last executing test programs: 9m32.511949992s ago: executing program 1 (id=70): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000480)={&(0x7f00000002c0)=""/201, 0xc9}) 9m30.104397965s ago: executing program 1 (id=75): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r3, 0x1}}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) mkdir(&(0x7f0000000040)='.\x00', 0x9a) 9m27.238704972s ago: executing program 1 (id=76): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 9m26.870726984s ago: executing program 2 (id=78): r0 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000080)={r2, 0x2}, 0x8) 9m26.01924415s ago: executing program 2 (id=80): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000080)={r3, 0x2}, 0x8) 9m25.943216506s ago: executing program 1 (id=81): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 9m24.328020717s ago: executing program 2 (id=83): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040040) mmap(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x2000004, 0x2010, 0xffffffffffffffff, 0xf0149000) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004004) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0}) 9m21.951886268s ago: executing program 2 (id=86): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x80000000) 9m21.76085835s ago: executing program 1 (id=87): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x10c}}, 0x40) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x7, 0x9}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x4, 0xf, 0xff, 0x9}, 0x11f, &(0x7f0000000080)={0x5, 0xf, 0x11f, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf8, 0x4, 0x200}, @generic={0xf5, 0x10, 0x3, "781b524b96d1ee25ba1dbbba435b900895940d51c2121b69b3a0118517602b9609348a6206fbc92320e5464a9d1a5a28bba6f2ae5530f69a82e49759b43cf1006d650cbe2aea70f817a8a41930cb6252b658866fe92109b54ce2c695864b71d5165d9c3873725b0cfaceedd8a95093d1ee9df49e63aa772543d9eb85e91f2d621100450e5fa5361115e0aab56bd2c38a5f4d02ea8fe1ed0e51aa0e38dd0a2e1faa6e87307baa9040017a925554cfac5ead99ab97394ea6195f0daa7cf8b5b35c83eeedd2fc00099abb6e245a3ceff4eb330720d918913f711243402ecc989ca75780bb8e443111d6ed21d49a21ee1420c54a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x7, 0xb57}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d26f7713fdaff1cfd93658a07bb63407"}]}, 0x6, [{0x20, &(0x7f0000000240)=@string={0x20, 0x3, "1aaa334c7edd53539ba9fd7242518c82d0135d8467ffac99d4ca1a8585be"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x401}}, {0xb2, &(0x7f00000002c0)=@string={0xb2, 0x3, "b7c5d6c3f3dedd7a5960cfeba822504091a565c10cc307a82fec582e1483b420f947094586cc33653aaef0756774770da021347f4aac2ad59b40d2d29ef0b07f9142fe9d94ad3adead0c523faa751183d061befc280b917f64f9d4be408c255d77f54f1fbad75b31177cdd2ebeb804b70a104b358be9dfaa8e2330c5927867dc8270b639836652ac8926c45e2197573ffe7d6d11b08b1c1560db8db05e50054192a03df2c3b86e4a9961f26f60ac658e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x480a}}, {0xc2, &(0x7f00000003c0)=@string={0xc2, 0x3, "417b34eb1e47f339cb96e61720deea7f7f262213b02cac3485aa8589818dd7649fa27e0f51609420f79bbdf05b6df001384612e7038fded35c5bb2978774b4d3e70dc81346715c745e2825768b74d291c864981ebeee09116d94e2039798151a1347382ae5d59ef728d4282dba4840716f8e4019bd5584a90f404ff0544a80f88d8fc29d33b392d089af4146adb9329a860e8ff01ee49d00298805a651865126830a0cc8c8dc56d0a71d32c1dd612b8e5a0ab2623bbb142ec29116e356ff0454"}}, {0x4e, &(0x7f0000000500)=@string={0x4e, 0x3, "132770a7d319f4de3c2f981dfaf62f916f0c35c536cb9f80d38f0344bc6f1a0e46b74c854d16eaf69bc5ce0530373f2666d11c226428ac93dd7c428b22265b33ad4e9a1701123d0554c92bf8"}}]}) 9m21.697765394s ago: executing program 2 (id=88): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x800, 0x11) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50) socket$inet(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 9m20.575076267s ago: executing program 2 (id=90): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './control\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x10006576, 0x3}) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x1b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x22, 0x97, 0x1, 0x20, 0x90a, 0x1001, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40, 0xa}}]}}, 0x0) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5) fanotify_init(0x40, 0x1) 9m18.758895671s ago: executing program 1 (id=95): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0xfc5f}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(r0, &(0x7f0000000540)=@tipc=@id, 0x0, 0x80000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) mremap(&(0x7f0000845000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$sndpcmc(0x0, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0x1, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x4, 0xfffffffd}, {0xffffff78, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) semget(0x3, 0x2, 0x10) 9m17.187643951s ago: executing program 32 (id=95): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0xfc5f}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(r0, &(0x7f0000000540)=@tipc=@id, 0x0, 0x80000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) mremap(&(0x7f0000845000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$sndpcmc(0x0, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0x1, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x4, 0xfffffffd}, {0xffffff78, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) semget(0x3, 0x2, 0x10) 9m5.045390453s ago: executing program 33 (id=90): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './control\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x10006576, 0x3}) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x1b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x22, 0x97, 0x1, 0x20, 0x90a, 0x1001, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40, 0xa}}]}}, 0x0) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5) fanotify_init(0x40, 0x1) 7m33.629204533s ago: executing program 0 (id=283): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file0\x00', 0x2208800, &(0x7f0000000a40)={[{@prjquota}, {@logbufs}, {@filestreams}, {@filestreams}, {@nogrpid}, {@uquota}]}, 0x4, 0x96bf, &(0x7f0000009680)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) 7m28.463709708s ago: executing program 0 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 7m26.24001433s ago: executing program 0 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 7m24.303007713s ago: executing program 0 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 7m23.128070582s ago: executing program 0 (id=310): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) syz_usb_disconnect(0xffffffffffffffff) ptrace(0x4207, r0) 7m20.827878779s ago: executing program 0 (id=314): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) gettid() r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ptrace(0x10, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000340)) 7m19.188735258s ago: executing program 34 (id=314): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) gettid() r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ptrace(0x10, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000340)) 6m47.157450908s ago: executing program 7 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0x100, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x7, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0x85, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x4, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x21, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x5, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0xffffffff, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x1, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xdc, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 6m45.904738103s ago: executing program 7 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x17, &(0x7f0000000000), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/121, 0x79}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x40000020, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020601080000000014"], 0x24}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0603d06, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) 6m36.568160938s ago: executing program 7 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) 6m35.120793091s ago: executing program 7 (id=411): socket$netlink(0x10, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000240)=""/152, 0xef, 0x0, 0x1, 0x2}}, 0xffffffffffffff30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000740)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x4) 6m32.342989676s ago: executing program 7 (id=415): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001640), 0x81, 0x0) 6m31.7152433s ago: executing program 7 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x17, &(0x7f0000000000), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/121, 0x79}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x40000020, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020601080000000014"], 0x24}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0603d06, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) 6m16.48142708s ago: executing program 35 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x17, &(0x7f0000000000), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/121, 0x79}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x40000020, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020601080000000014"], 0x24}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0603d06, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) 21.778549039s ago: executing program 8 (id=1121): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r3) 21.683974319s ago: executing program 9 (id=1122): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 21.022374445s ago: executing program 9 (id=1126): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.861528795s ago: executing program 6 (id=1127): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000)={[{@noblock_validity}]}, 0x1, 0x49a, &(0x7f0000000cc0)="$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") ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x20000000) r5 = semget$private(0x0, 0x0, 0x24) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000006600)) semctl$SETVAL(r5, 0x2, 0x10, &(0x7f0000000080)=0x5) 19.622772143s ago: executing program 9 (id=1129): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x9, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 17.455284581s ago: executing program 6 (id=1131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap$snddsp_control(&(0x7f000073b000/0x4000)=nil, 0x1000, 0x200000a, 0x110, r4, 0x83000000) ftruncate(r4, 0x2000009) write$binfmt_script(r4, &(0x7f0000000140), 0xfcb8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getpid() 17.156026316s ago: executing program 3 (id=1133): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x0) 16.977884613s ago: executing program 4 (id=1134): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) 14.483938301s ago: executing program 6 (id=1135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 14.203891388s ago: executing program 8 (id=1137): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x35) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 13.895899729s ago: executing program 3 (id=1138): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r4, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 12.832095126s ago: executing program 9 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x97d1f000) getdents64(r4, &(0x7f0000000080)=""/234, 0xea) 11.73181807s ago: executing program 3 (id=1141): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.566241327s ago: executing program 5 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 11.391698909s ago: executing program 6 (id=1143): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000)={[{@noblock_validity}]}, 0x1, 0x49a, &(0x7f0000000cc0)="$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") ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x20000000) r6 = semget$private(0x0, 0x0, 0x24) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000006600)) semctl$SETVAL(r6, 0x2, 0x10, &(0x7f0000000080)=0x5) 10.823792522s ago: executing program 8 (id=1144): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') listen(0xffffffffffffffff, 0x1) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 10.81314757s ago: executing program 9 (id=1145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0x100, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x7, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0x85, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x4, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x21, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x5, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0xffffffff, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x1, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xdc, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 10.205442941s ago: executing program 3 (id=1146): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 9.368656042s ago: executing program 4 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 9.367979174s ago: executing program 5 (id=1148): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r3, &(0x7f0000019080)={0x2020}, 0x2020) 7.598587363s ago: executing program 5 (id=1149): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x1, 0x1000) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) msgctl$IPC_RMID(r4, 0x0) 7.299741395s ago: executing program 8 (id=1150): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x0) 6.89044314s ago: executing program 6 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) 6.492614798s ago: executing program 4 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}, 0x50}}, 0x0) 4.485804512s ago: executing program 5 (id=1153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0xba}]}, 0x6d}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 4.383146025s ago: executing program 8 (id=1154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 3.875771301s ago: executing program 9 (id=1155): r0 = syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x80, &(0x7f0000003280)=ANY=[@ANYRESOCT], 0x1, 0xdc0, &(0x7f0000000e00)="$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") socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x80000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbc457000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x40) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xc4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000000100)='-1\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.844351993s ago: executing program 3 (id=1156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x3) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x400001}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4072, 0xfe8}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0xc}], 0x6, 0x40000020, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 3.725195753s ago: executing program 5 (id=1157): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x35) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3.382583763s ago: executing program 4 (id=1158): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.501694634s ago: executing program 3 (id=1159): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) 2.062516384s ago: executing program 8 (id=1160): sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x8401) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1.285744114s ago: executing program 4 (id=1161): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r3, &(0x7f0000019080)={0x2020}, 0x2020) 1.087799096s ago: executing program 5 (id=1162): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x5, 0x5, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x86, 0xfff, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 227.537675ms ago: executing program 6 (id=1163): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000)={[{@noblock_validity}]}, 0x1, 0x49a, &(0x7f0000000cc0)="$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") ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x20000000) r6 = semget$private(0x0, 0x0, 0x24) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000006600)) semctl$SETVAL(r6, 0x2, 0x10, &(0x7f0000000080)=0x5) 0s ago: executing program 4 (id=1164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap$snddsp_control(&(0x7f000073b000/0x4000)=nil, 0x1000, 0x200000a, 0x110, r0, 0x83000000) ftruncate(r0, 0x2000009) write$binfmt_script(r0, &(0x7f0000000140), 0xfcb8) kernel console output (not intermixed with test programs): face with an up link [ 436.918299][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.950434][ T8676] loop3: detected capacity change from 0 to 32768 [ 437.008074][ T8676] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.576 (8676) [ 437.140486][ T8676] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 437.168984][ T8676] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 437.279592][ T8508] team0: Port device team_slave_0 added [ 437.300255][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.335802][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.431211][ T8676] BTRFS info (device loop3): rebuilding free space tree [ 437.434168][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.491125][ T8676] BTRFS info (device loop3): disabling free space tree [ 437.498297][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.508789][ T8676] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 437.515955][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.548172][ T8676] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 437.609888][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.694158][ T8508] team0: Port device team_slave_1 added [ 437.766388][ T5831] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 437.836260][ T13] bridge_slave_1: left allmulticast mode [ 437.900908][ T13] bridge_slave_1: left promiscuous mode [ 437.940171][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.005987][ T13] bridge_slave_0: left allmulticast mode [ 438.038436][ T13] bridge_slave_0: left promiscuous mode [ 438.060012][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.125104][ T13] bridge_slave_1: left allmulticast mode [ 438.404474][ T13] bridge_slave_1: left promiscuous mode [ 438.423503][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.432774][ T8710] binder_alloc: 8709: binder_alloc_buf, no vma [ 438.750999][ T13] bridge_slave_0: left allmulticast mode [ 438.770364][ T13] bridge_slave_0: left promiscuous mode [ 438.776149][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.043490][ T8689] loop6: detected capacity change from 0 to 65536 [ 439.212526][ T8689] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 439.467320][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.512435][ T8689] XFS (loop6): Ending clean mount [ 439.617400][ T8689] XFS (loop6): Quotacheck needed: Please wait. [ 439.640738][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.656836][ T8728] loop3: detected capacity change from 0 to 64 [ 439.780083][ T13] bond0 (unregistering): Released all slaves [ 439.816716][ T8689] XFS (loop6): Quotacheck: Done. [ 440.222357][ T6830] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 440.747111][ T8737] fuse: Unknown parameter 'user_id00000000000000000000' [ 440.874098][ T8734] loop3: detected capacity change from 0 to 32768 [ 441.045214][ T8734] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 441.045271][ T8734] allowing incompatible features above 0.0: (unknown version) [ 441.045294][ T8734] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 441.094194][ T8734] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 441.102899][ T8734] bcachefs (loop3): initializing new filesystem [ 441.105132][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.121575][ T8734] bcachefs (loop3): going read-write [ 441.186886][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.208583][ T8734] bcachefs (loop3): marking superblocks [ 441.225437][ T8734] bcachefs (loop3): initializing freespace [ 441.236435][ T8734] bcachefs (loop3): done initializing freespace [ 441.246316][ T8734] bcachefs (loop3): reading snapshots table [ 441.252432][ T8734] bcachefs (loop3): reading snapshots done [ 441.343005][ T8734] bcachefs (loop3): done starting filesystem [ 441.364283][ T13] bond0 (unregistering): Released all slaves [ 441.558080][ T5831] bcachefs (loop3): shutting down [ 441.599320][ T5831] bcachefs (loop3): going read-only [ 441.617518][ T5831] bcachefs (loop3): finished waiting for writes to stop [ 441.646473][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.654942][ T5831] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 441.848702][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.937622][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.475900][ T8751] Can't find ip_set type hash:ip,por [ 442.526112][ T5831] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 442.567588][ T5831] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 442.616039][ T5831] bcachefs (loop3): marking filesystem clean [ 442.821334][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.828360][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.875425][ T5831] bcachefs (loop3): shutdown complete [ 442.949885][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.358559][ T8760] syz.6.587: attempt to access beyond end of device [ 443.358559][ T8760] loop6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 443.372027][ T8760] gfs2: error -5 reading superblock [ 443.694150][ T13] hsr_slave_0: left promiscuous mode [ 444.282908][ T13] hsr_slave_1: left promiscuous mode [ 444.306864][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.351041][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.418979][ T13] hsr_slave_0: left promiscuous mode [ 444.440557][ T8771] binder_alloc: 8766: binder_alloc_buf, no vma [ 444.451806][ T13] hsr_slave_1: left promiscuous mode [ 444.471061][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.515089][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.457733][ T8777] loop6: detected capacity change from 0 to 64 [ 447.281041][ T13] team0 (unregistering): Port device team_slave_1 removed [ 447.575645][ T8796] fuse: Unknown parameter 'user_id00000000000000000000' [ 447.618268][ T13] team0 (unregistering): Port device team_slave_0 removed [ 447.744137][ T8799] loop4: detected capacity change from 0 to 2048 [ 447.765888][ T8799] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 447.825938][ T8799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.384852][ T13] team0 (unregistering): Port device team_slave_1 removed [ 449.444659][ T13] team0 (unregistering): Port device team_slave_0 removed [ 449.568181][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.952850][ T8522] hsr_slave_0: entered promiscuous mode [ 449.975710][ T8522] hsr_slave_1: entered promiscuous mode [ 449.989507][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.997630][ T8522] Cannot create hsr debugfs directory [ 451.663965][ T8820] binder_alloc: 8816: binder_alloc_buf, no vma [ 451.868729][ T8508] hsr_slave_0: entered promiscuous mode [ 451.938301][ T8508] hsr_slave_1: entered promiscuous mode [ 451.955257][ T8810] loop3: detected capacity change from 0 to 32768 [ 451.983184][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.042735][ T8508] Cannot create hsr debugfs directory [ 452.209877][ T8810] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.591 (8810) [ 452.821310][ T8824] loop4: detected capacity change from 0 to 64 [ 454.349634][ T8839] loop4: detected capacity change from 0 to 64 [ 455.326643][ T8848] fuse: Bad value for 'fd' [ 457.816554][ T8870] loop4: detected capacity change from 0 to 512 [ 457.844295][ T8870] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.622: corrupted in-inode xattr: bad e_name length [ 457.949040][ T8870] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.622: couldn't read orphan inode 15 (err -117) [ 458.066229][ T8870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.088422][ T8875] loop3: detected capacity change from 0 to 2048 [ 458.189891][ T8875] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 458.233714][ T8875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.327284][ T8881] EXT4-fs warning (device loop4): dx_probe:859: inode #2: comm syz.4.622: dx entry: limit 0 != root limit 125 [ 459.340145][ T8881] EXT4-fs warning (device loop4): dx_probe:933: inode #2: comm syz.4.622: Corrupt directory, running e2fsck is recommended [ 459.354141][ T8881] EXT4-fs warning (device loop4): dx_probe:859: inode #2: comm syz.4.622: dx entry: limit 0 != root limit 125 [ 459.368250][ T8881] EXT4-fs warning (device loop4): dx_probe:933: inode #2: comm syz.4.622: Corrupt directory, running e2fsck is recommended [ 459.563987][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.626'. [ 460.907178][ T8886] bridge2: port 1(veth5) entered blocking state [ 460.909320][ T8891] loop3: detected capacity change from 0 to 64 [ 460.930662][ T8886] bridge2: port 1(veth5) entered disabled state [ 460.937282][ T8886] veth5: entered allmulticast mode [ 461.019991][ T8886] veth5: entered promiscuous mode [ 461.194600][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.236716][ T8887] vlan2: entered allmulticast mode [ 461.305726][ T8887] veth1: entered allmulticast mode [ 461.531860][ T8894] loop6: detected capacity change from 0 to 512 [ 461.592373][ T8894] EXT4-fs: Ignoring removed i_version option [ 461.777998][ T8522] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 461.800304][ T8522] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 461.865164][ T8522] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 461.890164][ T8894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.947279][ T8902] fuse: Bad value for 'fd' [ 461.957195][ T8522] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 461.985496][ T8894] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.651223][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.103877][ T8508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 463.225169][ T8918] binder_alloc: 8913: binder_alloc_buf, no vma [ 464.231185][ T8508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.713658][ T8928] loop4: detected capacity change from 0 to 2048 [ 464.728082][ T8508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 464.739548][ T8928] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 465.347941][ T8928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.422853][ T8508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 465.946479][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.998147][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.640'. [ 466.090718][ T8946] loop3: detected capacity change from 0 to 2048 [ 466.116116][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 466.157171][ T8946] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 466.170820][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 466.208393][ T8946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.408964][ T8954] loop5: detected capacity change from 0 to 64 [ 466.431377][ T8951] bridge6: port 1(veth5) entered blocking state [ 466.478017][ T8951] bridge6: port 1(veth5) entered disabled state [ 466.492001][ T8951] veth5: entered allmulticast mode [ 466.506213][ T8951] veth5: entered promiscuous mode [ 466.867558][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.013020][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.020284][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.141464][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.148693][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.168114][ T8962] fuse: Bad value for 'fd' [ 467.303636][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.412751][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.560465][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.567660][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.774593][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.781802][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.123192][ T8970] binder_alloc: 8965: binder_alloc_buf, no vma [ 469.908142][ T8960] loop3: detected capacity change from 0 to 40427 [ 469.956223][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.048640][ T8993] loop5: detected capacity change from 0 to 2048 [ 470.094515][ T8960] F2FS-fs (loop3): invalid crc value [ 470.118880][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.150599][ T8960] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 470.188566][ T8993] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 470.258776][ T8993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.266574][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 472.337848][ T9017] loop5: detected capacity change from 0 to 512 [ 472.568570][ T9017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.629331][ T9019] bridge4: port 1(veth9) entered blocking state [ 472.653914][ T9025] fuse: Unknown parameter '0x0000000000000003' [ 472.668490][ T9017] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.686084][ T9019] bridge4: port 1(veth9) entered disabled state [ 472.692892][ T9019] veth9: entered allmulticast mode [ 472.709325][ T9019] veth9: entered promiscuous mode [ 472.723239][ T9017] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.653: corrupted inode contents [ 472.779763][ T9017] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.653: mark_inode_dirty error [ 472.862375][ T9017] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.653: corrupted inode contents [ 473.075192][ T9017] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.653: mark_inode_dirty error [ 473.769965][ T8522] veth0_vlan: entered promiscuous mode [ 473.809579][ T8522] veth1_vlan: entered promiscuous mode [ 474.004726][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.036050][ T8522] veth0_macvtap: entered promiscuous mode [ 474.133103][ T8522] veth1_macvtap: entered promiscuous mode [ 474.273546][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.335587][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.393236][ T8522] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.439043][ T8522] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.479080][ T8522] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.699901][ T8522] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.732178][ T9054] binder_alloc: 9052: binder_alloc_buf, no vma [ 474.815430][ T9056] loop4: detected capacity change from 0 to 64 [ 475.338970][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.400228][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.497675][ T9038] loop6: detected capacity change from 0 to 32768 [ 475.551652][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.569876][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.579293][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.591922][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.602755][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.226339][ T9038] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 476.226405][ T9038] allowing incompatible features above 0.0: (unknown version) [ 476.226434][ T9038] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 476.669843][ T9038] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 476.694580][ T9038] bcachefs (loop6): initializing new filesystem [ 477.255187][ T9038] syz.6.656: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 477.409900][ T9038] CPU: 0 UID: 0 PID: 9038 Comm: syz.6.656 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 477.409962][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.409989][ T9038] Call Trace: [ 477.410002][ T9038] [ 477.410018][ T9038] dump_stack_lvl+0x16c/0x1f0 [ 477.410105][ T9038] warn_alloc+0x248/0x3a0 [ 477.410156][ T9038] ? __pfx_warn_alloc+0x10/0x10 [ 477.410221][ T9038] ? bch2_fs_journal_start+0x2ce/0x1390 [ 477.410268][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.410323][ T9038] ? __vmalloc_node_noprof+0xad/0xf0 [ 477.410405][ T9038] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 477.410492][ T9038] ? bch2_fs_journal_start+0x2ce/0x1390 [ 477.410548][ T9038] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 477.410619][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.410669][ T9038] ? __alloc_pages_noprof+0xb/0x1b0 [ 477.410714][ T9038] ? ___kmalloc_large_node+0x84/0x1e0 [ 477.410784][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.410842][ T9038] __kvmalloc_node_noprof+0x30a/0x620 [ 477.410888][ T9038] ? bch2_fs_journal_start+0x2ce/0x1390 [ 477.410933][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.410986][ T9038] ? bch2_fs_journal_start+0x2ce/0x1390 [ 477.411038][ T9038] ? bch2_fs_journal_start+0x2ce/0x1390 [ 477.411085][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.411135][ T9038] bch2_fs_journal_start+0x2ce/0x1390 [ 477.411185][ T9038] ? bch2_trans_put+0x86c/0x10d0 [ 477.411260][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.411314][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.411364][ T9038] ? find_held_lock+0x2b/0x80 [ 477.411419][ T9038] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 477.411465][ T9038] ? enumerated_ref_put+0xc3/0x270 [ 477.411512][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.411562][ T9038] ? bch2_fs_journal_alloc+0x3f6/0x5e0 [ 477.411615][ T9038] bch2_fs_initialize+0xd99/0x25b0 [ 477.411688][ T9038] ? __entry_text_end+0x1020b5/0x1020b9 [ 477.411754][ T9038] ? __pfx_bch2_fs_initialize+0x10/0x10 [ 477.411813][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.411867][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.411921][ T9038] ? rcu_is_watching+0x12/0xc0 [ 477.412006][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412088][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412137][ T9038] ? __lock_acquire+0xb8a/0x1c90 [ 477.412280][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412330][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412381][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412442][ T9038] ? bch2_fs_start+0xf50/0x1410 [ 477.412483][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412531][ T9038] bch2_fs_start+0xf50/0x1410 [ 477.412592][ T9038] bch2_fs_get_tree+0xda6/0x1b10 [ 477.412661][ T9038] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 477.412715][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412798][ T9038] ? __pfx_aa_get_newest_label+0x10/0x10 [ 477.412843][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.412906][ T9038] ? trace_cap_capable+0x18d/0x200 [ 477.412984][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.413034][ T9038] ? apparmor_capable+0x114/0x1d0 [ 477.413075][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.413131][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.413190][ T9038] vfs_get_tree+0x8e/0x340 [ 477.413262][ T9038] path_mount+0x1414/0x2020 [ 477.413323][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.413371][ T9038] ? kmem_cache_free+0x2d1/0x4d0 [ 477.413414][ T9038] ? __pfx_path_mount+0x10/0x10 [ 477.413477][ T9038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.413526][ T9038] ? putname+0x154/0x1a0 [ 477.413593][ T9038] __x64_sys_mount+0x28d/0x310 [ 477.413654][ T9038] ? __pfx___x64_sys_mount+0x10/0x10 [ 477.413728][ T9038] do_syscall_64+0xcd/0x4c0 [ 477.413770][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.413812][ T9038] RIP: 0033:0x7f00689900ca [ 477.413844][ T9038] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.413886][ T9038] RSP: 002b:00007f0069860e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 477.413933][ T9038] RAX: ffffffffffffffda RBX: 00007f0069860ef0 RCX: 00007f00689900ca [ 477.413961][ T9038] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00007f0069860eb0 [ 477.413988][ T9038] RBP: 0000200000000140 R08: 00007f0069860ef0 R09: 0000000002800000 [ 477.414015][ T9038] R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000100 [ 477.414042][ T9038] R13: 00007f0069860eb0 R14: 0000000000005a7a R15: 0000200000000340 [ 477.414094][ T9038] [ 477.906598][ T9085] loop3: detected capacity change from 0 to 2048 [ 477.912950][ T5847] Bluetooth: hci2: command tx timeout [ 477.920966][ T9038] Mem-Info: [ 477.924180][ T9038] active_anon:16349 inactive_anon:0 isolated_anon:0 [ 477.924180][ T9038] active_file:1868 inactive_file:40101 isolated_file:0 [ 477.924180][ T9038] unevictable:768 dirty:108 writeback:0 [ 477.924180][ T9038] slab_reclaimable:10940 slab_unreclaimable:106551 [ 477.924180][ T9038] mapped:33474 shmem:10358 pagetables:1368 [ 477.924180][ T9038] sec_pagetables:0 bounce:0 [ 477.924180][ T9038] kernel_misc_reclaimable:0 [ 477.924180][ T9038] free:1289675 free_pcp:10543 free_cma:0 [ 477.970510][ T9038] Node 0 active_anon:59996kB inactive_anon:0kB active_file:7420kB inactive_file:160204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133872kB dirty:432kB writeback:0kB shmem:34696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12636kB pagetables:5372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 478.004467][ T9038] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 478.036294][ T9038] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.065392][ T9038] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 478.071906][ T9038] Node 0 DMA32 free:1240480kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54352kB inactive_anon:0kB active_file:7420kB inactive_file:158896kB unevictable:1536kB writepending:432kB present:3129332kB managed:2540756kB mlocked:0kB bounce:0kB free_pcp:36776kB local_pcp:9324kB free_cma:0kB [ 478.104983][ T9038] lowmem_reserve[]: 0 0 1 1 1 [ 478.110293][ T9038] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 478.140091][ T9038] lowmem_reserve[]: 0 0 0 0 0 [ 478.144913][ T9038] Node 1 Normal free:3902840kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15748kB local_pcp:9568kB free_cma:0kB [ 478.175070][ T9085] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 478.183383][ T9038] lowmem_reserve[]: 0 0 0 0 0 [ 478.194783][ T9038] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 478.209771][ T9038] Node 0 DMA32: 122*4kB (UM) 167*8kB (UM) 260*16kB (UME) 524*32kB (UM) 356*64kB (UME) 183*128kB (UME) 130*256kB (UME) 49*512kB (UME) 61*1024kB (UME) 5*2048kB (UM) 254*4096kB (M) = 1240416kB [ 478.230395][ T9038] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 478.243534][ T9038] Node 1 Normal: 174*4kB (UE) 60*8kB (UME) 42*16kB (UME) 150*32kB (UME) 48*64kB (UME) 11*128kB (UME) 4*256kB (UME) 7*512kB (UME) 2*1024kB (M) 3*2048kB (UME) 947*4096kB (M) = 3902840kB [ 478.262943][ T9038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.272640][ T9038] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.282733][ T9038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.292403][ T9038] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.301846][ T9038] 49663 total pagecache pages [ 478.306550][ T9038] 0 pages in swap cache [ 478.310796][ T9038] Free swap = 124996kB [ 478.314976][ T9038] Total swap = 124996kB [ 478.319156][ T9038] 2097051 pages RAM [ 478.323084][ T9038] 0 pages HighMem/MovableOnly [ 478.327782][ T9038] 429884 pages reserved [ 478.332040][ T9038] 0 pages cma reserved [ 478.346566][ T9038] bcachefs (loop6): error reallocating journal fifo (32768 open entries) [ 478.415021][ T9038] bcachefs (loop6): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo [ 478.483970][ T9038] bcachefs (loop6): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 478.501439][ T9085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.603466][ T9038] bcachefs (loop6): shutting down [ 478.744503][ T9038] bcachefs (loop6): shutdown complete [ 478.891509][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.903052][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.012025][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.039153][ T9092] syz.4.664: attempt to access beyond end of device [ 479.039153][ T9092] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 479.052535][ T9092] gfs2: error -5 reading superblock [ 479.065736][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.078446][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.665557][ T9096] fuse: Unknown parameter '0x0000000000000003' [ 479.686526][ T9099] loop4: detected capacity change from 0 to 16 [ 479.736759][ T9099] erofs (device loop4): mounted with root inode @ nid 36. [ 479.961495][ T5843] Bluetooth: hci2: command tx timeout [ 481.190671][ T5843] Bluetooth: hci3: command tx timeout [ 481.707149][ T9061] chnl_net:caif_netlink_parms(): no params data found [ 481.715938][ T9115] binder_alloc: 9109: binder_alloc_buf, no vma [ 481.798567][ T9102] loop3: detected capacity change from 0 to 32768 [ 481.834571][ T9102] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.668 (9102) [ 481.983146][ T9102] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 482.002658][ T9102] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 482.012169][ T9102] BTRFS info (device loop3): disk space caching is enabled [ 482.019443][ T9102] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 482.049864][ T5843] Bluetooth: hci2: command tx timeout [ 482.104071][ T9124] loop5: detected capacity change from 0 to 64 [ 482.430383][ T9102] BTRFS info (device loop3): rebuilding free space tree [ 482.609125][ T9102] BTRFS info (device loop3): disabling free space tree [ 482.650241][ T9102] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 482.665715][ T9102] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 483.244579][ T5843] Bluetooth: hci3: command tx timeout [ 483.257732][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.273521][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.281861][ T9061] bridge_slave_0: entered allmulticast mode [ 483.306190][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 483.412482][ T9061] bridge_slave_0: entered promiscuous mode [ 483.455648][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.501448][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.529126][ T9061] bridge_slave_1: entered allmulticast mode [ 483.577271][ T9061] bridge_slave_1: entered promiscuous mode [ 483.981985][ T9038] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 484.026911][ T9061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.084681][ T9061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.123221][ T5843] Bluetooth: hci2: command tx timeout [ 484.468090][ T9155] loop3: detected capacity change from 0 to 2048 [ 484.488233][ T9157] loop5: detected capacity change from 0 to 512 [ 484.598661][ T9155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.622995][ T9087] chnl_net:caif_netlink_parms(): no params data found [ 484.638954][ T9157] EXT4-fs error (device loop5): ext4_iget_extra_inode:5034: inode #15: comm syz.5.677: corrupted in-inode xattr: bad e_name length [ 484.777496][ T9061] team0: Port device team_slave_0 added [ 484.822251][ T9061] team0: Port device team_slave_1 added [ 484.829397][ T37] bridge_slave_1: left allmulticast mode [ 484.839725][ T37] bridge_slave_1: left promiscuous mode [ 484.845611][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.891680][ T9157] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.677: couldn't read orphan inode 15 (err -117) [ 484.966533][ T37] bridge_slave_0: left allmulticast mode [ 484.983162][ T9157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.019929][ T37] bridge_slave_0: left promiscuous mode [ 485.025782][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.481407][ T5843] Bluetooth: hci3: command tx timeout [ 486.761153][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.472721][ T9176] loop3: detected capacity change from 0 to 512 [ 487.480030][ T9178] loop4: detected capacity change from 0 to 64 [ 487.504805][ T9176] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 487.699838][ T5843] Bluetooth: hci3: command tx timeout [ 488.517679][ T30] audit: type=1800 audit(1751117996.425:10): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.683" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 489.889312][ T9176] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 490.904270][ T9208] loop6: detected capacity change from 0 to 512 [ 491.005000][ T9208] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.690: corrupted in-inode xattr: bad e_name length [ 491.040496][ T9208] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.690: couldn't read orphan inode 15 (err -117) [ 491.158139][ T9208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.595166][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.683647][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.035425][ T37] bond0 (unregistering): Released all slaves [ 492.396399][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.065531][ T9221] loop6: detected capacity change from 0 to 2048 [ 493.117623][ T37] hsr_slave_0: left promiscuous mode [ 493.124763][ T9221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.179638][ T37] hsr_slave_1: left promiscuous mode [ 493.214985][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.311476][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.617547][ T9236] loop5: detected capacity change from 0 to 64 [ 494.632898][ T9234] loop6: detected capacity change from 0 to 64 [ 495.860920][ T5964] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 495.906000][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.699'. [ 496.056834][ T5964] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 496.089818][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.162272][ T5964] usb 6-1: config 0 descriptor?? [ 496.268308][ T37] team0 (unregistering): Port device team_slave_1 removed [ 496.497341][ T37] team0 (unregistering): Port device team_slave_0 removed [ 498.189005][ T9269] loop3: detected capacity change from 0 to 32768 [ 498.295991][ T9269] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.705 (9269) [ 498.336059][ T9269] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 498.351210][ T9269] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 498.366201][ T9269] BTRFS info (device loop3): disk space caching is enabled [ 498.390599][ T9269] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 498.674875][ T9269] BTRFS info (device loop3): rebuilding free space tree [ 498.737497][ T9269] BTRFS info (device loop3): disabling free space tree [ 498.748646][ T9269] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 498.783652][ T9269] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 498.912978][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.938571][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.943819][ T5964] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 498.978070][ T5964] asix 6-1:0.0: probe with driver asix failed with error -71 [ 499.045320][ T5964] usb 6-1: USB disconnect, device number 6 [ 499.083472][ T9061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.328230][ T9252] bridge7: port 1(veth7) entered blocking state [ 499.360432][ T9252] bridge7: port 1(veth7) entered disabled state [ 499.377754][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 499.400068][ T9252] veth7: entered allmulticast mode [ 499.425082][ T9252] veth7: entered promiscuous mode [ 499.520996][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.528048][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.631329][ T9061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.832195][ T9300] loop5: detected capacity change from 0 to 64 [ 499.858872][ T9302] loop6: detected capacity change from 0 to 512 [ 500.149928][ T9302] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.710: corrupted in-inode xattr: bad e_name length [ 500.247337][ T9302] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.710: couldn't read orphan inode 15 (err -117) [ 500.408113][ T9302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.065639][ T9312] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.710: dx entry: limit 0 != root limit 125 [ 501.077460][ T9312] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.710: Corrupt directory, running e2fsck is recommended [ 501.092671][ T9312] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.710: dx entry: limit 0 != root limit 125 [ 501.104432][ T9312] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.710: Corrupt directory, running e2fsck is recommended [ 501.541777][ T9292] loop4: detected capacity change from 0 to 40427 [ 501.597102][ T9061] hsr_slave_0: entered promiscuous mode [ 501.604033][ T9061] hsr_slave_1: entered promiscuous mode [ 501.610519][ T9061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.618112][ T9061] Cannot create hsr debugfs directory [ 501.670515][ T9292] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 501.742598][ T9292] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 501.878522][ T9292] F2FS-fs (loop4): invalid crc value [ 501.924737][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.311704][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.345101][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.364873][ T9087] bridge_slave_0: entered allmulticast mode [ 502.415739][ T9087] bridge_slave_0: entered promiscuous mode [ 502.553711][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.6.712'. [ 502.633641][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.655179][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.705483][ T9087] bridge_slave_1: entered allmulticast mode [ 502.763805][ T9087] bridge_slave_1: entered promiscuous mode [ 503.207896][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.317629][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.935781][ T9087] team0: Port device team_slave_0 added [ 503.989202][ T9087] team0: Port device team_slave_1 added [ 504.482507][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.502320][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.598964][ T9341] syz.4.714: attempt to access beyond end of device [ 504.598964][ T9341] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 504.613235][ T9341] gfs2: error -5 reading superblock [ 504.628398][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.248920][ T37] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.342697][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.400220][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.489811][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.846617][ T37] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.173638][ T37] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.374912][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 508.526744][ T37] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.585892][ T9376] loop5: detected capacity change from 0 to 512 [ 508.601051][ T9379] loop4: detected capacity change from 0 to 64 [ 508.641360][ T9376] EXT4-fs error (device loop5): ext4_iget_extra_inode:5034: inode #15: comm syz.5.722: corrupted in-inode xattr: bad e_name length [ 508.711920][ T9376] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.722: couldn't read orphan inode 15 (err -117) [ 508.792615][ T9376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.943645][ T9087] hsr_slave_0: entered promiscuous mode [ 509.161424][ T9087] hsr_slave_1: entered promiscuous mode [ 509.167940][ T9087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.189977][ T9087] Cannot create hsr debugfs directory [ 509.516334][ T9387] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.722: dx entry: limit 0 != root limit 125 [ 509.528216][ T9387] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.722: Corrupt directory, running e2fsck is recommended [ 509.543687][ T9387] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.722: dx entry: limit 0 != root limit 125 [ 509.555586][ T9387] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.722: Corrupt directory, running e2fsck is recommended [ 510.254671][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.270260][ T9389] loop6: detected capacity change from 0 to 32768 [ 510.341458][ T9373] bridge4: port 1(veth9) entered blocking state [ 510.349420][ T9373] bridge4: port 1(veth9) entered disabled state [ 510.383972][ T9373] veth9: entered allmulticast mode [ 510.471675][ T9389] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 510.471752][ T9389] allowing incompatible features above 0.0: (unknown version) [ 510.471782][ T9389] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 510.474668][ T9373] veth9: entered promiscuous mode [ 510.494467][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.494684][ T9389] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 510.537041][ T9389] bcachefs (loop6): initializing new filesystem [ 510.555188][ T9389] bcachefs (loop6): going read-write [ 510.803212][ T9403] 9pnet_fd: Insufficient options for proto=fd [ 510.811920][ T9389] bcachefs (loop6): marking superblocks [ 510.836103][ T9389] bcachefs (loop6): initializing freespace [ 510.847986][ T9389] bcachefs (loop6): done initializing freespace [ 510.857962][ T9389] bcachefs (loop6): reading snapshots table [ 510.864016][ T9389] bcachefs (loop6): reading snapshots done [ 511.009388][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.037475][ T9389] bcachefs (loop6): done starting filesystem [ 511.642687][ T9406] loop3: detected capacity change from 0 to 512 [ 511.687394][ T9406] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 511.712447][ T6830] bcachefs (loop6): shutting down [ 511.720079][ T6830] bcachefs (loop6): going read-only [ 511.725344][ T6830] bcachefs (loop6): finished waiting for writes to stop [ 511.750049][ T6830] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 512.000159][ T6830] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3 [ 512.395322][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.445492][ T6830] bcachefs (loop6): clean shutdown complete, journal seq 4 [ 512.498817][ T6830] bcachefs (loop6): marking filesystem clean [ 512.863384][ T9406] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 512.998951][ T6830] bcachefs (loop6): shutdown complete [ 513.379762][ T37] bridge_slave_1: left allmulticast mode [ 513.385539][ T37] bridge_slave_1: left promiscuous mode [ 513.404201][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.737067][ T37] bridge_slave_0: left allmulticast mode [ 513.747870][ T37] bridge_slave_0: left promiscuous mode [ 513.757457][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.877261][ T9440] loop4: detected capacity change from 0 to 64 [ 515.652651][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 516.003496][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.016069][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.028625][ T37] bond0 (unregistering): Released all slaves [ 516.561549][ T9451] bridge5: port 1(veth11) entered blocking state [ 516.597660][ T9451] bridge5: port 1(veth11) entered disabled state [ 516.899975][ T9451] veth11: entered allmulticast mode [ 516.931662][ T9451] veth11: entered promiscuous mode [ 517.383103][ T9061] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 517.434216][ T9461] loop5: detected capacity change from 0 to 32768 [ 517.804047][ T9461] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 517.804116][ T9461] allowing incompatible features above 0.0: (unknown version) [ 517.804146][ T9461] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 517.848991][ T9461] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 517.857272][ T9461] bcachefs (loop5): initializing new filesystem [ 517.873770][ T9461] bcachefs (loop5): going read-write [ 518.014807][ T9461] bcachefs (loop5): marking superblocks [ 518.025117][ T9477] fuse: Unknown parameter 'fd0x0000000000000003' [ 518.031039][ T9461] bcachefs (loop5): initializing freespace [ 518.042642][ T9461] bcachefs (loop5): done initializing freespace [ 518.052922][ T9461] bcachefs (loop5): reading snapshots table [ 518.058891][ T9461] bcachefs (loop5): reading snapshots done [ 518.181280][ T9461] bcachefs (loop5): done starting filesystem [ 518.819097][ T9061] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 518.863784][ T5832] bcachefs (loop5): shutting down [ 518.906183][ T5832] bcachefs (loop5): going read-only [ 518.917455][ T9061] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 518.923013][ T5832] bcachefs (loop5): finished waiting for writes to stop [ 519.012486][ T9061] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 519.080593][ T5832] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 519.229197][ T5832] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 519.276211][ T5832] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 519.291153][ T5832] bcachefs (loop5): marking filesystem clean [ 519.483560][ T5832] bcachefs (loop5): shutdown complete [ 519.669406][ T37] hsr_slave_0: left promiscuous mode [ 519.691280][ T37] hsr_slave_1: left promiscuous mode [ 519.694603][ T9504] loop3: detected capacity change from 0 to 64 [ 519.706816][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.735589][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.767825][ T9506] loop6: detected capacity change from 0 to 1024 [ 519.779389][ T9506] EXT4-fs: inline encryption not supported [ 519.786107][ T9506] EXT4-fs: Ignoring removed bh option [ 519.794467][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.812031][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.931346][ T9506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.986618][ T37] veth1_macvtap: left promiscuous mode [ 520.032049][ T37] veth0_macvtap: left promiscuous mode [ 520.060035][ T37] veth1_vlan: left promiscuous mode [ 520.210485][ T9506] EXT4-fs error (device loop6): mb_free_blocks:1945: group 0, inode 18: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 520.242956][ T37] veth0_vlan: left promiscuous mode [ 520.319572][ T9506] EXT4-fs (loop6): Remounting filesystem read-only [ 520.574098][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.587764][ T9518] loop3: detected capacity change from 0 to 512 [ 520.662097][ T9518] EXT4-fs error (device loop3): ext4_iget_extra_inode:5034: inode #15: comm syz.3.750: corrupted in-inode xattr: bad e_name length [ 520.727705][ T9518] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.750: couldn't read orphan inode 15 (err -117) [ 520.752656][ T9518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.802916][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.751'. [ 520.988667][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.153697][ T37] team0 (unregistering): Port device team_slave_1 removed [ 523.238380][ T37] team0 (unregistering): Port device team_slave_0 removed [ 525.653495][ T9564] loop5: detected capacity change from 0 to 64 [ 525.947091][ T9525] bridge8: port 1(veth9) entered blocking state [ 525.961883][ T9525] bridge8: port 1(veth9) entered disabled state [ 525.968358][ T9525] veth9: entered allmulticast mode [ 525.992907][ T9525] veth9: entered promiscuous mode [ 526.498776][ T9574] loop3: detected capacity change from 0 to 512 [ 526.556074][ T9574] EXT4-fs error (device loop3): ext4_iget_extra_inode:5034: inode #15: comm syz.3.762: corrupted in-inode xattr: bad e_name length [ 526.626336][ T9566] loop4: detected capacity change from 0 to 32768 [ 526.656307][ T9087] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 526.697308][ T9574] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.762: couldn't read orphan inode 15 (err -117) [ 526.955290][ T9574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.497129][ T9577] loop6: detected capacity change from 0 to 8192 [ 527.537995][ T9087] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 527.915601][ T9087] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 527.968686][ T9566] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 528.812138][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.044695][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.183292][ T9087] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 529.545733][ T9061] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.556217][ T5835] ocfs2: Unmounting device (7,4) on (node local) [ 529.661920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.669119][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.900924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.908134][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.932141][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.159512][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.370364][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.377561][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.388022][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.773'. [ 532.417057][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.424276][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.445517][ T9644] loop4: detected capacity change from 0 to 64 [ 532.605403][ T9646] bridge9: port 1(veth11) entered blocking state [ 532.632287][ T9646] bridge9: port 1(veth11) entered disabled state [ 532.638828][ T9646] veth11: entered allmulticast mode [ 532.677414][ T9646] veth11: entered promiscuous mode [ 532.932544][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.219898][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 533.402134][ T44] usb 4-1: no configurations [ 533.416989][ T44] usb 4-1: can't read configurations, error -22 [ 533.597853][ T9673] loop4: detected capacity change from 0 to 512 [ 533.626306][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 533.665881][ T9673] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.777: corrupted in-inode xattr: bad e_name length [ 533.718244][ T9675] loop6: detected capacity change from 0 to 1024 [ 533.783362][ T9673] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.777: couldn't read orphan inode 15 (err -117) [ 533.824537][ T44] usb 4-1: no configurations [ 533.861165][ T44] usb 4-1: can't read configurations, error -22 [ 533.868508][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.897096][ T9673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.113330][ T44] usb usb4-port1: attempt power cycle [ 535.540037][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 535.850468][ T44] usb 4-1: no configurations [ 535.855130][ T44] usb 4-1: can't read configurations, error -22 [ 536.019904][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 536.120128][ T44] usb 4-1: device descriptor read/8, error -71 [ 536.164879][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.234629][ T44] usb usb4-port1: unable to enumerate USB device [ 538.485187][ T9718] loop4: detected capacity change from 0 to 764 [ 538.544449][ T9718] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 541.495324][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 541.797951][ T9738] loop3: detected capacity change from 0 to 64 [ 541.925716][ T9743] netlink: 48 bytes leftover after parsing attributes in process `syz.6.789'. [ 542.037259][ T9745] netlink: 'syz.6.789': attribute type 10 has an invalid length. [ 542.038336][ T9736] bridge6: port 1(veth13) entered blocking state [ 542.116286][ T9736] bridge6: port 1(veth13) entered disabled state [ 542.160172][ T9736] veth13: entered allmulticast mode [ 542.167642][ T9736] veth13: entered promiscuous mode [ 542.277237][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.289757][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.299026][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.312035][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.321241][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.404440][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.411913][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.462357][ T1219] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 542.651008][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 542.668378][ T1219] usb 6-1: no configurations [ 542.680895][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 542.693948][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 542.719877][ T1219] usb 6-1: can't read configurations, error -22 [ 542.719938][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.740220][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 542.810931][ T9755] loop4: detected capacity change from 0 to 1024 [ 542.948537][ T1219] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 543.263060][ T1219] usb 6-1: no configurations [ 543.267752][ T1219] usb 6-1: can't read configurations, error -22 [ 543.280181][ T1219] usb usb6-port1: attempt power cycle [ 544.360081][ T5847] Bluetooth: hci2: command tx timeout [ 544.430097][ T1219] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 544.521956][ T1219] usb 6-1: no configurations [ 544.538852][ T1219] usb 6-1: can't read configurations, error -22 [ 544.613620][ T9794] loop3: detected capacity change from 0 to 1024 [ 544.633595][ T9794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.706156][ T9794] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 544.808278][ T9794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.843623][ T5847] Bluetooth: hci6: command tx timeout [ 544.880787][ T1219] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 544.915482][ T1219] usb 6-1: no configurations [ 544.938709][ T1219] usb 6-1: can't read configurations, error -22 [ 545.264238][ T1219] usb usb6-port1: unable to enumerate USB device [ 545.821830][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.513067][ T5847] Bluetooth: hci2: command tx timeout [ 547.179760][ T5847] Bluetooth: hci6: command tx timeout [ 547.186780][ T9813] loop3: detected capacity change from 0 to 8192 [ 547.355471][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 547.637192][ T9817] bridge7: port 1(veth15) entered blocking state [ 547.696868][ T9817] bridge7: port 1(veth15) entered disabled state [ 547.720598][ T9817] veth15: entered allmulticast mode [ 547.724300][ T9820] loop6: detected capacity change from 0 to 64 [ 547.742876][ T9817] veth15: entered promiscuous mode [ 547.764547][ T9802] loop5: detected capacity change from 0 to 32768 [ 548.131188][ T9827] loop3: detected capacity change from 0 to 2048 [ 548.147679][ T9802] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 548.207420][ T9827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 548.698627][ T5847] Bluetooth: hci2: command tx timeout [ 549.089960][ T9802] XFS (loop5): Ending clean mount [ 549.176821][ T9802] XFS (loop5): Quotacheck needed: Please wait. [ 549.239976][ T5847] Bluetooth: hci6: command tx timeout [ 549.545654][ T9802] XFS (loop5): Quotacheck: Done. [ 550.469032][ T5832] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 550.653343][ T9222] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 550.759782][ T5847] Bluetooth: hci2: command tx timeout [ 550.886968][ T9222] usb 7-1: config index 0 descriptor too short (expected 4114, got 18) [ 550.942090][ T12] bridge_slave_1: left allmulticast mode [ 550.947875][ T12] bridge_slave_1: left promiscuous mode [ 550.969223][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.217720][ T12] bridge_slave_0: left allmulticast mode [ 551.321508][ T5847] Bluetooth: hci6: command tx timeout [ 551.341116][ T12] bridge_slave_0: left promiscuous mode [ 551.547420][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.711727][ T9222] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.724112][ T9222] usb 7-1: config 0 has no interfaces? [ 551.756871][ T9222] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 551.779863][ T9222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.787890][ T9222] usb 7-1: Product: syz [ 551.813785][ T9222] usb 7-1: Manufacturer: syz [ 551.818410][ T9222] usb 7-1: SerialNumber: syz [ 551.844700][ T9222] usb 7-1: config 0 descriptor?? [ 551.915239][ T9856] loop4: detected capacity change from 0 to 1024 [ 552.000493][ T9846] loop3: detected capacity change from 0 to 32768 [ 552.081630][ T1219] usb 7-1: USB disconnect, device number 2 [ 553.102568][ T9846] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 553.128516][ T9846] bcachefs (loop3): shutdown complete [ 553.837173][ T9880] syz.6.812: attempt to access beyond end of device [ 553.837173][ T9880] loop6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 553.851268][ T9880] gfs2: error -5 reading superblock [ 554.023011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.053901][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.082065][ T12] bond0 (unregistering): Released all slaves [ 554.241001][ T9749] chnl_net:caif_netlink_parms(): no params data found [ 554.509485][ T12] hsr_slave_0: left promiscuous mode [ 554.550469][ T12] hsr_slave_1: left promiscuous mode [ 554.558712][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.610086][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.736708][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 555.093232][ T9893] loop5: detected capacity change from 0 to 1024 [ 555.105363][ T9893] EXT4-fs: Ignoring removed oldalloc option [ 555.112048][ T9893] EXT4-fs: Ignoring removed orlov option [ 555.144558][ T9893] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 555.195396][ T9893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.383785][ T12] team0 (unregistering): Port device team_slave_1 removed [ 555.405009][ T9846] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 555.515036][ T12] team0 (unregistering): Port device team_slave_0 removed [ 555.728071][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.896059][ T9898] loop5: detected capacity change from 0 to 64 [ 556.153126][ T9902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.816'. [ 556.276518][ T9904] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 556.787963][ T9890] bridge8: port 1(veth17) entered blocking state [ 556.810235][ T9890] bridge8: port 1(veth17) entered disabled state [ 556.817400][ T9890] veth17: entered allmulticast mode [ 556.832247][ T9890] veth17: entered promiscuous mode [ 556.879089][ T9900] loop6: detected capacity change from 0 to 32768 [ 556.941028][ T9752] chnl_net:caif_netlink_parms(): no params data found [ 557.631538][ T9900] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 557.632243][ T9900] allowing incompatible features above 0.0: (unknown version) [ 557.632447][ T9900] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 558.256296][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.289948][ T9749] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.290458][ T9749] bridge_slave_0: entered allmulticast mode [ 558.292596][ T9749] bridge_slave_0: entered promiscuous mode [ 558.499754][ T9900] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 558.508283][ T9900] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 558.552642][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.568778][ T9900] bcachefs (loop6): Version upgrade required: [ 558.568778][ T9900] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 558.568778][ T9900] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 558.568778][ T9900] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 558.586988][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.642030][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.710076][ T9927] loop4: detected capacity change from 0 to 1024 [ 558.813721][ T9749] bridge_slave_1: entered allmulticast mode [ 558.973668][ T9900] bcachefs (loop6): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 558.973738][ T9900] gen 0 oldest_gen 0 data_type btree [ 558.973757][ T9900] journal_seq_nonempty 6 [ 558.973776][ T9900] journal_seq_empty 0 [ 558.973793][ T9900] need_discard 1 [ 558.973811][ T9900] need_inc_gen 1 [ 558.973829][ T9900] dirty_sectors 0 [ 558.973846][ T9900] stripe_sectors 1769482 [ 558.973865][ T9900] cached_sectors 0 [ 558.973883][ T9900] stripe 0 [ 558.973901][ T9900] stripe_redundancy 0 [ 558.973919][ T9900] io_time[READ] 1 [ 558.973936][ T9900] io_time[WRITE] 768 [ 558.973954][ T9900] fragmentation 0 [ 558.973971][ T9900] bp_start 7 [ 558.973988][ T9900] [ 558.974003][ T9900] invalid data type (got 3 should be 9), deleting [ 559.093599][ T9749] bridge_slave_1: entered promiscuous mode [ 559.878145][ T9913] loop3: detected capacity change from 0 to 32768 [ 559.916672][ T9900] bcachefs (loop6): btree node read error at btree backpointers level 0/0 [ 559.916732][ T9900] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 559.916763][ T9900] loop6 node offset 0/24 bset u64s 0: invalid bkey format: field 4 too large: 0 + 1099511627776 > 4294967295 [ 559.916792][ T9900] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:1099511627776, 0:0 [ 559.916814][ T9900] flagging btree backpointers lost data [ 559.916833][ T9900] ret btree_node_read_validate_error [ 559.926253][ T9913] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 559.943459][ T9913] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 560.020188][ T9749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.286261][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 560.291934][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.297663][ T9752] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.297853][ T9752] bridge_slave_0: entered allmulticast mode [ 560.311818][ T9752] bridge_slave_0: entered promiscuous mode [ 560.395040][ T9900] bcachefs (loop6): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 560.436209][ T9749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.472735][ T9900] bcachefs (loop6): check_topology... done [ 560.490150][ T9900] bcachefs (loop6): accounting_read... done [ 560.541391][ T9900] bcachefs (loop6): alloc_read... done [ 560.551516][ T9900] bcachefs (loop6): snapshots_read... done [ 560.561896][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.574187][ T9900] bcachefs (loop6): check_allocations... [ 560.595763][ T9752] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.622560][ T9900] bcachefs (loop6): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 560.622611][ T9900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 560.660010][ T9752] bridge_slave_1: entered allmulticast mode [ 560.662583][ T9752] bridge_slave_1: entered promiscuous mode [ 560.792171][ T9749] team0: Port device team_slave_0 added [ 560.811541][ T9900] bcachefs (loop6): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 560.811571][ T9900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 560.819984][ T1219] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 560.877616][ T9900] bcachefs (loop6): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 560.877647][ T9900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 560.892447][ T9752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.895669][ T9749] team0: Port device team_slave_1 added [ 560.901346][ T9752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.130728][ T1219] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 561.149314][ T1219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.181699][ T9900] bcachefs (loop6): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 561.181728][ T9900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 561.212773][ T1219] usb 6-1: config 0 has no interfaces? [ 561.221844][ T1219] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 561.221889][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.221925][ T1219] usb 6-1: Product: syz [ 561.221959][ T1219] usb 6-1: Manufacturer: syz [ 561.221986][ T1219] usb 6-1: SerialNumber: syz [ 561.225404][ T1219] usb 6-1: config 0 descriptor?? [ 561.384636][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.384664][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.384745][ T9749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.405075][ T9752] team0: Port device team_slave_0 added [ 561.453829][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.492010][ T5934] usb 6-1: USB disconnect, device number 11 [ 561.630261][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.630287][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.630372][ T9749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.633948][ T9752] team0: Port device team_slave_1 added [ 561.780254][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.068175][ T9900] bcachefs (loop6): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 562.068208][ T9900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 562.151780][ T9900] bcachefs (loop6): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 562.162555][ T9900] bcachefs (loop6): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 562.176368][ T9900] bcachefs (loop6): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 562.186419][ T9900] bcachefs (loop6): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 562.198272][ T9900] bcachefs (loop6): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 562.269243][ T9971] binder: 9966:9971 ioctl c0306201 0 returned -14 [ 562.565332][ T9900] bcachefs (loop6): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 562.752845][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.752875][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.753592][ T9752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.775296][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.775320][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.775397][ T9752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.029136][ T9749] hsr_slave_0: entered promiscuous mode [ 563.062323][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 563.081239][ T9749] hsr_slave_1: entered promiscuous mode [ 563.082114][ T9749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.082191][ T9749] Cannot create hsr debugfs directory [ 563.186178][ T9900] bcachefs (loop6): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 563.225903][ T9900] bcachefs (loop6): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 563.296911][ T9900] bcachefs (loop6): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 563.344661][ T9900] bcachefs (loop6): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 563.400288][ T9976] bridge3: port 1(veth7) entered blocking state [ 563.400429][ T9976] bridge3: port 1(veth7) entered disabled state [ 563.400627][ T9976] veth7: entered allmulticast mode [ 563.403019][ T9976] veth7: entered promiscuous mode [ 564.273863][ T9984] loop3: detected capacity change from 0 to 8192 [ 564.326784][ T9900] bcachefs (loop6): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 564.368693][ T9900] bcachefs (loop6): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 564.415256][ T9900] bcachefs (loop6): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 564.462620][ T9900] bcachefs (loop6): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 564.523189][ T9900] bcachefs (loop6): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 564.635591][ T9900] bcachefs (loop6): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 564.706350][ T9900] bcachefs (loop6): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 564.718489][ T9900] bcachefs (loop6): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 564.732154][ T9900] bcachefs (loop6): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 564.770306][ T9900] bcachefs (loop6): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 564.793064][ T9989] loop5: detected capacity change from 0 to 1024 [ 564.860439][ T9900] bcachefs (loop6): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 564.860478][ T9900] Ratelimiting new instances of previous error [ 564.938856][ T9900] bcachefs (loop6): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 564.938893][ T9900] Ratelimiting new instances of previous error [ 564.953819][ T9992] loop3: detected capacity change from 0 to 64 [ 564.997615][ T9752] hsr_slave_0: entered promiscuous mode [ 564.998865][ T9752] hsr_slave_1: entered promiscuous mode [ 565.608461][ T9752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.608498][ T9752] Cannot create hsr debugfs directory [ 566.024432][ T9900] done [ 566.028131][ T9900] bcachefs (loop6): going read-write [ 566.071357][ T9900] bcachefs (loop6): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 566.115004][ T9900] bcachefs (loop6): flushing journal and stopping allocators, journal seq 10 [ 566.170303][ T9900] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 10 [ 566.306735][ T9900] bcachefs (loop6): unclean shutdown complete, journal seq 11 [ 566.341052][ T9900] bcachefs (loop6): error in recovery: EINTR [ 566.341078][ T9900] emergency read only at seq 11 [ 566.384992][ T9900] bcachefs (loop6): bch2_fs_start(): error starting filesystem EINTR [ 566.420565][ T9900] bcachefs (loop6): shutting down [ 566.516407][ T9900] bcachefs (loop6): shutdown complete [ 566.874366][T10005] loop5: detected capacity change from 0 to 32768 [ 567.366745][T10005] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 567.366796][T10005] allowing incompatible features above 0.0: (unknown version) [ 567.366819][T10005] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 567.370043][ T12] bridge_slave_1: left allmulticast mode [ 567.389573][T10005] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 567.389697][T10005] bcachefs (loop5): initializing new filesystem [ 567.412340][T10005] bcachefs (loop5): going read-write [ 567.620100][T10005] bcachefs (loop5): marking superblocks [ 567.636253][T10005] bcachefs (loop5): initializing freespace [ 567.647048][T10005] bcachefs (loop5): done initializing freespace [ 567.656901][T10005] bcachefs (loop5): reading snapshots table [ 567.662988][T10005] bcachefs (loop5): reading snapshots done [ 567.760140][ T12] bridge_slave_1: left promiscuous mode [ 567.766562][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.782487][T10005] bcachefs (loop5): done starting filesystem [ 567.994550][ T9900] bcachefs: bch2_fs_get_tree() error: EINTR [ 568.183673][ T12] bridge_slave_0: left allmulticast mode [ 568.259511][ T12] bridge_slave_0: left promiscuous mode [ 568.320112][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.772232][T10051] binder: 10045:10051 ioctl c0306201 0 returned -14 [ 570.705884][ T5832] bcachefs (loop5): shutting down [ 570.723285][ T5832] bcachefs (loop5): going read-only [ 570.743302][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.755836][ T5832] bcachefs (loop5): finished waiting for writes to stop [ 570.768717][ T5832] bcachefs (loop5): flushing journal and stopping allocators, journal seq 4 [ 570.778631][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.810580][ T5832] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 5 [ 570.822745][ T12] bond0 (unregistering): Released all slaves [ 570.824664][T10050] loop3: detected capacity change from 0 to 32768 [ 570.843499][ T5832] bcachefs (loop5): clean shutdown complete, journal seq 6 [ 570.851843][ T5832] bcachefs (loop5): marking filesystem clean [ 571.019178][ T5832] bcachefs (loop5): shutdown complete [ 571.573891][ T12] hsr_slave_0: left promiscuous mode [ 571.636352][ T12] hsr_slave_1: left promiscuous mode [ 571.670744][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.744516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.942591][ T3487] Bluetooth: (null): Invalid header checksum [ 571.990386][ T3487] Bluetooth: (null): Invalid header checksum [ 572.470529][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.456120][ T12] team0 (unregistering): Port device team_slave_1 removed [ 573.590637][ T12] team0 (unregistering): Port device team_slave_0 removed [ 574.323412][T10084] loop6: detected capacity change from 0 to 64 [ 574.518432][T10086] loop5: detected capacity change from 0 to 1024 [ 576.244190][T10103] loop5: detected capacity change from 0 to 764 [ 578.443825][T10111] loop3: detected capacity change from 0 to 32768 [ 578.547289][T10111] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 579.565385][ T9749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 579.731104][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 579.768500][ T9749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 579.908598][ T9749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 579.948285][T10134] loop4: detected capacity change from 0 to 1024 [ 580.110523][ T9749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 582.913767][ T9752] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 582.952222][ T9752] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 583.255693][ T9749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.283014][ T9752] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 584.121750][ T9752] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 584.182718][ T9749] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.267090][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.274382][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.347327][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.354599][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.667417][T10178] loop3: detected capacity change from 0 to 64 [ 584.693823][ T9749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.877952][ T9752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.995384][ T9752] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.096240][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.103569][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.172493][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.179805][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.519570][T10190] loop4: detected capacity change from 0 to 64 [ 585.547648][ T9752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.785103][ T9749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.428709][ T9752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.357804][ T9749] veth0_vlan: entered promiscuous mode [ 591.443852][ T9749] veth1_vlan: entered promiscuous mode [ 591.883722][ T9749] veth0_macvtap: entered promiscuous mode [ 591.910956][ T9749] veth1_macvtap: entered promiscuous mode [ 592.006977][ T9749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.064841][ T9749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.122349][ T9749] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.181286][ T9749] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.219739][ T9749] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.263497][ T9749] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.603357][ T9752] veth0_vlan: entered promiscuous mode [ 592.702466][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.754893][ T9752] veth1_vlan: entered promiscuous mode [ 592.760825][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.916016][ T9752] veth0_macvtap: entered promiscuous mode [ 592.960289][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.968785][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.976351][ T9752] veth1_macvtap: entered promiscuous mode [ 593.102828][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.118302][T10242] loop5: detected capacity change from 0 to 32768 [ 593.158823][T10242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.876 (10242) [ 593.199755][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.224448][ T9752] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.259756][ T9752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.305865][ T9752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.375642][ T9752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.510417][T10242] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 593.529422][T10242] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 594.225873][T10242] BTRFS info (device loop5): using free-space-tree [ 594.262219][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 594.262670][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 594.330517][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 594.369875][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 594.415399][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 594.469514][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 594.546711][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 594.632294][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 594.715894][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 594.971401][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 595.074186][T10242] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 595.108483][T10242] BTRFS error (device loop5): open_ctree failed: -12 [ 596.066402][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.089782][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.735278][T10319] loop5: detected capacity change from 0 to 64 [ 600.790043][T10329] loop6: detected capacity change from 0 to 8192 [ 601.747737][T10338] loop4: detected capacity change from 0 to 1024 [ 602.245419][T10338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.525228][T10338] UDF-fs: error (device loop4): udf_read_inode: (ino 832) failed !bh [ 602.578676][T10344] loop3: detected capacity change from 0 to 512 [ 602.625909][T10338] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 602.728334][T10344] EXT4-fs error (device loop3): ext4_iget_extra_inode:5034: inode #15: comm syz.3.894: corrupted in-inode xattr: bad e_name length [ 602.870738][T10344] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.894: couldn't read orphan inode 15 (err -117) [ 602.998912][T10344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.645129][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.712064][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.734368][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.745827][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.754024][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.995791][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.742533][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.242015][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.839777][ T5843] Bluetooth: hci3: command tx timeout [ 607.543252][T10387] loop3: detected capacity change from 0 to 8192 [ 607.725135][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.299114][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.839178][T10359] chnl_net:caif_netlink_parms(): no params data found [ 608.921112][ T5843] Bluetooth: hci3: command tx timeout [ 609.029868][ T36] bridge_slave_1: left allmulticast mode [ 609.045708][ T36] bridge_slave_1: left promiscuous mode [ 609.079963][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.101465][T10406] syz.6.902: attempt to access beyond end of device [ 609.101465][T10406] loop6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 609.114683][T10406] gfs2: error -5 reading superblock [ 609.614613][T10411] loop3: detected capacity change from 0 to 1024 [ 609.676609][T10411] EXT4-fs: Ignoring removed orlov option [ 609.721184][ T36] bridge_slave_0: left allmulticast mode [ 609.726876][ T36] bridge_slave_0: left promiscuous mode [ 609.775954][T10411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 609.804074][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.871149][T10411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.396576][T10419] loop6: detected capacity change from 0 to 512 [ 610.508664][T10419] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.910: corrupted in-inode xattr: bad e_name length [ 610.524490][T10419] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.910: couldn't read orphan inode 15 (err -117) [ 610.999888][ T5843] Bluetooth: hci3: command tx timeout [ 611.037585][T10419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.353846][T10409] loop5: detected capacity change from 0 to 32768 [ 611.546793][T10409] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 611.918753][T10429] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.910: dx entry: limit 0 != root limit 125 [ 611.930581][T10429] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.910: Corrupt directory, running e2fsck is recommended [ 611.944974][T10429] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.910: dx entry: limit 0 != root limit 125 [ 611.956813][T10429] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.910: Corrupt directory, running e2fsck is recommended [ 613.028561][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.045373][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.089104][ T5843] Bluetooth: hci3: command tx timeout [ 613.123106][ T5832] ocfs2: Unmounting device (7,5) on (node local) [ 614.789736][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.9.915'. [ 614.803054][T10441] loop4: detected capacity change from 0 to 64 [ 616.661912][T10460] loop5: detected capacity change from 0 to 4096 [ 617.747741][T10471] loop5: detected capacity change from 0 to 512 [ 617.767818][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.785469][T10471] EXT4-fs error (device loop5): ext4_iget_extra_inode:5034: inode #15: comm syz.5.924: corrupted in-inode xattr: bad e_name length [ 618.096773][T10471] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.924: couldn't read orphan inode 15 (err -117) [ 618.144552][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.324643][ T36] bond0 (unregistering): Released all slaves [ 618.339902][T10471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.673738][T10476] syz.6.920: attempt to access beyond end of device [ 618.673738][T10476] loop6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 618.787616][T10476] gfs2: error -5 reading superblock [ 618.991622][T10482] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.924: dx entry: limit 0 != root limit 125 [ 619.003540][T10482] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.924: Corrupt directory, running e2fsck is recommended [ 619.018191][T10482] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.924: dx entry: limit 0 != root limit 125 [ 619.029977][T10482] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.924: Corrupt directory, running e2fsck is recommended [ 619.640727][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.129407][T10496] netlink: 596 bytes leftover after parsing attributes in process `syz.3.928'. [ 620.262569][T10495] loop5: detected capacity change from 0 to 2048 [ 620.350551][T10495] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 620.440298][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.442844][T10495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.490008][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.522552][T10359] bridge_slave_0: entered allmulticast mode [ 620.568027][T10359] bridge_slave_0: entered promiscuous mode [ 620.602198][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.650761][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.681352][T10359] bridge_slave_1: entered allmulticast mode [ 620.715806][T10359] bridge_slave_1: entered promiscuous mode [ 621.195160][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.336822][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.439395][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 622.236674][T10515] loop5: detected capacity change from 0 to 512 [ 622.304722][T10515] EXT4-fs: Ignoring removed oldalloc option [ 622.342487][T10518] loop6: detected capacity change from 0 to 1024 [ 622.363489][ T36] hsr_slave_0: left promiscuous mode [ 622.375185][T10515] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 622.398650][ T36] hsr_slave_1: left promiscuous mode [ 622.430598][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.438193][T10515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 622.469364][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.545659][T10515] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 622.629607][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.672526][T10515] EXT4-fs (loop5): 1 truncate cleaned up [ 622.699440][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.753809][T10515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.256415][ T36] veth1_macvtap: left promiscuous mode [ 623.339571][ T36] veth0_macvtap: left promiscuous mode [ 623.380276][ T36] veth1_vlan: left promiscuous mode [ 623.385638][ T36] veth0_vlan: left promiscuous mode [ 623.592182][T10526] loop3: detected capacity change from 0 to 64 [ 624.125737][T10532] loop6: detected capacity change from 0 to 512 [ 624.142753][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.9.936'. [ 624.181095][T10532] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.937: corrupted in-inode xattr: bad e_name length [ 624.214155][T10532] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.937: couldn't read orphan inode 15 (err -117) [ 624.228544][T10532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.782941][T10537] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.937: dx entry: limit 0 != root limit 125 [ 624.794799][T10537] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.937: Corrupt directory, running e2fsck is recommended [ 624.810865][T10537] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.937: dx entry: limit 0 != root limit 125 [ 624.822774][T10537] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.937: Corrupt directory, running e2fsck is recommended [ 625.408030][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.883096][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.333045][T10560] loop6: detected capacity change from 0 to 2048 [ 627.398643][T10560] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 627.466718][T10560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.826350][ T36] team0 (unregistering): Port device team_slave_1 removed [ 628.003839][ T36] team0 (unregistering): Port device team_slave_0 removed [ 629.056425][T10359] team0: Port device team_slave_0 added [ 629.138356][T10572] loop3: detected capacity change from 0 to 1024 [ 629.199475][T10359] team0: Port device team_slave_1 added [ 631.001325][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.089707][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.309715][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.352615][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.378173][T10590] loop3: detected capacity change from 0 to 64 [ 631.419528][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.543437][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.549531][T10592] loop4: detected capacity change from 0 to 512 [ 631.656561][T10592] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.952: corrupted in-inode xattr: bad e_name length [ 631.689406][T10592] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.952: couldn't read orphan inode 15 (err -117) [ 631.818491][T10592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.125676][T10359] hsr_slave_0: entered promiscuous mode [ 632.167482][T10359] hsr_slave_1: entered promiscuous mode [ 632.211838][T10359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.249299][T10359] Cannot create hsr debugfs directory [ 633.503495][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.885726][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.788345][T10617] loop4: detected capacity change from 0 to 1024 [ 634.961080][T10617] EXT4-fs: Ignoring removed oldalloc option [ 634.967175][T10617] EXT4-fs: Ignoring removed orlov option [ 635.160462][T10617] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 635.204094][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.958'. [ 635.524355][T10617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.641834][T10628] bridge4: port 1(veth9) entered blocking state [ 635.674301][T10628] bridge4: port 1(veth9) entered disabled state [ 635.708702][T10628] veth9: entered allmulticast mode [ 635.747475][T10628] veth9: entered promiscuous mode [ 636.298011][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.846473][T10653] loop5: detected capacity change from 0 to 1024 [ 638.323174][T10659] loop9: detected capacity change from 0 to 128 [ 639.425551][T10669] loop4: detected capacity change from 0 to 512 [ 639.486732][T10669] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.966: corrupted in-inode xattr: bad e_name length [ 639.608267][T10669] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.966: couldn't read orphan inode 15 (err -117) [ 639.652204][T10669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.918376][T10359] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 640.493662][T10676] 9pnet_fd: Insufficient options for proto=fd [ 640.743895][T10359] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 640.775084][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.853898][T10359] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 641.005164][T10359] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 641.153073][T10683] netlink: 'syz.4.969': attribute type 25 has an invalid length. [ 641.199952][T10683] netlink: 'syz.4.969': attribute type 9 has an invalid length. [ 642.002489][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 642.089226][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.421739][T10702] bridge9: port 1(veth19) entered blocking state [ 642.448660][T10702] bridge9: port 1(veth19) entered disabled state [ 642.465411][T10701] loop6: detected capacity change from 0 to 4096 [ 642.482291][T10702] veth19: entered allmulticast mode [ 642.505240][T10702] veth19: entered promiscuous mode [ 642.605178][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.892329][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.899535][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.891021][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.898242][ T6421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.422131][T10725] loop6: detected capacity change from 0 to 64 [ 645.315792][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.808117][T10763] loop9: detected capacity change from 0 to 256 [ 647.010039][T10763] FAT-fs (loop9): Directory bread(block 64) failed [ 647.039962][T10763] FAT-fs (loop9): Directory bread(block 65) failed [ 647.057278][T10763] FAT-fs (loop9): Directory bread(block 66) failed [ 647.085599][T10763] FAT-fs (loop9): Directory bread(block 67) failed [ 647.131833][T10763] FAT-fs (loop9): Directory bread(block 68) failed [ 647.179520][T10763] FAT-fs (loop9): Directory bread(block 69) failed [ 647.215058][T10763] FAT-fs (loop9): Directory bread(block 70) failed [ 647.252392][T10763] FAT-fs (loop9): Directory bread(block 71) failed [ 647.266615][T10763] FAT-fs (loop9): Directory bread(block 72) failed [ 647.295874][T10763] FAT-fs (loop9): Directory bread(block 73) failed [ 647.619577][T10746] loop5: detected capacity change from 0 to 40427 [ 647.689796][T10746] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 647.737619][T10746] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 647.808996][T10746] F2FS-fs (loop5): invalid crc value [ 647.937374][T10359] veth0_vlan: entered promiscuous mode [ 648.012457][T10359] veth1_vlan: entered promiscuous mode [ 648.156992][T10774] loop3: detected capacity change from 0 to 1024 [ 648.230047][T10359] veth0_macvtap: entered promiscuous mode [ 648.462436][T10746] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 648.528075][T10746] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 648.556430][T10359] veth1_macvtap: entered promiscuous mode [ 648.668070][T10779] 9pnet_fd: Insufficient options for proto=fd [ 649.479393][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.559259][T10782] loop9: detected capacity change from 0 to 4096 [ 649.787104][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.828540][T10786] loop3: detected capacity change from 0 to 1024 [ 649.876932][T10359] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.206923][T10359] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.229664][T10359] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.238927][T10359] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.802455][T10791] loop6: detected capacity change from 0 to 8192 [ 651.530129][T10795] 9pnet_fd: Insufficient options for proto=fd [ 652.501513][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.570758][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.713545][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.767294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.569901][ T9596] IPVS: starting estimator thread 0... [ 653.589798][T10811] tipc: Started in network mode [ 653.594729][T10811] tipc: Node identity ac1414aa, cluster identity 4711 [ 653.672904][T10811] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 653.680416][T10812] IPVS: using max 20 ests per chain, 48000 per kthread [ 653.738544][T10811] tipc: Enabled bearer , priority 10 [ 653.802001][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 653.938459][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 653.949709][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.089741][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.134601][T10825] loop5: detected capacity change from 0 to 64 [ 654.229742][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.239262][T10827] loop3: detected capacity change from 0 to 1024 [ 654.379712][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.529694][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.561042][T10821] hsr_slave_1 (unregistering): left promiscuous mode [ 654.672709][ T9] tipc: Node number set to 2886997162 [ 654.704829][T10829] 9pnet_fd: Insufficient options for proto=fd [ 654.809726][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.079871][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.609845][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.638191][T10834] loop4: detected capacity change from 0 to 16 [ 655.711493][T10834] erofs (device loop4): mounted with root inode @ nid 36. [ 655.754641][T10836] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1003'. [ 656.221101][T10842] loop4: detected capacity change from 0 to 512 [ 656.246273][T10842] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.1005: corrupted in-inode xattr: bad e_name length [ 656.266926][T10842] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1005: couldn't read orphan inode 15 (err -117) [ 656.292562][T10842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.522257][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.759717][ C0] net_ratelimit: 2 callbacks suppressed [ 658.759744][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 659.402812][T10876] loop3: detected capacity change from 0 to 1024 [ 659.423084][T10876] EXT4-fs: Ignoring removed orlov option [ 659.449974][T10876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 659.526272][T10876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.809697][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 659.916571][T10884] loop4: detected capacity change from 0 to 1024 [ 659.939269][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.408612][T10890] loop6: detected capacity change from 0 to 1024 [ 660.839692][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 660.925378][T10890] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 661.078933][T10890] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 661.205661][T10890] EXT4-fs error (device loop6): ext4_acquire_dquot:6931: comm syz.6.1017: Failed to acquire dquot type 0 [ 661.248108][T10899] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1018'. [ 661.341560][T10890] EXT4-fs error (device loop6): mb_free_blocks:1945: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 661.459819][T10890] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.1017: corrupted inode contents [ 661.570708][T10890] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #13: comm syz.6.1017: mark_inode_dirty error [ 661.644166][T10890] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.1017: corrupted inode contents [ 661.695593][T10890] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.1017: mark_inode_dirty error [ 661.743412][T10890] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.1017: corrupted inode contents [ 661.802619][T10890] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 661.825884][T10890] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.1017: corrupted inode contents [ 661.850797][T10910] loop5: detected capacity change from 0 to 512 [ 661.879690][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 661.896220][T10890] EXT4-fs error (device loop6): ext4_truncate:4597: inode #13: comm syz.6.1017: mark_inode_dirty error [ 661.929130][T10890] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 661.951840][T10910] EXT4-fs error (device loop5): ext4_iget_extra_inode:5034: inode #15: comm syz.5.1020: corrupted in-inode xattr: bad e_name length [ 662.000786][T10910] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1020: couldn't read orphan inode 15 (err -117) [ 662.090527][T10890] EXT4-fs (loop6): 1 truncate cleaned up [ 662.129525][T10890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.155880][T10910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.271647][T10890] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 662.342029][T10890] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 662.643098][T10890] EXT4-fs error (device loop6): ext4_acquire_dquot:6931: comm syz.6.1017: Failed to acquire dquot type 0 [ 662.693267][T10896] loop3: detected capacity change from 0 to 32768 [ 662.919741][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 662.996241][T10896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1016 (10896) [ 663.613190][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.960370][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 664.999703][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 665.378936][T10937] batman_adv: batadv0: Adding interface: ipvlan2 [ 665.469892][T10937] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.599447][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.627660][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.637800][T10937] batman_adv: batadv0: Interface activated: ipvlan2 [ 666.039701][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 666.206767][T10946] batman_adv: batadv0: Adding interface: dummy0 [ 666.277274][T10946] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.452111][T10946] batman_adv: batadv0: Interface activated: dummy0 [ 666.693831][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 667.003959][T10957] loop3: detected capacity change from 0 to 64 [ 667.079693][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 667.153573][T10960] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1033'. [ 667.740140][T10965] loop8: detected capacity change from 0 to 1024 [ 668.119807][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 669.159722][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 669.212530][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.398516][T10981] loop4: detected capacity change from 0 to 512 [ 669.684979][T10986] loop5: detected capacity change from 0 to 65 [ 669.745569][T10986] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 670.199919][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 671.239692][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 672.280008][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 672.983792][T11018] loop5: detected capacity change from 0 to 1024 [ 673.035804][T11018] EXT4-fs: Ignoring removed oldalloc option [ 673.090180][T11018] EXT4-fs: Ignoring removed orlov option [ 673.110132][T11018] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 673.195807][T11018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.319674][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 673.951295][T11031] loop3: detected capacity change from 0 to 64 [ 674.037261][T11032] loop9: detected capacity change from 0 to 1024 [ 674.108835][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.359688][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 674.428315][T11010] loop4: detected capacity change from 0 to 32768 [ 674.955322][T11010] ERROR: (device loop4): txAbort: [ 674.955322][T11010] [ 675.076446][T11010] ERROR: (device loop4): remounting filesystem as read-only [ 675.399677][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 676.439668][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 677.489723][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 678.266775][T11069] loop9: detected capacity change from 0 to 8192 [ 678.519702][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 679.559675][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 680.599672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 681.390978][T11090] loop8: detected capacity change from 0 to 4096 [ 681.639841][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 682.488492][T11105] loop4: detected capacity change from 0 to 1024 [ 682.679848][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 683.547419][T11112] loop3: detected capacity change from 0 to 1024 [ 683.719670][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 684.759690][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 685.809710][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 686.839670][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 687.004449][T11142] batman_adv: batadv0: Adding interface: dummy0 [ 687.139818][T11142] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.250299][T11142] batman_adv: batadv0: Interface activated: dummy0 [ 687.879670][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 688.373394][T11153] loop4: detected capacity change from 0 to 512 [ 688.456227][T11153] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.1076: corrupted in-inode xattr: bad e_name length [ 688.539039][T11153] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1076: couldn't read orphan inode 15 (err -117) [ 688.606750][T11153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.897627][T11158] loop3: detected capacity change from 0 to 64 [ 688.919742][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 689.497449][T11163] loop5: detected capacity change from 0 to 1024 [ 689.756194][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.959669][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 690.999663][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 692.039679][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 692.109098][T11185] i2c i2c-0: Invalid block write size 253 [ 693.079951][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 694.119751][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 695.159705][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 695.333483][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.647284][T11214] loop9: detected capacity change from 0 to 512 [ 695.728543][T11214] EXT4-fs error (device loop9): ext4_iget_extra_inode:5034: inode #15: comm syz.9.1093: corrupted in-inode xattr: bad e_name length [ 695.764109][T11214] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1093: couldn't read orphan inode 15 (err -117) [ 695.823418][T11214] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.199695][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 696.250660][T11218] loop4: detected capacity change from 0 to 128 [ 697.015242][ T9749] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.073247][T11225] loop6: detected capacity change from 0 to 1024 [ 697.239697][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 698.279683][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 699.319685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 700.369661][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 701.399813][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 701.430787][T11271] loop8: detected capacity change from 0 to 512 [ 701.566868][T11271] EXT4-fs error (device loop8): ext4_iget_extra_inode:5034: inode #15: comm syz.8.1109: corrupted in-inode xattr: bad e_name length [ 701.680833][T11271] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1109: couldn't read orphan inode 15 (err -117) [ 701.792830][T11271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.439784][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 703.181932][T11292] loop5: detected capacity change from 0 to 1024 [ 703.479680][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 704.374519][T10359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.529672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 705.561478][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 705.610138][T11316] Invalid ELF header magic: != ELF [ 706.599676][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 707.639685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 708.679655][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 709.719683][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 710.759665][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 711.223166][T11368] loop6: detected capacity change from 0 to 512 [ 711.385617][T11368] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.1127: corrupted in-inode xattr: bad e_name length [ 711.561466][T11368] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1127: couldn't read orphan inode 15 (err -117) [ 711.638311][T11368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.809672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 711.993467][T11378] loop5: detected capacity change from 0 to 1024 [ 712.840391][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 713.663476][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.879715][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 714.188273][T11388] loop6: detected capacity change from 0 to 512 [ 714.220214][T11388] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 714.257807][T11388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 714.268047][T11388] System zones: 1-12 [ 714.273157][T11388] EXT4-fs (loop6): 1 truncate cleaned up [ 714.281257][T11388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.919720][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 715.969715][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 716.910436][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.999660][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 717.954529][T11408] loop8: detected capacity change from 0 to 1024 [ 717.989355][T11412] loop6: detected capacity change from 0 to 1024 [ 718.039649][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.048127][T11408] EXT4-fs: Ignoring removed oldalloc option [ 718.061943][T11413] loop3: detected capacity change from 0 to 1024 [ 718.119999][T11408] EXT4-fs: Ignoring removed orlov option [ 718.160688][T11412] EXT4-fs: Ignoring removed orlov option [ 718.166383][T11412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 718.214908][T11408] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 718.351882][T11408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.432451][T11412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.079652][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.119648][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.582192][T10359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.958604][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.169669][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 721.431702][T11452] loop6: detected capacity change from 0 to 512 [ 721.479936][T11452] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.1143: corrupted in-inode xattr: bad e_name length [ 721.514853][T11454] loop8: detected capacity change from 0 to 1024 [ 721.522063][T11452] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1143: couldn't read orphan inode 15 (err -117) [ 721.729855][T11452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.199672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.239663][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 724.248121][ T6830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.279649][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 725.319686][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.369654][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 727.128880][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1153'. [ 727.399666][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 727.712072][T11497] loop9: detected capacity change from 0 to 4096 [ 727.755404][T11503] loop5: detected capacity change from 0 to 1024 [ 727.767377][T11497] nilfs2: Unknown parameter '01777777777777777777777' [ 727.780742][T11503] EXT4-fs: Ignoring removed oldalloc option [ 727.922304][T11503] EXT4-fs: Ignoring removed orlov option [ 728.346285][T11503] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 728.439652][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 728.680162][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 728.986523][ T6412] udevd[6412]: incorrect nilfs2 checksum on /dev/loop9 [ 728.995870][T11503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.479666][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 730.519728][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 730.565598][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.345728][T11536] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 731.357880][T11536] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 731.366204][T11538] loop6: detected capacity change from 0 to 512 [ 731.366333][T11536] CPU: 1 UID: 0 PID: 11536 Comm: syz.3.1159 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 731.384638][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 731.394716][T11536] RIP: 0010:h5_recv+0x104/0x910 [ 731.399616][T11536] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 31 ef 4f f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 731.419272][T11536] RSP: 0018:ffffc900178b7c00 EFLAGS: 00010283 [ 731.425364][T11536] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc90013282000 [ 731.433352][T11536] RDX: 0000000000080000 RSI: ffffffff886c308f RDI: 0000000000000005 [ 731.441349][T11536] RBP: ffffc900178b7d88 R08: 0000000000000005 R09: 0000000000000000 [ 731.449364][T11536] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 731.457364][T11536] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb34160 [ 731.465352][T11536] FS: 00007fc163fb06c0(0000) GS:ffff888124857000(0000) knlGS:0000000000000000 [ 731.474308][T11536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.480911][T11536] CR2: 000055557e05b588 CR3: 000000005c637000 CR4: 0000000000350ef0 [ 731.488900][T11536] Call Trace: [ 731.492191][T11536] [ 731.495143][T11536] ? __pfx_h5_recv+0x10/0x10 [ 731.499782][T11536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.505462][T11536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.511145][T11536] hci_uart_tty_receive+0x254/0x7e0 [ 731.516408][T11536] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 731.522192][T11536] tty_ioctl+0x583/0x1640 [ 731.526732][T11536] ? __pfx_tty_ioctl+0x10/0x10 [ 731.531556][T11536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.537218][T11536] ? find_held_lock+0x2b/0x80 [ 731.541927][T11536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.547591][T11536] ? hook_file_ioctl_common+0x145/0x410 [ 731.553178][T11536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.558840][T11536] ? __fget_files+0x20e/0x3c0 [ 731.563552][T11536] ? __pfx_tty_ioctl+0x10/0x10 [ 731.568359][T11536] __x64_sys_ioctl+0x18e/0x210 [ 731.573174][T11536] do_syscall_64+0xcd/0x4c0 [ 731.577712][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.583635][T11536] RIP: 0033:0x7fc16698e929 [ 731.588072][T11536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.599661][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 731.607687][T11536] RSP: 002b:00007fc163fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.623078][T11536] RAX: ffffffffffffffda RBX: 00007fc166bb6320 RCX: 00007fc16698e929 [ 731.631076][T11536] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 731.639067][T11536] RBP: 00007fc166a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 731.647069][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.655069][T11536] R13: 0000000000000001 R14: 00007fc166bb6320 R15: 00007fffa292bcd8 [ 731.663073][T11536] [ 731.666098][T11536] Modules linked in: [ 731.672093][T11536] ---[ end trace 0000000000000000 ]--- [ 731.677582][T11536] RIP: 0010:h5_recv+0x104/0x910 [ 731.682527][T11536] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 31 ef 4f f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 731.702239][T11536] RSP: 0018:ffffc900178b7c00 EFLAGS: 00010283 [ 731.708364][T11536] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc90013282000 [ 731.717367][T11536] RDX: 0000000000080000 RSI: ffffffff886c308f RDI: 0000000000000005 [ 731.725486][T11536] RBP: ffffc900178b7d88 R08: 0000000000000005 R09: 0000000000000000 [ 731.733527][T11536] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 731.741566][T11536] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb34160 [ 731.749620][T11536] FS: 00007fc163fb06c0(0000) GS:ffff888124857000(0000) knlGS:0000000000000000 [ 731.758605][T11536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.765283][T11536] CR2: 000055557e05b588 CR3: 000000005c637000 CR4: 0000000000350ef0 [ 731.773347][T11536] Kernel panic - not syncing: Fatal exception [ 731.779622][T11536] Kernel Offset: disabled [ 731.783949][T11536] Rebooting in 86400 seconds..