last executing test programs: 8m30.513033411s ago: executing program 0 (id=869): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) syz_io_uring_setup(0xec5, 0x0, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) 8m21.564585044s ago: executing program 0 (id=890): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x400, 0x360, 0x556, 0x2000, 0xbdf2, 0xb, 0xa, 0x1, {0x8000, 0x569, 0x1}, {0x6, 0x1}, {0x8, 0x36, 0x1}, {0x8001, 0x80000001, 0x1}, 0x1, 0x40, 0x6, 0x6, 0x0, 0xfffffff2, 0x5, 0x73a, 0x8, 0x90, 0x6, 0x3ff, 0x55, 0x200, 0x3, 0xa}) 8m18.49343099s ago: executing program 0 (id=899): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x40) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000280)={r7}) 8m17.796610081s ago: executing program 0 (id=900): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/61, 0x3d}], 0x1, 0x2, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8m16.396390311s ago: executing program 0 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) writev(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000006040000000000000001000084ffff0000000000000100000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8932, &(0x7f0000000000)={'veth0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x11808, &(0x7f0000000580)=ANY=[], 0xfd, 0x1c0, &(0x7f0000000980)="$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") syz_io_uring_setup(0x837, &(0x7f0000000280)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, 0x0, 0x0) 8m9.274921448s ago: executing program 0 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1b, 0x20000002, r0) process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000540)="aa", 0x1}], 0x2, 0x13, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sync_file_range(r1, 0x5, 0x90000000000, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 7m53.863499238s ago: executing program 32 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1b, 0x20000002, r0) process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000540)="aa", 0x1}], 0x2, 0x13, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sync_file_range(r1, 0x5, 0x90000000000, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 7m4.511684204s ago: executing program 5 (id=1042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, 0xfffffffffffffffd, &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000240)='.\x00', 0x0, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=ANY=[], 0x6c}}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m50.625556161s ago: executing program 5 (id=1060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) syz_emit_ethernet(0xfbe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x5, {0x2, 0xf0, 0x7}}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) close(r2) timer_settime(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20040810) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m48.06307707s ago: executing program 5 (id=1066): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40018) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000cc0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x0, "0f03c8c7e8da000000000004d6ffff9d2bc76054cdc077b300000000000040000000000000000083eb0000090000a06100", 0x1e}, 0x60) sendmsg$sock(r6, &(0x7f0000001b40)={&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)="8a", 0x1}], 0x1}, 0x4) 6m45.557681227s ago: executing program 5 (id=1072): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 6m45.38364196s ago: executing program 5 (id=1074): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000180)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_pidfd_open(r2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 6m44.113398949s ago: executing program 5 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e657400"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000380)=[{0x4, 0x7, 0x800}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002cbd702100610000000000000000000000000000ec60633d1e8e82dd23d6138ec891b117c3b23d93bf9360"], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0x40449426, &(0x7f0000000400)={0x0, 0x7f, 0x0, [0x3, 0x5, 0x4, 0xe, 0x5], [0x3, 0xd0a, 0x80, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x3, 0x6, 0x9a9, 0x2, 0xfff, 0x7, 0x1, 0xffffffffffffffff, 0x3, 0xe, 0x5, 0xfffffffffffff800, 0x100000001, 0x4, 0x0, 0x6, 0xbad, 0x9, 0x87d, 0xb, 0x9, 0xa7, 0x6, 0x1c000, 0x401, 0x0, 0xe, 0x7, 0x88, 0x0, 0x6, 0x5, 0xffffffffffff7b2e, 0xfff, 0x32114668, 0x1, 0x4, 0x1ff, 0xf2, 0xffffffffffff7fff, 0x8000, 0x8a, 0xed5, 0x1, 0x9, 0x3ff, 0x6, 0x85, 0xd, 0x2, 0x7, 0x6, 0x5, 0x401, 0x152, 0x1, 0x7, 0xff, 0x77e, 0x4, 0xfffffffffffffffc, 0x5, 0x100, 0x80000000, 0x7fffffffffffffff, 0x8, 0x7f, 0xf64, 0xa, 0x80000000, 0x2, 0x3e33, 0xee6, 0x0, 0x80000001, 0x0, 0x0, 0x9, 0x3, 0xfffffffffffffe01, 0xa, 0x4, 0xfffffffffffffffd, 0x3, 0x2, 0x0, 0x5b7, 0xe8c, 0x7fffffff, 0x5b2, 0x2, 0x2, 0x8, 0xffffffff, 0x9, 0x2, 0xe267, 0x3ff, 0xd0, 0x3ff, 0x3, 0x3, 0x10, 0x2, 0x3, 0x3, 0x4, 0xf, 0x2, 0x2, 0x2bd, 0x2f19, 0x2333]}) 6m29.108483812s ago: executing program 33 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e657400"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000380)=[{0x4, 0x7, 0x800}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002cbd702100610000000000000000000000000000ec60633d1e8e82dd23d6138ec891b117c3b23d93bf9360"], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0x40449426, &(0x7f0000000400)={0x0, 0x7f, 0x0, [0x3, 0x5, 0x4, 0xe, 0x5], [0x3, 0xd0a, 0x80, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x3, 0x6, 0x9a9, 0x2, 0xfff, 0x7, 0x1, 0xffffffffffffffff, 0x3, 0xe, 0x5, 0xfffffffffffff800, 0x100000001, 0x4, 0x0, 0x6, 0xbad, 0x9, 0x87d, 0xb, 0x9, 0xa7, 0x6, 0x1c000, 0x401, 0x0, 0xe, 0x7, 0x88, 0x0, 0x6, 0x5, 0xffffffffffff7b2e, 0xfff, 0x32114668, 0x1, 0x4, 0x1ff, 0xf2, 0xffffffffffff7fff, 0x8000, 0x8a, 0xed5, 0x1, 0x9, 0x3ff, 0x6, 0x85, 0xd, 0x2, 0x7, 0x6, 0x5, 0x401, 0x152, 0x1, 0x7, 0xff, 0x77e, 0x4, 0xfffffffffffffffc, 0x5, 0x100, 0x80000000, 0x7fffffffffffffff, 0x8, 0x7f, 0xf64, 0xa, 0x80000000, 0x2, 0x3e33, 0xee6, 0x0, 0x80000001, 0x0, 0x0, 0x9, 0x3, 0xfffffffffffffe01, 0xa, 0x4, 0xfffffffffffffffd, 0x3, 0x2, 0x0, 0x5b7, 0xe8c, 0x7fffffff, 0x5b2, 0x2, 0x2, 0x8, 0xffffffff, 0x9, 0x2, 0xe267, 0x3ff, 0xd0, 0x3ff, 0x3, 0x3, 0x10, 0x2, 0x3, 0x3, 0x4, 0xf, 0x2, 0x2, 0x2bd, 0x2f19, 0x2333]}) 12.730763127s ago: executing program 2 (id=1914): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12.649666488s ago: executing program 6 (id=1916): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@journal_checksum}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x800, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp6}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 12.356903092s ago: executing program 2 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000500)={0x0, 0x1, @raw_data=[0x8, 0x8, 0x9, 0x119, 0x5, 0x4, 0x6, 0x100, 0x800, 0xe9, 0x6fc4, 0x80000001, 0x3, 0x200, 0xf4a, 0x2840]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 11.982109708s ago: executing program 2 (id=1919): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [r5], [0x80ffff], [], [0x400000000000000, 0x0, 0x0, 0x8]}) r6 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r7 = ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x803}, 0x4004) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500001c0000000004019078ac"], 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="ad432bbd700000000d000100"], 0x14}}, 0x0) 11.863738339s ago: executing program 4 (id=1921): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0x100, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x129, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x800, 0x33000000, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.385278767s ago: executing program 3 (id=1922): r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3, 0x8, 0x3, 0x3, 0x10001}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0) write$nbd(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getrlimit(0x7, &(0x7f0000000180)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fcntl$getown(r4, 0x9) fstat(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000480)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000080)=0x3, 0x12) setsockopt$packet_rx_ring(r11, 0x107, 0x5, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001380)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="99e117f769066baed53897c397e8e9c151570f1187b2f49f5f53480acde061ac884ce211eb5362b94a236016cb26a33412", 0x31}, {&(0x7f0000000280)="2e2493ddfbf7d519f53eb4a0b9dc7b2afa28d5041035b4f8b45a539de352f2582bda87dbfa7673bdbe16cb618b439b9d8c1ca369ad646d6fef9181dff81d02", 0x3f}], 0x2, &(0x7f0000000680)=[@cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}], 0x18, 0x24040000}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)="d6b4f2553b343079b5e055acdeff9749fbf009a682ab854a16caaecbc7524ade09b8acc86706f3f268ab82cf429d322805a240b37ec31004526142aa124b861a482e6ef9276c481801c421adc3cf37ddada9d47b0cbb3e783fdd3aef2b195694e1f77adef0d433cf", 0x68}, {&(0x7f00000007c0)="da7ebdce0e81580711a94686e127dfd51eec52d4321b1859a8f9f18beefb5bc3a298ca73d3c5306e9507b79a3b9b69f58f6663ba4898f67788a339d2d4147173d6268da9fe0c3e1fc1186b8d376286504d369d008e8b682e0a7035d3af97949d24277aef07329039afac744ae0849c2c7209", 0x72}, {&(0x7f0000000880)="4012f8219f3dc17d54ab7cf53bb8ae25d06e4ce6be0f38b7f906f704e9e9302044c135b3118842539d4c30edc92cae203046dd13df0e05f1fd93511b9b699a7882766862d18de81d5e9fe21c87c145244a1f18b2fcffd72091eff895b1a0be5a0c25bd38981eaf68392c611195c86303463a72a03d8f3241c01b6f472b2cca9125617464173d4e6b6d287991f44089023df380660e9abe15102e810ee9fd8f29b0127753602d72b77a09f6cc88f2be820854af", 0xb3}, {&(0x7f0000000940)="db4d40526bd4294abf133219787863e71946c3e74b077abac67392bc578e53c9dc06e62267b2054a2087fa031438b7571f2ef03f017a485f72059fc11c26beca887093ea87f64f0202cb01a903f76dc23fac6cc838c9ff25489d61a580681131bea07671ada03b6ca50190b4c022318caaa6621befd3be3fc61d174583f6b9e1e61d1ec4867374dec0b0f3993b3396a8fa6b3f94d091d9a090069993bfcbe7cc0c365994872bbb94d4b94b193cd1ae42901d5c9f29b26329b82b15d3a10ef302aa0427bc42525fd03139b7388faed56e08e72116c84d47c375c6812f07f70f9d88", 0xe1}, {&(0x7f0000000a40)="f340e33f1e92bae9bce86d018c26c193fdc4ab1b2695cbf0c5f616", 0x1b}, {&(0x7f0000000bc0)="19bdb309170e0d06b1764dd78988fadc1161002ea460286dbd07948534a1605824fed67720d04ea76b0c9a476286995d0c58fce56fd358a2df0214bd7e3e38470dc55eedcd1c918e1ef86a16184ab883cc568c1fc1c3d5c7fb6f3f0baf07fddb1561579f2db96ee093d92d24a1e306d312e947d32ee56bb13faf76d88dbfc40d2cb3692670bfce5285464ff42b8c907eb2bbe9aeee64e5f3402d48e8a8e0897f076b07da370d54d11892b55e09a94a60e2d58ac2e469b9a5289800fae1e6fa892354a4129b", 0xc5}, {&(0x7f0000000cc0)="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", 0xfc}], 0x7, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="5262b06242704040937d53740cd7ca1fea3fbee4fabcc9e217b7459f9a4b040a0548e7d58bfcb579a6902f147b8b43f30fd6e2ae83eda44afb77617ebd406c8cd81d968b065c961c61beca012834cc2e1902b4c98bd0d2ecf96fa3ead1c0cef0eed0", 0x62}], 0x1, &(0x7f0000000e00)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r4, r2, r0, r11]}}, @rights={{0x28, 0x1, 0x1, [r6, r6, r1, r6, r3, r5, r0]}}], 0x4c, 0x4004000}}, {{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000f00)="8f64ae28900c48a1b5794dde5e7129987150cb63fcfdc25c91727658bfdcef181c3d041b37b5f3731cb5b1441e4115b5e354d9199cccac21ef81a2d77a12b9b250dbc5b18c0d127e71e6d0f77176a52669be139c5e8c190ca12e8f7fed5d6bfde38e48836e798e6387d1bf0e53dff3", 0x6f}, {&(0x7f0000000f80)="2e054b47372958a007bf964b0f27b8b9f344a15a6511d773824a0d92f198214920470fec1a6cb318a282ef960e3577bc3f255662fef954dd9d29cce4f848e234e2651821115b2c09ac059c00c90954905f67aa7ec55d00ed5a87b8c4f0387a498a140ca7025563f518eddcd439572fac0a4cc00a492c72b4eaddc937fe9cdb6abfaa4e0abe6550a82616b3a56d91a5be8c776065d31f875cb84b78610f4815a244a248c27992606e168d0fbe7b9fa999da6c395b1e5dd7c44bf90d8f7475d47ae4a65cc001de5a9a357d73d3b166b93499d6d28db78d693eb09dfcd060818b0d273505167b639800b013", 0xea}, {&(0x7f0000001080)="d14f0de6821d536f303ba5fc621818fe05c802e41b7f406a93b5a6d4effa1e36349ad62543f27482ab9c658b4c01db6ce728df46c06bcabe5af4073212a33a995ceaf6b990b613b8f331e7626fe928a345ed4e6f06ca0ed2851393e096f6aa30e767835845439e1327d98ac053f4a455cf02dcd4c694453678d9d941db9a2bb16d132add1f3486ea4fd7c30b46ae3e4c7236f1c74495cc565f5b40476ee8926d4df04c6f716ba6e6888e93202971752c2b16846da712", 0xb6}, {&(0x7f0000001140)="c37a68e04a81003c74f53f8b6f3c0847ee46ed3a26", 0x15}, {&(0x7f0000001180)="05e2db48cb4018eef622efddbfee2b4be5b6c31655ee82e6bcfa3b9b802dd31631ecb04109e9d320be416cf3108940efe53935b8424db730dde6de0f8455c928211a70e27fe0b001a2b2fdbb3f08311a42cc1d1bd172b4864866ebf23010d4198973efc10f9f96722d3e3c055eba8ebdc3ee91d3cd7d493040c4fea3894861021bfe93181ccf205a21c1674fcc542687d435d1de7f59725956d2a23376ea0756d29688a48d7bc86cc8e049569f03cb0e88f5207621fa570e", 0xb8}, {&(0x7f0000001240)="4e6e8bc4d3b73371ed0c4ef39e687a46fbddbc74c32e75161da793c6ab3cf8691453e1", 0x23}, {&(0x7f0000001280)="d3b187937d0213923a99bc2a3b7e80bc76ec1825d75f69021e0221a43bba7a85fe094c3272926b3d0633ca0f5fbfe165102e9b53146c8ba3e100b915bd8a06b5a56011211354d38fe311ee40eebe79d5be6410a7dc085a7d768de55420d2559229dc7e7bbce0179ff373eecd00f473c1fc86a93e9e3e88c5edab0a4ab37d05942773", 0x82}], 0x7, 0x0, 0x0, 0x40000}}], 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl(r6, 0x2202, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11.359214927s ago: executing program 4 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0xfffffffffffffffe, 0x1000}], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r9, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 10.365625661s ago: executing program 1 (id=1924): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 9.602379512s ago: executing program 6 (id=1925): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x536, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) 8.814071524s ago: executing program 3 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) 8.761391114s ago: executing program 4 (id=1927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002"], 0x44}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.601119216s ago: executing program 1 (id=1928): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x9, 0x0, 0x40, 0x10010001}, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000000c0)=0x3ff, 0x4) mmap(&(0x7f0000516000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket(0x28, 0xa, 0x8000) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x1d}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005b00)=ANY=[@ANYBLOB="2c00000012009702600000000000000007000000", @ANYRESHEX=r2], 0x2c}}, 0x400) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000006c0)='Z', 0x1, r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r6, 0x289e0cb5, 0x0) 8.467381888s ago: executing program 6 (id=1929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@arm64={0x5, 0x0, 0x7, '\x00', 0xffffffffeffffffc}) 7.853333267s ago: executing program 4 (id=1930): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000500)={0x0, 0x1, @raw_data=[0x8, 0x8, 0x9, 0x119, 0x5, 0x4, 0x6, 0x100, 0x800, 0xe9, 0x6fc4, 0x80000001, 0x3, 0x200, 0xf4a, 0x2840]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 7.561524481s ago: executing program 3 (id=1931): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.555539392s ago: executing program 6 (id=1932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r0}) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$packet(0x11, 0x2, 0x300) move_pages(0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) 7.527100472s ago: executing program 1 (id=1933): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'sit0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 6.826054832s ago: executing program 3 (id=1934): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) close(0x3) 6.597403375s ago: executing program 3 (id=1935): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@journal_checksum}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x800, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp6}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6.563847196s ago: executing program 1 (id=1936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '', 0x20, 0x7}, 0x2a, r3) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x48, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x400000000000000}, {0x0, 0x4, 0x400, 0xa78a}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 6.27224231s ago: executing program 2 (id=1937): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) getpid() ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc1b, &(0x7f0000001940)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8979) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendto$inet6(r5, &(0x7f0000000340)="48d394dc681f4122296bdc83d8e0c66ccb9058fe3f6ab18638c1c794f3aa34a9f8dcef70a5286a700d4c0ee7e23b11586ec38c943f0b520e8fe684a4ee77b133af13b5db37b3ca640a22b57657e5364e22a434b3137e9692b6444fa9c89dd51a3b29", 0x62, 0x0, &(0x7f00000003c0)={0xa, 0x4e21, 0x9, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) 4.509404556s ago: executing program 2 (id=1938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000002240)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$fuseblk(0x0, &(0x7f0000004240)='./file0\x00', 0x0, 0x8104a9, 0x0) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x15d) bind$netrom(r7, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default]}, 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 4.432063207s ago: executing program 3 (id=1939): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.414719708s ago: executing program 1 (id=1940): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0245628, &(0x7f0000000040)={0x0, 0x81, 0x0, '\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r5, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x700, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x18, &(0x7f00000000c0)=0x40001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r9, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x70) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}], 0x6) 3.825291946s ago: executing program 6 (id=1941): mount_setattr(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x586, &(0x7f0000000680)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x8, 0x200000) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2, 0x3, 0x8d) syz_open_dev$loop(0x0, 0x9, 0x420000) fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 3.56759572s ago: executing program 4 (id=1942): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(r0, 0x0, 0x0) 3.166060485s ago: executing program 2 (id=1943): r0 = socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 69.38791ms ago: executing program 4 (id=1944): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f00000000c0)='qdisc_dequeue\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r11, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 44.64326ms ago: executing program 6 (id=1945): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1946): syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sg(&(0x7f0000000100), 0x81, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x20, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): 8007] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 540.398367][ T8007] BTRFS info (device loop1): force zlib compression, level 3 [ 540.405877][ T8007] BTRFS info (device loop1): force clearing of disk cache [ 540.413225][ T8007] BTRFS info (device loop1): setting nodatasum [ 540.419499][ T8007] BTRFS info (device loop1): enabling disk space caching [ 540.426562][ T8007] BTRFS info (device loop1): disk space caching is enabled [ 540.434162][ T8007] BTRFS info (device loop1): has skinny extents [ 540.564860][ T8020] loop2: detected capacity change from 0 to 512 [ 540.601659][ T7854] team0: Port device team_slave_0 added [ 540.627421][ T7854] team0: Port device team_slave_1 added [ 540.717457][ T8020] EXT4-fs (loop2): 1 truncate cleaned up [ 540.749261][ T8020] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 540.841718][ T7997] loop4: detected capacity change from 0 to 32768 [ 540.934036][ T7997] JBD2: Ignoring recovery information on journal [ 541.104341][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.148468][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.165506][ T8007] BTRFS info (device loop1): enabling ssd optimizations [ 541.183486][ T8007] BTRFS info (device loop1): clearing free space tree [ 541.190546][ T8007] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 541.200461][ T8007] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 541.252116][ T7997] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 541.303342][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.453043][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.470626][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.557524][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.782071][ T4179] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop1 scanned by udevd (4179) [ 542.833632][ T4177] ocfs2: Unmounting device (7,4) on (node local) [ 542.891659][ T7854] device hsr_slave_0 entered promiscuous mode [ 542.948867][ T7854] device hsr_slave_1 entered promiscuous mode [ 542.980497][ T7854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.038730][ T7854] Cannot create hsr debugfs directory [ 543.062003][ T8065] loop2: detected capacity change from 0 to 2048 [ 543.184787][ T8065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.826899][ T7854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.468799][ T7854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 547.510735][ T7854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.553644][ T7854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.988923][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.147575][ T8099] loop2: detected capacity change from 0 to 32768 [ 548.170250][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 548.222468][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 548.412353][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.858446][ T8112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 548.870238][ T8112] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 549.062662][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 549.162874][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.412339][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.419516][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.463776][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 549.536391][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 549.791208][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.957138][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.964358][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.207921][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.366305][ T8118] loop3: detected capacity change from 0 to 2048 [ 550.384651][ T8118] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 550.470553][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 550.535559][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.597587][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.654911][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.664129][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.673032][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 550.681987][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.692454][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.214066][ T8126] loop3: detected capacity change from 0 to 512 [ 551.221950][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.265422][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.276577][ T8126] EXT4-fs (loop3): Unrecognized mount option "dont_hash" or missing value [ 551.333129][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.796722][ T4329] device hsr_slave_0 left promiscuous mode [ 552.496617][ T4329] device hsr_slave_1 left promiscuous mode [ 552.520471][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.538344][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.565657][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.593751][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.610772][ T4329] device bridge_slave_1 left promiscuous mode [ 552.634208][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.700067][ T4329] device bridge_slave_0 left promiscuous mode [ 552.717069][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.424022][ T4329] device veth1_macvtap left promiscuous mode [ 554.570421][ T8147] loop2: detected capacity change from 0 to 512 [ 554.593159][ T4329] device veth0_macvtap left promiscuous mode [ 554.604973][ T4329] device veth1_vlan left promiscuous mode [ 554.615065][ T4329] device veth0_vlan left promiscuous mode [ 554.953864][ T8147] EXT4-fs (loop2): 1 truncate cleaned up [ 554.962463][ T8147] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 555.124755][ T8153] loop1: detected capacity change from 0 to 1764 [ 556.495514][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 556.512061][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 557.164792][ T8165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1010'. [ 557.684661][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.705911][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.832133][ T4329] team0 (unregistering): Port device bond0 removed [ 558.879365][ T4329] bond0 (unregistering): Released all slaves [ 559.488171][ T8174] loop1: detected capacity change from 0 to 256 [ 559.895878][ T8174] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 559.917044][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.036704][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 560.388169][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.993505][ T8206] loop4: detected capacity change from 0 to 1024 [ 561.031585][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 561.063381][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.115836][ T8206] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 561.181619][ T8206] EXT4-fs (loop4): mount failed [ 561.217967][ T7854] device veth0_vlan entered promiscuous mode [ 561.252050][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 561.269503][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 561.272591][ T8213] loop1: detected capacity change from 0 to 512 [ 561.306072][ T7854] device veth1_vlan entered promiscuous mode [ 561.369961][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.383058][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 561.425165][ T8213] EXT4-fs (loop1): 1 truncate cleaned up [ 561.441419][ T8213] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 561.474305][ T8218] loop2: detected capacity change from 0 to 512 [ 561.522923][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 561.662603][ T8218] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 561.762230][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 561.795231][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 561.872903][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 561.938658][ T7854] device veth0_macvtap entered promiscuous mode [ 562.002098][ T7854] device veth1_macvtap entered promiscuous mode [ 562.083811][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 562.118065][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 562.189935][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.273071][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.324455][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.365814][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.413072][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.454253][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.498362][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.540782][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.589384][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.644381][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 562.663973][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 562.707253][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.750086][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.781102][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.832614][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.874478][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.915843][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.931637][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.968456][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.033802][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.086203][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.124740][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 563.246651][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 563.269526][ T7854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.088518][ T7854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.103388][ T7854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.112595][ T7854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.650288][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.721314][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.648027][ T8262] loop4: detected capacity change from 0 to 2048 [ 568.144915][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.167154][ T8262] Alternate GPT is invalid, using primary GPT. [ 568.173858][ T8262] loop4: p1 p2 p3 [ 568.232404][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.310709][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.368821][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 568.524951][ T8269] loop3: detected capacity change from 0 to 512 [ 568.672695][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 568.860554][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 568.885009][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 569.024841][ T8269] EXT4-fs (loop3): 1 truncate cleaned up [ 569.125384][ T8269] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 569.767754][ T8276] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 569.791366][ T8284] loop1: detected capacity change from 0 to 64 [ 569.852277][ T8284] hfs: unable to parse mount options [ 571.027012][ T8303] o2cb: This node has not been configured. [ 571.032986][ T8303] o2cb: Cluster check failed. Fix errors before retrying. [ 571.040309][ T8303] (syz.5.1035,8303,0):user_dlm_register:675 ERROR: status = -22 [ 571.048128][ T8303] (syz.5.1035,8303,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 573.864049][ T8325] loop1: detected capacity change from 0 to 2048 [ 574.860818][ T4161] Alternate GPT is invalid, using primary GPT. [ 575.329374][ T4161] loop1: p1 p2 p3 [ 575.449428][ T8328] loop2: detected capacity change from 0 to 16 [ 575.524748][ T8328] erofs: (device loop2): mounted with root inode @ nid 36. [ 575.740221][ T8325] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 575.772201][ T8333] attempt to access beyond end of device [ 575.772201][ T8333] loop2: rw=0, want=24, limit=16 [ 575.996031][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 576.013631][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 576.180437][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 576.223075][ T8339] loop4: detected capacity change from 0 to 64 [ 577.457944][ T8339] hfs: unable to parse mount options [ 581.718689][ T8357] o2cb: This node has not been configured. [ 581.724807][ T8357] o2cb: Cluster check failed. Fix errors before retrying. [ 581.732174][ T8357] (syz.2.1047,8357,1):user_dlm_register:675 ERROR: status = -22 [ 581.739997][ T8357] (syz.2.1047,8357,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 582.320850][ T8359] loop4: detected capacity change from 0 to 2048 [ 582.519665][ T8359] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 586.771728][ T8379] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 588.080433][ T8389] loop2: detected capacity change from 0 to 1024 [ 588.161510][ T8394] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 589.301527][ T8405] loop4: detected capacity change from 0 to 64 [ 589.319698][ T8389] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 589.386843][ T8389] EXT4-fs (loop2): mount failed [ 589.497474][ T8405] hfs: unable to parse mount options [ 592.963935][ T8431] loop1: detected capacity change from 0 to 1024 [ 593.156529][ T8437] loop3: detected capacity change from 0 to 256 [ 593.198559][ T8437] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 593.416897][ T8443] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 594.402150][ T8450] sctp: failed to load transform for md5: -2 [ 597.094255][ T8491] loop1: detected capacity change from 0 to 1024 [ 597.660690][ T8491] EXT4-fs warning (device loop1): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 597.751030][ T8491] EXT4-fs (loop1): mount failed [ 597.840022][ T8503] loop4: detected capacity change from 0 to 64 [ 597.923506][ T8506] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 598.320277][ T8503] hfs: unable to parse mount options [ 600.699764][ T8523] loop3: detected capacity change from 0 to 32768 [ 601.500038][ T8525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 601.511118][ T8525] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 602.145501][ T4316] Bluetooth: hci4: command 0x0406 tx timeout [ 603.630194][ T8536] netlink: 'syz.2.1088': attribute type 6 has an invalid length. [ 603.842873][ T8540] loop4: detected capacity change from 0 to 1024 [ 603.892484][ T8540] EXT4-fs (loop4): Ignoring removed orlov option [ 603.978097][ T8540] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 604.033268][ T8546] loop1: detected capacity change from 0 to 512 [ 604.115344][ T8540] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 604.267786][ T8546] EXT4-fs (loop1): Ignoring removed bh option [ 604.305446][ T8546] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 604.328838][ T8551] loop3: detected capacity change from 0 to 1024 [ 604.428489][ T8546] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 604.455826][ T8546] EXT4-fs (loop1): group descriptors corrupted! [ 604.481481][ T8540] loop4: detected capacity change from 0 to 40427 [ 604.500564][ T8540] F2FS-fs (loop4): invalid crc value [ 605.717156][ T8540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 606.555924][ T8540] F2FS-fs (loop4): Start checkpoint disabled! [ 606.585493][ T8551] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 606.641164][ T8540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 606.739641][ T8551] EXT4-fs (loop3): mount failed [ 606.888028][ T8561] overlayfs: missing 'workdir' [ 607.685877][ T8573] loop2: detected capacity change from 0 to 64 [ 607.776667][ T8575] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1097'. [ 608.201788][ T8573] hfs: unable to parse mount options [ 610.915017][ T9] attempt to access beyond end of device [ 610.915017][ T9] loop4: rw=1, want=45104, limit=40427 [ 611.221252][ T9] attempt to access beyond end of device [ 611.221252][ T9] loop4: rw=2049, want=41008, limit=40427 [ 611.512424][ T8585] loop2: detected capacity change from 0 to 2048 [ 611.649242][ T8592] netlink: 'syz.1.1101': attribute type 6 has an invalid length. [ 611.737116][ T8585] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 614.213831][ T4316] Bluetooth: hci0: command 0x0409 tx timeout [ 614.267007][ T8599] loop2: detected capacity change from 0 to 2048 [ 614.296438][ T1239] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.343098][ T8599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 614.639850][ T8606] loop4: detected capacity change from 0 to 512 [ 614.844745][ T8606] EXT4-fs (loop4): Unrecognized mount option "dont_hash" or missing value [ 616.154884][ T1239] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.338631][ T4316] Bluetooth: hci0: command 0x041b tx timeout [ 616.513182][ T8619] loop1: detected capacity change from 0 to 16 [ 616.546092][ T1239] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.583984][ T8619] erofs: (device loop1): mounted with root inode @ nid 36. [ 616.753010][ T8619] attempt to access beyond end of device [ 616.753010][ T8619] loop1: rw=0, want=24, limit=16 [ 616.813000][ T1239] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.909201][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 616.970078][ T8630] loop2: detected capacity change from 0 to 1024 [ 617.187112][ T8630] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 617.248111][ T8630] EXT4-fs (loop2): mount failed [ 618.376661][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 618.696046][ T8648] loop1: detected capacity change from 0 to 64 [ 618.718246][ T8650] loop2: detected capacity change from 0 to 2048 [ 618.730347][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.737562][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.760335][ T8650] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 618.823460][ T8589] device bridge_slave_0 entered promiscuous mode [ 619.048051][ T8648] hfs: unable to parse mount options [ 620.339232][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.359219][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.371214][ T8589] device bridge_slave_1 entered promiscuous mode [ 620.749377][ T4313] Bluetooth: hci0: command 0x0419 tx timeout [ 622.755856][ T8664] netlink: 'syz.2.1112': attribute type 6 has an invalid length. [ 622.842969][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.855427][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.915185][ T8672] loop4: detected capacity change from 0 to 64 [ 622.981967][ T8589] team0: Port device team_slave_0 added [ 623.070151][ T8672] hfs: unable to change codepage [ 623.075288][ T8672] hfs: unable to parse mount options [ 623.154262][ T8589] team0: Port device team_slave_1 added [ 623.831832][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 624.089594][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.121713][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.269373][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 624.296883][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.299451][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.345053][ T23] usb 4-1: config 0 descriptor?? [ 624.363985][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.375538][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.377642][ T8694] loop2: detected capacity change from 0 to 1024 [ 624.395584][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.452901][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.524891][ T8694] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 624.574558][ T8694] EXT4-fs (loop2): mount failed [ 624.591589][ T8589] device hsr_slave_0 entered promiscuous mode [ 624.606896][ T8589] device hsr_slave_1 entered promiscuous mode [ 624.613856][ T8589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.628403][ T8589] Cannot create hsr debugfs directory [ 625.160674][ T23] ath6kl: Failed to submit usb control message: -71 [ 625.168217][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 625.185916][ T23] ath6kl: Unable to send get target info: -71 [ 625.645566][ T23] ath6kl: Failed to init ath6kl core: -71 [ 625.829151][ T23] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 626.079991][ T23] usb 4-1: USB disconnect, device number 7 [ 628.644246][ T8724] loop2: detected capacity change from 0 to 64 [ 628.939170][ T8729] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 629.047220][ T8724] hfs: unable to parse mount options [ 630.029299][ T8738] loop1: detected capacity change from 0 to 16 [ 630.112851][ T8738] erofs: (device loop1): mounted with root inode @ nid 36. [ 630.156267][ T8738] attempt to access beyond end of device [ 630.156267][ T8738] loop1: rw=0, want=24, limit=16 [ 630.226508][ T8589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 630.312426][ T8589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 630.415410][ T1239] device hsr_slave_0 left promiscuous mode [ 630.444428][ T1239] device hsr_slave_1 left promiscuous mode [ 630.476542][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.518497][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.545167][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.572846][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.601565][ T1239] device bridge_slave_1 left promiscuous mode [ 630.626688][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.664027][ T1239] device bridge_slave_0 left promiscuous mode [ 630.717603][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.824303][ T1239] device veth1_macvtap left promiscuous mode [ 630.843560][ T1239] device veth0_macvtap left promiscuous mode [ 630.865358][ T1239] device veth1_vlan left promiscuous mode [ 630.895618][ T1239] device veth0_vlan left promiscuous mode [ 632.533073][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 632.549014][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 632.719191][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.804588][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.066120][ T1239] bond0 (unregistering): Released all slaves [ 633.127659][ T8589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 633.163776][ T8770] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 633.315498][ T8589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 634.985743][ T8790] loop2: detected capacity change from 0 to 16 [ 635.108545][ T8790] erofs: (device loop2): mounted with root inode @ nid 36. [ 635.150866][ T8790] attempt to access beyond end of device [ 635.150866][ T8790] loop2: rw=0, want=24, limit=16 [ 635.302199][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.403938][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 635.520097][ T8796] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 636.219121][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.262481][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.322734][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.335407][ T8805] loop1: detected capacity change from 0 to 136 [ 636.341440][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.375337][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.382506][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.418165][ T8808] loop2: detected capacity change from 0 to 128 [ 636.432411][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.464615][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.497514][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.517607][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.524815][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.648449][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 637.704771][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 637.716548][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.789910][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 637.799353][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 637.809803][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.830444][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.850832][ T8821] tmpfs: Unknown parameter 'grpquota' [ 637.866040][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 637.875012][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.884949][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 637.894183][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.904560][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 638.220666][ T247] attempt to access beyond end of device [ 638.220666][ T247] loop2: rw=1, want=481, limit=128 [ 640.428447][ T8849] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1149'. [ 641.477663][ T8852] loop3: detected capacity change from 0 to 2048 [ 641.526247][ T8854] loop2: detected capacity change from 0 to 16 [ 641.576166][ T8852] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 641.635267][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.666100][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.674435][ T8854] erofs: (device loop2): mounted with root inode @ nid 36. [ 641.694480][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.023862][ T8862] attempt to access beyond end of device [ 642.023862][ T8862] loop2: rw=0, want=24, limit=16 [ 643.554123][ T8876] loop4: detected capacity change from 0 to 2048 [ 643.683700][ T8876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.841283][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 643.871683][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.096074][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 644.150487][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.161713][ T8884] loop3: detected capacity change from 0 to 256 [ 644.232381][ T8884] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 644.351502][ T8589] device veth0_vlan entered promiscuous mode [ 644.365828][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 644.400515][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 644.424767][ T8589] device veth1_vlan entered promiscuous mode [ 644.607287][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 644.629474][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 645.632979][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 645.710664][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 645.806951][ T8589] device veth0_macvtap entered promiscuous mode [ 645.869172][ T8589] device veth1_macvtap entered promiscuous mode [ 645.974701][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.013816][ T8898] loop3: detected capacity change from 0 to 512 [ 646.058543][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.120167][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.152252][ T8898] EXT4-fs (loop3): 1 truncate cleaned up [ 646.157956][ T8898] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 646.178395][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.188894][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.199578][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.209545][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.220203][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.232131][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.243197][ T8899] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 646.255696][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.279873][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.400834][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.487199][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.558371][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.598506][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.638434][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.678380][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.688251][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.762361][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.798175][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.897257][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 646.940744][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 646.962615][ T8589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.002505][ T8589] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.038437][ T8589] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.047206][ T8589] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.513885][ T8912] loop2: detected capacity change from 0 to 764 [ 647.617375][ T8912] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 649.315468][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.394982][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.469549][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 649.474138][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.669044][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.604108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.926284][ T8940] loop2: detected capacity change from 0 to 1024 [ 651.135072][ T8940] EXT4-fs (loop2): Ignoring removed orlov option [ 651.192293][ T8940] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 651.311483][ T8940] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 651.672002][ T8957] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 651.684279][ T8957] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 653.327645][ T8965] overlayfs: missing 'workdir' [ 653.626761][ T8968] loop6: detected capacity change from 0 to 512 [ 655.141852][ T8986] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 655.744657][ T8968] EXT4-fs (loop6): 1 truncate cleaned up [ 655.744686][ T8968] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 661.159035][ T9030] loop4: detected capacity change from 0 to 64 [ 661.222341][ T9030] hfs: unable to parse mount options [ 667.396966][ T9048] loop2: detected capacity change from 0 to 512 [ 669.144575][ T9048] EXT4-fs (loop2): 1 truncate cleaned up [ 669.151198][ T9048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.194030][ T9057] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 669.818664][ T9056] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 671.158528][ T8058] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 671.899034][ T8058] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.925840][ T8058] usb 4-1: config 0 has no interfaces? [ 672.238516][ T8058] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 672.257944][ T8058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.365080][ T8058] usb 4-1: Product: syz [ 672.383045][ T8058] usb 4-1: Manufacturer: syz [ 672.387293][ T9091] loop1: detected capacity change from 0 to 512 [ 672.390343][ T8058] usb 4-1: SerialNumber: syz [ 672.541913][ T8058] usb 4-1: config 0 descriptor?? [ 672.558505][ T9091] EXT4-fs (loop1): Ignoring removed bh option [ 672.601228][ T9091] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 672.655145][ T9095] netlink: 'syz.4.1195': attribute type 4 has an invalid length. [ 672.964614][ T9091] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 672.993840][ T8058] usb 4-1: USB disconnect, device number 8 [ 673.062907][ T9099] loop6: detected capacity change from 0 to 64 [ 673.079079][ T9091] EXT4-fs (loop1): group descriptors corrupted! [ 673.134256][ T9099] hfs: unable to parse mount options [ 675.252386][ T9091] loop1: detected capacity change from 0 to 22 [ 675.351201][ T9114] loop6: detected capacity change from 0 to 512 [ 675.379038][ T9091] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 675.389440][ T9091] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 676.130539][ T9114] EXT4-fs (loop6): 1 truncate cleaned up [ 676.174828][ T9130] loop2: detected capacity change from 0 to 2048 [ 676.205371][ T9130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.219484][ T9114] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 679.390041][ T9170] loop1: detected capacity change from 0 to 64 [ 679.435968][ T9170] hfs: unable to parse mount options [ 679.654930][ T9176] loop4: detected capacity change from 0 to 16 [ 679.794660][ T9176] erofs: (device loop4): mounted with root inode @ nid 36. [ 680.773808][ T9189] loop1: detected capacity change from 0 to 512 [ 680.778721][ T23] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 680.807703][ T9191] loop3: detected capacity change from 0 to 512 [ 680.875400][ T9189] EXT4-fs (loop1): Ignoring removed bh option [ 680.894472][ T9160] loop2: detected capacity change from 0 to 32768 [ 680.905053][ T9189] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 680.924836][ T9191] EXT4-fs (loop3): 1 truncate cleaned up [ 680.939147][ T9191] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 680.952822][ T9189] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 680.987680][ T9160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1209 (9160) [ 681.043174][ T9189] EXT4-fs (loop1): group descriptors corrupted! [ 681.149653][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.167019][ T9160] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 681.178562][ T9160] BTRFS info (device loop2): using free space tree [ 681.185125][ T9160] BTRFS info (device loop2): has skinny extents [ 681.191828][ T23] usb 7-1: config 0 has no interfaces? [ 681.382293][ T23] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 681.422444][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.475176][ T23] usb 7-1: Product: syz [ 681.496899][ T23] usb 7-1: Manufacturer: syz [ 681.521866][ T23] usb 7-1: SerialNumber: syz [ 681.563658][ T23] usb 7-1: config 0 descriptor?? [ 681.827432][ T9160] BTRFS error (device loop2): open_ctree failed: -12 [ 681.834850][ T4347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4347) [ 681.927135][ T23] usb 7-1: USB disconnect, device number 2 [ 682.044788][ T9224] loop1: detected capacity change from 0 to 2048 [ 682.108407][ T9224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.095352][ T9234] loop3: detected capacity change from 0 to 2048 [ 684.196695][ T9234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.812323][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.870363][ T9260] loop1: detected capacity change from 0 to 64 [ 685.899682][ T9257] input: syz0 as /devices/virtual/input/input36 [ 685.920227][ T9260] hfs: unable to parse mount options [ 685.996442][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1223'. [ 688.062083][ T9272] loop6: detected capacity change from 0 to 512 [ 688.135808][ T9276] loop3: detected capacity change from 0 to 512 [ 688.152205][ T9272] EXT4-fs (loop6): 1 truncate cleaned up [ 688.177101][ T9272] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 688.281711][ T9276] EXT4-fs (loop3): Ignoring removed bh option [ 688.453801][ T9276] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 688.475191][ T9276] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 688.486493][ T9276] EXT4-fs (loop3): group descriptors corrupted! [ 688.624225][ T9278] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 688.642933][ T9276] loop3: detected capacity change from 0 to 22 [ 689.568020][ T9276] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 689.584323][ T9276] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 689.651700][ T5352] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 689.985428][ T9303] o2cb: This node has not been configured. [ 689.991436][ T9303] o2cb: Cluster check failed. Fix errors before retrying. [ 689.998895][ T9303] (syz.1.1231,9303,0):user_dlm_register:675 ERROR: status = -22 [ 690.006661][ T9303] (syz.1.1231,9303,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 690.038660][ T5352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.938479][ T5352] usb 3-1: config 0 has no interfaces? [ 691.394736][ T9302] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 691.568236][ T5352] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 691.599531][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.609002][ T5352] usb 3-1: Product: syz [ 691.613188][ T5352] usb 3-1: Manufacturer: syz [ 691.662570][ T5352] usb 3-1: config 0 descriptor?? [ 691.691917][ T9315] input: syz0 as /devices/virtual/input/input37 [ 691.718513][ T5352] usb 3-1: can't set config #0, error -71 [ 691.744410][ T5352] usb 3-1: USB disconnect, device number 6 [ 692.681425][ T9329] loop2: detected capacity change from 0 to 64 [ 692.800233][ T9335] loop1: detected capacity change from 0 to 16 [ 692.875572][ T9329] hfs: unable to parse mount options [ 692.900933][ T9335] erofs: (device loop1): mounted with root inode @ nid 36. [ 694.162396][ T9350] loop2: detected capacity change from 0 to 512 [ 694.354471][ T9350] EXT4-fs (loop2): 1 truncate cleaned up [ 694.375372][ T9350] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 695.473000][ T9375] loop1: detected capacity change from 0 to 512 [ 695.543164][ T9375] EXT4-fs (loop1): Ignoring removed bh option [ 695.573021][ T9375] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 695.675650][ T9375] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 695.937760][ T9375] EXT4-fs (loop1): group descriptors corrupted! [ 696.491775][ T9382] o2cb: This node has not been configured. [ 696.497752][ T9382] o2cb: Cluster check failed. Fix errors before retrying. [ 696.505246][ T9382] (syz.6.1245,9382,1):user_dlm_register:675 ERROR: status = -22 [ 696.513162][ T9382] (syz.6.1245,9382,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 697.748399][ T5353] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 697.930441][ T9403] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 698.658575][ T5353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.835423][ T5353] usb 3-1: config 0 has no interfaces? [ 699.028587][ T5353] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 699.038465][ T5353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.085380][ T5353] usb 3-1: Product: syz [ 699.106258][ T5353] usb 3-1: Manufacturer: syz [ 699.142996][ T5353] usb 3-1: SerialNumber: syz [ 699.161484][ T5353] usb 3-1: config 0 descriptor?? [ 699.382502][ T9420] loop1: detected capacity change from 0 to 64 [ 699.413704][ T9420] hfs: unable to parse mount options [ 699.434253][ T9421] loop4: detected capacity change from 0 to 512 [ 699.457800][ T5353] usb 3-1: USB disconnect, device number 7 [ 699.475829][ T9421] EXT4-fs (loop4): Unrecognized mount option "dont_hash" or missing value [ 699.569973][ T9423] loop6: detected capacity change from 0 to 16 [ 699.833313][ T9423] erofs: (device loop6): mounted with root inode @ nid 36. [ 702.542417][ T9465] loop2: detected capacity change from 0 to 512 [ 702.633387][ T9465] EXT4-fs (loop2): Ignoring removed bh option [ 702.676703][ T9465] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 702.693869][ T9465] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 702.748233][ T9465] EXT4-fs (loop2): group descriptors corrupted! [ 706.992590][ T9505] loop6: detected capacity change from 0 to 64 [ 707.028499][ T5352] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 707.039814][ T9505] hfs: unable to parse mount options [ 707.479464][ T5352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.562873][ T5352] usb 4-1: config 0 has no interfaces? [ 707.859351][ T5352] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 707.930440][ T5352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.062431][ T5352] usb 4-1: Product: syz [ 708.130819][ T5352] usb 4-1: Manufacturer: syz [ 708.203145][ T5352] usb 4-1: SerialNumber: syz [ 708.391503][ T5352] usb 4-1: config 0 descriptor?? [ 708.769592][ T5352] usb 4-1: USB disconnect, device number 9 [ 711.125174][ T9540] loop3: detected capacity change from 0 to 512 [ 711.602100][ T9540] EXT4-fs (loop3): Ignoring removed bh option [ 711.640086][ T9540] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 711.722888][ T9540] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 711.786017][ T9540] EXT4-fs (loop3): group descriptors corrupted! [ 712.246660][ T9559] loop1: detected capacity change from 0 to 64 [ 712.259480][ T9552] loop6: detected capacity change from 0 to 4096 [ 712.339820][ T9559] hfs: unable to parse mount options [ 713.777069][ T9552] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 714.552176][ T9557] loop3: detected capacity change from 0 to 256 [ 714.814267][ T9557] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 714.878009][ T9585] loop4: detected capacity change from 0 to 764 [ 714.894326][ T8589] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 715.023672][ T8589] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22. [ 715.174752][ T9585] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 716.189146][ T9593] overlayfs: overlapping lowerdir path [ 716.549271][ T9607] loop4: detected capacity change from 0 to 512 [ 716.653653][ T9607] EXT4-fs (loop4): Ignoring removed bh option [ 716.725174][ T9607] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 716.856545][ T9607] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 716.970567][ T9607] EXT4-fs (loop4): group descriptors corrupted! [ 717.094271][ T9607] loop4: detected capacity change from 0 to 22 [ 717.134452][ T9607] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 717.187965][ T9607] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 717.606748][ T9625] loop3: detected capacity change from 0 to 64 [ 717.716197][ T9625] hfs: unable to parse mount options [ 717.984349][ T9599] loop1: detected capacity change from 0 to 32768 [ 718.696114][ T9599] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 718.814107][ T9599] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 718.963651][ T9599] BTRFS info (device loop1): use zstd compression, level 3 [ 719.067885][ T9599] BTRFS info (device loop1): using free space tree [ 719.163762][ T9599] BTRFS info (device loop1): has skinny extents [ 720.498620][ T9599] BTRFS error (device loop1): open_ctree failed: -12 [ 720.572852][ T9650] loop4: detected capacity change from 0 to 16 [ 720.638200][ T9650] erofs: (device loop4): mounted with root inode @ nid 36. [ 722.778431][ T9690] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1294'. [ 724.930713][ T9705] loop6: detected capacity change from 0 to 512 [ 725.014702][ T9705] EXT4-fs (loop6): Ignoring removed bh option [ 725.181713][ T9705] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 725.203187][ T9705] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 725.272534][ T9720] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1303'. [ 726.041168][ T9721] loop2: detected capacity change from 0 to 64 [ 726.077172][ T9705] EXT4-fs (loop6): group descriptors corrupted! [ 726.131085][ T9721] hfs: unable to parse mount options [ 726.627491][ T9730] overlayfs: overlapping lowerdir path [ 727.954209][ T9751] loop4: detected capacity change from 0 to 16 [ 728.178655][ T9751] erofs: (device loop4): mounted with root inode @ nid 36. [ 729.578997][ T9745] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1309'. [ 732.699717][ T9802] loop4: detected capacity change from 0 to 512 [ 732.703250][ T9803] loop6: detected capacity change from 0 to 64 [ 734.153084][ T9802] EXT4-fs (loop4): Ignoring removed bh option [ 734.165020][ T9802] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 734.178206][ T9803] hfs: unable to parse mount options [ 734.369922][ T9802] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 734.380346][ T9802] EXT4-fs (loop4): group descriptors corrupted! [ 737.103267][ T9842] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1324'. [ 737.983677][ T9838] loop2: detected capacity change from 0 to 2048 [ 738.064504][ T9847] loop4: detected capacity change from 0 to 16 [ 738.073388][ T9838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 738.102136][ T9847] erofs: (device loop4): mounted with root inode @ nid 36. [ 741.043750][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 741.053397][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 742.497045][ T9882] loop3: detected capacity change from 0 to 64 [ 742.583034][ T9869] loop1: detected capacity change from 0 to 4096 [ 742.742116][ T9886] overlayfs: failed to resolve './file1': -2 [ 742.762962][ T9882] hfs: unable to parse mount options [ 745.253069][ T9892] loop2: detected capacity change from 0 to 2048 [ 745.536745][ T4179] Alternate GPT is invalid, using primary GPT. [ 745.565092][ T4179] loop2: p1 p2 p3 [ 745.808465][ T1109] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 747.247884][ T9892] Alternate GPT is invalid, using primary GPT. [ 747.252366][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.452302][ T9892] loop2: p1 p2 p3 [ 747.498395][ T1109] usb 7-1: Using ep0 maxpacket: 8 [ 748.412959][ T1109] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.428951][ T1109] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.448314][ T1109] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.498200][ T1109] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.536022][ T1109] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 748.716311][ T1109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.808705][ T1109] usb 7-1: can't set config #16, error -71 [ 748.895105][ T9926] overlayfs: failed to resolve './file1': -2 [ 749.300776][ T1109] usb 7-1: USB disconnect, device number 3 [ 749.337728][ T9929] loop4: detected capacity change from 0 to 16 [ 749.473865][ T9929] erofs: (device loop4): mounted with root inode @ nid 36. [ 749.737219][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 749.761044][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 749.785856][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 750.454952][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 750.475040][ T4343] udevd[4343]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 750.488583][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 750.995282][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 751.008432][ T5353] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 751.102101][ T9949] loop1: detected capacity change from 0 to 2048 [ 751.142304][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 751.163592][ T9949] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 751.798212][ T9965] attempt to access beyond end of device [ 751.798212][ T9965] loop4: rw=0, want=24, limit=16 [ 752.018687][ T5353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.188602][ T5353] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 752.207924][ T5353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.228159][ T5353] usb 3-1: Product: syz [ 752.242478][ T5353] usb 3-1: Manufacturer: syz [ 752.268388][ T5353] usb 3-1: SerialNumber: syz [ 752.289795][ T5353] usb 3-1: config 0 descriptor?? [ 752.340309][ T5353] imon_raw 3-1:0.0: IR endpoint missing [ 752.544851][ T4315] usb 3-1: USB disconnect, device number 8 [ 752.613447][ T9980] loop6: detected capacity change from 0 to 2048 [ 752.692825][ T9980] Alternate GPT is invalid, using primary GPT. [ 752.706278][ T9980] loop6: p1 p2 p3 [ 752.904128][ T26] audit: type=1800 audit(1750322099.123:26): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1353" name="/" dev="fuse" ino=1 res=0 errno=0 [ 753.136343][ T9992] loop1: detected capacity change from 0 to 64 [ 753.249876][ T9992] hfs: unable to parse mount options [ 754.062068][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 754.510372][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 756.937464][T10033] loop1: detected capacity change from 0 to 2048 [ 757.188397][ T1336] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 757.238708][T10042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 757.331068][T10027] loop4: detected capacity change from 0 to 2048 [ 757.493358][ T1336] usb 4-1: Using ep0 maxpacket: 8 [ 757.838619][T10027] Alternate GPT is invalid, using primary GPT. [ 757.845904][T10027] loop4: p1 p2 p3 [ 757.927698][T10048] loop6: detected capacity change from 0 to 512 [ 757.968507][ T1336] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 758.216018][T10048] EXT4-fs (loop6): 1 truncate cleaned up [ 758.294807][T10048] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 759.088455][ T1336] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 759.097827][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.062609][ T1336] usb 4-1: Product: syz [ 760.066842][ T1336] usb 4-1: Manufacturer: syz [ 760.076332][ T1336] usb 4-1: config 0 descriptor?? [ 760.083343][T10064] loop3: detected capacity change from 0 to 64 [ 760.108466][ T1336] usb 4-1: can't set config #0, error -71 [ 760.127793][ T1336] usb 4-1: USB disconnect, device number 10 [ 762.517540][T10090] loop2: detected capacity change from 0 to 1024 [ 762.605504][T10090] EXT4-fs (loop2): Ignoring removed orlov option [ 762.626307][T10090] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 762.698640][T10090] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 763.688684][T10090] loop2: detected capacity change from 0 to 40427 [ 763.700183][T10110] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1385'. [ 764.332949][T10090] F2FS-fs (loop2): invalid crc value [ 764.366719][T10090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 764.410711][T10090] F2FS-fs (loop2): Start checkpoint disabled! [ 764.436243][T10117] loop4: detected capacity change from 0 to 512 [ 764.478509][T10090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 764.494016][T10112] loop3: detected capacity change from 0 to 2048 [ 764.526772][T10117] EXT4-fs (loop4): Unrecognized mount option "dont_hash" or missing value [ 764.556326][T10090] overlayfs: missing 'workdir' [ 764.626931][T10112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 764.863546][ T9] attempt to access beyond end of device [ 764.863546][ T9] loop2: rw=1, want=45104, limit=40427 [ 764.875916][ T9] attempt to access beyond end of device [ 764.875916][ T9] loop2: rw=2049, want=41008, limit=40427 [ 765.593380][ T5353] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 765.958704][ T5353] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 765.992998][ T5353] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.062110][ T5353] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 766.282285][ T5353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.898520][ T5353] usb 2-1: GET_CAPABILITIES returned 0 [ 766.904555][ T5353] usbtmc 2-1:16.0: can't read capabilities [ 766.968388][ T1336] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 767.132294][ T13] usb 2-1: USB disconnect, device number 4 [ 767.160643][T10150] loop2: detected capacity change from 0 to 2048 [ 767.205754][T10150] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 767.388444][ T1336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.659469][ T1336] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 768.006239][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.144072][ T1336] usb 4-1: Product: syz [ 768.209254][ T1336] usb 4-1: Manufacturer: syz [ 768.214010][ T1336] usb 4-1: SerialNumber: syz [ 768.238448][ T1336] usb 4-1: config 0 descriptor?? [ 768.280435][ T1336] imon_raw 4-1:0.0: IR endpoint missing [ 768.509025][ T4181] usb 4-1: USB disconnect, device number 11 [ 770.245973][T10176] loop1: detected capacity change from 0 to 1024 [ 772.185104][T10176] EXT4-fs (loop1): Ignoring removed orlov option [ 772.206953][T10176] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 772.444700][T10176] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 773.026792][T10176] overlayfs: missing 'workdir' [ 773.172674][T10214] loop3: detected capacity change from 0 to 256 [ 773.199951][T10212] loop2: detected capacity change from 0 to 2048 [ 773.207305][T10213] loop6: detected capacity change from 0 to 1024 [ 773.280465][T10212] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 773.316411][T10213] EXT4-fs (loop6): Ignoring removed orlov option [ 773.324467][T10214] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 773.326494][T10213] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 773.571608][T10213] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 774.576215][T10232] loop2: detected capacity change from 0 to 2048 [ 774.585308][T10232] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 776.052777][T10213] loop6: detected capacity change from 0 to 40427 [ 776.297759][T10213] F2FS-fs (loop6): invalid crc value [ 776.459890][T10213] F2FS-fs (loop6): Found nat_bits in checkpoint [ 776.502026][T10213] F2FS-fs (loop6): Start checkpoint disabled! [ 776.521235][T10213] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 777.072638][T10213] overlayfs: missing 'workdir' [ 777.372589][T10256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1416'. [ 778.280283][T10259] loop2: detected capacity change from 0 to 512 [ 778.294529][ T9] attempt to access beyond end of device [ 778.294529][ T9] loop6: rw=2049, want=40968, limit=40427 [ 778.330629][T10259] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 778.357124][T10261] loop3: detected capacity change from 0 to 1024 [ 778.571007][T10261] EXT4-fs (loop3): Ignoring removed orlov option [ 778.583176][T10261] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 778.872531][T10261] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 779.850260][T10261] loop3: detected capacity change from 0 to 40427 [ 779.896840][T10261] F2FS-fs (loop3): invalid crc value [ 779.949386][T10261] F2FS-fs (loop3): Found nat_bits in checkpoint [ 780.004616][T10261] F2FS-fs (loop3): Start checkpoint disabled! [ 780.018522][T10261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 780.365847][T10275] loop6: detected capacity change from 0 to 2048 [ 780.401205][T10261] overlayfs: missing 'workdir' [ 780.429987][T10275] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 781.202514][T10283] loop6: detected capacity change from 0 to 256 [ 781.220236][T10284] loop2: detected capacity change from 0 to 2048 [ 781.236930][T10284] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 781.300717][T10283] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 781.335748][T10283] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 781.377440][ T4256] attempt to access beyond end of device [ 781.377440][ T4256] loop3: rw=1, want=45104, limit=40427 [ 781.403075][T10283] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 781.480053][ T4256] attempt to access beyond end of device [ 781.480053][ T4256] loop3: rw=2049, want=41008, limit=40427 [ 782.803290][T10302] loop3: detected capacity change from 0 to 512 [ 783.309342][T10306] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1430'. [ 783.322470][ T5352] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 784.088518][ T5352] usb 7-1: Using ep0 maxpacket: 8 [ 784.109776][T10312] loop1: detected capacity change from 0 to 512 [ 784.166786][T10312] EXT4-fs (loop1): Ignoring removed bh option [ 784.201528][T10302] EXT4-fs (loop3): 1 truncate cleaned up [ 784.218574][T10302] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 784.310883][T10312] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 784.368487][ T5352] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 784.377605][ T5352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.384323][T10312] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 784.543346][T10312] EXT4-fs (loop1): group descriptors corrupted! [ 785.096201][ T5352] usb 7-1: Product: syz [ 785.143105][ T5352] usb 7-1: Manufacturer: syz [ 785.159825][ T5352] usb 7-1: SerialNumber: syz [ 785.170708][ T5352] usb 7-1: config 0 descriptor?? [ 785.459019][ T5352] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 785.630409][T10326] loop2: detected capacity change from 0 to 2048 [ 785.652827][T10326] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 786.658633][ T5352] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 786.683057][ T5352] usb 7-1: USB disconnect, device number 4 [ 786.820143][T10336] loop1: detected capacity change from 0 to 1024 [ 786.897236][T10336] EXT4-fs (loop1): Ignoring removed orlov option [ 786.912924][T10336] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 786.996297][T10336] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 787.260030][T10336] loop1: detected capacity change from 0 to 40427 [ 788.303813][T10336] F2FS-fs (loop1): invalid crc value [ 788.311520][T10336] F2FS-fs (loop1): Found nat_bits in checkpoint [ 788.354373][T10336] F2FS-fs (loop1): Start checkpoint disabled! [ 788.390910][T10336] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 788.570190][T10336] overlayfs: missing 'workdir' [ 789.634988][T10364] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1443'. [ 789.728445][ T5332] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 790.118854][ T5332] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.185011][T10363] loop3: detected capacity change from 0 to 256 [ 790.468881][ T5332] usb 7-1: config 0 has no interfaces? [ 790.501090][T10366] loop4: detected capacity change from 0 to 512 [ 790.515765][T10363] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 790.563110][T10366] EXT4-fs (loop4): Ignoring removed bh option [ 790.586282][ T4272] attempt to access beyond end of device [ 790.586282][ T4272] loop1: rw=1, want=45104, limit=40427 [ 790.631324][T10366] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 790.642484][ T5332] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 790.668419][ T5332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.676557][ T5332] usb 7-1: Product: syz [ 790.725325][ T5332] usb 7-1: Manufacturer: syz [ 790.748382][ T5332] usb 7-1: SerialNumber: syz [ 790.774832][ T5332] usb 7-1: config 0 descriptor?? [ 790.787081][ T1239] attempt to access beyond end of device [ 790.787081][ T1239] loop1: rw=2049, want=41008, limit=40427 [ 790.794747][T10366] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 790.828313][T10366] EXT4-fs (loop4): group descriptors corrupted! [ 792.723400][T10383] loop1: detected capacity change from 0 to 64 [ 792.832397][T10383] hfs: unable to parse mount options [ 792.936156][T10388] netlink: 'syz.2.1451': attribute type 4 has an invalid length. [ 795.157100][T10385] input: syz0 as /devices/virtual/input/input38 [ 795.607273][ T5332] usb 7-1: USB disconnect, device number 5 [ 795.833342][T10396] loop2: detected capacity change from 0 to 2048 [ 797.295071][T10396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 797.533812][T10399] loop3: detected capacity change from 0 to 16 [ 797.582623][T10401] loop1: detected capacity change from 0 to 1024 [ 797.596874][T10399] erofs: (device loop3): mounted with root inode @ nid 36. [ 797.619201][T10403] loop6: detected capacity change from 0 to 256 [ 797.724589][T10403] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 798.041521][T10401] EXT4-fs (loop1): Ignoring removed orlov option [ 798.084058][T10401] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 798.216155][T10401] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 798.248447][ T1336] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 798.629235][ T1336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.765404][T10412] loop3: detected capacity change from 0 to 2048 [ 798.889581][T10401] loop1: detected capacity change from 0 to 40427 [ 798.968766][ T1336] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 798.982167][T10412] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 799.002109][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.257702][T10401] F2FS-fs (loop1): invalid crc value [ 799.326763][T10401] F2FS-fs (loop1): Found nat_bits in checkpoint [ 799.375106][T10401] F2FS-fs (loop1): Start checkpoint disabled! [ 799.451012][T10401] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 799.738391][ T1336] usb 3-1: Product: syz [ 799.742634][ T1336] usb 3-1: Manufacturer: syz [ 799.747351][ T1336] usb 3-1: SerialNumber: syz [ 799.754015][ T1336] usb 3-1: config 0 descriptor?? [ 799.850395][ T1336] imon_raw 3-1:0.0: IR endpoint missing [ 800.426702][ T13] usb 3-1: USB disconnect, device number 9 [ 800.855884][T10401] overlayfs: missing 'workdir' [ 801.192931][T10434] netlink: 'syz.6.1463': attribute type 4 has an invalid length. [ 801.700730][ T4215] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 801.936720][T10439] loop6: detected capacity change from 0 to 64 [ 802.010050][T10439] hfs: unable to parse mount options [ 802.265181][ T4215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.283526][T10442] loop2: detected capacity change from 0 to 256 [ 802.559457][ T4256] attempt to access beyond end of device [ 802.559457][ T4256] loop1: rw=1, want=45104, limit=40427 [ 802.628329][ T4215] usb 4-1: config 0 has no interfaces? [ 802.732942][ T4256] attempt to access beyond end of device [ 802.732942][ T4256] loop1: rw=2049, want=41008, limit=40427 [ 802.782862][T10442] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 802.798451][ T4215] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 802.850685][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.866118][ T4215] usb 4-1: Product: syz [ 802.872056][ T4215] usb 4-1: Manufacturer: syz [ 802.876785][ T4215] usb 4-1: SerialNumber: syz [ 803.023219][ T4215] usb 4-1: config 0 descriptor?? [ 803.243697][T10451] loop6: detected capacity change from 0 to 1024 [ 803.350564][ T4215] usb 4-1: USB disconnect, device number 12 [ 803.396077][T10451] EXT4-fs warning (device loop6): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 803.419353][T10451] EXT4-fs (loop6): mount failed [ 805.400858][T10462] loop4: detected capacity change from 0 to 2048 [ 805.844245][T10469] Failed to get privilege flags for destination (handle=0x2:0x7) [ 806.392727][T10462] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 809.606097][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.926739][T10478] netlink: 'syz.1.1477': attribute type 4 has an invalid length. [ 810.640919][T10485] loop2: detected capacity change from 0 to 1024 [ 810.773789][T10485] EXT4-fs (loop2): Ignoring removed orlov option [ 810.799448][T10485] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 810.825108][T10493] loop1: detected capacity change from 0 to 64 [ 810.866369][T10485] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 810.891223][T10493] hfs: unable to parse mount options [ 811.080768][ T4215] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 811.197458][T10497] loop6: detected capacity change from 0 to 64 [ 811.409617][T10485] loop2: detected capacity change from 0 to 40427 [ 811.423230][T10497] hfs: unable to change codepage [ 811.428289][T10497] hfs: unable to parse mount options [ 811.448590][T10485] F2FS-fs (loop2): invalid crc value [ 811.480952][T10485] F2FS-fs (loop2): Found nat_bits in checkpoint [ 811.589160][T10485] F2FS-fs (loop2): Start checkpoint disabled! [ 811.624387][T10485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 811.628514][ T4215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.118792][T10505] overlayfs: missing 'workdir' [ 815.398399][ T4215] usb 5-1: string descriptor 0 read error: -71 [ 815.419949][ T4215] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 815.547624][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.927202][ T4256] attempt to access beyond end of device [ 815.927202][ T4256] loop2: rw=1, want=45104, limit=40427 [ 816.503173][ T4215] usb 5-1: config 0 descriptor?? [ 816.536900][ T4256] attempt to access beyond end of device [ 816.536900][ T4256] loop2: rw=2049, want=41008, limit=40427 [ 816.548940][ T4215] usb 5-1: can't set config #0, error -71 [ 816.568547][ T4215] usb 5-1: USB disconnect, device number 7 [ 816.865258][T10514] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1486'. [ 818.788321][ T5332] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 819.355708][ T5332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.908295][ T5332] usb 3-1: config 0 has no interfaces? [ 820.248690][ T5332] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 820.310899][T10539] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 820.987836][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.042008][ T5332] usb 3-1: Product: syz [ 821.065251][T10541] loop4: detected capacity change from 0 to 8 [ 821.081714][ T5332] usb 3-1: Manufacturer: syz [ 821.096236][ T5332] usb 3-1: SerialNumber: syz [ 821.268347][ T5332] usb 3-1: config 0 descriptor?? [ 821.299565][ T5332] usb 3-1: can't set config #0, error -71 [ 821.314781][ T5332] usb 3-1: USB disconnect, device number 10 [ 821.998469][ T5332] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 822.458557][ T5332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.778585][ T5332] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 822.797441][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.816043][ T5332] usb 3-1: Product: syz [ 822.820906][ T5332] usb 3-1: Manufacturer: syz [ 822.825623][ T5332] usb 3-1: SerialNumber: syz [ 822.849472][ T5332] usb 3-1: config 0 descriptor?? [ 823.168063][ T5332] imon_raw 3-1:0.0: IR endpoint missing [ 823.205137][ T5332] usb 3-1: USB disconnect, device number 11 [ 824.644650][T10577] input: syz0 as /devices/virtual/input/input39 [ 827.741805][T10583] netlink: 'syz.6.1504': attribute type 4 has an invalid length. [ 829.114352][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 829.123679][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 829.134547][ T5332] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 829.389863][T10594] loop2: detected capacity change from 0 to 8 [ 829.684396][ T5332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.741875][ T5332] usb 5-1: config 0 has no interfaces? [ 829.932953][ T5332] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 829.986127][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.094774][ T5332] usb 5-1: Product: syz [ 830.150753][ T5332] usb 5-1: Manufacturer: syz [ 830.212788][ T5332] usb 5-1: SerialNumber: syz [ 830.358131][ T5332] usb 5-1: config 0 descriptor?? [ 830.714932][ T5332] usb 5-1: USB disconnect, device number 8 [ 830.821835][T10607] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 830.839610][T10605] loop2: detected capacity change from 0 to 2048 [ 830.871333][T10605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 831.295556][T10609] bond1: (slave gretap1): making interface the new active one [ 832.102921][T10609] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 833.136643][T10628] loop6: detected capacity change from 0 to 2048 [ 833.189604][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 833.222664][T10628] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 833.969969][T10641] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1521'. [ 834.773504][T10645] loop2: detected capacity change from 0 to 8 [ 835.245866][T10651] loop6: detected capacity change from 0 to 64 [ 835.280089][T10651] hfs: unable to change codepage [ 835.285148][T10651] hfs: unable to parse mount options [ 835.418809][ T4215] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 836.048252][ T4215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.279228][ T4215] usb 5-1: config 0 has no interfaces? [ 836.658788][ T4215] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 836.678476][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1526'. [ 836.692258][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.757281][ T4215] usb 5-1: Product: syz [ 836.782705][ T4215] usb 5-1: Manufacturer: syz [ 836.787405][ T4215] usb 5-1: SerialNumber: syz [ 836.859610][ T4215] usb 5-1: config 0 descriptor?? [ 836.942000][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 837.068052][T10671] loop6: detected capacity change from 0 to 2048 [ 837.120838][T10671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 837.177947][ T4215] usb 5-1: USB disconnect, device number 9 [ 837.232068][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 837.241504][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 838.787582][T10684] loop2: detected capacity change from 0 to 2048 [ 838.852990][T10684] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 838.951430][T10690] loop4: detected capacity change from 0 to 8 [ 840.459972][T10711] loop1: detected capacity change from 0 to 512 [ 840.526540][T10711] EXT4-fs (loop1): Unrecognized mount option "dont_hash" or missing value [ 840.579171][T10714] loop2: detected capacity change from 0 to 16 [ 840.596672][T10714] erofs: (device loop2): mounted with root inode @ nid 36. [ 840.810486][T10712] loop4: detected capacity change from 0 to 64 [ 841.009035][ T4215] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 841.085547][T10721] attempt to access beyond end of device [ 841.085547][T10721] loop2: rw=0, want=24, limit=16 [ 841.163312][T10712] hfs: unable to change codepage [ 841.173704][T10712] hfs: unable to parse mount options [ 842.184711][ T4215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.204895][T10729] loop6: detected capacity change from 0 to 2048 [ 842.222130][ T4215] usb 4-1: config 0 has no interfaces? [ 842.281713][T10732] sctp: [Deprecated]: syz.4.1548 (pid 10732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 842.281713][T10732] Use struct sctp_sack_info instead [ 842.306189][T10729] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 842.364509][T10733] loop2: detected capacity change from 0 to 8 [ 842.419830][ T4215] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 842.441389][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.466754][ T4215] usb 4-1: Product: syz [ 842.486755][ T4215] usb 4-1: Manufacturer: syz [ 842.497729][ T4215] usb 4-1: SerialNumber: syz [ 842.530885][ T4215] usb 4-1: config 0 descriptor?? [ 843.468649][ T4215] usb 4-1: USB disconnect, device number 13 [ 844.312558][T10748] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1551'. [ 845.179787][T10752] loop6: detected capacity change from 0 to 2048 [ 845.366362][T10758] netlink: 'syz.3.1553': attribute type 4 has an invalid length. [ 845.885135][T10752] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 846.516707][T10766] loop4: detected capacity change from 0 to 512 [ 846.576538][T10769] loop2: detected capacity change from 0 to 16 [ 846.627588][T10766] EXT4-fs (loop4): Unrecognized mount option "dont_hash" or missing value [ 846.654833][T10769] erofs: (device loop2): mounted with root inode @ nid 36. [ 847.060856][T10772] attempt to access beyond end of device [ 847.060856][T10772] loop2: rw=0, want=24, limit=16 [ 848.141293][T10780] loop6: detected capacity change from 0 to 64 [ 848.205979][T10782] loop2: detected capacity change from 0 to 8 [ 848.234811][T10780] hfs: unable to change codepage [ 848.257188][T10780] hfs: unable to parse mount options [ 848.444544][T10787] netlink: 'syz.4.1562': attribute type 6 has an invalid length. [ 850.698281][ T5353] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 851.942289][T10811] loop1: detected capacity change from 0 to 2048 [ 851.949974][T10814] loop3: detected capacity change from 0 to 16 [ 851.985318][T10812] netlink: 'syz.4.1568': attribute type 4 has an invalid length. [ 852.006472][T10814] erofs: (device loop3): mounted with root inode @ nid 36. [ 852.206237][T10811] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 852.387828][T10818] attempt to access beyond end of device [ 852.387828][T10818] loop3: rw=0, want=24, limit=16 [ 852.418277][ C1] hrtimer: interrupt took 84610 ns [ 852.499392][ T5353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.908334][ T5353] usb 3-1: config 0 has no interfaces? [ 853.039696][T10821] loop4: detected capacity change from 0 to 8 [ 853.075519][T10822] loop6: detected capacity change from 0 to 512 [ 853.143506][T10822] EXT4-fs (loop6): Unrecognized mount option "dont_hash" or missing value [ 853.152521][ T5353] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 853.530748][ T5353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.782847][T10836] loop3: detected capacity change from 0 to 64 [ 853.787174][ T5353] usb 3-1: config 0 descriptor?? [ 853.799513][T10828] netlink: 'syz.2.1575': attribute type 6 has an invalid length. [ 853.811582][ T5353] usb 3-1: can't set config #0, error -71 [ 853.820124][ T5353] usb 3-1: USB disconnect, device number 12 [ 853.853807][T10836] hfs: unable to change codepage [ 854.473907][T10836] hfs: unable to parse mount options [ 856.914996][T10864] loop3: detected capacity change from 0 to 16 [ 857.048843][T10864] erofs: (device loop3): mounted with root inode @ nid 36. [ 857.118488][ T5353] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 857.447982][T10869] attempt to access beyond end of device [ 857.447982][T10869] loop3: rw=0, want=24, limit=16 [ 857.500985][ T5353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.605139][ T5353] usb 3-1: config 0 has no interfaces? [ 857.778639][ T5353] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 857.819429][ T5353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.859182][ T5353] usb 3-1: Product: syz [ 857.863482][ T5353] usb 3-1: Manufacturer: syz [ 857.868096][ T5353] usb 3-1: SerialNumber: syz [ 857.938357][ T5353] usb 3-1: config 0 descriptor?? [ 858.092126][T10873] loop3: detected capacity change from 0 to 2048 [ 858.149780][T10873] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 858.209839][ T5353] usb 3-1: USB disconnect, device number 13 [ 858.381157][T10877] loop6: detected capacity change from 0 to 8 [ 858.860646][T10884] netlink: 'syz.3.1589': attribute type 6 has an invalid length. [ 860.260154][T10890] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 860.498054][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1593'. [ 860.738477][T10899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1596'. [ 860.917385][T10903] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1597'. [ 861.036693][T10907] loop3: detected capacity change from 0 to 64 [ 861.120442][T10907] hfs: unable to change codepage [ 861.133626][T10907] hfs: unable to parse mount options [ 861.183973][T10909] loop2: detected capacity change from 0 to 512 [ 861.264228][T10909] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 862.218988][T10920] loop1: detected capacity change from 0 to 8 [ 862.328796][T10924] netlink: 'syz.4.1602': attribute type 6 has an invalid length. [ 863.417089][T10931] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 863.595561][T10934] netlink: 'syz.3.1604': attribute type 32 has an invalid length. [ 863.608329][T10934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1604'. [ 863.635909][T10939] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1605'. [ 864.861789][T10956] overlayfs: failed to resolve './file0': -2 [ 865.609345][T10963] loop3: detected capacity change from 0 to 32768 [ 866.059558][T10962] loop3: detected capacity change from 0 to 32768 [ 866.070753][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1612'. [ 866.116438][T10962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1609 (10962) [ 866.197963][T10962] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 866.200393][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a3d8800: rx timeout, send abort [ 866.207039][T10962] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 866.227474][T10962] BTRFS info (device loop3): trying to use backup root at mount time [ 866.235676][T10962] BTRFS info (device loop3): setting nodatasum [ 866.241923][T10962] BTRFS info (device loop3): force zlib compression, level 3 [ 866.249373][T10962] BTRFS info (device loop3): turning on flush-on-commit [ 866.256353][T10962] BTRFS info (device loop3): enabling disk space caching [ 866.263594][T10962] BTRFS error (device loop3): cannot disable free space tree [ 866.308494][T10962] BTRFS error (device loop3): open_ctree failed: -22 [ 866.507176][T10970] loop6: detected capacity change from 0 to 2048 [ 866.717089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a3d8800: abort rx timeout. Force session deactivation [ 866.852210][T10970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 867.463371][T10979] loop6: detected capacity change from 0 to 8 [ 867.475068][T10980] loop4: detected capacity change from 0 to 64 [ 867.520450][T10980] hfs: unable to change codepage [ 867.538107][T10980] hfs: unable to parse mount options [ 867.667794][T10984] netlink: 'syz.3.1617': attribute type 6 has an invalid length. [ 868.929583][T10990] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1618'. [ 869.492606][T11000] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 870.128788][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.934709][T11024] loop6: detected capacity change from 0 to 1024 [ 871.173660][T11024] EXT4-fs (loop6): Ignoring removed orlov option [ 871.180348][T11024] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 871.291389][T11026] loop1: detected capacity change from 0 to 2048 [ 871.372421][T11024] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 871.489347][T11026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.945608][T11024] loop6: detected capacity change from 0 to 40427 [ 871.968263][T11029] loop4: detected capacity change from 0 to 8 [ 872.061930][T11024] F2FS-fs (loop6): invalid crc value [ 872.102163][T11024] F2FS-fs (loop6): Found nat_bits in checkpoint [ 872.116102][T11036] netlink: 'syz.2.1629': attribute type 6 has an invalid length. [ 872.212102][T11024] F2FS-fs (loop6): Start checkpoint disabled! [ 872.244223][T11024] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 872.971801][T11033] o2cb: This node has not been configured. [ 872.977672][T11033] o2cb: Cluster check failed. Fix errors before retrying. [ 872.984965][T11033] (syz.3.1630,11033,0):user_dlm_register:675 ERROR: status = -22 [ 872.992762][T11033] (syz.3.1630,11033,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 877.067760][T11048] loop1: detected capacity change from 0 to 64 [ 877.111528][T11048] hfs: unable to change codepage [ 877.116660][T11048] hfs: unable to parse mount options [ 877.157554][T11052] loop2: detected capacity change from 0 to 16 [ 877.176649][ T247] attempt to access beyond end of device [ 877.176649][ T247] loop6: rw=1, want=45104, limit=40427 [ 877.219355][ T247] attempt to access beyond end of device [ 877.219355][ T247] loop6: rw=2049, want=41000, limit=40427 [ 877.301701][T11052] erofs: (device loop2): mounted with root inode @ nid 36. [ 878.344610][T11059] attempt to access beyond end of device [ 878.344610][T11059] loop2: rw=0, want=24, limit=16 [ 879.126435][T11063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.158408][T11063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.365380][T11063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.392931][T11063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.446555][T11076] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1642'. [ 879.502259][T11076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.527750][T11076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.550461][T11076] bond0 (unregistering): Released all slaves [ 879.606125][T11063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.616931][T11063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.763471][T11063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.775750][T11063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.918862][T11087] netlink: 'syz.1.1644': attribute type 6 has an invalid length. [ 881.598084][T11085] o2cb: This node has not been configured. [ 881.603994][T11085] o2cb: Cluster check failed. Fix errors before retrying. [ 881.611161][T11085] (syz.3.1645,11085,0):user_dlm_register:675 ERROR: status = -22 [ 881.618930][T11085] (syz.3.1645,11085,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 882.157041][T11098] loop4: detected capacity change from 0 to 16 [ 882.687678][T11098] erofs: (device loop4): mounted with root inode @ nid 36. [ 882.721253][T11100] device syzkaller0 entered promiscuous mode [ 882.890860][ T5353] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 882.977080][T11107] attempt to access beyond end of device [ 882.977080][T11107] loop4: rw=0, want=24, limit=16 [ 883.494387][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 883.548492][ T5353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.574980][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 883.838534][ T5353] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 883.849880][T11118] netlink: 'syz.3.1656': attribute type 4 has an invalid length. [ 883.858147][ T5353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.866587][ T5353] usb 3-1: Product: syz [ 884.054461][ T5353] usb 3-1: Manufacturer: syz [ 884.105219][ T5353] usb 3-1: SerialNumber: syz [ 884.226121][ T5353] usb 3-1: config 0 descriptor?? [ 884.352996][ T5353] imon_raw 3-1:0.0: IR endpoint missing [ 884.965764][ T5353] usb 3-1: USB disconnect, device number 14 [ 885.209472][T11133] netlink: 'syz.3.1661': attribute type 6 has an invalid length. [ 886.942444][T11135] o2cb: This node has not been configured. [ 886.948382][T11135] o2cb: Cluster check failed. Fix errors before retrying. [ 886.955543][T11135] (syz.1.1662,11135,0):user_dlm_register:675 ERROR: status = -22 [ 886.963379][T11135] (syz.1.1662,11135,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 888.443996][T11151] netlink: 'syz.4.1669': attribute type 29 has an invalid length. [ 888.617938][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1670'. [ 888.627508][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1670'. [ 889.367882][T11151] netlink: 'syz.4.1669': attribute type 29 has an invalid length. [ 889.378390][T11151] netlink: 'syz.4.1669': attribute type 29 has an invalid length. [ 889.386926][T11151] netlink: 'syz.4.1669': attribute type 29 has an invalid length. [ 889.396709][T11151] netlink: 'syz.4.1669': attribute type 29 has an invalid length. [ 889.691607][T11165] loop4: detected capacity change from 0 to 1024 [ 889.932299][T11166] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 890.752539][T11174] netlink: 'syz.2.1676': attribute type 6 has an invalid length. [ 890.762729][T11165] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 890.989394][T11165] EXT4-fs (loop4): mount failed [ 890.996161][T11166] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 891.276828][T11181] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 891.285899][T11181] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 891.317773][T11181] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 891.359691][T11181] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 891.507603][T11182] o2cb: This node has not been configured. [ 891.513964][T11182] o2cb: Cluster check failed. Fix errors before retrying. [ 891.521333][T11182] (syz.2.1680,11182,0):user_dlm_register:675 ERROR: status = -22 [ 891.529098][T11182] (syz.2.1680,11182,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 891.591417][T11190] netlink: 'syz.4.1684': attribute type 29 has an invalid length. [ 891.614567][T11190] netlink: 'syz.4.1684': attribute type 29 has an invalid length. [ 891.636726][T11190] netlink: 'syz.4.1684': attribute type 29 has an invalid length. [ 891.748608][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1683'. [ 891.757603][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1683'. [ 891.945252][T11199] netlink: 'syz.3.1688': attribute type 17 has an invalid length. [ 891.975477][T11199] netlink: 'syz.3.1688': attribute type 41 has an invalid length. [ 893.807722][T11205] loop4: detected capacity change from 0 to 1024 [ 894.757680][T11205] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 894.780171][T11205] EXT4-fs (loop4): mount failed [ 895.434798][T11220] team0: Port device wlan1 added [ 896.896667][T11239] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 897.608611][T11255] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1703'. [ 899.401092][T11265] validate_nla: 2 callbacks suppressed [ 899.401166][T11265] netlink: 'syz.6.1705': attribute type 6 has an invalid length. [ 899.624327][T11267] loop1: detected capacity change from 0 to 16 [ 899.717442][T11269] dlm: dev_write: no op 0 0 [ 899.812598][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 899.829203][T11267] erofs: (device loop1): mounted with root inode @ nid 36. [ 900.713377][T11272] loop4: detected capacity change from 0 to 1024 [ 900.792102][T11280] attempt to access beyond end of device [ 900.792102][T11280] loop1: rw=0, want=24, limit=16 [ 900.986222][T11272] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 901.032299][T11285] overlayfs: overlapping lowerdir path [ 901.042870][T11285] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 901.057630][T11272] EXT4-fs (loop4): mount failed [ 902.920624][T11302] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1717'. [ 903.046948][T11295] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 903.821426][T11306] netlink: 'syz.2.1718': attribute type 29 has an invalid length. [ 904.177116][T11306] netlink: 'syz.2.1718': attribute type 29 has an invalid length. [ 904.327377][T11316] loop4: detected capacity change from 0 to 512 [ 904.727209][T11313] netlink: 'syz.2.1718': attribute type 29 has an invalid length. [ 904.750885][T11316] EXT4-fs (loop4): 1 truncate cleaned up [ 904.756859][T11316] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 904.762100][T11315] netlink: 'syz.2.1718': attribute type 29 has an invalid length. [ 905.086675][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 905.253658][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 905.733280][T11332] loop3: detected capacity change from 0 to 1024 [ 905.975911][T11328] syz.4.1723 (11328): drop_caches: 2 [ 906.184877][T11334] o2cb: This node has not been configured. [ 906.190873][T11334] o2cb: Cluster check failed. Fix errors before retrying. [ 906.198102][T11334] (syz.2.1726,11334,1):user_dlm_register:675 ERROR: status = -22 [ 906.205976][T11334] (syz.2.1726,11334,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 906.250636][T11332] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 906.266916][T11332] EXT4-fs (loop3): mount failed [ 908.742462][T11358] loop3: detected capacity change from 0 to 512 [ 909.446480][T11358] EXT4-fs (loop3): 1 truncate cleaned up [ 909.455335][T11358] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 910.567807][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 910.843624][T11380] netlink: 'syz.4.1735': attribute type 5 has an invalid length. [ 911.127946][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1735'. [ 911.171678][T11380] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 911.181081][T11380] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 911.196255][T11380] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 911.205349][T11380] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 911.214505][T11380] device geneve2 entered promiscuous mode [ 911.233875][T11384] device batadv1 entered promiscuous mode [ 914.082170][T11419] loop2: detected capacity change from 0 to 512 [ 914.951172][T11419] EXT4-fs (loop2): 1 truncate cleaned up [ 915.114806][T11419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 915.478275][T11423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 915.676525][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1750'. [ 915.686034][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1750'. [ 922.026694][T11472] loop6: detected capacity change from 0 to 2048 [ 923.387908][T11472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.585684][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 926.228373][T11488] netlink: 384 bytes leftover after parsing attributes in process `syz.1.1765'. [ 926.240635][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1765'. [ 928.921116][T11515] loop6: detected capacity change from 0 to 64 [ 929.482890][T11516] loop1: detected capacity change from 0 to 2048 [ 930.939931][T11516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 931.560328][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.633026][T11531] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1777'. [ 931.643990][ T1336] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 932.326133][ T4313] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 932.478482][ T1336] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.492001][ T1336] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.660945][ T1336] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.670816][ T1336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.689136][T11535] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1780'. [ 933.535751][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.546706][ T4313] usb 3-1: config 0 has no interfaces? [ 933.598662][ T1336] usb 4-1: usb_control_msg returned -32 [ 933.604676][ T1336] usbtmc 4-1:16.0: can't read capabilities [ 933.613158][T11538] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1780'. [ 933.649703][T11538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.702566][T11538] device batadv_slave_0 entered promiscuous mode [ 933.748927][ T4313] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 933.978756][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.172740][ T4313] usb 3-1: Product: syz [ 934.177260][ T4313] usb 3-1: Manufacturer: syz [ 934.184298][ T4313] usb 3-1: SerialNumber: syz [ 934.675733][ T8058] usb 4-1: USB disconnect, device number 14 [ 934.685475][ T4313] usb 3-1: config 0 descriptor?? [ 934.991723][ T4313] usb 3-1: USB disconnect, device number 15 [ 935.968387][ T1336] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 936.156097][T11563] loop6: detected capacity change from 0 to 2048 [ 937.402938][T11563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.681362][T11569] loop4: detected capacity change from 0 to 2048 [ 937.769680][T11569] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 938.056157][ T1336] usb 2-1: device not accepting address 5, error -71 [ 940.021693][T11588] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 940.807370][T11606] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 940.808367][ T1336] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 941.218308][ T1336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.236406][ T1336] usb 2-1: config 0 has no interfaces? [ 941.467753][ T1336] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 941.478707][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.488262][ T1336] usb 2-1: Product: syz [ 941.492678][ T1336] usb 2-1: Manufacturer: syz [ 941.497410][ T1336] usb 2-1: SerialNumber: syz [ 941.505247][ T1336] usb 2-1: config 0 descriptor?? [ 941.790854][ T1336] usb 2-1: USB disconnect, device number 6 [ 941.941690][T11613] loop3: detected capacity change from 0 to 2048 [ 942.019442][T11613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 943.751263][ T1336] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 944.307105][ T1336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.024029][T11636] loop4: detected capacity change from 0 to 2048 [ 945.091028][T11636] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 945.378364][ T1336] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 945.441892][T11648] loop1: detected capacity change from 0 to 64 [ 946.533004][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.542305][ T1336] usb 3-1: Product: syz [ 946.547090][ T1336] usb 3-1: Manufacturer: syz [ 946.560298][ T1336] usb 3-1: config 0 descriptor?? [ 946.578328][ T1336] usb 3-1: can't set config #0, error -71 [ 946.589882][T11648] hfs: unable to change codepage [ 946.592222][ T1336] usb 3-1: USB disconnect, device number 16 [ 946.627383][T11648] hfs: unable to parse mount options [ 947.378353][ T1336] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 947.425562][T11662] loop6: detected capacity change from 0 to 2048 [ 947.491604][T11662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.548637][ T5353] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 947.758715][ T1336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.792264][ T1336] usb 3-1: config 0 has no interfaces? [ 948.159883][ T5353] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.209149][ T1336] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 948.238860][ T5353] usb 5-1: config 0 has no interfaces? [ 948.292212][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.426980][ T1336] usb 3-1: Product: syz [ 948.486569][ T1336] usb 3-1: Manufacturer: syz [ 948.518549][ T5353] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 948.532206][ T1336] usb 3-1: SerialNumber: syz [ 948.537102][ T5353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.554758][ T1336] usb 3-1: config 0 descriptor?? [ 948.617932][ T5353] usb 5-1: Product: syz [ 948.645889][ T5353] usb 5-1: Manufacturer: syz [ 948.668785][ T5353] usb 5-1: SerialNumber: syz [ 948.743343][ T5353] usb 5-1: config 0 descriptor?? [ 949.848536][ T5353] usb 5-1: can't set config #0, error -71 [ 949.862070][ T5353] usb 5-1: USB disconnect, device number 10 [ 949.904680][T11680] loop6: detected capacity change from 0 to 1024 [ 949.974780][T11680] EXT4-fs (loop6): Ignoring removed orlov option [ 949.998403][T11680] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 950.048017][T11685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 950.062424][T11680] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 950.127380][T11687] loop1: detected capacity change from 0 to 2048 [ 950.145741][T11685] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 950.184872][T11687] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 950.798347][ T1336] usb 3-1: USB disconnect, device number 17 [ 950.843986][T11695] loop2: detected capacity change from 0 to 1024 [ 950.967038][T11695] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 951.034780][T11695] EXT4-fs (loop2): mount failed [ 951.481457][T11704] loop1: detected capacity change from 0 to 2048 [ 951.515577][T11708] loop3: detected capacity change from 0 to 64 [ 951.556982][T11704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 951.573671][T11708] hfs: unable to change codepage [ 951.579167][T11708] hfs: unable to parse mount options [ 953.819160][T11726] loop2: detected capacity change from 0 to 2048 [ 953.849827][T11726] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 954.128327][ T1336] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 954.558751][ T1336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.639899][ T1336] usb 2-1: config 0 has no interfaces? [ 954.898457][ T1336] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 954.942761][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.081806][ T1336] usb 2-1: Product: syz [ 955.106606][ T1336] usb 2-1: Manufacturer: syz [ 955.136058][ T1336] usb 2-1: SerialNumber: syz [ 955.209293][ T1336] usb 2-1: config 0 descriptor?? [ 955.528765][ T8058] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 955.550229][ T1336] usb 2-1: USB disconnect, device number 7 [ 955.938694][ T8058] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.975013][ T8058] usb 5-1: config 0 has no interfaces? [ 956.999657][ T8058] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 957.072433][ T8058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.312966][ T8058] usb 5-1: Product: syz [ 957.320235][ T8058] usb 5-1: Manufacturer: syz [ 957.329911][ T8058] usb 5-1: SerialNumber: syz [ 957.337188][ T8058] usb 5-1: config 0 descriptor?? [ 957.613342][T11753] loop1: detected capacity change from 0 to 2048 [ 957.815433][ T8058] usb 5-1: USB disconnect, device number 11 [ 959.019579][T11764] loop6: detected capacity change from 0 to 32768 [ 959.911801][T11753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 960.815321][T11768] dlm: dev_write: no op 0 0 [ 960.930582][T11763] loop6: detected capacity change from 0 to 32768 [ 961.053868][T11763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1843 (11763) [ 961.157730][T11773] loop2: detected capacity change from 0 to 1024 [ 961.334696][T11763] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 961.343571][T11763] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 961.354281][T11763] BTRFS info (device loop6): trying to use backup root at mount time [ 961.362628][T11774] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1847'. [ 961.371894][T11763] BTRFS info (device loop6): setting nodatasum [ 961.377357][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 961.378079][T11763] BTRFS info (device loop6): force zlib compression, level 3 [ 961.378183][T11763] BTRFS info (device loop6): turning on flush-on-commit [ 961.378204][T11763] BTRFS info (device loop6): enabling disk space caching [ 961.378228][T11763] BTRFS error (device loop6): cannot disable free space tree [ 961.421850][T11773] EXT4-fs (loop2): Ignoring removed orlov option [ 961.435257][T11773] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 961.459170][T11773] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 961.479414][T11763] BTRFS error (device loop6): open_ctree failed: -22 [ 962.392262][T11785] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 962.598199][ T5332] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 962.868935][T11773] loop2: detected capacity change from 0 to 40427 [ 962.906049][T11773] F2FS-fs (loop2): invalid crc value [ 962.918094][T11773] F2FS-fs (loop2): Found nat_bits in checkpoint [ 962.958413][ T5332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.968038][T11773] F2FS-fs (loop2): Start checkpoint disabled! [ 962.978185][ T5332] usb 4-1: config 0 has no interfaces? [ 962.991865][T11773] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 963.168572][ T5332] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 963.177758][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.209236][ T5332] usb 4-1: Product: syz [ 963.213445][ T5332] usb 4-1: Manufacturer: syz [ 963.218094][ T5332] usb 4-1: SerialNumber: syz [ 963.224807][ T5332] usb 4-1: config 0 descriptor?? [ 963.527074][ T5332] usb 4-1: USB disconnect, device number 15 [ 963.699960][T11794] overlayfs: missing 'workdir' [ 964.988805][ T4329] attempt to access beyond end of device [ 964.988805][ T4329] loop2: rw=1, want=45104, limit=40427 [ 965.004315][ T4329] attempt to access beyond end of device [ 965.004315][ T4329] loop2: rw=2049, want=41008, limit=40427 [ 965.821354][ T6659] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 965.976716][T11820] overlayfs: overlapping lowerdir path [ 966.248991][T11826] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1861'. [ 966.308471][ T6659] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.346478][ T6659] usb 2-1: config 0 has no interfaces? [ 966.578386][ T6659] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 966.591909][ T6659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.611795][ T6659] usb 2-1: Product: syz [ 966.621430][ T6659] usb 2-1: Manufacturer: syz [ 966.633659][ T6659] usb 2-1: SerialNumber: syz [ 966.644336][ T6659] usb 2-1: config 0 descriptor?? [ 966.928804][T11829] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1859'. [ 967.073080][ T6659] usb 2-1: USB disconnect, device number 8 [ 967.660562][T11841] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 967.931992][T11844] program syz.1.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 969.035757][T11850] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 969.186846][T11855] loop6: detected capacity change from 0 to 1024 [ 969.308263][T11855] EXT4-fs (loop6): Ignoring removed orlov option [ 969.351765][T11855] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 969.488241][T11855] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 970.225358][T11869] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1872'. [ 970.738266][ T5332] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 971.131077][T11882] overlayfs: overlapping lowerdir path [ 971.137583][T11855] loop6: detected capacity change from 0 to 40427 [ 971.225692][T11855] F2FS-fs (loop6): invalid crc value [ 971.251264][T11855] F2FS-fs (loop6): Found nat_bits in checkpoint [ 971.268445][ T5332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.287972][ T5332] usb 3-1: config 0 has no interfaces? [ 971.340584][T11855] F2FS-fs (loop6): Start checkpoint disabled! [ 971.458476][ T5332] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 971.467630][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.475824][T11855] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 971.608378][ T5332] usb 3-1: Product: syz [ 971.612704][ T5332] usb 3-1: Manufacturer: syz [ 971.617382][ T5332] usb 3-1: SerialNumber: syz [ 971.789098][ T5332] usb 3-1: config 0 descriptor?? [ 972.079531][ T5332] usb 3-1: USB disconnect, device number 18 [ 973.038922][ T1239] attempt to access beyond end of device [ 973.038922][ T1239] loop6: rw=2049, want=40976, limit=40427 [ 973.102079][T11901] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 974.098823][T11911] 9pnet_virtio: no channels available for device syz [ 974.107506][T11911] tmpfs: Unknown parameter 'grpquota' [ 974.575916][T11917] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 975.355556][ T26] audit: type=1326 audit(1750322577.577:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9387c9929 code=0x7fc00000 [ 975.705744][T11930] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1887'. [ 976.002805][ T26] audit: type=1326 audit(1750322578.227:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9387c9929 code=0x7fc00000 [ 977.614944][ T5332] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 977.635059][ T5332] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 977.677599][T11946] loop3: detected capacity change from 0 to 1024 [ 977.963785][T11946] EXT4-fs (loop3): Ignoring removed orlov option [ 977.998592][T11946] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 978.205942][T11946] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 978.278063][T11952] fido_id[11952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 978.309371][T11960] overlayfs: overlapping lowerdir path [ 978.328429][T11960] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 978.342273][T11959] futex_wake_op: syz.4.1894 tries to shift op by -33; fix this program [ 978.595717][ T5332] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 980.279761][T11971] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 981.198308][ T5332] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 981.205976][ T5332] usb 3-1: can't read configurations, error -71 [ 981.287854][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1898'. [ 981.594426][T11986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1900'. [ 983.223319][T12014] overlayfs: failed to resolve './file0': -2 [ 984.472890][T12024] dlm: dev_write: no op 0 0 [ 984.620185][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 985.831392][T12033] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 987.118376][ T5353] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 987.144078][ T4180] Bluetooth: hci2: Unknown advertising packet type: 0x4b00 [ 987.144162][ T4180] Bluetooth: hci2: Unknown advertising packet type: 0x18 [ 987.337696][T12051] loop6: detected capacity change from 0 to 1024 [ 987.498452][ T5353] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.561600][ T5353] usb 5-1: config 0 has no interfaces? [ 987.568910][T12051] EXT4-fs (loop6): Ignoring removed orlov option [ 987.597348][T12051] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 987.912822][T12056] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 987.987070][T12051] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 988.108299][ T5353] usb 5-1: string descriptor 0 read error: -71 [ 988.310793][ T5353] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 988.497490][ T5353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.535686][ T5353] usb 5-1: config 0 descriptor?? [ 988.539682][T12051] loop6: detected capacity change from 0 to 40427 [ 988.583807][ T5353] usb 5-1: can't set config #0, error -71 [ 988.610293][T12051] F2FS-fs (loop6): invalid crc value [ 988.617459][ T5353] usb 5-1: USB disconnect, device number 12 [ 988.636121][T12051] F2FS-fs (loop6): Found nat_bits in checkpoint [ 988.653676][T12074] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1919'. [ 988.678217][T12051] F2FS-fs (loop6): Start checkpoint disabled! [ 989.550894][T12073] dlm: dev_write: no op 0 0 [ 991.650157][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 991.659572][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 992.981175][T12112] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 993.002346][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.430826][T12119] loop3: detected capacity change from 0 to 1024 [ 993.654159][T12119] EXT4-fs (loop3): Ignoring removed orlov option [ 993.684134][T12119] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 993.808651][T12119] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 995.065288][T12119] loop3: detected capacity change from 0 to 40427 [ 995.077993][T12126] loop2: detected capacity change from 0 to 2048 [ 995.096364][T12119] F2FS-fs (loop3): invalid crc value [ 995.110116][T12119] F2FS-fs (loop3): Found nat_bits in checkpoint [ 995.140715][T12119] F2FS-fs (loop3): Start checkpoint disabled! [ 995.223395][T12126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.235297][T12119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 995.380081][T12119] overlayfs: missing 'workdir' [ 995.669616][ T9] attempt to access beyond end of device [ 995.669616][ T9] loop3: rw=1, want=45104, limit=40427 [ 995.722012][ T9] attempt to access beyond end of device [ 995.722012][ T9] loop3: rw=2049, want=41008, limit=40427 [ 996.185856][T12140] loop6: detected capacity change from 0 to 1024 [ 996.304962][T12140] EXT4-fs warning (device loop6): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 996.339416][T12140] EXT4-fs (loop6): mount failed [ 1000.209328][T12158] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 1000.623205][T12163] netlink: 'syz.3.1939': attribute type 10 has an invalid length. [ 1000.645942][T12163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.675957][T12163] device bridge_slave_1 left promiscuous mode [ 1000.769019][T12163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.810059][T12163] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1000.844627][T12170] [ 1000.847008][T12170] ====================================================== [ 1000.854045][T12170] WARNING: possible circular locking dependency detected [ 1000.861090][T12170] 5.15.185-syzkaller #0 Not tainted [ 1000.866306][T12170] ------------------------------------------------------ [ 1000.873345][T12170] syz.4.1944/12170 is trying to acquire lock: [ 1000.879436][T12170] ffff8880639ecc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 1000.890534][T12170] [ 1000.890534][T12170] but task is already holding lock: [ 1000.897907][T12170] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 1000.907701][T12170] [ 1000.907701][T12170] which lock already depends on the new lock. [ 1000.907701][T12170] [ 1000.918126][T12170] [ 1000.918126][T12170] the existing dependency chain (in reverse order) is: [ 1000.927156][T12170] [ 1000.927156][T12170] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1000.935167][T12170] __mutex_lock_common+0x1eb/0x2390 [ 1000.940899][T12170] mutex_lock_nested+0x17/0x20 [ 1000.946206][T12170] rfkill_register+0x33/0x8a0 [ 1000.951407][T12170] hci_register_dev+0x452/0x970 [ 1000.956784][T12170] vhci_create_device+0x32c/0x5c0 [ 1000.962335][T12170] vhci_write+0x391/0x450 [ 1000.967185][T12170] vfs_write+0x712/0xd00 [ 1000.971948][T12170] ksys_write+0x14d/0x250 [ 1000.976893][T12170] do_syscall_64+0x4c/0xa0 [ 1000.981837][T12170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1000.988534][T12170] [ 1000.988534][T12170] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1000.996356][T12170] __mutex_lock_common+0x1eb/0x2390 [ 1001.002088][T12170] mutex_lock_nested+0x17/0x20 [ 1001.007377][T12170] vhci_send_frame+0x88/0x100 [ 1001.012582][T12170] hci_send_frame+0x1a9/0x2e0 [ 1001.017923][T12170] hci_tx_work+0x9f9/0x1710 [ 1001.023227][T12170] process_one_work+0x863/0x1000 [ 1001.028689][T12170] worker_thread+0xaa8/0x12a0 [ 1001.033889][T12170] kthread+0x436/0x520 [ 1001.038582][T12170] ret_from_fork+0x1f/0x30 [ 1001.043731][T12170] [ 1001.043731][T12170] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1001.052945][T12170] __flush_work+0xdd/0x1b0 [ 1001.057892][T12170] hci_dev_do_close+0x1e7/0x1030 [ 1001.063359][T12170] hci_unregister_dev+0x2d7/0x580 [ 1001.069029][T12170] vhci_release+0x73/0xc0 [ 1001.073890][T12170] __fput+0x234/0x930 [ 1001.078488][T12170] task_work_run+0x125/0x1a0 [ 1001.083601][T12170] do_exit+0x616/0x20a0 [ 1001.088280][T12170] do_group_exit+0x12e/0x300 [ 1001.093398][T12170] get_signal+0x6ca/0x12c0 [ 1001.098340][T12170] arch_do_signal_or_restart+0xc1/0x1300 [ 1001.104504][T12170] exit_to_user_mode_loop+0x9e/0x130 [ 1001.110324][T12170] exit_to_user_mode_prepare+0xb1/0x140 [ 1001.116399][T12170] syscall_exit_to_user_mode+0x16/0x40 [ 1001.122383][T12170] do_syscall_64+0x58/0xa0 [ 1001.127321][T12170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1001.133741][T12170] [ 1001.133741][T12170] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1001.141395][T12170] __mutex_lock_common+0x1eb/0x2390 [ 1001.147165][T12170] mutex_lock_nested+0x17/0x20 [ 1001.152613][T12170] bg_scan_update+0x44/0x3b0 [ 1001.157757][T12170] process_one_work+0x863/0x1000 [ 1001.163234][T12170] worker_thread+0xaa8/0x12a0 [ 1001.168542][T12170] kthread+0x436/0x520 [ 1001.173156][T12170] ret_from_fork+0x1f/0x30 [ 1001.178106][T12170] [ 1001.178106][T12170] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1001.187938][T12170] __lock_acquire+0x2c33/0x7c60 [ 1001.193362][T12170] lock_acquire+0x197/0x3f0 [ 1001.198398][T12170] __flush_work+0xdd/0x1b0 [ 1001.203335][T12170] __cancel_work_timer+0x3ac/0x520 [ 1001.208964][T12170] hci_request_cancel_all+0xcc/0x300 [ 1001.214769][T12170] hci_dev_do_close+0x4e/0x1030 [ 1001.220144][T12170] hci_rfkill_set_block+0x10a/0x190 [ 1001.225860][T12170] rfkill_set_block+0x1c6/0x420 [ 1001.231232][T12170] rfkill_fop_write+0x458/0x560 [ 1001.236632][T12170] vfs_write+0x300/0xd00 [ 1001.241397][T12170] ksys_write+0x14d/0x250 [ 1001.246262][T12170] do_syscall_64+0x4c/0xa0 [ 1001.251199][T12170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1001.257647][T12170] [ 1001.257647][T12170] other info that might help us debug this: [ 1001.257647][T12170] [ 1001.267883][T12170] Chain exists of: [ 1001.267883][T12170] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1001.267883][T12170] [ 1001.283803][T12170] Possible unsafe locking scenario: [ 1001.283803][T12170] [ 1001.291256][T12170] CPU0 CPU1 [ 1001.296733][T12170] ---- ---- [ 1001.302124][T12170] lock(rfkill_global_mutex); [ 1001.307151][T12170] lock(&data->open_mutex); [ 1001.314264][T12170] lock(rfkill_global_mutex); [ 1001.321552][T12170] lock((work_completion)(&hdev->bg_scan_update)); [ 1001.328154][T12170] [ 1001.328154][T12170] *** DEADLOCK *** [ 1001.328154][T12170] [ 1001.336318][T12170] 1 lock held by syz.4.1944/12170: [ 1001.341425][T12170] #0: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 1001.351525][T12170] [ 1001.351525][T12170] stack backtrace: [ 1001.357413][T12170] CPU: 1 PID: 12170 Comm: syz.4.1944 Not tainted 5.15.185-syzkaller #0 [ 1001.365677][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1001.375749][T12170] Call Trace: [ 1001.379031][T12170] [ 1001.381968][T12170] dump_stack_lvl+0x168/0x230 [ 1001.386677][T12170] ? load_image+0x3b0/0x3b0 [ 1001.391186][T12170] ? show_regs_print_info+0x20/0x20 [ 1001.396541][T12170] ? print_circular_bug+0x12b/0x1a0 [ 1001.401753][T12170] check_noncircular+0x274/0x310 [ 1001.406702][T12170] ? add_chain_block+0x940/0x940 [ 1001.411735][T12170] ? lockdep_lock+0xdc/0x1e0 [ 1001.416529][T12170] ? __lock_acquire+0x12d9/0x7c60 [ 1001.421565][T12170] ? lockdep_lock+0x1e0/0x1e0 [ 1001.426253][T12170] ? mark_lock+0x94/0x320 [ 1001.430626][T12170] __lock_acquire+0x2c33/0x7c60 [ 1001.435492][T12170] ? verify_lock_unused+0x140/0x140 [ 1001.440698][T12170] ? verify_lock_unused+0x140/0x140 [ 1001.445994][T12170] ? mark_lock+0x94/0x320 [ 1001.450339][T12170] lock_acquire+0x197/0x3f0 [ 1001.454939][T12170] ? __flush_work+0xc1/0x1b0 [ 1001.459536][T12170] ? __lock_acquire+0x7c60/0x7c60 [ 1001.464567][T12170] ? read_lock_is_recursive+0x10/0x10 [ 1001.469950][T12170] ? start_flush_work+0x776/0x820 [ 1001.474989][T12170] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1001.481051][T12170] ? _raw_spin_unlock+0x40/0x40 [ 1001.486034][T12170] __flush_work+0xdd/0x1b0 [ 1001.490582][T12170] ? __flush_work+0xc1/0x1b0 [ 1001.495188][T12170] ? flush_work+0x20/0x20 [ 1001.499525][T12170] ? try_to_grab_pending+0xf3/0x7e0 [ 1001.504724][T12170] ? lockdep_hardirqs_off+0x70/0x100 [ 1001.510119][T12170] ? mark_lock+0x94/0x320 [ 1001.514572][T12170] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1001.520570][T12170] ? lock_chain_count+0x20/0x20 [ 1001.525432][T12170] ? mark_lock+0x94/0x320 [ 1001.529768][T12170] ? __cancel_work_timer+0x331/0x520 [ 1001.535077][T12170] __cancel_work_timer+0x3ac/0x520 [ 1001.540277][T12170] ? cancel_work_sync+0x20/0x20 [ 1001.545191][T12170] ? __cancel_work+0x1f4/0x2d0 [ 1001.549965][T12170] ? lockdep_hardirqs_on+0x94/0x140 [ 1001.555171][T12170] ? __cancel_work+0x26f/0x2d0 [ 1001.559942][T12170] ? cancel_work+0x20/0x20 [ 1001.564359][T12170] ? lock_chain_count+0x20/0x20 [ 1001.569344][T12170] hci_request_cancel_all+0xcc/0x300 [ 1001.574657][T12170] hci_dev_do_close+0x4e/0x1030 [ 1001.579517][T12170] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1001.585422][T12170] ? _raw_spin_unlock+0x40/0x40 [ 1001.590274][T12170] hci_rfkill_set_block+0x10a/0x190 [ 1001.595472][T12170] ? rcu_lock_release+0x20/0x20 [ 1001.600320][T12170] rfkill_set_block+0x1c6/0x420 [ 1001.605174][T12170] rfkill_fop_write+0x458/0x560 [ 1001.610025][T12170] ? rfkill_fop_read+0x4b0/0x4b0 [ 1001.614960][T12170] ? common_file_perm+0x160/0x1c0 [ 1001.620009][T12170] ? fsnotify_perm+0x5d/0x560 [ 1001.624687][T12170] ? security_file_permission+0x75/0xa0 [ 1001.630250][T12170] ? rfkill_fop_read+0x4b0/0x4b0 [ 1001.635183][T12170] vfs_write+0x300/0xd00 [ 1001.639424][T12170] ? file_end_write+0x250/0x250 [ 1001.644279][T12170] ? __fget_files+0x40f/0x480 [ 1001.648957][T12170] ? __fdget_pos+0x1e2/0x370 [ 1001.653543][T12170] ? ksys_write+0x71/0x250 [ 1001.657956][T12170] ksys_write+0x14d/0x250 [ 1001.662296][T12170] ? __ia32_sys_read+0x80/0x80 [ 1001.667100][T12170] ? lockdep_hardirqs_on+0x94/0x140 [ 1001.672399][T12170] do_syscall_64+0x4c/0xa0 [ 1001.676817][T12170] ? clear_bhb_loop+0x30/0x80 [ 1001.681782][T12170] ? clear_bhb_loop+0x30/0x80 [ 1001.686470][T12170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1001.692379][T12170] RIP: 0033:0x7f0370981929 [ 1001.696800][T12170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.716613][T12170] RSP: 002b:00007f036e7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1001.725037][T12170] RAX: ffffffffffffffda RBX: 00007f0370ba9160 RCX: 00007f0370981929 [ 1001.733013][T12170] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 1001.741035][T12170] RBP: 00007f0370a03b39 R08: 0000000000000000 R09: 0000000000000000 [ 1001.749008][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.757092][T12170] R13: 0000000000000000 R14: 00007f0370ba9160 R15: 00007ffd8a9c76b8 [ 1001.765074][T12170]