2: bad block at offset 32 [ 1392.869104][T18570] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1394.451001][T18596] loop7: detected capacity change from 0 to 32768 [ 1395.536497][T12557] ocfs2: Unmounting device (7,8) on (node local) [ 1399.164500][T18634] tipc: Enabled bearer , priority 0 [ 1399.199089][T18633] tipc: Disabling bearer [ 1399.273431][T18637] loop8: detected capacity change from 0 to 128 [ 1399.289018][T18639] loop1: detected capacity change from 0 to 128 [ 1399.444890][T18639] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1399.444900][T18637] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1399.445186][T18637] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.469814][T18639] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.853611][T18650] overlayfs: missing 'lowerdir' [ 1404.880025][T18016] Bluetooth: hci3: command 0x0406 tx timeout [ 1406.097440][T18690] loop8: detected capacity change from 0 to 512 [ 1406.179654][T18690] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1406.233796][ T4259] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1406.397995][T18690] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1406.418662][T18698] jffs2: notice: (18698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1406.446648][T18690] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3685: bg 0: block 248: padding at end of block bitmap is not set [ 1407.237818][T18690] Quota error (device loop8): write_blk: dquota write failed [ 1407.263810][T18690] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1407.315792][T18690] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.3685: Failed to acquire dquot type 1 [ 1407.352451][T18690] EXT4-fs (loop8): 1 truncate cleaned up [ 1407.374224][ T4259] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1407.393817][ T4259] usb 4-1: can't read configurations, error -61 [ 1407.412506][T18690] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1409.000765][ T4259] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1410.005910][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1417.197626][T18771] loop3: detected capacity change from 0 to 32768 [ 1417.329718][T18771] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1417.338875][T18771] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1417.348428][T18771] BTRFS info (device loop3): use zstd compression, level 3 [ 1417.355720][T18771] BTRFS info (device loop3): force clearing of disk cache [ 1417.362840][T18771] BTRFS info (device loop3): enabling disk space caching [ 1417.369917][T18771] BTRFS info (device loop3): disk space caching is enabled [ 1417.377178][T18771] BTRFS info (device loop3): has skinny extents [ 1417.769265][T18789] loop0: detected capacity change from 0 to 32768 [ 1417.901207][T18771] BTRFS info (device loop3): enabling ssd optimizations [ 1417.909745][T18771] BTRFS info (device loop3): clearing free space tree [ 1417.916690][T18771] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1417.926455][T18771] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1418.009229][T18789] JBD2: Ignoring recovery information on journal [ 1418.017359][T18789] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 1418.025634][T18789] JBD2: bad block at offset 32 [ 1418.034791][T18789] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1420.075844][T14086] ocfs2: Unmounting device (7,0) on (node local) [ 1421.784836][ T27] INFO: task syz.4.3353:16716 blocked for more than 144 seconds. [ 1421.792629][ T27] Not tainted syzkaller #0 [ 1421.866551][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1421.875971][ T27] task:syz.4.3353 state:D stack:26672 pid:16716 ppid: 15888 flags:0x00004004 [ 1421.885610][ T27] Call Trace: [ 1421.889061][ T27] [ 1421.892224][ T27] __schedule+0x11c3/0x4350 [ 1421.897934][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1421.909639][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1421.920083][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 1421.929479][ T27] ? lock_chain_count+0x20/0x20 [ 1421.939882][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1421.948200][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1421.994994][ T27] schedule+0x11b/0x1e0 [ 1422.025167][ T27] schedule_preempt_disabled+0xf/0x20 [ 1422.063797][ T27] rwsem_down_read_slowpath+0x53e/0x9b0 [ 1422.069730][ T27] ? down_write_killable_nested+0x90/0x90 [ 1422.107003][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1422.112469][ T27] ? __rwlock_init+0x140/0x140 [ 1422.148565][ T27] ? ksys_sync+0x170/0x170 [ 1422.171614][ T27] down_read+0x96/0x2e0 [ 1422.176160][ T27] ? ksys_sync+0x170/0x170 [ 1422.180627][ T27] iterate_supers+0xa4/0x1d0 [ 1422.230259][ T27] ksys_sync+0x9d/0x170 [ 1422.249392][ T27] ? sync_filesystem+0x220/0x220 [ 1422.273906][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 1422.279960][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1422.323687][ T27] __ia32_sys_sync+0xa/0x10 [ 1422.328271][ T27] do_syscall_64+0x4c/0xa0 [ 1422.332723][ T27] ? clear_bhb_loop+0x30/0x80 [ 1422.363700][ T27] ? clear_bhb_loop+0x30/0x80 [ 1422.368452][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1422.389781][ T27] RIP: 0033:0x7fb7dee13559 [ 1422.406941][ T27] RSP: 002b:00007fb7dd06a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1422.436745][ T27] RAX: ffffffffffffffda RBX: 00007fb7df099fa0 RCX: 00007fb7dee13559 [ 1422.473683][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1422.481835][ T27] RBP: 00007fb7df099fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.492657][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.513727][ T27] R13: 00007fb7df09a038 R14: 00007fb7df099fa0 R15: 00007ffe76cbf308 [ 1422.521802][ T27] [ 1422.555237][ T27] [ 1422.555237][ T27] Showing all locks held in the system: [ 1422.563027][ T27] 1 lock held by khungtaskd/27: [ 1422.569816][T18829] loop3: detected capacity change from 0 to 32768 [ 1422.633694][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1422.643147][ T27] 1 lock held by udevd/3560: [ 1422.693802][ T27] #0: ffff888021001918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x162/0xa50 [ 1422.723757][ T27] 2 locks held by getty/3950: [ 1422.728486][ T27] #0: ffff88814d610098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1422.773146][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 1422.809803][ T27] 1 lock held by syz-executor/11747: [ 1422.821215][ T27] #0: ffff88807d6160e0 (&type->s_umount_key#68){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1422.858566][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.866982][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.913803][ T27] 3 locks held by kworker/u4:16/13523: [ 1422.943465][ T27] 2 locks held by kworker/u4:17/13692: [ 1422.966065][ T27] #0: ffff888017879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1423.005148][ T27] #1: ffffc900012cfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1423.031727][ T27] 1 lock held by syz-executor/15612: [ 1423.043912][ T27] 1 lock held by syz.4.3353/16716: [ 1423.055032][ T27] #0: ffff88807d6160e0 (&type->s_umount_key#68){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 1423.084294][ T27] 3 locks held by kworker/1:10/18007: [ 1423.103591][ T27] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1423.137245][ T27] #1: ffffc9000382fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1423.157607][ T27] #2: ffffffff8d123a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 1423.179045][ T27] 2 locks held by kworker/1:17/18018: [ 1423.187032][ T27] #0: ffff888017872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1423.210054][ T27] #1: ffffc9000400fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1423.226539][ T27] 1 lock held by syz.0.3702/18819: [ 1423.232145][ T27] 2 locks held by syz.3.3701/18829: [ 1423.247393][ T27] #0: ffff888021001918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780 [ 1423.264318][ T27] #1: ffff888021175468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 1423.282665][ T27] 1 lock held by syz.1.3704/18850: [ 1423.289305][ T27] 3 locks held by dhcpcd-run-hook/18849: [ 1423.302251][ T27] [ 1423.306004][ T27] ============================================= [ 1423.306004][ T27] [ 1423.322566][ T27] NMI backtrace for cpu 0 [ 1423.326945][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1423.334169][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1423.344361][ T27] Call Trace: [ 1423.347669][ T27] [ 1423.350629][ T27] dump_stack_lvl+0x188/0x250 [ 1423.355376][ T27] ? show_regs_print_info+0x20/0x20 [ 1423.360629][ T27] ? load_image+0x410/0x410 [ 1423.365198][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 1423.370360][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1423.375343][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1423.381537][ T27] ? _printk+0xda/0x130 [ 1423.385721][ T27] ? load_image+0x410/0x410 [ 1423.390266][ T27] ? load_image+0x410/0x410 [ 1423.394814][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1423.401009][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1423.407036][ T27] watchdog+0xe1b/0xe60 [ 1423.411253][ T27] kthread+0x42e/0x520 [ 1423.415389][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1423.420437][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1423.425062][ T27] ret_from_fork+0x1f/0x30 [ 1423.429543][ T27] [ 1423.433730][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1423.438984][ C1] NMI backtrace for cpu 1 [ 1423.438995][ C1] CPU: 1 PID: 18847 Comm: syz.1.3704 Not tainted syzkaller #0 [ 1423.439012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1423.439021][ C1] RIP: 0010:__lock_acquire+0x60f/0x7d40 [ 1423.439048][ C1] Code: 09 c6 41 09 de 45 09 ee 48 8b 44 24 48 42 0f b6 04 00 84 c0 0f 85 58 14 00 00 44 8b 7d 28 48 8b 84 24 80 00 00 00 44 89 70 20 <48> 8d 58 24 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 4c 8b 6c 24 [ 1423.439114][ C1] RSP: 0018:ffffc9000376ef20 EFLAGS: 00000046 [ 1423.439130][ C1] RAX: ffff88801f524698 RBX: 00000000000000df RCX: 0000000000000000 [ 1423.439141][ C1] RDX: 00000000000000df RSI: 0000000000000000 RDI: ffff88801f5246a0 [ 1423.439151][ C1] RBP: ffffc9000376f168 R08: dffffc0000000000 R09: 0000000000000001 [ 1423.439163][ C1] R10: dffffc0000000000 R11: fffffbfff1cda456 R12: ffff88801f524654 [ 1423.439175][ C1] R13: 0000000000040000 R14: 00000000000c00df R15: 0000000000000000 [ 1423.439185][ C1] FS: 00007fde8af2d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1423.439200][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1423.439211][ C1] CR2: 00007fde8af0bff8 CR3: 00000000332b9000 CR4: 00000000003506e0 [ 1423.439226][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1423.439236][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1423.439245][ C1] Call Trace: [ 1423.439251][ C1] [ 1423.439259][ C1] ? __lock_acquire+0x13b3/0x7d40 [ 1423.439285][ C1] ? rcu_lock_release+0x5/0x20 [ 1423.439332][ C1] ? verify_lock_unused+0x140/0x140 [ 1423.439352][ C1] ? verify_lock_unused+0x140/0x140 [ 1423.439373][ C1] ? psi_task_switch+0x517/0x810 [ 1423.439391][ C1] ? rcu_qs+0xd0/0x170 [ 1423.439407][ C1] lock_acquire+0x19f/0x400 [ 1423.439425][ C1] ? update_curr_rt+0x3ea/0x940 [ 1423.439467][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1423.439486][ C1] ? cgroup_rstat_updated+0xce/0x350 [ 1423.439530][ C1] ? rcu_read_lock_sched_held+0x86/0x110 [ 1423.439570][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1423.439591][ C1] _raw_spin_lock+0x2a/0x40 [ 1423.439606][ C1] ? update_curr_rt+0x3ea/0x940 [ 1423.439622][ C1] update_curr_rt+0x3ea/0x940 [ 1423.439641][ C1] dequeue_task_rt+0x21/0x1b0 [ 1423.439659][ C1] __schedule+0x6cf/0x4350 [ 1423.439676][ C1] ? mark_lock+0x94/0x320 [ 1423.439699][ C1] ? mark_lock+0x94/0x320 [ 1423.439712][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1423.439731][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1423.439754][ C1] schedule+0x11b/0x1e0 [ 1423.439772][ C1] schedule_timeout+0xbd/0x2d0 [ 1423.439790][ C1] ? console_conditional_schedule+0x40/0x40 [ 1423.439810][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1423.439829][ C1] ? rcu_lock_release+0x9/0x20 [ 1423.439874][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1423.439892][ C1] unix_wait_for_peer+0x1f2/0x2e0 [ 1423.439930][ C1] ? unix_find_other+0x840/0x840 [ 1423.439944][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 1423.439960][ C1] ? init_wait_entry+0xd0/0xd0 [ 1423.439977][ C1] ? __rwlock_init+0x140/0x140 [ 1423.439995][ C1] ? bpf_lsm_unix_may_send+0x5/0x10 [ 1423.440051][ C1] unix_dgram_sendmsg+0x115c/0x19c0 [ 1423.440076][ C1] ? unix_dgram_poll+0x680/0x680 [ 1423.440090][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1423.440136][ C1] ? apparmor_socket_sendmsg+0x88/0x230 [ 1423.440174][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1423.440191][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 1423.440231][ C1] ? unix_dgram_poll+0x680/0x680 [ 1423.440247][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 1423.440287][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1423.440304][ C1] ? rcu_is_watching+0x11/0xa0 [ 1423.440320][ C1] ? import_iovec+0x6f/0xa0 [ 1423.440346][ C1] ___sys_sendmsg+0x236/0x2e0 [ 1423.440365][ C1] ? __sys_sendmsg+0x290/0x290 [ 1423.440393][ C1] ? __might_fault+0xb3/0x110 [ 1423.440430][ C1] __sys_sendmmsg+0x2ba/0x500 [ 1423.440448][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 1423.440474][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1423.440494][ C1] ? lock_chain_count+0x20/0x20 [ 1423.440516][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 1423.440538][ C1] do_syscall_64+0x4c/0xa0 [ 1423.440553][ C1] ? clear_bhb_loop+0x30/0x80 [ 1423.440569][ C1] ? clear_bhb_loop+0x30/0x80 [ 1423.440585][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1423.440603][ C1] RIP: 0033:0x7fde8ccd6559 [ 1423.440618][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.440632][ C1] RSP: 002b:00007fde8af2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1423.440648][ C1] RAX: ffffffffffffffda RBX: 00007fde8cf5cfa0 RCX: 00007fde8ccd6559 [ 1423.440659][ C1] RDX: 0000000000000318 RSI: 00002000000008c0 RDI: 0000000000000005 [ 1423.440670][ C1] RBP: 00007fde8cd6db20 R08: 0000000000000000 R09: 0000000000000000 [ 1423.440680][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.440690][ C1] R13: 00007fde8cf5d038 R14: 00007fde8cf5cfa0 R15: 00007ffe9b23fdb8 [ 1423.440708][ C1] [ 1424.106115][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1424.113016][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1424.120237][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1424.130318][ T27] Call Trace: [ 1424.133618][ T27] [ 1424.136574][ T27] dump_stack_lvl+0x188/0x250 [ 1424.141291][ T27] ? show_regs_print_info+0x20/0x20 [ 1424.146522][ T27] ? load_image+0x410/0x410 [ 1424.151075][ T27] panic+0x2f8/0x850 [ 1424.155001][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1424.160671][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1424.165203][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1424.170887][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 1424.177076][ T27] watchdog+0xe5a/0xe60 [ 1424.181279][ T27] kthread+0x42e/0x520 [ 1424.185370][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1424.190419][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1424.195047][ T27] ret_from_fork+0x1f/0x30 [ 1424.199509][ T27] [ 1424.202689][ T27] Kernel Offset: disabled [ 1424.207072][ T27] Rebooting in 86400 seconds..